This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft File: Grj4--pJuvWfzsIuSKn-IVfYZIM.mft (raw, json) Hash identifier: A7KOQEi7rxwn/g3dhQOUEBSqZus8jbcspxxmz/YjOu8= Subject key identifier: 72:35:D4:62:BE:EF:83:37:58:AA:7E:D3:71:F9:75:4A:1B:72:DC:17 Authority key identifier: 1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83 Certificate issuer: /CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483 Certificate serial: 019B43CA1A4E2A2CF8E86BFE19565E0061E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft Manifest number: 0742 Signing time: Mon 22 Dec 2025 02:01:16 +0000 Manifest this update: Mon 22 Dec 2025 02:01:16 +0000 Manifest next update: Tue 23 Dec 2025 02:01:16 +0000 Files and hashes: 1: EXfBcBM7uA8bBSr72NlYucOvfhM.roa (hash: oLqWHUAW+al/Mt/NTfMz7OcTXKmFCSYo9Jv88gAzIcg=) 2: Grj4--pJuvWfzsIuSKn-IVfYZIM.crl (hash: H/CB9QkODTIlNsaXCrmf3hl6x/0K5Vzuq6FkW19cNek=) 3: WZpaBRHbJvV3APgauuka7IhrTjY.roa (hash: N7PJ6tT8+NoaNwurVN1hCRFlu22DLnLYMpbiTBoA0mg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:ca:1a:4e:2a:2c:f8:e8:6b:fe:19:56:5e:00:61:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483 Validity Not Before: Dec 22 02:01:16 2025 GMT Not After : Dec 23 02:01:16 2025 GMT Subject: CN=7235d462beef833758aa7ed371f9754a1b72dc17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cf:30:9c:e3:08:4e:60:b4:81:74:35:a9:49: 5d:64:a2:d8:f3:8e:2d:4f:10:da:02:95:01:1b:9c: 53:9b:b5:cd:d1:1c:c5:2f:36:52:8d:ae:81:68:37: 1c:41:76:13:c3:10:4b:26:13:b0:0f:40:7a:55:16: 2b:30:2e:66:f4:2d:28:98:6c:7a:23:5b:12:4d:ce: 7d:f9:34:10:7a:31:3c:03:f1:b5:ca:92:25:d7:31: 2a:d6:3c:6e:61:b6:76:3c:31:a4:f1:cc:ae:79:42: b2:e5:cd:cb:be:7b:26:5d:ec:d1:6b:04:3c:50:2a: 92:33:ff:03:64:82:c1:14:38:57:eb:24:7c:97:1f: c7:8b:5e:77:cf:c3:e0:62:0d:66:87:e7:33:9c:cc: e9:9d:20:5b:13:72:b7:72:51:27:ef:3d:62:85:8a: ac:66:9c:3f:03:2c:a0:56:29:71:83:e9:81:bf:2f: 2a:0e:79:a5:f1:13:6c:e8:78:f9:0d:09:06:e4:91: a2:d3:37:48:ec:63:3f:2e:d5:3d:02:b1:8d:2d:f6: 33:00:79:ad:e3:dc:2f:45:f0:1e:45:3c:39:92:90: 09:ef:19:3a:5f:29:a9:17:37:1e:de:1f:e2:7b:a6: c8:28:7c:e8:17:23:21:d5:66:04:ce:51:1b:0e:78: 5e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:35:D4:62:BE:EF:83:37:58:AA:7E:D3:71:F9:75:4A:1B:72:DC:17 X509v3 Authority Key Identifier: keyid:1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d0:e6:1b:74:e7:2d:6b:06:b1:4c:de:a9:54:1d:e3:80:1f: 