This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft File: GTdDRntNpBxilek1EVMwlYa6I5k.mft (raw, json) Hash identifier: uvY9UlxxetdeTDCuqTT4Y3nly5gQ80k2IpzymnT4iWU= Subject key identifier: B0:D4:A6:DB:8D:34:0D:E0:24:D0:FB:42:3F:CE:8C:A3:F9:3C:FD:7F Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99 Certificate issuer: /CN=193743467b4da41c6295e9351153309586ba2399 Certificate serial: 019B3EDA806CF391B5007C5CE9CD146B1E9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft Manifest number: 140A Signing time: Sun 21 Dec 2025 03:01:05 +0000 Manifest this update: Sun 21 Dec 2025 03:01:05 +0000 Manifest next update: Mon 22 Dec 2025 03:01:05 +0000 Files and hashes: 1: 1TdnBIQpLOCBWH2mt28aivouF4I.roa (hash: OXerkvpTMgtDn41YlP30T5MtsanNBIBwFIzBvbUKvGE=) 2: 4wV3tNw8L-G2g-REyKg7rTv19xc.roa (hash: mlDNB6DLTguCsOh+3JJiKoaNz1XvyyZU+vhtwaeg1hU=) 3: GTdDRntNpBxilek1EVMwlYa6I5k.crl (hash: 8YLU1IO3ryjv7n8SkuAce4MlYOapu7VmNXHxK9fNUnU=) 4: K4x7WnCPM92IfHKWVCrULIlUaVA.roa (hash: KVnqPoeOrxHfk6WulHu6MwITd97JNsKLMzaXFdfZRTU=) 5: L0erWF8zE1RnGBSaNfbAKYl2kd8.roa (hash: /zy+SS2a9gbTjEnXkpsItTqQEn8dlA3GKuajYSpZLoU=) 6: bGl-O1VWsJiqIgDexKk7dKheHQQ.roa (hash: 6KFHpVYSoKMAphsv2/6O6zAXDRyPyfaziYVLYjZHZ0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:80:6c:f3:91:b5:00:7c:5c:e9:cd:14:6b:1e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=193743467b4da41c6295e9351153309586ba2399 Validity Not Before: Dec 21 03:01:05 2025 GMT Not After : Dec 22 03:01:05 2025 GMT Subject: CN=b0d4a6db8d340de024d0fb423fce8ca3f93cfd7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6a:97:e0:58:61:0f:6f:9a:5f:b5:40:0a:b7: 8a:4c:9e:f6:ce:1a:de:8a:b1:6a:89:d9:de:6f:28: 85:11:a6:2f:f3:0f:a6:c4:49:4e:47:93:7f:a6:3d: ca:44:7d:ed:87:e3:57:29:27:c1:6a:e6:6e:e5:c4: 17:17:92:c5:b0:80:04:4f:e9:cd:0f:ee:8a:8f:42: d0:8d:4e:23:69:c1:e8:3d:f2:a6:d5:e3:d3:15:4b: 6d:28:6d:13:71:bf:18:e1:17:3a:19:99:20:97:86: 33:35:c6:12:c8:d4:40:a5:e1:83:1e:28:5d:f7:29: 4a:48:c9:2d:d2:2c:b9:52:ac:ec:1b:11:7c:2b:1a: ef:8d:fd:bd:40:b0:4c:74:77:82:3c:b6:e5:08:7a: 44:ec:b4:84:3d:78:ef:ee:6d:06:9e:f8:c5:e5:45: b3:5a:1f:34:d0:1a:da:bd:5d:d8:04:fd:50:5c:44: c6:a4:c0:05:1b:12:55:ac:b5:33:9b:74:73:cc:38: 1d:b1:24:83:fa:72:6d:40:26:ca:51:65:93:11:fa: d6:84:7e:08:3c:5c:57:22:33:55:cc:b2:49:17:2f: b4:11:6f:97:6f:72:39:32:a0:9b:2b:4a:1c:d2:f0: 47:c2:37:5f:ef:03:ab:77:8e:23:f9:c6:78:14:87: 09:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D4:A6:DB:8D:34:0D:E0:24:D0:FB:42:3F:CE:8C:A3:F9:3C:FD:7F X509v3 Authority Key