This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json) Hash identifier: 0v0xX/VIO+GoPCP5xYvMOftEvIXvTmh9U/P4dTecxJA= Subject key identifier: 5F:1D:26:CE:60:51:CE:F0:F0:DE:66:E7:59:6F:90:84:90:1B:47:FE Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd Certificate serial: 019B3532541B4F996A0766C8D4ABF86DEB7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft Manifest number: 0D09 Signing time: Fri 19 Dec 2025 06:00:49 +0000 Manifest this update: Fri 19 Dec 2025 06:00:49 +0000 Manifest next update: Sat 20 Dec 2025 06:00:49 +0000 Files and hashes: 1: 4PVveBGxN8n2WuGPtmITlLn0GtI.roa (hash: cfEtfn0zg7NHGmh50mHK7LzfG79rGcilgz9AnPpzS50=) 2: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: 2TcRS8NZrMKFtKZ1ZXcnsROfUxJ18u3kzgBRFc0Zx0o=) 3: eIp7-TA74OpVMqMjgyn5rozHch0.roa (hash: Vk4popoaDrWGjozep9hzWTbs+ZYNrWhKKEtSBoEkXJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:54:1b:4f:99:6a:07:66:c8:d4:ab:f8:6d:eb:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd Validity Not Before: Dec 19 06:00:49 2025 GMT Not After : Dec 20 06:00:49 2025 GMT Subject: CN=5f1d26ce6051cef0f0de66e7596f9084901b47fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:9d:f1:a9:b6:f4:4e:91:6d:0a:45:79:4d: 52:66:d5:8f:2d:ec:20:f2:94:83:c0:85:92:47:c9: 12:af:96:b6:28:76:5f:bd:35:28:3c:73:a6:5a:89: 49:58:89:27:b5:a9:ee:43:00:15:09:d6:dc:96:a2: 88:91:43:d7:54:5f:a7:17:18:da:ba:aa:e5:90:56: ba:16:f9:d0:f7:34:99:82:3d:74:b7:c8:b0:2e:6a: 33:d6:68:b2:e8:49:44:9c:64:37:6b:a6:f3:67:51: fa:c1:c3:be:d4:4d:94:ab:93:f3:1b:98:f9:29:e9: 5f:30:96:87:03:d1:f6:81:fe:ef:bc:bc:39:f8:68: bf:f3:b2:b2:6c:a9:24:04:2c:93:4a:7f:e3:d5:76: fc:a5:8c:df:f2:03:eb:de:eb:bb:94:65:dd:d6:d3: bc:eb:35:59:88:37:ad:c7:ad:d2:35:8f:98:da:6c: 17:57:5c:43:5f:57:ac:70:d7:c2:32:3b:bc:1b:9a: 45:ed:8e:53:1c:d5:29:27:29:84:01:52:d8:37:e0: a8:50:bc:fe:2a:64:2b:0d:14:fe:c6:2a:3b:8b:9d: 82:09:7c:20:72:5d:85:82:d8:82:e9:37:be:4b:33: 0e:9b:63:e8:28:6e:66:03:d6:87:b3:d7:7a:54:26: a3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1D:26:CE:60:51:CE:F0:F0:DE:66:E7:59:6F:90:84:90:1B:47:FE X509v3 Authority Key Identifier: keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:cc:6e:81:71:92:3b:28:55:5a:e8:7a:96:e5:48:83:40:4d: e0:b3:e5:f1:e7:11:64:1c:b6:42:02:ff:8b:26:05:28:df:e8: 32:e9:5a:81:fe:9e:7d:75:a5:97:1f:52:72:2d:35:7b:f6:0a: 49:2e:36:2a:84:2b:c2:b0:f3:01:39:0b:a3:60:5d:42:b2:f0: 88:e3:b2:2f:aa:fc:a3:2d:2d:f8:39:44:53:18:70:9c:e1:c9: bd:bb:dc:ae:21:eb:43:23:db:d9:6a:61:cf:5a:15:8d:79:70: 74:e8:9e:bd:9f:64:dd:a5:83:ca:0c:71:29:8a:cc:53:34:ba: 77:40:aa:39:04:60:e9:56:9f:59:b7:e8:4f:e9:b5:94:ec:ec: 8b:7f:32:5a:06:59:9a:47:fd:e5:69:0e:c8:07:f2:62:cb:8e: 5e:e7:6d:38:cb:d3:15:b4:cf:5a:2c:d2:b4:d0:4e:bb:35:dc: e3:83:61:9c:71:0f:fa:2f:cf:b5:0d:54:43:a7:4e:57:22:3d: 00:f8:5f:42:0e:b7:5c:55:55:c1:00:50:5c:25:e6:b1:d6:96: 09:a6:ff:bb:04:a5:1b:4e:04:5c:9c:4e:12:97:33:68:25:de: e9:2d:1b:b7:2e:90:c7:cb:01:00:89:16:0c:60:31:48:ea:fe: de:3a:2a:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MlQbT5lqB2bI1Kv4bet7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMWQyMTU0YjkzMjRlZmIzOWNhMzhiYTE5MzFiYTVkZmI1 OWU4ZmQwHhcNMjUxMjE5MDYwMDQ5WhcNMjUxMjIwMDYwMDQ5WjAzMTEwLwYDVQQD Eyg1ZjFkMjZjZTYwNTFjZWYwZjBkZTY2ZTc1OTZmOTA4NDkwMWI0N2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8md8am29E6RbQpFeU1SZtWPLewg 8pSDwIWSR8kSr5a2KHZfvTUoPHOmWolJWIkntanuQwAVCdbclqKIkUPXVF+nFxja uqrlkFa6FvnQ9zSZgj10t8iwLmoz1miy6ElEnGQ3a6bzZ1H6wcO+1E2Uq5PzG5j5 KelfMJaHA9H2gf7vvLw5+Gi/87KybKkkBCyTSn/j1Xb8pYzf8gPr3uu7lGXd1tO8 6zVZiDetx63SNY+Y2mwXV1xDX1escNfCMju8G5pF7Y5THNUpJymEAVLYN+CoULz+ KmQrDRT+xio7i52CCXwgcl2FgtiC6Te+SzMOm2PoKG5mA9aHs9d6VCajUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8dJs5gUc7w8N5m51lvkISQG0f+MB8GA1UdIwQY MBaAFBodIVS5Mk77Oco4uhkxul37Wej9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAt ODkwMWIwNTJiODZiLzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAtODkwMWIwNTJiODZi LzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsxugXGS OyhVWuh6luVIg0BN4LPl8ecRZBy2QgL/iyYFKN/oMulagf6efXWllx9Sci01e/YK SS42KoQrwrDzATkLo2BdQrLwiOOyL6r8oy0t+DlEUxhwnOHJvbvcriHrQyPb2Wph z1oVjXlwdOievZ9k3aWDygxxKYrMUzS6d0CqOQRg6VafWbfoT+m1lOzsi38yWgZZ mkf95WkOyAfyYsuOXudtOMvTFbTPWizStNBOuzXc44NhnHEP+i/PtQ1UQ6dOVyI9 APhfQg63XFVVwQBQXCXmsdaWCab/uwSlG04EXJxOEpczaCXe6S0bty6Qx8sBAIkW DGAxSOr+3joqUA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:41:16 2025 by rpki-client