This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft File: gHcJ57DvuhJwJcg-XTGUxxukKMM.mft (raw, json) Hash identifier: El/66qkXpQs5zYILeNho1IbYYpZEnZh6vG1Qx3k2ddA= Subject key identifier: 31:AA:68:6F:AD:5C:E1:E0:DA:F9:61:66:1E:2F:99:8B:A3:00:FD:56 Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3 Certificate issuer: /CN=807709e7b0efba127025c83e5d3194c71ba428c3 Certificate serial: 019B4324A84806E9E71FA9232F9A3311B19C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft Manifest number: 1793 Signing time: Sun 21 Dec 2025 23:00:34 +0000 Manifest this update: Sun 21 Dec 2025 23:00:34 +0000 Manifest next update: Mon 22 Dec 2025 23:00:34 +0000 Files and hashes: 1: DurIZqoPKpw9LYGIPBrHPFq3LHw.roa (hash: zhg8WLRUrYe0q7NH9Wz8ueiA39mg7KprcnCZzHNNbsw=) 2: PnB8IMDITEDpen2OPTOxZTtueZw.roa (hash: qeR+1XSa8d/i/SIsn+15UPdwoIkYRW0OqLmRrfqzRas=) 3: gHcJ57DvuhJwJcg-XTGUxxukKMM.crl (hash: ufjlahTh61PwcQHdBwZv3CBqLqZXvOstnq47QbpK1TQ=) 4: n307rGiwYsk1vOiGMRbS2fV0BSk.roa (hash: tlfldYKCmk1Ckto3uCUJi3f86MeyWZSU+wFP+RVK1Ew=) 5: vTNM4m6CbUwbrvUjHBwBVw0_vYs.roa (hash: 7BbpPre0ZtLQJ0mFYOMZGVaoQeJskvISu8hLB2sHUnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:a8:48:06:e9:e7:1f:a9:23:2f:9a:33:11:b1:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3 Validity Not Before: Dec 21 23:00:34 2025 GMT Not After : Dec 22 23:00:34 2025 GMT Subject: CN=31aa686fad5ce1e0daf961661e2f998ba300fd56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:c4:cc:ae:b3:8b:03:3b:ca:6b:c0:b4:36: 0c:9e:66:ec:a3:2a:6e:34:f3:13:d2:74:44:da:fc: 52:f3:52:54:ed:da:96:a3:e3:ba:ee:1d:8f:a7:d6: c1:68:8e:3c:57:de:c1:93:bf:7f:82:7f:a5:40:cb: 28:48:60:8e:81:1c:50:a4:9e:09:23:99:3d:41:0b: b6:f0:93:6b:87:82:97:80:2d:94:2e:c5:60:a8:d3: 68:3b:3b:e1:32:7e:00:f6:65:70:b7:7e:2d:77:5f: 58:27:ea:4e:89:3e:77:e2:ce:90:14:6e:4c:b1:e5: 9c:3a:7b:5a:5b:20:7d:bf:3d:fe:10:54:3c:94:32: 81:3a:fa:3f:c9:ac:8a:24:d6:d6:5c:5b:45:30:85: a2:e6:12:42:73:34:26:ab:de:3e:82:59:8c:1c:21: 89:9b:22:f0:14:23:41:23:e0:01:60:5d:30:b1:1c: 91:d8:32:1c:d8:cb:d9:22:53:a0:10:33:8f:b8:8a: 70:e5:3d:10:56:40:76:ad:c3:da:00:0f:c6:6c:b3: b5:f4:2e:d2:a1:7e:b5:a4:65:11:41:a9:c5:2f:b2: dd:4d:19:da:c8:b9:86:b4:f6:88:eb:5e:c8:a3:07: 48:28:3d:c3:2a:cc:82:59:5c:6f:44:0a:82:84:53: d3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AA:68:6F:AD:5C:E1:E0:DA:F9:61:66:1E:2F:99:8B:A3:00:FD:56 X509v3 