Identifier: keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:75:a1:94:61:ab:2e:cf:31:23:49:23:95:3b:34:8e:12:16: 54:fb:b8:e2:77:ea:92:7d:80:88:37:26:d1:6f:84:f7:69:78: 6d:84:a9:6f:4d:24:15:29:69:86:3f:7f:04:8b:61:2f:5a:3d: 4d:a8:ac:22:89:fe:3f:c2:3e:55:62:22:11:fc:55:b8:74:44: df:59:9e:f3:53:e7:82:90:20:aa:93:99:fe:cb:40:f2:1e:13: cb:b0:4c:b0:66:9d:d1:82:d4:ea:3f:10:f8:74:88:e0:dd:b5: ae:7a:9e:9a:d6:4d:a5:13:3e:31:e2:d6:24:e2:d2:96:45:98: f9:02:4c:00:98:5c:c2:43:fc:e4:de:1b:91:db:a9:23:55:51: 96:8f:fa:38:48:ab:b1:e1:4e:1f:13:90:3e:18:00:94:ac:7f: 9c:53:4b:4c:bf:23:74:fb:e5:a0:7a:2b:33:81:d7:0b:d0:ed: b2:f0:49:15:f8:fd:76:58:58:d6:12:17:a2:3d:53:68:cf:c3: e8:fe:97:33:64:19:96:c8:75:66:0e:23:3d:5e:d1:b7:2b:61: 00:26:22:01:0a:b1:e0:24:75:99:b8:58:5d:bf:58:e2:69:19: 95:e6:7b:b0:a7:82:f5:11:61:9f:42:37:5b:b5:f4:43:a0:79: f3:d0:df:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2oBs85G1AHxc6c0Uax6aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Mzc0MzQ2N2I0ZGE0MWM2Mjk1ZTkzNTExNTMzMDk1ODZi YTIzOTkwHhcNMjUxMjIxMDMwMTA1WhcNMjUxMjIyMDMwMTA1WjAzMTEwLwYDVQQD EyhiMGQ0YTZkYjhkMzQwZGUwMjRkMGZiNDIzZmNlOGNhM2Y5M2NmZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomqX4FhhD2+aX7VACreKTJ72zhre irFqidnebyiFEaYv8w+mxElOR5N/pj3KRH3th+NXKSfBauZu5cQXF5LFsIAET+nN D+6Kj0LQjU4jacHoPfKm1ePTFUttKG0Tcb8Y4Rc6GZkgl4YzNcYSyNRApeGDHihd 9ylKSMkt0iy5UqzsGxF8Kxrvjf29QLBMdHeCPLblCHpE7LSEPXjv7m0GnvjF5UWz Wh800BravV3YBP1QXETGpMAFGxJVrLUzm3RzzDgdsSSD+nJtQCbKUWWTEfrWhH4I PFxXIjNVzLJJFy+0EW+Xb3I5MqCbK0oc0vBHwjdf7wOrd44j+cZ4FIcJhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDUptuNNA3gJND7Qj/OjKP5PP1/MB8GA1UdIwQY MBaAFBk3Q0Z7TaQcYpXpNRFTMJWGuiOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1RkRFJudE5wQnhpbGVrMUVWTXdsWWE2STVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNjcwM2EtMTIyYi00MTE2LWIzMTct Y2E1ZmNjYmY3YThjLzEvR1RkRFJudE5wQnhpbGVrMUVWTXdsWWE2STVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zNjcwM2EtMTIyYi00MTE2LWIzMTctY2E1ZmNjYmY3YThj LzEvR1RkRFJudE5wQnhpbGVrMUVWTXdsWWE2STVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnWhlGGr Ls8xI0kjlTs0jhIWVPu44nfqkn2AiDcm0W+E92l4bYSpb00kFSlphj9/BIthL1o9 TaisIon+P8I+VWIiEfxVuHRE31me81PngpAgqpOZ/stA8h4Ty7BMsGad0YLU6j8Q +HSI4N21rnqemtZNpRM+MeLWJOLSlkWY+QJMAJhcwkP85N4bkdupI1VRlo/6OEir seFOHxOQPhgAlKx/nFNLTL8jdPvloHorM4HXC9DtsvBJFfj9dlhY1hIXoj1TaM/D 6P6XM2QZlsh1Zg4jPV7RtythACYiAQqx4CR1mbhYXb9Y4mkZleZ7sKeC9RFhn0I3 W7X0Q6B589Dffg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:11:30 2025 by rpki-client