This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json) Hash identifier: YraCRiTPptLkW5nETUHLTsZV9HSRVNos1mxZH8fP3uk= Subject key identifier: 8D:93:C0:29:0B:47:99:1E:E4:1D:F6:66:24:04:A1:83:31:D8:9A:33 Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd Certificate serial: 019B65B0A02D5010A18673DF80094F7B5806 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft Manifest number: 0A88 Signing time: Sun 28 Dec 2025 16:00:32 +0000 Manifest this update: Sun 28 Dec 2025 16:00:32 +0000 Manifest next update: Mon 29 Dec 2025 16:00:32 +0000 Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: L+VI+EP79ZgSo0d8sK2f99GzjKFL8MRcpUl1OJGK8ZM=) 2: ngLzTXL9yL8qZxP4JODs6i0oJzI.roa (hash: D6+JXEaHb1tO3mpKT7yT9VZcfkQ3PmJxwgv/yQik0ys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:b0:a0:2d:50:10:a1:86:73:df:80:09:4f:7b:58:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd Validity Not Before: Dec 28 16:00:32 2025 GMT Not After : Dec 29 16:00:32 2025 GMT Subject: CN=8d93c0290b47991ee41df6662404a18331d89a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0c:1d:23:3f:0c:4b:38:3d:c9:7c:47:06:9e: 31:0e:1d:ca:dc:7f:2c:45:98:ed:69:2c:92:49:a0: 9b:cb:d2:57:4f:9a:03:3e:3e:78:26:27:5d:f7:98: 3d:35:37:a7:94:13:e9:58:e7:f7:eb:c0:ea:13:ff: 15:b8:6b:b5:bd:88:fd:b9:fa:78:dd:4b:5e:12:23: 38:c6:b7:c6:13:08:b3:28:13:e4:51:bf:74:87:cd: ae:11:5f:7e:f8:08:e7:37:23:48:c4:0c:78:ec:fa: 3a:7f:f8:3c:60:61:fa:09:33:60:3f:82:c8:96:a9: 25:12:a0:08:bb:42:18:9f:6b:6a:8c:db:53:c8:00: 60:43:ca:19:90:ab:fa:a8:63:f1:38:2e:d2:ec:22: cd:c4:8b:7f:41:d5:d0:7b:2d:06:b7:95:a8:e3:43: 82:fd:33:91:77:7e:ec:41:6c:2c:49:37:1b:04:c6: cc:80:95:57:d9:0e:79:c2:1a:d4:14:8a:d1:97:34: 30:7f:be:e8:13:50:8c:04:90:d4:a3:53:e1:31:5e: 6c:0e:07:79:12:73:72:d0:d4:7a:45:b7:66:1a:9c: 8f:fa:f1:e1:c2:c1:b8:2b:91:6c:4d:87:01:70:73: 10:d3:dd:80:11:67:76:f5:8a:4e:6e:8e:cb:7d:00: c3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:93:C0:29:0B:47:99:1E:E4:1D:F6:66:24:04:A1:83:31:D8:9A:33 X509v3 Authority Key Identifier: keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:1e:d5:cb:f9:8d:6a:c5:82:32:c2:20:7e:20:4e:bc:4e:42: 55:a0:33:79:b8:6b:e3:fc:bc:64:e9:7f:fd:af:12:9b:85:a9: 2c:08:32:00:9a:60:4f:3f:2f:5c:61:81:2b:66:73:64:3a:a9: a6:68:65:6b:f0:b7:81:fc:b6:cf:65:a9:9d:8d:b7:f7:73:7f: 27:89:56:c1:68:29:1b:c5:30:d5:b0:ed:2b:42:c8:e7:d6:26: 33:5f:65:63:36:56:a8:35:31:6a:df:b0:49:df:a8:e5:0a:1b: ec:99:2a:7c:d4:96:74:0e:d7:f9:7e:03:59:4d:1a:89:3e:2c: a0:3f:eb:31:6b:23:e4:88:0d:98:7a:83:e1:1c:9e:16:b8:de: de:08:2c:fc:07:26:85:02:4a:5a:29:1a:e8:ea:aa:25:04:ec: a8:b1:9a:4d:01:96:a5:72:29:02:3f:62:dd:30:8a:aa:39:4d: 50:0a:ad:66:2d:07:80:a1:6b:dc:8c:c1:4e:cd:02:33:8f:c8: 30:ae:ab:9b:21:a1:06:ae:b4:a1:c1:c2:17:4c:2b:9f:5f:cc: 3a:8f:1d:0d:5e:cd:48:f7:1b:e3:ae:d0:0b:70:f2:52:bd:e3: 16:1d:10:bf:ee:22:01:91:de:bf:94:61:62:e2:bf:2c:60:f5: b9:7d:16:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlsKAtUBChhnPfgAlPe1gGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NjQ2NjdjMzRhN2RiYjAyZjA1MzBiY2U0ODJkMTFhZDQy NDg3YmQwHhcNMjUxMjI4MTYwMDMyWhcNMjUxMjI5MTYwMDMyWjAzMTEwLwYDVQQD Eyg4ZDkzYzAyOTBiNDc5OTFlZTQxZGY2NjYyNDA0YTE4MzMxZDg5YTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQwdIz8MSzg9yXxHBp4xDh3K3H8s RZjtaSySSaCby9JXT5oDPj54Jidd95g9NTenlBPpWOf368DqE/8VuGu1vYj9ufp4 3UteEiM4xrfGEwizKBPkUb90h82uEV9++AjnNyNIxAx47Po6f/g8YGH6CTNgP4LI lqklEqAIu0IYn2tqjNtTyABgQ8oZkKv6qGPxOC7S7CLNxIt/QdXQey0Gt5Wo40OC /TORd37sQWwsSTcbBMbMgJVX2Q55whrUFIrRlzQwf77oE1CMBJDUo1PhMV5sDgd5 EnNy0NR6RbdmGpyP+vHhwsG4K5FsTYcBcHMQ092AEWd29YpObo7LfQDDOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2TwCkLR5ke5B32ZiQEoYMx2JozMB8GA1UdIwQY MBaAFNRkZnw0p9uwLwUwvOSC0RrUJIe9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iZjQ3OTMtMGM4NC00MjJjLTliOGUt MjYwZGU2Y2JmNDU2LzEvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iZjQ3OTMtMGM4NC00MjJjLTliOGUtMjYwZGU2Y2JmNDU2 LzEvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANx7Vy/mN asWCMsIgfiBOvE5CVaAzebhr4/y8ZOl//a8Sm4WpLAgyAJpgTz8vXGGBK2ZzZDqp pmhla/C3gfy2z2WpnY2393N/J4lWwWgpG8Uw1bDtK0LI59YmM19lYzZWqDUxat+w Sd+o5Qob7JkqfNSWdA7X+X4DWU0aiT4soD/rMWsj5IgNmHqD4RyeFrje3ggs/Acm hQJKWika6OqqJQTsqLGaTQGWpXIpAj9i3TCKqjlNUAqtZi0HgKFr3IzBTs0CM4/I MK6rmyGhBq60ocHCF0wrn1/MOo8dDV7NSPcb467QC3DyUr3jFh0Qv+4iAZHev5Rh YuK/LGD1uX0WrA== -----END CERTIFICATE-----Generated at Sun Dec 28 20:13:31 2025 by rpki-client