Authority Key Identifier: keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:04:bf:f1:ca:eb:59:ee:9f:e2:4e:7e:d4:cb:a1:37:8b:42: f2:67:88:aa:2f:2f:e4:b7:9d:ff:86:be:63:aa:2b:20:e5:f4: c2:99:9d:7b:79:86:48:8f:20:51:16:00:08:ac:ad:16:48:f3: 6c:36:9b:24:17:5f:4f:0b:8a:2b:cf:61:c7:6c:b7:8d:a6:fb: ef:3f:ea:50:aa:82:15:a8:97:a5:cb:25:46:a3:e3:01:e7:4d: 55:85:5d:2b:d4:a4:c3:e2:43:de:eb:73:72:0f:ad:81:c9:e2: 3a:d3:e1:a0:87:a4:b3:e8:ec:18:fc:c6:b1:52:a3:6a:0b:22: f7:5c:1a:54:27:1c:f2:7e:9e:7f:83:b2:41:d0:47:fd:38:69: fa:f0:92:3c:03:cb:7a:13:fc:0a:ca:bc:01:19:f6:ea:1c:08: f8:ba:1c:55:a6:1b:49:b4:01:fe:ed:72:ef:eb:96:a6:dd:60: 60:1d:09:6e:34:25:63:9d:b3:12:16:46:ed:0a:ff:33:ff:a9: 22:05:ef:12:b6:56:90:51:b8:17:ea:80:a9:ce:d0:32:ad:ec: e9:c6:c8:15:a0:2a:b2:58:14:f8:f7:35:d6:f6:e0:a1:c9:52: e7:14:93:98:9a:5d:4e:41:4c:58:bc:65:29:3f:5d:28:d6:86: 8e:77:5c:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJKhIBunnH6kjL5ozEbGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNzcwOWU3YjBlZmJhMTI3MDI1YzgzZTVkMzE5NGM3MWJh NDI4YzMwHhcNMjUxMjIxMjMwMDM0WhcNMjUxMjIyMjMwMDM0WjAzMTEwLwYDVQQD EygzMWFhNjg2ZmFkNWNlMWUwZGFmOTYxNjYxZTJmOTk4YmEzMDBmZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIDEzK6ziwM7ymvAtDYMnmbsoypu NPMT0nRE2vxS81JU7dqWo+O67h2Pp9bBaI48V97Bk79/gn+lQMsoSGCOgRxQpJ4J I5k9QQu28JNrh4KXgC2ULsVgqNNoOzvhMn4A9mVwt34td19YJ+pOiT534s6QFG5M seWcOntaWyB9vz3+EFQ8lDKBOvo/yayKJNbWXFtFMIWi5hJCczQmq94+glmMHCGJ myLwFCNBI+ABYF0wsRyR2DIc2MvZIlOgEDOPuIpw5T0QVkB2rcPaAA/GbLO19C7S oX61pGURQanFL7LdTRnayLmGtPaI617IowdIKD3DKsyCWVxvRAqChFPTowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGqaG+tXOHg2vlhZh4vmYujAP1WMB8GA1UdIwQY MBaAFIB3Ceew77oScCXIPl0xlMcbpCjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jNDI2YzMtNGYwMy00NmJiLTgwMDgt YmU5YWQyYmY3MjVmLzEvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jNDI2YzMtNGYwMy00NmJiLTgwMDgtYmU5YWQyYmY3MjVm LzEvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwS/8crr We6f4k5+1MuhN4tC8meIqi8v5Led/4a+Y6orIOX0wpmde3mGSI8gURYACKytFkjz bDabJBdfTwuKK89hx2y3jab77z/qUKqCFaiXpcslRqPjAedNVYVdK9Skw+JD3utz cg+tgcniOtPhoIeks+jsGPzGsVKjagsi91waVCcc8n6ef4OyQdBH/Thp+vCSPAPL ehP8Csq8ARn26hwI+LocVaYbSbQB/u1y7+uWpt1gYB0JbjQlY52zEhZG7Qr/M/+p IgXvErZWkFG4F+qAqc7QMq3s6cbIFaAqslgU+Pc11vbgoclS5xSTmJpdTkFMWLxl KT9dKNaGjndcdg== -----END CERTIFICATE-----Generated at Mon Dec 22 00:59:25 2025 by rpki-client