This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json) Hash identifier: PUCSnXl18gyNr7EWSiIjKctV88ZOAtnP06oc2Ps6bSU= Subject key identifier: D5:7E:90:66:BA:57:63:41:61:36:A2:D4:9A:0E:3F:83:35:1A:34:1E Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd Certificate serial: 019B3F11A419CF8D4F998B799FD99C545016 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft Manifest number: 0A74 Signing time: Sun 21 Dec 2025 04:01:18 +0000 Manifest this update: Sun 21 Dec 2025 04:01:18 +0000 Manifest next update: Mon 22 Dec 2025 04:01:18 +0000 Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: e+N8eqiS9lJ9rmrs8OK3BlhJ925u29IZ1bNwCGNekbA=) 2: ngLzTXL9yL8qZxP4JODs6i0oJzI.roa (hash: D6+JXEaHb1tO3mpKT7yT9VZcfkQ3PmJxwgv/yQik0ys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:a4:19:cf:8d:4f:99:8b:79:9f:d9:9c:54:50:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd Validity Not Before: Dec 21 04:01:18 2025 GMT Not After : Dec 22 04:01:18 2025 GMT Subject: CN=d57e9066ba5763416136a2d49a0e3f83351a341e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3b:33:fb:05:91:18:23:27:6b:ea:4a:58:7f: 47:be:a3:fe:6e:3f:0d:8e:d1:7d:1f:b7:25:82:de: f2:c1:96:5a:18:84:76:3f:c8:53:65:11:ff:09:ff: 68:db:4a:5b:11:a2:32:f4:80:1b:01:b3:0f:4b:88: 5e:98:7b:6c:e1:07:93:4c:f7:0e:e9:e4:62:63:3b: 0a:be:cd:7c:d1:d1:51:23:4e:27:d2:f6:6f:7d:31: bb:04:b9:cc:b1:9e:87:75:41:9d:77:e3:2f:c6:69: 4a:2b:0b:cb:b4:4a:75:08:13:af:03:9b:8a:cc:2d: b3:a8:9d:7f:8a:10:86:c4:f2:13:80:c0:ff:c0:0c: 92:73:c3:0d:0b:d0:e9:17:84:d7:57:88:a2:d7:00: 21:dc:e5:b1:60:b7:54:fb:2f:c5:49:a3:76:d9:d5: 37:d4:1b:07:4e:06:5c:a2:f2:2f:e0:44:f4:6b:8c: ab:05:5c:58:f6:f7:f0:e3:82:75:c2:14:bb:34:68: 94:6e:a1:d8:80:11:c5:28:16:40:b9:e4:e8:ae:b3: ce:8f:58:c2:d2:df:9e:ad:7d:a6:0a:d3:ee:15:e6: 15:e7:c3:f0:b9:e6:10:32:cd:b5:a6:93:18:4f:62: 1a:f6:e9:02:75:e2:27:1e:18:cb:82:bf:d6:03:27: 9a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7E:90:66:BA:57:63:41:61:36:A2:D4:9A:0E:3F:83:35:1A:34:1E X509v3 Authority Key Identifier: keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:38:e3:14:e3:fe:3e:52:4d:06:1b:a0:0f:08:14:b6:61:ee: 40:7c:88:a6:7f:6a:02:44:dd:02:81:5b:fa:1d:01:35:89:d5: f3:05:2e:25:0f:9f:15:31:0e:9f:2b:50:54:bc:61:ba:f1:9a: d4:c2:fb:f7:09:35:82:5a:db:6f:1b:11:80:2a:ce:44:eb:41: 53:19:78:5f:55:41:7d:a7:d0:58:fd:c5:b8:31:05:45:8d:68: e0:0f:e7:0a:c3:50:51:19:1c:6a:3f:66:a3:cd:4f:b0:b8:c5: ff:89:aa:b3:40:8b:2e:ca:9c:68:5e:8f:60:d2:4d:24:f3:0b: b6:bb:3f:d1:4b:2a:36:6a:c6:9c:e6:7a:09:03:c0:7a:5d:32: a9:b1:da:73:15:0c:eb:21:b3:90:02:ba:95:62:22:30:94:fa: 1c:ec:b3:ba:98:f3:b8:cb:8f:67:a0:29:f3:bd:66:c0:07:0c: ee:47:02:12:8e:01:13:18:94:fc:22:59:ae:6d:6c:59:11:57: 6b:6a:1f:fd:00:32:fc:d6:b0:33:46:44:28:6c:ce:ab:50:f1: c9:3f:21:74:4f:50:82:e6:f2:80:b5:52:b7:bc:60:fc:ed:c0: 44:58:b1:36:b9:b2:b0:35:c6:e2:32:6a:ec:ed:42:ac:5f:76: 73:47:9c:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EaQZz41PmYt5n9mcVFAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NjQ2NjdjMzRhN2RiYjAyZjA1MzBiY2U0ODJkMTFhZDQy NDg3YmQwHhcNMjUxMjIxMDQwMTE4WhcNMjUxMjIyMDQwMTE4WjAzMTEwLwYDVQQD EyhkNTdlOTA2NmJhNTc2MzQxNjEzNmEyZDQ5YTBlM2Y4MzM1MWEzNDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDsz+wWRGCMna+pKWH9HvqP+bj8N jtF9H7clgt7ywZZaGIR2P8hTZRH/Cf9o20pbEaIy9IAbAbMPS4hemHts4QeTTPcO 6eRiYzsKvs180dFRI04n0vZvfTG7BLnMsZ6HdUGdd+MvxmlKKwvLtEp1CBOvA5uK zC2zqJ1/ihCGxPITgMD/wAySc8MNC9DpF4TXV4ii1wAh3OWxYLdU+y/FSaN22dU3 1BsHTgZcovIv4ET0a4yrBVxY9vfw44J1whS7NGiUbqHYgBHFKBZAueTorrPOj1jC 0t+erX2mCtPuFeYV58PwueYQMs21ppMYT2Ia9ukCdeInHhjLgr/WAyeaHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNV+kGa6V2NBYTai1JoOP4M1GjQeMB8GA1UdIwQY MBaAFNRkZnw0p9uwLwUwvOSC0RrUJIe9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iZjQ3OTMtMGM4NC00MjJjLTliOGUt MjYwZGU2Y2JmNDU2LzEvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iZjQ3OTMtMGM4NC00MjJjLTliOGUtMjYwZGU2Y2JmNDU2 LzEvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDjjFOP+ PlJNBhugDwgUtmHuQHyIpn9qAkTdAoFb+h0BNYnV8wUuJQ+fFTEOnytQVLxhuvGa 1ML79wk1glrbbxsRgCrOROtBUxl4X1VBfafQWP3FuDEFRY1o4A/nCsNQURkcaj9m o81PsLjF/4mqs0CLLsqcaF6PYNJNJPMLtrs/0UsqNmrGnOZ6CQPAel0yqbHacxUM 6yGzkAK6lWIiMJT6HOyzupjzuMuPZ6Ap871mwAcM7kcCEo4BExiU/CJZrm1sWRFX a2of/QAy/NawM0ZEKGzOq1DxyT8hdE9QgubygLVSt7xg/O3ARFixNrmysDXG4jJq 7O1CrF92c0ecDQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:04:36 2025 by rpki-client