This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft File: GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft (raw, json) Hash identifier: Hgp1v/Ix0aR90YPjAuqvSfxEhRJtYh0bh8yQtQQ1C0c= Subject key identifier: A2:4A:1E:3D:18:84:DC:93:D3:64:A3:D9:66:F6:75:B0:D4:9E:F1:96 Authority key identifier: 1A:F1:48:7E:4D:0E:26:C5:3D:59:3E:CE:6E:14:71:22:21:E2:40:10 Certificate issuer: /CN=1af1487e4d0e26c53d593ece6e14712221e24010 Certificate serial: 019B5F7826C62E5FF7D07C704388F78F67ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft Manifest number: A9 Signing time: Sat 27 Dec 2025 11:01:08 +0000 Manifest this update: Sat 27 Dec 2025 11:01:08 +0000 Manifest next update: Sun 28 Dec 2025 11:01:08 +0000 Files and hashes: 1: 4jPpa2yrHFokJLczcdkZDLR9h98.roa (hash: EAFCvLqIzBJHhjSQ4BlNHua0JxEcTXMXgVltdpts9XM=) 2: GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl (hash: MB2QDF1tKEDg6LJabpvE8GdxrHMJOLiJiUqHgZl8NOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:78:26:c6:2e:5f:f7:d0:7c:70:43:88:f7:8f:67:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1af1487e4d0e26c53d593ece6e14712221e24010 Validity Not Before: Dec 27 11:01:08 2025 GMT Not After : Dec 28 11:01:08 2025 GMT Subject: CN=a24a1e3d1884dc93d364a3d966f675b0d49ef196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8a:b2:85:72:74:b9:17:7f:3f:98:73:e0:55: aa:a9:2a:cb:67:d1:3e:32:bb:5a:13:57:cf:8f:e6: b5:71:8a:0a:4c:e5:c4:8c:41:59:77:bd:11:78:9f: da:4b:c2:ac:6e:57:11:09:7c:ef:e5:7f:2d:a8:22: 94:7d:19:c4:99:08:9e:dc:a7:d4:67:74:72:34:ad: a1:6c:1c:c5:65:87:51:b3:27:9f:cb:b6:db:88:90: 52:9f:a9:d3:b1:7d:cc:51:2a:26:45:3d:ef:98:ff: a6:af:ee:14:cf:dc:d7:b4:7a:c0:a5:22:44:f2:60: 60:8b:11:bb:c1:a6:e4:2c:8d:16:95:08:b1:16:26: 17:28:96:60:c0:30:2b:74:92:6e:42:7c:54:81:19: 66:1c:03:00:14:57:1b:3d:09:cf:c8:a7:6f:09:2a: 90:b9:80:7a:cf:76:88:64:13:5c:60:87:69:b8:1e: 47:c8:16:ec:94:d8:f0:1a:46:70:c0:cf:2e:3d:78: 67:a7:b7:c9:16:b0:04:a3:b2:7e:b0:a2:f5:3b:07: c0:15:95:52:d5:70:cb:eb:6c:f6:12:38:ac:10:1f: 3b:e7:f1:63:d4:ad:f9:9e:b3:69:f3:fd:1f:f0:e7: 70:07:8d:52:83:bd:29:80:74:ad:33:a0:59:12:03: b2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4A:1E:3D:18:84:DC:93:D3:64:A3:D9:66:F6:75:B0:D4:9E:F1:96 X509v3 Authority Key Identifier: keyid:1A:F1:48:7E:4D:0E:26:C5:3D:59:3E:CE:6E:14:71:22:21:E2:40:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a1:79:f5:ad:85:83:99:7f:60:70:20:2d:3d:f2:ce:cc:f6: 