This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft File: GRk80M-5OVmJNY4DljEs-7HIj_4.mft (raw, json) Hash identifier: o3a4I+/8tJI49FHQsd+J7vSQoLCAtYaOEcjxC1OEAp4= Subject key identifier: 82:56:72:F0:FF:3B:B4:E1:3C:1F:12:94:18:EE:86:34:21:58:D7:24 Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE Certificate issuer: /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe Certificate serial: 019B4CCD6E1A4B95A090290F0C7DB12FF325 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft Manifest number: 18C5 Signing time: Tue 23 Dec 2025 20:01:29 +0000 Manifest this update: Tue 23 Dec 2025 20:01:29 +0000 Manifest next update: Wed 24 Dec 2025 20:01:29 +0000 Files and hashes: 1: 7pztvUDezwt3ZSHLohSTcy0jFYM.roa (hash: uP/w6/w3g1+AZjMv77F/dMcv4FObFdLOts1JHnWbc4w=) 2: GRk80M-5OVmJNY4DljEs-7HIj_4.crl (hash: FEioJ7U2lFtp/nNPnc8cfY6XObxY7A7QUJx7CPf1CjE=) 3: O2A95fKA1A2XI5zokqy2M5EQluY.roa (hash: l7DaeRNWKyhpILryPmDUINT37G9okCmuQyW2gonVmu8=) 4: Qifr27pZsDI3gBmuWNhoBQW5wS8.roa (hash: 693MgmhKaU8BK+1a2W4IpQKTYU8LqLlq+4s4L4qPtRo=) 5: VU-yn-djO9ahpUZ0CaOs0k2jQuQ.roa (hash: 7eQhPopRxk4G5cM0yLS4smy3rEn4YSJy79V+gPd0bhg=) 6: oerIe3XBauoH4wnjH-yQh4V4P1U.roa (hash: auHewUAAn3a0HGRSavJta0QusST9c8r9vsoZnA0C1aY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cd:6e:1a:4b:95:a0:90:29:0f:0c:7d:b1:2f:f3:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe Validity Not Before: Dec 23 20:01:29 2025 GMT Not After : Dec 24 20:01:29 2025 GMT Subject: CN=825672f0ff3bb4e13c1f129418ee86342158d724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:84:cb:42:a0:93:24:61:99:8f:e6:10:76: eb:fb:fc:72:e4:1d:86:48:06:c6:cb:2c:1d:0c:1e: 2b:91:de:f8:25:2d:e0:40:45:a2:41:cf:47:9f:b3: ef:79:2a:d4:fc:02:2d:7f:4a:c0:4e:48:bf:32:a3: 27:52:38:5d:d7:75:ce:5d:89:f1:37:a5:b6:62:07: d4:9d:65:fc:3d:1f:be:ef:ff:2c:11:d1:18:b8:60: f8:87:f5:85:cd:ff:e9:4b:7d:02:b5:29:ca:e2:a5: e3:f1:64:12:8c:55:6d:8b:1d:5b:0c:9c:7b:75:11: 57:00:cc:67:83:d7:3c:f6:2c:89:78:7a:2e:15:6e: 73:13:e8:cc:02:36:31:0a:e1:52:c5:43:93:da:88: 5e:c3:c3:8f:93:86:f2:b7:8e:d7:8d:c1:5a:5b:07: ea:54:16:8a:ea:32:f8:03:22:1c:0a:9d:ed:98:9c: c4:a7:43:86:68:3e:34:71:ee:65:21:57:81:1d:1a: 61:c5:73:c5:3f:45:65:fa:f9:2b:43:4b:37:3d:a0: 14:db:26:17:4d:1e:1e:86:65:4f:66:de:a2:21:9b: 9a:fd:db:3d:81:d4:5a:10:ab:3f:a8:67:46:aa:69: 34:42:f1:79:a1:d9:da:2c:16:7c:68:b1:fe:95:c5: 5a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:56:72:F0:FF:3B:B4:E1:3C:1F:12:94:18:EE:86:34:21:58:D7:24 