This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json) Hash identifier: sgR8S4fto3XD9tSE5tU0m6Lk9xqpjfhAp17s2+7m+Y8= Subject key identifier: A3:7B:D0:DB:9F:11:C1:AA:B0:05:34:8B:C0:D6:A9:34:0A:39:C9:CE Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16 Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516 Certificate serial: 019AF5AEE6DA49F174462C25A5A5AD08792F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 22:01:11 +0000 Manifest this update: Sat 06 Dec 2025 22:01:11 +0000 Manifest next update: Sun 07 Dec 2025 22:01:11 +0000 Files and hashes: 1: 3n_Nd4cUj6teASapK4pWavXgfU0.roa (hash: KngeXtbNNWR05hMf2WkynvKsVClU9oGlPMx0Mk7lMOM=) 2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: IIzCmPb9PjTX2nkHm3Q1GTlheu4E6S8Y9rtRfvMo/dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:e6:da:49:f1:74:46:2c:25:a5:a5:ad:08:79:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516 Validity Not Before: Dec 6 22:01:11 2025 GMT Not After : Dec 7 22:01:11 2025 GMT Subject: CN=a37bd0db9f11c1aab005348bc0d6a9340a39c9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:15:ac:f7:c8:c7:1e:76:3d:2e:b7:bf:87:aa: fd:20:7c:a1:23:9d:79:ce:b2:2d:98:13:cf:9f:b1: 9a:2c:71:8d:d2:fc:86:29:4d:4c:75:81:4e:01:00: a9:75:52:af:45:6f:bc:c6:84:08:eb:92:6b:a6:ed: 79:95:0c:40:74:59:4d:c1:15:d9:fd:e7:49:4a:4f: 17:53:be:50:92:f8:84:38:fe:db:d2:45:08:a1:c3: 92:b4:47:40:57:d7:f5:f5:72:ec:f6:13:e0:0a:c4: 9e:c8:ca:c0:54:0f:4e:0a:41:1d:2d:72:24:63:3b: d1:48:61:1d:c2:26:b4:e1:7c:67:d8:2f:d1:60:cb: 78:79:4f:75:aa:65:44:c4:c1:8c:89:d7:b4:5d:ff: 6b:cc:8c:5a:05:ae:b5:c2:5e:51:c4:86:0b:82:1f: 49:07:02:e6:16:8b:71:74:98:4f:88:94:7d:28:b2: 23:d1:fa:0e:5c:86:c2:3c:a1:37:8f:4d:47:4d:49: c8:d0:9c:6c:9e:b2:7d:26:1f:3b:34:17:65:1f:6a: 8d:92:62:89:ad:91:7c:ca:35:68:9c:83:62:73:b6: 3c:e4:54:c8:49:ff:8e:95:9f:75:ba:19:a8:63:b6: 0f:f4:96:9c:42:e5:40:75:c2:57:de:30:0e:a4:a2: fe:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7B:D0:DB:9F:11:C1:AA:B0:05:34:8B:C0:D6:A9:34:0A:39:C9:CE X509v3 Authority Key Identifier: keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:55:7b:6e:d7:d5:c9:00:75:da:d6:fb:c1:b5:ac:e3:af:74: 6d:2b:50:08:3d:86:b3:b5:38:d9:59:c0:ef:d3:b4:ee:6c:75: ac:61:ca:75:bb:75:4e:24:d5:97:e5:8f:67:ce:bb:17:4b:5e: 0c:36:8a:42:1b:01:82:31:ec:93:29:3e:f7:f4:05:96:19:8f: 62:30:33:b6:4a:b6:3d:8f:46:a2:10:35:cb:fb:30:d1:8a:fa: 91:63:00:1b:98:d8:ef:2f:8f:74:4c:c4:3c:e5:f5:16:28:c8: b7:a9:a6:ee:32:94:92:3a:47:30:c5:6f:a0:7e:e3:f5:5d:52: c3:a9:36:42:6e:e8:26:59:af:39:14:82:31:e7:b0:5a:e6:36: 2f:6e:d2:9e:57:1f:35:db:ad:6c:0d:b5:e2:a0:a6:fc:90:47: 3f:0c:38:8c:ef:dd:6f:62:4e:fc:65:26:e4:bd:8f:05:4e:06: f3:b6:da:20:57:11:19:bc:9e:24:ab:63:4b:c4:b0:2b:de:f0: ae:d1:ca:38:93:ef:71:ca:8b:57:38:67:5e:b1:b9:d9:ca:a1: a1:68:c6:fc:90:11:42:af:d2:bc:bb:59:50:6c:d3:53:a4:15: 30:c2:6a:4d:85:91:0b:a5:60:fa:3d:b5:fa:4f:fe:8d:04:ed: 93:56:93:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rubaSfF0RiwlpaWtCHkvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMTc4MDkyNzA0NzBkN2MyNTY3MTEyZmI0MGE5ZWY3MTI2 MDA1MTYwHhcNMjUxMjA2MjIwMTExWhcNMjUxMjA3MjIwMTExWjAzMTEwLwYDVQQD EyhhMzdiZDBkYjlmMTFjMWFhYjAwNTM0OGJjMGQ2YTkzNDBhMzljOWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBWs98jHHnY9Lre/h6r9IHyhI515 zrItmBPPn7GaLHGN0vyGKU1MdYFOAQCpdVKvRW+8xoQI65Jrpu15lQxAdFlNwRXZ /edJSk8XU75QkviEOP7b0kUIocOStEdAV9f19XLs9hPgCsSeyMrAVA9OCkEdLXIk YzvRSGEdwia04Xxn2C/RYMt4eU91qmVExMGMide0Xf9rzIxaBa61wl5RxIYLgh9J BwLmFotxdJhPiJR9KLIj0foOXIbCPKE3j01HTUnI0JxsnrJ9Jh87NBdlH2qNkmKJ rZF8yjVonINic7Y85FTISf+OlZ91uhmoY7YP9JacQuVAdcJX3jAOpKL+/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKN70NufEcGqsAU0i8DWqTQKOcnOMB8GA1UdIwQY MBaAFBoXgJJwRw18JWcRL7QKnvcSYAUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mNDc3MTAtNGEyMy00YmRjLTk1NDEt OGFmYTc0ZDg3NjlmLzEvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9mNDc3MTAtNGEyMy00YmRjLTk1NDEtOGFmYTc0ZDg3Njlm LzEvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFV7btfV yQB12tb7wbWs4690bStQCD2Gs7U42VnA79O07mx1rGHKdbt1TiTVl+WPZ867F0te DDaKQhsBgjHskyk+9/QFlhmPYjAztkq2PY9GohA1y/sw0Yr6kWMAG5jY7y+PdEzE POX1FijIt6mm7jKUkjpHMMVvoH7j9V1Sw6k2Qm7oJlmvORSCMeewWuY2L27Snlcf NdutbA214qCm/JBHPww4jO/db2JO/GUm5L2PBU4G87baIFcRGbyeJKtjS8SwK97w rtHKOJPvccqLVzhnXrG52cqhoWjG/JARQq/SvLtZUGzTU6QVMMJqTYWRC6Vg+j21 +k/+jQTtk1aTMg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:36:15 2025 by rpki-client