0c:97:b2:9c:2e:a2:58:e2:21:f9:c1:e8:d2:6a:03:08:50:c0: d4:22:17:ad:60:8b:44:69:02:f9:eb:3b:0e:c1:aa:bf:9a:61: 15:ac:4c:74:60:81:00:7e:98:a5:f2:72:f3:a8:14:9d:8b:ab: bc:25:ca:38:bb:56:bc:2e:c1:55:35:18:1f:20:ee:d7:9e:21: 21:58:15:aa:1c:dd:11:9f:34:11:b5:36:7b:a0:2c:a7:eb:9d: 6e:c9:6c:40:c9:26:61:09:aa:9e:2a:09:7b:97:99:8d:dd:af: 51:df:fb:b8:b1:6e:5b:bd:61:dc:c4:df:93:2d:55:09:63:d3: 29:b4:6f:1d:6e:d3:95:ab:ff:67:c6:c7:d7:45:74:c0:40:9b: d4:fe:1b:6d:3f:87:c3:2a:65:c5:82:99:14:bc:d1:ac:1a:ed: a1:6e:4e:46:88:ff:d8:6e:f9:80:81:48:46:ba:ad:c1:e5:f6: 13:16:e8:4c:3e:5a:49:51:e2:eb:ce:fd:a4:4c:7b:6a:8c:54: 98:88:ac:cb:f1:a6:e0:ac:1b:6c:e6:29:bb:32:90:b2:e5:00: 13:d0:27:5f:4f:d9:2e:c7:dc:ba:0a:ad:04:33:44:a5:01:24: d9:4a:dc:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfeCbGLl/30HxwQ4j3j2ftMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZjE0ODdlNGQwZTI2YzUzZDU5M2VjZTZlMTQ3MTIyMjFl MjQwMTAwHhcNMjUxMjI3MTEwMTA4WhcNMjUxMjI4MTEwMTA4WjAzMTEwLwYDVQQD EyhhMjRhMWUzZDE4ODRkYzkzZDM2NGEzZDk2NmY2NzViMGQ0OWVmMTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YqyhXJ0uRd/P5hz4FWqqSrLZ9E+ MrtaE1fPj+a1cYoKTOXEjEFZd70ReJ/aS8KsblcRCXzv5X8tqCKUfRnEmQie3KfU Z3RyNK2hbBzFZYdRsyefy7bbiJBSn6nTsX3MUSomRT3vmP+mr+4Uz9zXtHrApSJE 8mBgixG7wabkLI0WlQixFiYXKJZgwDArdJJuQnxUgRlmHAMAFFcbPQnPyKdvCSqQ uYB6z3aIZBNcYIdpuB5HyBbslNjwGkZwwM8uPXhnp7fJFrAEo7J+sKL1OwfAFZVS 1XDL62z2EjisEB875/Fj1K35nrNp8/0f8OdwB41Sg70pgHStM6BZEgOyVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJKHj0YhNyT02Sj2Wb2dbDUnvGWMB8GA1UdIwQY MBaAFBrxSH5NDibFPVk+zm4UcSIh4kAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3ZGSWZrME9Kc1U5V1Q3T2JoUnhJaUhpUUJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iNzA3NjEtYmZkMi00NGI5LWI2MGEt NTk2OWQ2ZWI5YjBkLzEvR3ZGSWZrME9Kc1U5V1Q3T2JoUnhJaUhpUUJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9iNzA3NjEtYmZkMi00NGI5LWI2MGEtNTk2OWQ2ZWI5YjBk LzEvR3ZGSWZrME9Kc1U5V1Q3T2JoUnhJaUhpUUJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjaF59a2F g5l/YHAgLT3yzsz2DJeynC6iWOIh+cHo0moDCFDA1CIXrWCLRGkC+es7DsGqv5ph FaxMdGCBAH6YpfJy86gUnYurvCXKOLtWvC7BVTUYHyDu154hIVgVqhzdEZ80EbU2 e6Asp+udbslsQMkmYQmqnioJe5eZjd2vUd/7uLFuW71h3MTfky1VCWPTKbRvHW7T lav/Z8bH10V0wECb1P4bbT+HwyplxYKZFLzRrBrtoW5ORoj/2G75gIFIRrqtweX2 ExboTD5aSVHi6879pEx7aoxUmIisy/Gm4KwbbOYpuzKQsuUAE9AnX0/ZLsfcugqt BDNEpQEk2Urcgg== -----END CERTIFICATE-----Generated at Sat Dec 27 13:27:41 2025 by rpki-client