This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft File: grLg0A3Xcank1gu_S-UhFOp32wM.mft (raw, json) Hash identifier: 6hblsd8IK0yoZnvFMIo4NfgNTOOHPgKl9YMlYQ4LCOs= Subject key identifier: B1:17:72:D6:7B:32:1E:3D:D3:CA:3E:A5:C2:48:B5:E5:29:43:DF:88 Authority key identifier: 82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03 Certificate issuer: /CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03 Certificate serial: 019AF163FC9A27CD8A5630508572F994FC99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft Manifest number: 0CDD Signing time: Sat 06 Dec 2025 02:00:53 +0000 Manifest this update: Sat 06 Dec 2025 02:00:53 +0000 Manifest next update: Sun 07 Dec 2025 02:00:53 +0000 Files and hashes: 1: 5GAvl6a2LhO40IHXb3FEQRL43dI.roa (hash: /6XSNGfrUMapG8xHohOBC097pXOO/8yE7oieep3PnkA=) 2: UEpNb3wmOOdCK7UvN3lXTC2DcUk.roa (hash: pmS4hRe0q9ReL0MLHSlxbOJsASxbtpyjkGhM1kcVhvc=) 3: grLg0A3Xcank1gu_S-UhFOp32wM.crl (hash: 52QCe5qdCGfHrmfiUQxWPjGASRyLbQwYf5R/4xcfPns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:fc:9a:27:cd:8a:56:30:50:85:72:f9:94:fc:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03 Validity Not Before: Dec 6 02:00:53 2025 GMT Not After : Dec 7 02:00:53 2025 GMT Subject: CN=b11772d67b321e3dd3ca3ea5c248b5e52943df88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4a:c9:97:dc:8b:d4:a9:97:f6:4a:81:85:a3: cd:a5:fb:59:dc:95:11:5d:22:bc:78:37:6c:3a:e1: e1:05:b5:f6:f9:87:7b:5c:27:b9:70:9a:58:9d:51: 6a:fc:bf:7e:df:af:8b:50:58:df:a3:ac:77:ca:dc: 21:79:22:37:57:ec:a6:10:50:95:af:26:79:aa:c8: 15:13:01:49:e0:71:b3:7f:c7:59:67:ba:25:27:90: 0e:02:57:c1:ae:b7:49:99:5a:ed:fd:bb:ab:56:1e: 15:66:fb:22:f2:87:f1:4b:3e:1b:a0:cc:e9:08:92: 55:4b:3d:ae:65:9a:ef:39:6f:8e:bc:a0:46:b7:5a: 62:c9:36:80:64:45:8c:46:87:e1:ce:b7:a6:b3:e2: a8:85:a2:1e:05:b2:6a:f4:0f:8c:9f:26:56:68:76: ce:fe:21:dd:92:67:08:de:38:67:fd:91:85:47:8a: eb:62:4b:fd:f7:c9:fa:00:b6:f3:4d:50:cc:33:6e: 0c:c8:0b:d4:db:db:d9:22:47:fb:55:3e:79:c3:15: c7:d2:10:ba:b3:b6:9c:51:ca:bb:2c:6c:9f:20:7a: eb:a7:7f:0a:22:39:5c:97:5d:dc:99:76:55:34:be: b9:43:8c:70:40:27:ec:ec:76:42:52:31:a1:fe:f4: 8a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:17:72:D6:7B:32:1E:3D:D3:CA:3E:A5:C2:48:B5:E5:29:43:DF:88 X509v3 Authority Key Identifier: keyid:82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:25:25:19:69:da:ec:a3:64:90:25:40:8e:37:ea:a5:1c:70: 