This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft File: GJPt3vXPw41hPqqBd03jADSxnSI.mft (raw, json) Hash identifier: nnVYjf579NQo1AafL7qZS2B+dPSrORukqegOpeyiwi0= Subject key identifier: 73:01:BF:F3:7A:05:21:0F:53:06:10:0A:A8:17:22:59:9E:AF:1E:9D Authority key identifier: 18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22 Certificate issuer: /CN=1893eddef5cfc38d613eaa81774de30034b19d22 Certificate serial: 019B435C17EAC4A0DCB92B4867D50F0F2E2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft Manifest number: 0E4F Signing time: Mon 22 Dec 2025 00:01:07 +0000 Manifest this update: Mon 22 Dec 2025 00:01:07 +0000 Manifest next update: Tue 23 Dec 2025 00:01:07 +0000 Files and hashes: 1: 7fCLxFxs3uirSoBmBAB2IiaPCDE.roa (hash: coxqqIVz+Sd0ZSUD8QWyHK8rOUGIW44eWb9ORBY27qw=) 2: GJPt3vXPw41hPqqBd03jADSxnSI.crl (hash: MpPzu+SL/CJC3nF2INtE/8MApXfjhgbIEcrodWgPqao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 00:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:17:ea:c4:a0:dc:b9:2b:48:67:d5:0f:0f:2e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1893eddef5cfc38d613eaa81774de30034b19d22 Validity Not Before: Dec 22 00:01:07 2025 GMT Not After : Dec 23 00:01:07 2025 GMT Subject: CN=7301bff37a05210f5306100aa81722599eaf1e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:77:25:9b:aa:62:1b:f8:18:46:ad:43:9a: de:4c:18:86:ae:ad:ca:2a:d0:7b:a0:c7:7d:fa:5b: c5:cf:39:dc:eb:3d:9f:73:cd:7f:49:cb:69:30:be: 21:ba:62:67:3b:83:e4:f1:76:df:b9:2a:ad:35:99: 64:bc:6f:e4:8f:f2:b1:3c:83:f5:05:a7:c0:b7:3d: 0d:ce:a9:c7:ea:71:ed:40:bb:42:a7:68:86:6f:6f: 68:08:97:cd:ce:15:91:ea:0c:35:43:b8:6d:2b:8e: 13:cb:d3:15:21:27:7d:60:e7:d0:24:e2:b3:e4:af: ef:ce:56:71:21:2d:72:3a:50:2e:52:b8:e1:cc:78: 37:46:c4:0b:f2:ae:ed:ae:b1:4a:1a:98:d6:fd:7e: 9f:89:46:14:7e:af:09:47:4a:bf:67:51:22:4a:59: d9:41:36:2f:0e:a3:ba:99:99:55:cd:2d:c5:de:83: 4b:78:bd:58:9b:01:53:bb:51:11:9c:36:87:b3:6d: c0:ca:8b:b4:32:c2:da:10:54:11:bb:53:cc:87:96: a5:e6:00:f0:12:8b:85:c8:3a:ba:c8:ae:2a:fc:6c: b0:b5:d5:e4:20:15:61:ad:ab:2e:86:a9:23:96:b7: 51:6b:d4:f4:15:a3:43:38:a4:a6:63:d6:b4:87:fd: db:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:01:BF:F3:7A:05:21:0F:53:06:10:0A:A8:17:22:59:9E:AF:1E:9D X509v3 Authority Key Identifier: keyid:18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:2d:e3:69:4b:7c:0d:26:22:4c:4c:2a:66:de:00:f8:95:29: 