This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft File: gRAUn9EhMLPNzzWGKw3NuYqUcck.mft (raw, json) Hash identifier: Q+7SiuAFG6PmxI1qyRWzH+tmi5UTx78BpG5wsFI0BWc= Subject key identifier: 17:0B:48:97:DA:CE:6C:0B:CC:35:1D:E1:BA:E2:21:96:15:38:F9:C1 Authority key identifier: 81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9 Certificate issuer: /CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9 Certificate serial: 019B3B6B8B1FEEAA2F0EB87029879A7C0676 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft Manifest number: 11C6 Signing time: Sat 20 Dec 2025 11:01:02 +0000 Manifest this update: Sat 20 Dec 2025 11:01:02 +0000 Manifest next update: Sun 21 Dec 2025 11:01:02 +0000 Files and hashes: 1: 806ngxQFbLg-MFXB9RB492466i0.roa (hash: p/nhUvWIiglPDhL2yjGq+wAsIWcIw+TsOyuSheiCKGg=) 2: gRAUn9EhMLPNzzWGKw3NuYqUcck.crl (hash: AwwXYpTzTI6frD1UL/YhTya0MN8jV87JvSwwfLleWZE=) 3: h7WrxxlFxq_jYFk35jmIYb3f00s.roa (hash: h2rZQ/4NrSDJTIeZUF9nM2gyqifu2Mb4/5cQKdqqscg=) 4: y1PeU9JRt-8zy7fAHdTs76jVsHc.roa (hash: 0p/JFK5m9p7bozQ4pnJznyoRdt6D50XJVcxIdNoOA38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:8b:1f:ee:aa:2f:0e:b8:70:29:87:9a:7c:06:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9 Validity Not Before: Dec 20 11:01:02 2025 GMT Not After : Dec 21 11:01:02 2025 GMT Subject: CN=170b4897dace6c0bcc351de1bae221961538f9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c9:a0:10:bd:be:d0:88:ee:16:6b:29:fb:b8: f9:75:11:ce:d9:e0:37:26:c6:c3:9a:57:bc:1d:ad: e4:87:eb:cf:49:06:b4:05:2f:25:a8:f8:8d:ba:e5: 63:70:cc:0c:0f:cf:48:b1:2b:6d:cf:1f:4e:35:bb: c3:08:13:6f:0e:18:6b:6a:68:b5:10:3e:c6:e6:65: be:29:9b:bf:25:0d:f2:91:68:48:79:23:19:63:77: 32:a3:1c:ef:0e:25:41:52:76:f7:5a:21:4a:3f:12: 9c:91:bf:e4:9a:32:cc:1d:15:c0:ee:ba:51:63:f4: 20:40:1a:0d:17:17:34:ed:88:3b:fe:77:5c:34:f1: ae:5a:65:3c:ad:7c:80:de:51:d2:b3:a6:d0:a3:e3: 3a:06:56:19:ff:12:60:92:9c:43:ca:2a:a4:4e:5c: 26:45:1e:71:f9:74:ce:bf:60:06:4a:b4:6c:87:1e: 10:6f:99:0b:e6:86:d3:a6:af:3a:99:3f:bf:05:c4: 36:de:ae:35:e9:60:b1:5f:9e:82:3e:27:02:e0:f0: 98:75:31:14:d6:c9:89:5a:57:ca:0f:fc:5d:6d:2c: 92:19:e1:f6:a2:e8:23:2d:73:17:77:1f:0c:dd:5f: 4e:ac:97:8b:47:ac:61:06:78:1c:3d:0c:4e:ea:78: 91:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0B:48:97:DA:CE:6C:0B:CC:35:1D:E1:BA:E2:21:96:15:38:F9:C1 X509v3 Authority Key Identifier: keyid:81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:77:f1:de:ed:da:80:53:08:ba:40:33:d6:b2:67:25:73:ee: