This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft File: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json) Hash identifier: YxxdiB1zoyhpeJ76dBD7edH5cfpNNglS/cy76AJf1W4= Subject key identifier: 89:31:B6:F0:36:43:73:BA:56:24:E3:43:CE:19:FF:4F:5E:E0:2B:31 Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61 Certificate issuer: /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61 Certificate serial: 019B71107244B33290267300DB6122445DD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 21:01:01 +0000 Manifest this update: Tue 30 Dec 2025 21:01:01 +0000 Manifest next update: Wed 31 Dec 2025 21:01:01 +0000 Files and hashes: 1: 4sRmTDXLCty2oG7uCbm4SXKIyVE.roa (hash: 4X9pRb1swIu+cVaImRyIHtbj3QJV4dZcCo4Wvcbk9Ug=) 2: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: 9FfYY59SnZV5MZV9WoNnqmBUyiByRKLvKcnDr6/JFro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:10:72:44:b3:32:90:26:73:00:db:61:22:44:5d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61 Validity Not Before: Dec 30 21:01:01 2025 GMT Not After : Dec 31 21:01:01 2025 GMT Subject: CN=8931b6f0364373ba5624e343ce19ff4f5ee02b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:76:89:29:cd:48:8c:e5:7e:b1:1b:02:fa:4e: 9e:42:d4:db:cb:22:e7:64:e6:ee:1f:c2:f4:08:23: b2:85:b7:2f:4d:fe:0a:1e:fa:78:d4:03:a4:9b:9c: 30:7c:08:e1:55:00:ab:82:1f:0d:d3:36:4f:10:70: 4d:9b:42:b8:f8:da:3f:d5:97:88:ae:0f:cb:9b:8a: 15:54:e3:e1:d5:ef:12:36:d8:d6:62:a5:3a:79:0b: e4:81:91:0c:3e:54:22:93:3e:d6:4f:f2:b0:d8:91: 1e:5a:96:03:96:1b:a8:53:c0:0d:67:ae:b8:f2:fc: f4:fd:1f:6e:e0:8c:94:ee:b4:a2:8d:78:ca:6c:fa: c5:4e:30:38:88:f1:12:96:3e:e8:b1:fd:91:d7:93: 48:0f:13:9f:c8:53:a5:d5:d7:c7:26:6f:af:63:86: 73:91:36:13:3c:94:68:ef:f5:a4:aa:4e:03:2e:ae: 93:22:6b:9d:34:2e:c1:28:ca:97:07:80:d2:7e:34: e0:49:fd:6e:f1:86:4e:98:28:1e:7a:c8:4a:28:57: 62:d3:c1:b0:7d:d6:19:da:75:3c:b3:e2:c6:d6:84: 54:d9:de:84:e4:49:6a:54:0b:dd:3f:fb:0f:61:7e: f2:7f:31:f1:27:73:86:fd:c7:1d:f8:7a:8c:7b:03: 41:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:31:B6:F0:36:43:73:BA:56:24:E3:43:CE:19:FF:4F:5E:E0:2B:31 X509v3 Authority Key Identifier: keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:4e:72:08:cb:d3:9b:0b:83:6f:22:4e:fa:20:92:a7:1a:e1: 96:42:88:cb:b4:c0:30:9b:13:5c:ee:d4:0f:b6:6b:63:78:f6: e8:a7:63:71:f8:70:d4:b6:8d:68:ab:0b:43:eb:8c:8a:92:fa: 7a:f0:f3:bc:28:49:53:b1:56:1a:e8:60:98:69:b0:29:50:0f: d5:e3:b4:0b:de:0e:d4:2e:ef:29:af:27:8e:c4:21:aa:c4:b6: df:0d:ce:83:b0:93:4a:01:29:dc:3e:87:34:44:56:66:f7:95: 98:06:7c:6c:7c:18:9b:18:e6:56:9f:65:f1:af:2e:98:ca:8e: ef:f4:2c:f4:b0:dc:3f:12:2d:2e:b1:b3:e2:0b:ae:a8:0d:02: ab:90:2d:34:d3:99:c4:9a:1e:23:57:ac:60:3a:06:60:fe:96: f1:21:13:ed:16:dc:2f:e2:15:df:9d:2e:2e:eb:84:66:09:c3: 70:2b:c5:bc:6c:11:0e:77:df:f3:06:b8:2c:6d:ae:0c:8f:47: 9a:e9:3e:f6:bf:36:60:08:08:ea:3e:cf:a0:d5:3a:cd:68:44: 0c:55:c0:ca:25:e4:e9:9a:be:94:fa:69:ed:13:2f:1b:80:06: 5f:76:6d:6c:fa:10:56:22:c5:e6:0a:75:d8:88:4b:c6:5f:26: 85:bd:21:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxEHJEszKQJnMA22EiRF3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMzFlNzNlNmQzZmM3NDVmMTI3YTdlZDk5MGFhNDEyMTQ5 MDVlNjEwHhcNMjUxMjMwMjEwMTAxWhcNMjUxMjMxMjEwMTAxWjAzMTEwLwYDVQQD Eyg4OTMxYjZmMDM2NDM3M2JhNTYyNGUzNDNjZTE5ZmY0ZjVlZTAyYjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XaJKc1IjOV+sRsC+k6eQtTbyyLn ZObuH8L0CCOyhbcvTf4KHvp41AOkm5wwfAjhVQCrgh8N0zZPEHBNm0K4+No/1ZeI rg/Lm4oVVOPh1e8SNtjWYqU6eQvkgZEMPlQikz7WT/Kw2JEeWpYDlhuoU8ANZ664 8vz0/R9u4IyU7rSijXjKbPrFTjA4iPESlj7osf2R15NIDxOfyFOl1dfHJm+vY4Zz kTYTPJRo7/Wkqk4DLq6TImudNC7BKMqXB4DSfjTgSf1u8YZOmCgeeshKKFdi08Gw fdYZ2nU8s+LG1oRU2d6E5ElqVAvdP/sPYX7yfzHxJ3OG/ccd+HqMewNBNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkxtvA2Q3O6ViTjQ84Z/09e4CsxMB8GA1UdIwQY MBaAFBsx5z5tP8dF8Sen7ZkKpBIUkF5hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3pIblBtMF94MFh4SjZmdG1RcWtFaFNRWG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMWZkZDYtNzMwZS00YWYwLThhNTYt NDYwMjczZjE2ZGRkLzEvR3pIblBtMF94MFh4SjZmdG1RcWtFaFNRWG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMWZkZDYtNzMwZS00YWYwLThhNTYtNDYwMjczZjE2ZGRk LzEvR3pIblBtMF94MFh4SjZmdG1RcWtFaFNRWG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHE5yCMvT mwuDbyJO+iCSpxrhlkKIy7TAMJsTXO7UD7ZrY3j26Kdjcfhw1LaNaKsLQ+uMipL6 evDzvChJU7FWGuhgmGmwKVAP1eO0C94O1C7vKa8njsQhqsS23w3Og7CTSgEp3D6H NERWZveVmAZ8bHwYmxjmVp9l8a8umMqO7/Qs9LDcPxItLrGz4guuqA0Cq5AtNNOZ xJoeI1esYDoGYP6W8SET7RbcL+IV350uLuuEZgnDcCvFvGwRDnff8wa4LG2uDI9H muk+9r82YAgI6j7PoNU6zWhEDFXAyiXk6Zq+lPpp7RMvG4AGX3ZtbPoQViLF5gp1 2IhLxl8mhb0hPA== -----END CERTIFICATE-----Generated at Wed Dec 31 00:03:35 2025 by rpki-client