X509v3 Authority Key Identifier: keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:10:5b:40:3d:b3:60:0b:9d:b9:d4:01:ca:72:65:cb:52:d8: bd:c9:76:8d:0b:6e:e6:fa:20:05:77:b0:22:ed:de:bd:f5:bf: e4:76:76:ee:79:cd:2b:d4:cd:5b:bb:35:1b:16:15:25:81:24: b9:50:90:5b:7c:a4:f6:70:5f:ff:cf:a3:86:4a:14:64:da:ad: ff:2b:44:33:22:75:8d:5b:6a:d3:79:b0:7a:70:3c:fc:26:7e: 18:63:96:8d:21:a9:87:3a:12:ba:19:18:a0:e3:91:0e:9a:bd: 03:0e:06:1e:b0:32:8d:28:89:f8:44:77:90:14:39:c5:58:e3: 90:ab:ee:d1:0e:1e:79:13:8a:19:96:ee:26:bf:4e:60:29:f8: f3:2c:0f:2e:ee:9a:f8:58:a5:68:bf:ef:61:64:1a:0d:b5:71: dd:f4:ac:44:77:26:07:be:9a:a4:61:aa:d9:09:00:ca:43:c8: 45:88:c0:c1:be:11:9b:b8:b8:43:30:de:c5:fe:27:a1:7b:00: 2b:cb:bb:a9:a3:c2:1b:ab:7c:66:b5:5b:8a:1c:01:91:65:9b: 9b:45:3a:68:a9:d0:ee:66:b2:16:b3:15:65:25:b1:3d:19:1c: 4a:e1:61:14:52:7e:d3:97:16:c7:7c:e7:b7:2a:b9:cf:5c:b4: 06:17:d8:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzW4aS5WgkCkPDH2xL/MlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MTkzY2QwY2ZiOTM5NTk4OTM1OGUwMzk2MzEyY2ZiYjFj ODhmZmUwHhcNMjUxMjIzMjAwMTI5WhcNMjUxMjI0MjAwMTI5WjAzMTEwLwYDVQQD Eyg4MjU2NzJmMGZmM2JiNGUxM2MxZjEyOTQxOGVlODYzNDIxNThkNzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4OEy0KgkyRhmY/mEHbr+/xy5B2G SAbGyywdDB4rkd74JS3gQEWiQc9Hn7PveSrU/AItf0rATki/MqMnUjhd13XOXYnx N6W2YgfUnWX8PR++7/8sEdEYuGD4h/WFzf/pS30CtSnK4qXj8WQSjFVtix1bDJx7 dRFXAMxng9c89iyJeHouFW5zE+jMAjYxCuFSxUOT2ohew8OPk4byt47XjcFaWwfq VBaK6jL4AyIcCp3tmJzEp0OGaD40ce5lIVeBHRphxXPFP0Vl+vkrQ0s3PaAU2yYX TR4ehmVPZt6iIZua/ds9gdRaEKs/qGdGqmk0QvF5odnaLBZ8aLH+lcValwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJWcvD/O7ThPB8SlBjuhjQhWNckMB8GA1UdIwQY MBaAFBkZPNDPuTlZiTWOA5YxLPuxyI/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wZDY4ZDQtYWRiMy00ZmY5LWI3OGEt NGVmOWQwN2M0NDA1LzEvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8wZDY4ZDQtYWRiMy00ZmY5LWI3OGEtNGVmOWQwN2M0NDA1 LzEvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhBbQD2z YAududQBynJly1LYvcl2jQtu5vogBXewIu3evfW/5HZ27nnNK9TNW7s1GxYVJYEk uVCQW3yk9nBf/8+jhkoUZNqt/ytEMyJ1jVtq03mwenA8/CZ+GGOWjSGphzoSuhkY oOORDpq9Aw4GHrAyjSiJ+ER3kBQ5xVjjkKvu0Q4eeROKGZbuJr9OYCn48ywPLu6a +FilaL/vYWQaDbVx3fSsRHcmB76apGGq2QkAykPIRYjAwb4Rm7i4QzDexf4noXsA K8u7qaPCG6t8ZrVbihwBkWWbm0U6aKnQ7mayFrMVZSWxPRkcSuFhFFJ+05cWx3zn tyq5z1y0BhfYGg== -----END CERTIFICATE-----Generated at Wed Dec 24 02:55:14 2025 by rpki-client