This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft File: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json) Hash identifier: Nib4x776NGgWuOVrgI1e5KRiaVJXDISGzavLOFQoNKc= Subject key identifier: 08:5B:F6:5D:3B:CD:31:A5:12:4E:C5:95:B9:4E:42:58:51:82:98:AD Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61 Certificate issuer: /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61 Certificate serial: 019B3CECB24303F69F21233FA01DC8493B45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 18:01:43 +0000 Manifest this update: Sat 20 Dec 2025 18:01:43 +0000 Manifest next update: Sun 21 Dec 2025 18:01:43 +0000 Files and hashes: 1: 4sRmTDXLCty2oG7uCbm4SXKIyVE.roa (hash: 4X9pRb1swIu+cVaImRyIHtbj3QJV4dZcCo4Wvcbk9Ug=) 2: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: CBJl2xAUI4u0jSH4rOY+8v37uSLJ/teQbEYKqWe/1Jc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:b2:43:03:f6:9f:21:23:3f:a0:1d:c8:49:3b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61 Validity Not Before: Dec 20 18:01:43 2025 GMT Not After : Dec 21 18:01:43 2025 GMT Subject: CN=085bf65d3bcd31a5124ec595b94e4258518298ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:06:87:6f:8d:fd:45:69:89:e5:8e:c9:d6:a2: 72:6d:27:02:5c:93:ea:63:8a:f7:e8:3b:aa:8c:e8: 8f:65:10:1a:fe:0b:e9:3f:b1:b8:42:59:ab:b6:b1: 56:a8:f4:3e:85:ee:3d:e5:a4:73:bf:7b:86:1b:f2: 6c:13:61:dc:ed:e8:e5:89:e5:9c:c8:08:b5:06:92: a2:78:0d:cc:bc:85:4d:fb:df:22:7f:b1:31:22:dc: 18:ad:47:00:47:92:b3:5a:27:07:61:c2:5f:61:32: ed:c7:19:5d:fa:1b:98:e3:5b:b4:d2:e2:9f:08:8c: cf:0d:dc:95:25:a2:ab:a3:5c:79:d4:00:b8:73:04: eb:59:35:49:c3:48:69:0f:d0:14:06:e1:9d:39:9c: 88:a8:32:22:e4:f2:11:0c:f1:4f:17:98:61:ba:4e: fc:46:cb:c3:f8:0c:a9:60:bb:92:78:2e:70:1f:da: e1:c1:0f:e1:68:96:77:60:7a:7d:3d:ee:26:5c:91: f8:c8:b7:8d:16:df:c7:81:2e:cb:88:fb:54:7e:48: 07:c0:42:10:64:11:b5:c1:fe:b2:29:2d:8e:ec:2e: 2d:60:0a:80:b5:ce:44:22:68:19:9a:4a:61:8b:56: bc:99:9b:9b:4e:47:89:f3:10:0e:66:6f:01:51:75: a3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5B:F6:5D:3B:CD:31:A5:12:4E:C5:95:B9:4E:42:58:51:82:98:AD X509v3 Authority Key Identifier: keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:d4:3f:a1:3f:e9:7e:5c:10:4d:f0:1a:d7:c2:bb:14:f0:c5: 44:cc:d6:91:08:33:79:13:0a:1e:4c:41:cc:17:f4:6f:f1:ab: 1a:4e:8f:83:32:24:b8:8d:cb:ee:76:30:d4:c3:d6:41:76:09: ac:12:ed:87:cc:bf:d7:d3:6f:32:cc:52:88:53:3d:a4:4e:94: e4:65:ca:48:8f:52:c6:a1:46:08:4d:33:20:d1:08:3f:a8:2c: 74:09:19:29:f0:2f:5a:3b:66:d0:6c:da:90:5e:c0:27:0c:8e: 87:7e:b5:74:99:1d:7c:d9:2d:52:be:66:85:3e:7b:91:13:27: ce:9e:72:8b:47:b9:37:97:46:49:ca:65:0e:c1:d9:4e:c6:7e: fb:b9:74:90:82:ff:26:b6:20:cc:f8:b3:62:67:66:a0:3e:0a: 33:2f:fe:24:93:ec:80:02:95:9e:ff:1a:13:ef:a8:3c:1a:6e: 54:e1:ba:98:9b:99:a9:a6:8f:5e:ca:48:df:3b:50:b6:61:e8: 16:a8:6b:88:73:4a:9a:57:8c:26:bc:0c:a9:e2:77:8e:8d:c8: da:6b:de:4f:79:1a:48:eb:28:3e:a5:95:0f:e2:15:02:76:37: 9f:d3:c4:e2:e3:b5:d4:15:12:05:d2:a5:95:f7:e3:d6:7f:9f: d6:92:6e:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87LJDA/afISM/oB3ISTtFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMzFlNzNlNmQzZmM3NDVmMTI3YTdlZDk5MGFhNDEyMTQ5 MDVlNjEwHhcNMjUxMjIwMTgwMTQzWhcNMjUxMjIxMTgwMTQzWjAzMTEwLwYDVQQD EygwODViZjY1ZDNiY2QzMWE1MTI0ZWM1OTViOTRlNDI1ODUxODI5OGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAaHb439RWmJ5Y7J1qJybScCXJPq Y4r36DuqjOiPZRAa/gvpP7G4QlmrtrFWqPQ+he495aRzv3uGG/JsE2Hc7ejlieWc yAi1BpKieA3MvIVN+98if7ExItwYrUcAR5KzWicHYcJfYTLtxxld+huY41u00uKf CIzPDdyVJaKro1x51AC4cwTrWTVJw0hpD9AUBuGdOZyIqDIi5PIRDPFPF5hhuk78 RsvD+AypYLuSeC5wH9rhwQ/haJZ3YHp9Pe4mXJH4yLeNFt/HgS7LiPtUfkgHwEIQ ZBG1wf6yKS2O7C4tYAqAtc5EImgZmkphi1a8mZubTkeJ8xAOZm8BUXWjGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhb9l07zTGlEk7FlblOQlhRgpitMB8GA1UdIwQY MBaAFBsx5z5tP8dF8Sen7ZkKpBIUkF5hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3pIblBtMF94MFh4SjZmdG1RcWtFaFNRWG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMWZkZDYtNzMwZS00YWYwLThhNTYt NDYwMjczZjE2ZGRkLzEvR3pIblBtMF94MFh4SjZmdG1RcWtFaFNRWG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMWZkZDYtNzMwZS00YWYwLThhNTYtNDYwMjczZjE2ZGRk LzEvR3pIblBtMF94MFh4SjZmdG1RcWtFaFNRWG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNQ/oT/p flwQTfAa18K7FPDFRMzWkQgzeRMKHkxBzBf0b/GrGk6PgzIkuI3L7nYw1MPWQXYJ rBLth8y/19NvMsxSiFM9pE6U5GXKSI9SxqFGCE0zINEIP6gsdAkZKfAvWjtm0Gza kF7AJwyOh361dJkdfNktUr5mhT57kRMnzp5yi0e5N5dGScplDsHZTsZ++7l0kIL/ JrYgzPizYmdmoD4KMy/+JJPsgAKVnv8aE++oPBpuVOG6mJuZqaaPXspI3ztQtmHo FqhriHNKmleMJrwMqeJ3jo3I2mveT3kaSOsoPqWVD+IVAnY3n9PE4uO11BUSBdKl lffj1n+f1pJu9A== -----END CERTIFICATE-----Generated at Sat Dec 20 21:10:42 2025 by rpki-client