This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft File: gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft (raw, json) Hash identifier: lwB0W33Iy6b8Y4eriKarHaxhRUq1Xt8GDJPdR5INekg= Subject key identifier: 4D:0A:ED:6D:4A:6D:D7:31:1B:5B:9D:55:76:E3:26:A1:37:A0:C1:AB Authority key identifier: 80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC Certificate issuer: /CN=80792bdcb621cbf21c0456333b843ca32c131afc Certificate serial: 019B52615927A5954DDEAA5E54686538E768 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft Manifest number: 1209 Signing time: Wed 24 Dec 2025 22:01:09 +0000 Manifest this update: Wed 24 Dec 2025 22:01:09 +0000 Manifest next update: Thu 25 Dec 2025 22:01:09 +0000 Files and hashes: 1: gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl (hash: whsG+5NZEBjuREd+HHukVcOoOHNaeA4vivZfuQ7Lx7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 22:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:59:27:a5:95:4d:de:aa:5e:54:68:65:38:e7:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80792bdcb621cbf21c0456333b843ca32c131afc Validity Not Before: Dec 24 22:01:09 2025 GMT Not After : Dec 25 22:01:09 2025 GMT Subject: CN=4d0aed6d4a6dd7311b5b9d5576e326a137a0c1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8f:db:62:90:9f:21:61:68:b6:ef:1a:d2:a9: cc:36:00:61:99:5d:65:ba:33:11:1b:93:2e:f9:c5: 7c:ab:d5:b3:9f:04:ca:ff:8c:be:c2:68:2b:8d:9d: b5:76:57:55:03:b1:00:c1:47:4d:c5:9d:9f:0d:a9: bb:58:14:f2:97:b6:d8:60:a9:3b:fc:63:90:7b:51: 4b:5e:b6:0b:67:94:5b:dc:6d:c2:f9:b9:6e:40:f4: 37:00:d6:dc:ce:60:56:57:d7:52:09:ac:f2:e8:46: 34:45:60:f4:64:cc:32:78:04:44:53:77:48:df:6c: bc:9a:fb:64:df:32:cf:f4:9c:d7:33:ed:f4:c7:b8: 1d:02:37:23:68:3c:a6:f1:c5:41:88:27:26:93:06: 67:f1:f5:35:26:bf:46:c3:10:02:c4:02:ae:59:22: 87:c5:44:cf:c9:1e:8d:1c:9f:81:3c:03:ce:b1:de: dc:21:0e:8c:41:e5:27:bd:9a:50:52:d0:63:b1:cc: 9f:e4:a3:f6:2f:81:0a:14:75:a7:1e:72:3d:2e:15: f9:65:15:bb:c2:99:56:a6:5c:62:56:75:7e:92:47: a1:cc:b6:aa:60:81:d5:32:09:4a:3d:69:00:ca:ae: b5:44:13:b8:4e:10:f7:ec:c3:3a:04:ff:fd:f9:f9: c8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0A:ED:6D:4A:6D:D7:31:1B:5B:9D:55:76:E3:26:A1:37:A0:C1:AB X509v3 Authority Key Identifier: keyid:80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:84:c0:d8:c1:7f:26:c3:15:9f:dc:16:60:ca:87:9c:33:55: 6e:39:b5:2b:cf:50:87:19:2e:72:8b:0c:bb:cb:c4:fd:64:2a: 6d:a5:ef:69:27:79:1b:bb:47:21:8a:3f:13:cc:32:33:dd:b8: ad:fd:3a:58:6a:69:39:9c:55:81:c7:ea:e2:cb:14:36:9a:86: 1b:55:a4:82:52:4f:ae:e3:1f:e6:82:05:49:80:38:d7:fc:b2: 8e:23:a3:28:d0:d6:e5:96:93:03:ec:ac:d0:22:8f:42:83:5b: aa:17:ed:d8:7b:57:86:b9:35:0f:d5:3a:6b:25:28:0f:65:c4: fa:97:82:d6:c3:2c:d8:af:d6:02:73:4d:65:95:6e:ad:d2:42: ec:e6:41:15:be:98:34:df:7d:1c:f9:b6:a9:15:9a:6e:c9:c4: c8:55:7c:71:df:51:a1:5b:68:51:16:b1:c9:1b:28:71:2e:c0: 25:39:d7:b2:50:8d:42:de:52:36:90:74:90:46:e7:db:99:2a: f1:d4:09:8c:01:63:46:5d:7f:c0:f3:f3:d8:9e:58:f6:c0:f0: c5:de:a9:ab:b7:1b:db:d9:8f:c8:f6:b4:de:bd:d2:8e:a0:dc: 8b:30:b7:ef:70:cc:a4:bc:c5:f6:ed:c9:53:1c:a9:6d:fb:89: ba:af:cc:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYVknpZVN3qpeVGhlOOdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNzkyYmRjYjYyMWNiZjIxYzA0NTYzMzNiODQzY2EzMmMx MzFhZmMwHhcNMjUxMjI0MjIwMTA5WhcNMjUxMjI1MjIwMTA5WjAzMTEwLwYDVQQD Eyg0ZDBhZWQ2ZDRhNmRkNzMxMWI1YjlkNTU3NmUzMjZhMTM3YTBjMWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y/bYpCfIWFotu8a0qnMNgBhmV1l ujMRG5Mu+cV8q9WznwTK/4y+wmgrjZ21dldVA7EAwUdNxZ2fDam7WBTyl7bYYKk7 /GOQe1FLXrYLZ5Rb3G3C+bluQPQ3ANbczmBWV9dSCazy6EY0RWD0ZMwyeAREU3dI 32y8mvtk3zLP9JzXM+30x7gdAjcjaDym8cVBiCcmkwZn8fU1Jr9GwxACxAKuWSKH xUTPyR6NHJ+BPAPOsd7cIQ6MQeUnvZpQUtBjscyf5KP2L4EKFHWnHnI9LhX5ZRW7 wplWplxiVnV+kkehzLaqYIHVMglKPWkAyq61RBO4ThD37MM6BP/9+fnIGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0K7W1KbdcxG1udVXbjJqE3oMGrMB8GA1UdIwQY MBaAFIB5K9y2IcvyHARWMzuEPKMsExr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0hrcjNMWWh5X0ljQkZZek80UThveXdUR3Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9jNDhlMDItNDk4Mi00NGE1LWExMjEt N2RhOWU4OGQ2NWI5LzEvZ0hrcjNMWWh5X0ljQkZZek80UThveXdUR3Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9jNDhlMDItNDk4Mi00NGE1LWExMjEtN2RhOWU4OGQ2NWI5 LzEvZ0hrcjNMWWh5X0ljQkZZek80UThveXdUR3Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsoTA2MF/ JsMVn9wWYMqHnDNVbjm1K89QhxkucosMu8vE/WQqbaXvaSd5G7tHIYo/E8wyM924 rf06WGppOZxVgcfq4ssUNpqGG1WkglJPruMf5oIFSYA41/yyjiOjKNDW5ZaTA+ys 0CKPQoNbqhft2HtXhrk1D9U6ayUoD2XE+peC1sMs2K/WAnNNZZVurdJC7OZBFb6Y NN99HPm2qRWabsnEyFV8cd9RoVtoURaxyRsocS7AJTnXslCNQt5SNpB0kEbn25kq 8dQJjAFjRl1/wPPz2J5Y9sDwxd6pq7cb29mPyPa03r3SjqDcizC373DMpLzF9u3J UxypbfuJuq/MpA== -----END CERTIFICATE-----Generated at Thu Dec 25 05:19:33 2025 by rpki-client