This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json) Hash identifier: AInQvpz3brEJMWwW+fB8qwk1pr8BKlGDxZYhl3/iBew= Subject key identifier: 12:2D:A5:F6:F1:F5:45:70:98:C6:E2:9A:21:45:65:10:8E:1B:8F:CB Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92 Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692 Certificate serial: 019B33B1DDBFDA9A4DE159581BE5AD87BF02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft Manifest number: 0968 Signing time: Thu 18 Dec 2025 23:00:53 +0000 Manifest this update: Thu 18 Dec 2025 23:00:53 +0000 Manifest next update: Fri 19 Dec 2025 23:00:53 +0000 Files and hashes: 1: 8np8dFC03aZy-NSvKyaibYkoD2c.roa (hash: yH2zRDSO2w0uHZTYPQwRFl05v2muoqWJ+Z0OUk1oMhY=) 2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: kk5dms0v3Y2TXzO5nWw+43bNq90gLzb+TvrN/mL5jT8=) 3: dl7fBf_Q9iWR2RTbgzduCGEsnu0.roa (hash: eVfjDssVSwbldy+Bqk+kwlieiStmiWJtJAkqUXW89hA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:dd:bf:da:9a:4d:e1:59:58:1b:e5:ad:87:bf:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692 Validity Not Before: Dec 18 23:00:53 2025 GMT Not After : Dec 19 23:00:53 2025 GMT Subject: CN=122da5f6f1f5457098c6e29a214565108e1b8fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:b2:44:e2:74:d2:87:83:46:3e:23:4b:38: 09:13:40:41:c2:1e:77:d6:5f:92:5d:9f:e6:0f:25: ed:fa:bc:c1:ac:80:23:92:91:d9:ed:e6:bd:74:65: 26:80:d4:b1:8a:07:8d:4c:1d:14:d7:08:db:3c:50: 9f:1a:3b:9a:7e:2d:b1:ab:b6:21:94:4b:9c:2d:e6: 1c:72:0e:5e:c4:25:d1:39:f9:42:24:ca:fc:94:ac: 96:1f:0b:8f:8a:38:0e:a0:c3:df:7a:e7:d2:bc:17: 6b:dc:3b:bd:b9:d2:6d:3c:08:c9:a8:8c:c8:f3:85: ad:58:46:4c:40:0a:3f:bf:77:a8:c0:d7:02:b4:57: 92:1a:11:fa:f5:68:b0:52:75:40:a3:06:a9:87:02: fd:b7:49:b9:cc:7a:c9:dd:1c:1a:7b:63:4a:d6:74: 15:31:00:2c:e2:69:0d:ee:9e:f4:da:ee:c9:2c:21: 85:9b:46:36:74:21:50:6a:61:3b:3f:61:e0:64:26: 4a:5c:f8:d6:f9:84:bc:f9:af:aa:9b:b7:0c:e3:e3: 14:94:c1:29:13:75:62:88:ea:29:6a:36:b2:73:b3: af:77:5d:19:69:8c:dd:73:26:a1:8f:67:22:d8:5a: 01:02:e3:88:01:ea:ab:b9:bb:d1:51:c9:58:85:a9: cf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2D:A5:F6:F1:F5:45:70:98:C6:E2:9A:21:45:65:10:8E:1B:8F:CB X509v3 Authority Key Identifier: keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:e2:eb:b3:76:7c:7b:fd:fd:ed:08:c6:5d:a6:7e:e9:53:30: a4:a5:88:f4:83:73:37:b5:02:06:4a:da:f3:61:64:f9:b5:50: 82:af:79:5b:a6:46:c0:5d:cb:1b:54:cc:1b:96:f6:ce:24:e3: 44:1c:d9:2b:ef:07:df:27:2c:21:2f:2b:95:00:2c:5b:19:4d: d9:c4:d3:aa:89:02:35:42:b3:4d:03:14:f0:e7:f6:4d:76:59: 56:06:5d:ac:51:29:d8:df:3c:5f:09:07:5b:c3:e5:fe:8f:af: 45:be:9f:d9:af:93:23:d9:8b:f1:76:16:b0:2f:1b:18:58:59: d9:05:86:5a:73:77:95:72:33:0f:5e:ea:99:02:c5:cc:51:a3: 35:79:b3:cf:34:29:ad:8b:be:2e:34:68:50:23:7f:4b:7c:35: 0d:6a:0b:ab:e3:23:b8:ae:60:ee:26:5d:3b:a8:54:6b:bd:01: 6f:00:6e:90:e0:e4:86:da:0b:bf:14:09:16:96:9a:40:98:29: 0f:08:d5:32:03:26:08:d2:ed:2f:4a:51:a4:79:a0:d1:db:fc: 76:e2:1a:33:04:35:32:55:0c:63:19:42:61:3f:e5:1a:a3:0f: f4:7e:e5:fc:bd:b9:f8:47:27:ee:ef:74:6c:a7:69:a2:0d:6c: f2:f8:11:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsd2/2ppN4VlYG+Wth78CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMzFkY2E4ODdkOGJlNjA2MDE5ZDBhMTU5M2ExNmZmZDM5 ZmQ2OTIwHhcNMjUxMjE4MjMwMDUzWhcNMjUxMjE5MjMwMDUzWjAzMTEwLwYDVQQD EygxMjJkYTVmNmYxZjU0NTcwOThjNmUyOWEyMTQ1NjUxMDhlMWI4ZmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSiyROJ00oeDRj4jSzgJE0BBwh53 1l+SXZ/mDyXt+rzBrIAjkpHZ7ea9dGUmgNSxigeNTB0U1wjbPFCfGjuafi2xq7Yh lEucLeYccg5exCXROflCJMr8lKyWHwuPijgOoMPfeufSvBdr3Du9udJtPAjJqIzI 84WtWEZMQAo/v3eowNcCtFeSGhH69WiwUnVAowaphwL9t0m5zHrJ3Rwae2NK1nQV MQAs4mkN7p702u7JLCGFm0Y2dCFQamE7P2HgZCZKXPjW+YS8+a+qm7cM4+MUlMEp E3ViiOopajayc7Ovd10ZaYzdcyahj2ci2FoBAuOIAeqrubvRUclYhanPfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBItpfbx9UVwmMbimiFFZRCOG4/LMB8GA1UdIwQY MBaAFBox3KiH2L5gYBnQoVk6Fv/Tn9aSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNzgwY2UtNGYyNi00YjY0LWI3ZjEt OTBjOTk5ZDM1ZWQ4LzEvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yNzgwY2UtNGYyNi00YjY0LWI3ZjEtOTBjOTk5ZDM1ZWQ4 LzEvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOLrs3Z8 e/397QjGXaZ+6VMwpKWI9INzN7UCBkra82Fk+bVQgq95W6ZGwF3LG1TMG5b2ziTj RBzZK+8H3ycsIS8rlQAsWxlN2cTTqokCNUKzTQMU8Of2TXZZVgZdrFEp2N88XwkH W8Pl/o+vRb6f2a+TI9mL8XYWsC8bGFhZ2QWGWnN3lXIzD17qmQLFzFGjNXmzzzQp rYu+LjRoUCN/S3w1DWoLq+MjuK5g7iZdO6hUa70BbwBukODkhtoLvxQJFpaaQJgp DwjVMgMmCNLtL0pRpHmg0dv8duIaMwQ1MlUMYxlCYT/lGqMP9H7l/L25+Ecn7u90 bKdpog1s8vgRFA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:23:14 2025 by rpki-client