c8:1b:67:62:bd:c3:2a:e5:d8:9e:54:4e:14:1f:8a:49:8d:e0: 61:64:b1:b8:a1:1c:f8:6b:02:32:2a:99:7a:e6:b3:68:ed:c6: 5d:5f:13:62:26:73:88:a9:f6:1c:0f:f5:76:18:88:f7:45:ac: 26:cf:12:54:bb:b3:9c:2f:67:15:ab:4d:a7:11:dd:b5:b6:37: be:9b:74:1b:ad:16:f1:7f:2c:c3:35:02:01:19:48:60:3f:19: 3c:70:46:d7:ef:9f:aa:b3:d7:51:a9:e7:01:9a:77:53:7b:9d: e3:45:e3:cb:f5:45:8a:6e:09:36:56:5c:04:04:a4:94:a1:a2: 5d:e4:3b:e6:62:de:e1:c0:32:85:f2:e2:66:e4:87:c2:77:40: fb:c5:a0:38:20:0d:ef:92:59:33:69:f1:e9:95:c4:04:7a:a2: e4:6f:86:c8:47:5b:63:76:c7:9a:70:8e:0a:4a:ec:8e:e3:b0: 7b:69:53:b1:25:e5:1c:d8:57:cd:97:8d:f0:4c:40:78:75:a9: 92:39:13:7f:d3:0a:98:b4:83:04:89:09:a1:1b:87:d2:6b:bc: ca:f7:f4:07:24:b9:fc:a3:55:73:bf:e2:4d:cd:d3:11:92:81: 6a:fe:81:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a4sf7qovDrhwKYeafAZ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMTAxNDlmZDEyMTMwYjNjZGNmMzU4NjJiMGRjZGI5OGE5 NDcxYzkwHhcNMjUxMjIwMTEwMTAyWhcNMjUxMjIxMTEwMTAyWjAzMTEwLwYDVQQD EygxNzBiNDg5N2RhY2U2YzBiY2MzNTFkZTFiYWUyMjE5NjE1MzhmOWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMmgEL2+0IjuFmsp+7j5dRHO2eA3 JsbDmle8Ha3kh+vPSQa0BS8lqPiNuuVjcMwMD89IsSttzx9ONbvDCBNvDhhrami1 ED7G5mW+KZu/JQ3ykWhIeSMZY3cyoxzvDiVBUnb3WiFKPxKckb/kmjLMHRXA7rpR Y/QgQBoNFxc07Yg7/ndcNPGuWmU8rXyA3lHSs6bQo+M6BlYZ/xJgkpxDyiqkTlwm RR5x+XTOv2AGSrRshx4Qb5kL5obTpq86mT+/BcQ23q416WCxX56CPicC4PCYdTEU 1smJWlfKD/xdbSySGeH2ougjLXMXdx8M3V9OrJeLR6xhBngcPQxO6niR8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcLSJfazmwLzDUd4briIZYVOPnBMB8GA1UdIwQY MBaAFIEQFJ/RITCzzc81hisNzbmKlHHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1JBVW45RWhNTFBOenpXR0t3M051WXFVY2NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80OGRiMTAtM2JhOC00ZTgwLWIzZGMt YWIzMWVhY2JmZmNhLzEvZ1JBVW45RWhNTFBOenpXR0t3M051WXFVY2NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80OGRiMTAtM2JhOC00ZTgwLWIzZGMtYWIzMWVhY2JmZmNh LzEvZ1JBVW45RWhNTFBOenpXR0t3M051WXFVY2NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3fx3u3a gFMIukAz1rJnJXPuyBtnYr3DKuXYnlROFB+KSY3gYWSxuKEc+GsCMiqZeuazaO3G XV8TYiZziKn2HA/1dhiI90WsJs8SVLuznC9nFatNpxHdtbY3vpt0G60W8X8swzUC ARlIYD8ZPHBG1++fqrPXUannAZp3U3ud40Xjy/VFim4JNlZcBASklKGiXeQ75mLe 4cAyhfLiZuSHwndA+8WgOCAN75JZM2nx6ZXEBHqi5G+GyEdbY3bHmnCOCkrsjuOw e2lTsSXlHNhXzZeN8ExAeHWpkjkTf9MKmLSDBIkJoRuH0mu8yvf0ByS5/KNVc7/i Tc3TEZKBav6B2g== -----END CERTIFICATE-----Generated at Sat Dec 20 18:04:48 2025 by rpki-client