47:67:cb:8b:71:31:7a:20:90:57:ca:2a:e2:c4:12:68:31:66: e6:73:fb:be:33:c8:aa:9f:11:e9:c4:4b:db:c8:ec:c2:fa:a0: dc:72:6b:fe:c6:ca:96:52:1f:d9:f2:de:fb:4e:58:14:33:5d: ed:fd:de:98:dd:6a:e8:ea:ac:5d:64:1b:53:c6:f6:94:9c:24: b6:c6:cb:f5:50:75:dc:e7:91:97:cb:8d:7f:ac:1b:4e:b1:98: 47:49:97:07:05:88:d5:fd:e9:08:2d:33:80:52:7c:e0:4d:77: 0b:a9:0b:91:ea:ec:eb:bc:33:00:8a:13:a9:31:c7:81:2a:ee: de:bc:96:fc:b8:37:c5:69:a7:17:35:38:95:9a:17:48:3d:e0: 2f:1c:c2:dc:52:29:f3:a2:55:0b:33:b4:bb:7f:ee:d3:87:c3: 9e:76:77:f7:77:c2:5a:72:c4:88:a6:1b:9a:03:81:17:d5:5b: 11:cc:0b:78:2d:2c:0c:20:c3:c7:c6:2f:08:11:0a:d8:e5:4a: 0f:53:f8:65:ef:1d:1b:82:45:7f:fa:4e:ba:00:af:06:9b:7e: 37:52:ee:49:db:0e:97:44:0f:34:1f:2d:01:c0:9f:f1:d7:73: 4b:f1:71:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/yaJ82KVjBQhXL5lPyZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYjJlMGQwMGRkNzcxYTllNGQ2MGJiZjRiZTUyMTE0ZWE3 N2RiMDMwHhcNMjUxMjA2MDIwMDUzWhcNMjUxMjA3MDIwMDUzWjAzMTEwLwYDVQQD EyhiMTE3NzJkNjdiMzIxZTNkZDNjYTNlYTVjMjQ4YjVlNTI5NDNkZjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkrJl9yL1KmX9kqBhaPNpftZ3JUR XSK8eDdsOuHhBbX2+Yd7XCe5cJpYnVFq/L9+36+LUFjfo6x3ytwheSI3V+ymEFCV ryZ5qsgVEwFJ4HGzf8dZZ7olJ5AOAlfBrrdJmVrt/burVh4VZvsi8ofxSz4boMzp CJJVSz2uZZrvOW+OvKBGt1piyTaAZEWMRofhzrems+KohaIeBbJq9A+MnyZWaHbO /iHdkmcI3jhn/ZGFR4rrYkv998n6ALbzTVDMM24MyAvU29vZIkf7VT55wxXH0hC6 s7acUcq7LGyfIHrrp38KIjlcl13cmXZVNL65Q4xwQCfs7HZCUjGh/vSK7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEXctZ7Mh4908o+pcJIteUpQ9+IMB8GA1UdIwQY MBaAFIKy4NAN13Gp5NYLv0vlIRTqd9sDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3JMZzBBM1hjYW5rMWd1X1MtVWhGT3AzMndNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zNzk0YjEtY2E3Zi00YTU3LThiN2It MDZkM2M0ZTYzYzIwLzEvZ3JMZzBBM1hjYW5rMWd1X1MtVWhGT3AzMndNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8zNzk0YjEtY2E3Zi00YTU3LThiN2ItMDZkM2M0ZTYzYzIw LzEvZ3JMZzBBM1hjYW5rMWd1X1MtVWhGT3AzMndNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViUlGWna 7KNkkCVAjjfqpRxwR2fLi3ExeiCQV8oq4sQSaDFm5nP7vjPIqp8R6cRL28jswvqg 3HJr/sbKllIf2fLe+05YFDNd7f3emN1q6OqsXWQbU8b2lJwktsbL9VB13OeRl8uN f6wbTrGYR0mXBwWI1f3pCC0zgFJ84E13C6kLkers67wzAIoTqTHHgSru3ryW/Lg3 xWmnFzU4lZoXSD3gLxzC3FIp86JVCzO0u3/u04fDnnZ393fCWnLEiKYbmgOBF9Vb EcwLeC0sDCDDx8YvCBEK2OVKD1P4Ze8dG4JFf/pOugCvBpt+N1LuSdsOl0QPNB8t AcCf8ddzS/FxHg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:47 2025 by rpki-client