This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft File: gh9un_H7vyH2QToTfnNn3YqMA1w.mft (raw, json) Hash identifier: v1ihaS5wTIuQDMOwmLlw3mHFaEAglyHKw7bGomkvYsg= Subject key identifier: 42:2D:E1:9B:14:FD:E9:B0:91:F1:E4:AC:65:1A:6C:53:7D:F5:82:79 Authority key identifier: 82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C Certificate issuer: /CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c Certificate serial: 019AF2AD75923CAAABF04D12B848E63B908F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft Manifest number: 0FA4 Signing time: Sat 06 Dec 2025 08:00:45 +0000 Manifest this update: Sat 06 Dec 2025 08:00:45 +0000 Manifest next update: Sun 07 Dec 2025 08:00:45 +0000 Files and hashes: 1: LGI_BMqz48rF1CAQFBrnzf381U0.roa (hash: eJvU6iSIuiB2ZVQ2ar/OXbcHw5p8L+QuWzmrOM6M7qg=) 2: gh9un_H7vyH2QToTfnNn3YqMA1w.crl (hash: TNyTDgtjCqYB/gpwIXuCXTdCf540PKnVIryT9Va/Tyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:75:92:3c:aa:ab:f0:4d:12:b8:48:e6:3b:90:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c Validity Not Before: Dec 6 08:00:45 2025 GMT Not After : Dec 7 08:00:45 2025 GMT Subject: CN=422de19b14fde9b091f1e4ac651a6c537df58279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:76:cd:c7:8e:5d:ac:3e:39:cb:d7:cd:2f:35: 7b:80:ea:da:a1:65:cb:52:6b:85:c0:cd:c0:e7:93: ad:81:7e:2d:cd:ae:5b:90:2f:9f:1d:64:ab:1f:38: b6:69:95:3c:a7:ed:a7:39:27:57:d4:78:1f:6c:33: c1:8c:fa:38:a1:7b:b7:e7:ad:69:2e:73:e1:54:5f: 21:d6:f6:8e:00:2d:1a:70:34:63:74:4c:b0:0d:60: 66:72:62:6f:de:82:e5:ba:9b:1c:92:5e:dd:08:72: 62:da:03:7c:f0:cd:b4:f3:20:7a:78:e0:55:b6:07: 38:14:38:bd:78:24:5f:3f:7c:86:b9:e3:b0:ce:47: 49:9c:61:2b:f8:94:ba:4d:e4:bb:3e:08:4c:82:c7: c8:df:8b:ab:26:ba:e5:01:8b:00:1c:94:57:c3:19: 30:db:7b:fb:df:2c:55:27:3a:62:df:fa:1d:ae:92: 4b:ed:aa:73:15:4f:c4:20:89:f4:25:80:69:55:e9: 5b:6e:cf:c3:9d:38:ca:96:8b:78:e8:38:71:e4:60: 04:89:25:31:ba:87:2a:c0:b3:09:7e:51:d3:f2:f7: 99:68:64:fd:c9:f0:3d:a9:5c:06:3a:76:ae:9e:dd: 5f:70:bb:d3:de:8e:93:8f:3e:99:90:a6:3f:c7:d7: fd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2D:E1:9B:14:FD:E9:B0:91:F1:E4:AC:65:1A:6C:53:7D:F5:82:79 X509v3 Authority Key Identifier: keyid:82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:85:ce:4f:bd:ae:60:fd:cd:4d:f8:0e:8b:e2:c8:ca:00:23: 6f:33:07:5f:17:88:ac:6d:60:e3:9c:84:47:ac:1d:ed:94:b2: