This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json) Hash identifier: fKOFuMnNYgGJ/z5nX1yJ7fReUXZuIhy4okW3fC9j5CA= Subject key identifier: 49:73:2B:92:A2:A6:07:8C:45:7C:35:19:66:4A:DB:18:4A:C1:70:E9 Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92 Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692 Certificate serial: 019AF2097F56393D5B46515455B0DC400FDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft Manifest number: 0946 Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: 8np8dFC03aZy-NSvKyaibYkoD2c.roa (hash: yH2zRDSO2w0uHZTYPQwRFl05v2muoqWJ+Z0OUk1oMhY=) 2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: k9CPA+v837febJ3SFVg9rIPoJn6Maro6aqklV0O3lBA=) 3: dl7fBf_Q9iWR2RTbgzduCGEsnu0.roa (hash: eVfjDssVSwbldy+Bqk+kwlieiStmiWJtJAkqUXW89hA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7f:56:39:3d:5b:46:51:54:55:b0:dc:40:0f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692 Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=49732b92a2a6078c457c3519664adb184ac170e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a9:9b:36:1f:dc:15:8d:17:54:cb:df:f2:08: 18:95:92:aa:cc:fe:2b:26:40:08:f5:f6:82:e7:ee: 6e:4a:81:f4:52:f3:6a:43:86:d9:24:5a:de:ba:55: 8a:2f:96:48:5f:0b:e8:f1:9e:26:1d:61:67:4f:85: 14:5c:d9:83:39:0d:26:4d:72:03:89:aa:84:77:22: ba:8e:ef:35:77:24:aa:9d:fd:a0:e2:9c:cf:73:fd: 8c:97:c5:93:85:8e:70:c7:3b:7e:4d:55:06:89:f7: ef:47:27:6d:70:ec:77:5b:44:85:9c:fb:43:14:6d: d3:b9:14:38:1e:d9:32:d2:39:0d:4b:32:54:f8:61: 6b:fe:1c:a2:d6:ae:f1:28:fc:84:e7:33:b3:28:98: 41:59:81:bb:03:94:78:0a:d9:6f:c1:b1:8c:83:e2: 2d:7b:37:9f:fb:77:c3:27:2e:b8:71:b4:f4:fb:67: 12:58:7e:f6:5b:d9:fe:33:7f:eb:90:44:4a:a1:34: 5a:c5:4c:a1:9c:d5:43:c7:29:29:77:56:e6:c0:13: 80:0f:1f:be:a5:f7:cd:f5:b5:14:63:d5:83:f4:87: 3b:aa:0d:a4:9c:c7:d8:0e:eb:cb:4b:46:23:50:8d: 45:1c:dd:98:cc:a5:14:a7:b7:8b:bd:df:ab:c6:db: b2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:73:2B:92:A2:A6:07:8C:45:7C:35:19:66:4A:DB:18:4A:C1:70:E9 X509v3 Authority Key Identifier: keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:a8:d9:d8:aa:2f:50:49:fa:f1:f7:89:e6:1e:29:fb:64:aa: b9:ca:66:f4:0f:25:64:30:33:a0:89:6b:15:b5:d1:0a:a4:82: 1d:34:e5:d5:ca:26:67:9c:17:64:9c:54:9e:e9:25:67:34:9a: c5:02:21:a2:17:74:ef:f6:3a:79:82:46:c2:72:89:71:92:63: 31:a3:e1:3d:72:9a:1c:0a:6a:8e:81:c3:9a:64:fe:24:65:69: d2:35:24:a4:12:17:2c:2e:3e:13:fa:0a:47:28:c9:a4:6b:00: 24:f6:2d:8b:ca:c7:3a:70:65:9f:bb:90:fd:dc:4a:3e:a8:23: 0e:4b:a2:0e:a5:a9:a1:c7:8b:10:d1:3b:45:cc:85:1d:52:9c: 20:25:6e:58:16:b4:52:6a:d5:30:ca:a9:4e:09:e7:8d:20:47: 9a:b2:fe:98:c5:b1:91:51:13:63:b9:cc:47:00:41:f1:43:2b: ff:ca:f5:3e:3f:04:90:ba:ab:49:7f:a5:31:83:e5:d0:0f:8d: 9b:9d:65:9d:7b:7e:35:72:6e:b9:4f:e2:85:01:05:93:b7:0d: d3:aa:06:16:c8:5a:df:91:67:1a:9a:f3:f0:d0:bf:00:6c:ef: 08:9f:0a:96:e9:ab:3e:92:c7:c0:5d:85:83:c6:8d:e1:c8:4b: 98:33:58:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCX9WOT1bRlFUVbDcQA/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMzFkY2E4ODdkOGJlNjA2MDE5ZDBhMTU5M2ExNmZmZDM5 ZmQ2OTIwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD Eyg0OTczMmI5MmEyYTYwNzhjNDU3YzM1MTk2NjRhZGIxODRhYzE3MGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqambNh/cFY0XVMvf8ggYlZKqzP4r JkAI9faC5+5uSoH0UvNqQ4bZJFreulWKL5ZIXwvo8Z4mHWFnT4UUXNmDOQ0mTXID iaqEdyK6ju81dySqnf2g4pzPc/2Ml8WThY5wxzt+TVUGiffvRydtcOx3W0SFnPtD FG3TuRQ4Htky0jkNSzJU+GFr/hyi1q7xKPyE5zOzKJhBWYG7A5R4CtlvwbGMg+It ezef+3fDJy64cbT0+2cSWH72W9n+M3/rkERKoTRaxUyhnNVDxykpd1bmwBOADx++ pffN9bUUY9WD9Ic7qg2knMfYDuvLS0YjUI1FHN2YzKUUp7eLvd+rxtuyTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElzK5KipgeMRXw1GWZK2xhKwXDpMB8GA1UdIwQY MBaAFBox3KiH2L5gYBnQoVk6Fv/Tn9aSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNzgwY2UtNGYyNi00YjY0LWI3ZjEt OTBjOTk5ZDM1ZWQ4LzEvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yNzgwY2UtNGYyNi00YjY0LWI3ZjEtOTBjOTk5ZDM1ZWQ4 LzEvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsqjZ2Kov UEn68feJ5h4p+2Squcpm9A8lZDAzoIlrFbXRCqSCHTTl1comZ5wXZJxUnuklZzSa xQIhohd07/Y6eYJGwnKJcZJjMaPhPXKaHApqjoHDmmT+JGVp0jUkpBIXLC4+E/oK RyjJpGsAJPYti8rHOnBln7uQ/dxKPqgjDkuiDqWpoceLENE7RcyFHVKcICVuWBa0 UmrVMMqpTgnnjSBHmrL+mMWxkVETY7nMRwBB8UMr/8r1Pj8EkLqrSX+lMYPl0A+N m51lnXt+NXJuuU/ihQEFk7cN06oGFsha35FnGprz8NC/AGzvCJ8KlumrPpLHwF2F g8aN4chLmDNYfA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:01 2025 by rpki-client