31:36:f5:ef:f2:c6:a4:d6:a3:33:9e:01:4d:54:8a:a4:f3:23: 66:b3:63:31:ca:97:7b:88:47:db:5f:b7:98:c6:f9:ca:8a:a9: cf:34:70:2e:4b:4e:88:ae:01:78:a6:b7:c7:ae:49:01:f8:15: 76:f2:7e:af:2f:a4:df:88:9e:ba:35:ca:b2:b3:06:24:7e:73: f1:44:e5:ba:8f:a7:25:40:87:d8:19:7f:eb:1f:47:45:aa:93: ff:a8:b4:25:e0:bb:37:f0:2a:d1:00:1d:67:01:4a:21:9f:64: 81:ca:f9:2e:23:58:25:7a:31:e9:a6:ab:9f:a0:2f:1e:c0:c3: af:31:58:3c:a8:f8:2b:4c:f9:43:24:3d:93:9b:bc:e5:61:78: 5c:78:7d:38:91:bb:1d:ca:bb:ce:6a:dd:f9:13:f3:c6:32:d3: ff:03:d8:22:63:2a:58:2c:5a:31:7e:93:07:90:ce:cb:4a:5d: 51:54:cd:83:20:71:12:88:02:0b:e3:1e:fc:78:49:3d:c6:97: 07:87:df:da:f7:6d:4a:00:47:86:c6:95:b7:51:4d:ce:78:38: a5:a4:b9:5e:e2:3c:46:2c:46:df:6d:81:74:35:03:3a:64:f2: 69:24:bd:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyhpOKiz46Gv+GVZeAGHkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYjhmOGZiZWE0OWJhZjU5ZmNlYzIyZTQ4YTlmZTIxNTdk ODY0ODMwHhcNMjUxMjIyMDIwMTE2WhcNMjUxMjIzMDIwMTE2WjAzMTEwLwYDVQQD Eyg3MjM1ZDQ2MmJlZWY4MzM3NThhYTdlZDM3MWY5NzU0YTFiNzJkYzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM8wnOMITmC0gXQ1qUldZKLY844t TxDaApUBG5xTm7XN0RzFLzZSja6BaDccQXYTwxBLJhOwD0B6VRYrMC5m9C0omGx6 I1sSTc59+TQQejE8A/G1ypIl1zEq1jxuYbZ2PDGk8cyueUKy5c3LvnsmXezRawQ8 UCqSM/8DZILBFDhX6yR8lx/Hi153z8PgYg1mh+cznMzpnSBbE3K3clEn7z1ihYqs Zpw/AyygVilxg+mBvy8qDnml8RNs6Hj5DQkG5JGi0zdI7GM/LtU9ArGNLfYzAHmt 49wvRfAeRTw5kpAJ7xk6XympFzce3h/ie6bIKHzoFyMh1WYEzlEbDnheKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHI11GK+74M3WKp+03H5dUobctwXMB8GA1UdIwQY MBaAFBq4+PvqSbr1n87CLkip/iFX2GSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3JqNC0tcEp1dldmenNJdVNLbi1JVmZZWklNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lY2MxMDItYWQ3ZS00MTAxLWE3Mjct NTgwMThhMDMzMzBhLzEvR3JqNC0tcEp1dldmenNJdVNLbi1JVmZZWklNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lY2MxMDItYWQ3ZS00MTAxLWE3MjctNTgwMThhMDMzMzBh LzEvR3JqNC0tcEp1dldmenNJdVNLbi1JVmZZWklNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdDmG3Tn LWsGsUzeqVQd44AfMTb17/LGpNajM54BTVSKpPMjZrNjMcqXe4hH21+3mMb5yoqp zzRwLktOiK4BeKa3x65JAfgVdvJ+ry+k34ieujXKsrMGJH5z8UTluo+nJUCH2Bl/ 6x9HRaqT/6i0JeC7N/Aq0QAdZwFKIZ9kgcr5LiNYJXox6aarn6AvHsDDrzFYPKj4 K0z5QyQ9k5u85WF4XHh9OJG7Hcq7zmrd+RPzxjLT/wPYImMqWCxaMX6TB5DOy0pd UVTNgyBxEogCC+Me/HhJPcaXB4ff2vdtSgBHhsaVt1FNzng4paS5XuI8RixG322B dDUDOmTyaSS9lg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:47:28 2025 by rpki-client