f1:17:66:e2:e1:ee:09:cc:88:05:d1:cf:5a:df:49:5c:69:29: 25:19:56:d9:16:1d:c8:ce:97:6a:e0:7c:8a:06:e3:50:70:6c: 5a:b0:c9:dd:ce:21:70:f7:04:60:04:1e:7a:07:60:f8:42:f8: b0:49:97:17:6d:fd:e6:39:74:4a:09:d7:f2:4a:5f:ef:33:6f: 6e:be:f5:d0:95:55:eb:61:49:f3:fb:eb:1b:0a:a8:67:43:0f: fd:93:dc:ce:62:50:17:72:65:b0:62:36:89:a1:09:20:63:dc: 1f:3c:ea:e4:c7:1f:0b:f9:f8:cc:57:16:e2:7c:68:bc:06:05: 4b:3d:b5:9f:82:c2:50:30:8e:70:72:7d:40:83:04:60:96:41: 34:13:03:c0:76:9a:37:2a:59:c9:62:6a:21:08:06:7a:32:26: 14:b8:5a:61:ca:6e:f3:fc:19:5f:48:d6:82:38:f6:54:ea:c9: ec:fc:da:f1:12:fd:ad:11:47:80:f0:05:4b:26:0f:e6:2f:c0: ac:c9:23:c0:81:c5:70:3a:bc:57:17:60:3c:e5:27:de:12:58: cc:43:ea:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXWSPKqr8E0SuEjmO5CPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWY2ZTlmZjFmYmJmMjFmNjQxM2ExMzdlNzM2N2RkOGE4 YzAzNWMwHhcNMjUxMjA2MDgwMDQ1WhcNMjUxMjA3MDgwMDQ1WjAzMTEwLwYDVQQD Eyg0MjJkZTE5YjE0ZmRlOWIwOTFmMWU0YWM2NTFhNmM1MzdkZjU4Mjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXbNx45drD45y9fNLzV7gOraoWXL UmuFwM3A55OtgX4tza5bkC+fHWSrHzi2aZU8p+2nOSdX1HgfbDPBjPo4oXu3561p LnPhVF8h1vaOAC0acDRjdEywDWBmcmJv3oLlupsckl7dCHJi2gN88M208yB6eOBV tgc4FDi9eCRfP3yGueOwzkdJnGEr+JS6TeS7PghMgsfI34urJrrlAYsAHJRXwxkw 23v73yxVJzpi3/odrpJL7apzFU/EIIn0JYBpVelbbs/DnTjKlot46Dhx5GAEiSUx uocqwLMJflHT8veZaGT9yfA9qVwGOnaunt1fcLvT3o6Tjz6ZkKY/x9f9EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIt4ZsU/emwkfHkrGUabFN99YJ5MB8GA1UdIwQY MBaAFIIfbp/x+78h9kE6E35zZ92KjANcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2g5dW5fSDd2eUgyUVRvVGZuTm4zWXFNQTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lMDc2ZGMtMTBkOC00NGNjLThhYTUt NWE5NGFkMTMzMTE4LzEvZ2g5dW5fSDd2eUgyUVRvVGZuTm4zWXFNQTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9lMDc2ZGMtMTBkOC00NGNjLThhYTUtNWE5NGFkMTMzMTE4 LzEvZ2g5dW5fSDd2eUgyUVRvVGZuTm4zWXFNQTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYXOT72u YP3NTfgOi+LIygAjbzMHXxeIrG1g45yER6wd7ZSy8Rdm4uHuCcyIBdHPWt9JXGkp JRlW2RYdyM6XauB8igbjUHBsWrDJ3c4hcPcEYAQeegdg+EL4sEmXF2395jl0SgnX 8kpf7zNvbr710JVV62FJ8/vrGwqoZ0MP/ZPczmJQF3JlsGI2iaEJIGPcHzzq5Mcf C/n4zFcW4nxovAYFSz21n4LCUDCOcHJ9QIMEYJZBNBMDwHaaNypZyWJqIQgGejIm FLhaYcpu8/wZX0jWgjj2VOrJ7Pza8RL9rRFHgPAFSyYP5i/ArMkjwIHFcDq8Vxdg POUn3hJYzEPqiw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:39 2025 by rpki-client