48:22:87:6e:df:a8:0c:51:06:ff:1e:4d:48:d7:0f:01:0c:9a: 76:72:90:57:5a:85:44:42:7a:61:8b:b8:26:03:a0:a5:50:ae: a8:d5:a6:a9:84:b0:93:6c:48:ce:cb:c7:ae:ff:52:28:41:a3: d1:18:ac:30:93:e8:e5:9a:ad:43:74:5d:4a:78:f3:5d:21:47: b3:59:85:be:d2:76:c3:c1:25:6e:95:10:54:28:71:aa:65:14: ff:76:7e:ec:20:ac:18:f0:cd:4d:00:b4:16:36:48:a2:17:2a: 52:1f:88:c5:9c:a8:3b:b6:37:9b:f0:c2:d3:f3:8f:c5:0b:87: b2:be:a1:34:63:94:0c:f9:bf:b0:18:2c:1d:20:27:c0:f8:54: 78:18:62:07:84:98:66:d9:53:0e:cf:71:94:37:b4:5a:80:9b: ca:29:95:8a:6a:37:53:86:7e:8b:13:f2:7d:8d:a1:b7:29:92: 66:50:cd:f2:ec:80:37:a2:e0:55:df:d4:c3:f9:4a:c0:e8:3c: e0:cb:30:ce:52:10:f4:d4:7a:17:fd:8c:bb:41:1f:c6:11:01: b4:dc:27:03:26:0d:38:2f:72:01:55:95:8a:98:2d:ae:21:74: 75:5e:97:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXBfqxKDcuStIZ9UPDy4uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OTNlZGRlZjVjZmMzOGQ2MTNlYWE4MTc3NGRlMzAwMzRi MTlkMjIwHhcNMjUxMjIyMDAwMTA3WhcNMjUxMjIzMDAwMTA3WjAzMTEwLwYDVQQD Eyg3MzAxYmZmMzdhMDUyMTBmNTMwNjEwMGFhODE3MjI1OTllYWYxZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQZ3JZuqYhv4GEatQ5reTBiGrq3K KtB7oMd9+lvFzznc6z2fc81/SctpML4humJnO4Pk8XbfuSqtNZlkvG/kj/KxPIP1 BafAtz0NzqnH6nHtQLtCp2iGb29oCJfNzhWR6gw1Q7htK44Ty9MVISd9YOfQJOKz 5K/vzlZxIS1yOlAuUrjhzHg3RsQL8q7trrFKGpjW/X6fiUYUfq8JR0q/Z1EiSlnZ QTYvDqO6mZlVzS3F3oNLeL1YmwFTu1ERnDaHs23Ayou0MsLaEFQRu1PMh5al5gDw EouFyDq6yK4q/GywtdXkIBVhrasuhqkjlrdRa9T0FaNDOKSmY9a0h/3bDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMBv/N6BSEPUwYQCqgXIlmerx6dMB8GA1UdIwQY MBaAFBiT7d71z8ONYT6qgXdN4wA0sZ0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0pQdDN2WFB3NDFoUHFxQmQwM2pBRFN4blNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xM2Y4YzUtYWI3YS00ZjM3LWIyZDct OGI1MTc5MmM2NjYwLzEvR0pQdDN2WFB3NDFoUHFxQmQwM2pBRFN4blNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xM2Y4YzUtYWI3YS00ZjM3LWIyZDctOGI1MTc5MmM2NjYw LzEvR0pQdDN2WFB3NDFoUHFxQmQwM2pBRFN4blNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnS3jaUt8 DSYiTEwqZt4A+JUpSCKHbt+oDFEG/x5NSNcPAQyadnKQV1qFREJ6YYu4JgOgpVCu qNWmqYSwk2xIzsvHrv9SKEGj0RisMJPo5ZqtQ3RdSnjzXSFHs1mFvtJ2w8ElbpUQ VChxqmUU/3Z+7CCsGPDNTQC0FjZIohcqUh+IxZyoO7Y3m/DC0/OPxQuHsr6hNGOU DPm/sBgsHSAnwPhUeBhiB4SYZtlTDs9xlDe0WoCbyimVimo3U4Z+ixPyfY2htymS ZlDN8uyAN6LgVd/Uw/lKwOg84MswzlIQ9NR6F/2Mu0EfxhEBtNwnAyYNOC9yAVWV ipgtriF0dV6XqQ== -----END CERTIFICATE-----Generated at Mon Dec 22 09:33:33 2025 by rpki-client