This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
File: GMpt4aSKToxbivHq6bXoC_z5LEU.mft (raw, json)
Hash identifier: 8nqylvgRipXeXLffzSSYNxR/lA3dR6v8KUhnp7VYfi0=
Subject key identifier: 74:7C:F3:7E:7C:40:E3:20:18:24:6A:0E:2A:CC:0F:BC:EC:B3:ED:30
Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Certificate issuer: /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Certificate serial: 019B4DDFDAFC0C5659C3C49059A514BB2B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
Manifest number: 0685
Signing time: Wed 24 Dec 2025 01:01:14 +0000
Manifest this update: Wed 24 Dec 2025 01:01:14 +0000
Manifest next update: Thu 25 Dec 2025 01:01:14 +0000
Files and hashes: 1: Ad6-aAH05MI6kkdiGCD95ctRfFo.roa (hash: fVAs8Cty7zb84H/EMD3Y1sNjkv+r8koDIXGOWy5iQEM=)
2: GMpt4aSKToxbivHq6bXoC_z5LEU.crl (hash: XDriyFQv6d08asnkjxdPueq76bteypViOW4IN8498qA=)
3: MI1jFBgK_l4WcCB5iK5o-v2Otyo.roa (hash: gK5APSFH+TPMOKicKkMlgu3wLez9QxNVfPdLmJNKB6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Dec 2025 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4d:df:da:fc:0c:56:59:c3:c4:90:59:a5:14:bb:2b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Validity
Not Before: Dec 24 01:01:14 2025 GMT
Not After : Dec 25 01:01:14 2025 GMT
Subject: CN=747cf37e7c40e32018246a0e2acc0fbcecb3ed30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:53:a7:0f:a8:e5:68:c5:34:cf:25:cb:1f:
d6:1c:06:03:cd:8f:2b:a5:9f:6d:fc:c1:f4:be:a6:
de:4a:73:e2:1d:2c:e3:36:22:ec:3d:d3:28:5d:77:
fd:44:8e:59:14:10:7d:25:b4:88:39:db:9e:ba:67:
27:6e:ac:06:dd:2c:96:a4:11:ac:5a:1b:61:17:e7:
31:4a:d4:e0:f5:13:03:86:c8:9a:23:d2:c4:3f:87:
7f:5b:7d:ac:92:50:2c:97:ff:7c:87:d2:bd:e0:8b:
8a:be:b0:d6:66:ba:0c:d2:db:f2:8b:5c:b0:ac:52:
aa:5f:28:42:f9:4b:07:3a:c6:f2:16:3b:73:97:7b:
49:61:3b:4a:f7:bb:27:af:6c:dd:7c:33:44:7f:47:
cb:84:ff:89:49:44:01:ef:a3:7b:39:8a:35:7e:4e:
98:14:c3:7e:04:e1:6d:99:a6:e2:d1:47:bb:26:b1:
99:57:8c:c5:e2:7f:d1:cb:5b:99:83:c4:67:70:bf:
15:bd:44:78:f7:d6:ed:4a:20:6c:7d:54:24:6b:83:
b3:8d:ab:0a:e8:e7:a3:54:95:39:7f:7d:0f:99:05:
65:fe:21:59:42:b4:2b:5f:22:fe:b4:81:cc:dd:0a:
50:23:2d:47:f1:e7:5b:c0:73:2c:17:f7:f2:cd:55:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7C:F3:7E:7C:40:E3:20:18:24:6A:0E:2A:CC:0F:BC:EC:B3:ED:30
X509v3 Authority Key Identifier:
keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e3:d9:e0:c7:d9:d6:ea:c8:41:b3:d2:52:6d:fc:3b:02:2e:
6c:47:2f:a0:b3:38:40:47:08:20:87:7d:02:c4:50:57:b6:25:
fc:2c:a5:8e:b9:b2:cb:e0:78:eb:91:14:89:a2:c8:68:64:fd:
0f:da:38:a4:b1:fc:49:c4:4c:bc:a8:9d:eb:c5:3a:c5:d3:f6:
a5:28:57:c5:95:2b:19:7f:77:1d:cb:6d:9c:aa:da:7f:c2:3c:
a3:82:69:a9:66:f1:50:b2:cf:06:10:cd:b8:34:eb:8c:9e:2d:
66:3c:e1:57:b3:24:bf:fd:f1:ef:fc:48:72:ee:f6:74:a8:69:
20:63:24:e3:80:0a:32:1b:c8:bd:cd:58:2b:a8:7b:f2:30:b9:
b8:6e:76:22:75:cb:dc:dc:f3:89:24:5c:63:09:8b:49:78:9b:
17:b1:28:a7:17:5f:a5:6e:ea:bb:e0:f3:25:59:5a:93:c3:03:
6d:fd:e0:e6:e6:07:6b:86:31:d4:d1:46:3a:f7:39:1e:47:2a:
47:4f:79:17:9f:16:47:3f:bd:52:1a:4f:1b:48:25:46:9e:b6:
89:5e:5e:dc:b5:8b:93:56:21:54:d5:0e:ac:c0:4a:01:1b:4f:
17:a9:a5:3a:c3:f8:47:a5:46:66:37:32:f9:f1:e9:9f:c0:eb:
45:8b:a6:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtN39r8DFZZw8SQWaUUuyteMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4Y2E2ZGUxYTQ4YTRlOGM1YjhhZjFlYWU5YjVlODBiZmNm
OTJjNDUwHhcNMjUxMjI0MDEwMTE0WhcNMjUxMjI1MDEwMTE0WjAzMTEwLwYDVQQD
Eyg3NDdjZjM3ZTdjNDBlMzIwMTgyNDZhMGUyYWNjMGZiY2VjYjNlZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxtTpw+o5WjFNM8lyx/WHAYDzY8r
pZ9t/MH0vqbeSnPiHSzjNiLsPdMoXXf9RI5ZFBB9JbSIOdueumcnbqwG3SyWpBGs
WhthF+cxStTg9RMDhsiaI9LEP4d/W32sklAsl/98h9K94IuKvrDWZroM0tvyi1yw
rFKqXyhC+UsHOsbyFjtzl3tJYTtK97snr2zdfDNEf0fLhP+JSUQB76N7OYo1fk6Y
FMN+BOFtmabi0Ue7JrGZV4zF4n/Ry1uZg8RncL8VvUR499btSiBsfVQka4OzjasK
6OejVJU5f30PmQVl/iFZQrQrXyL+tIHM3QpQIy1H8edbwHMsF/fyzVUPSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHR88358QOMgGCRqDirMD7zss+0wMB8GA1UdIwQY
MBaAFBjKbeGkik6MW4rx6um16Av8+SxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmYyYzYtZDg3Yy00ZDY1LWEyNTYt
MWM4MjI1ZDQwN2I1LzEvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZmYyYzYtZDg3Yy00ZDY1LWEyNTYtMWM4MjI1ZDQwN2I1
LzEvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaePZ4MfZ
1urIQbPSUm38OwIubEcvoLM4QEcIIId9AsRQV7Yl/Cyljrmyy+B465EUiaLIaGT9
D9o4pLH8ScRMvKid68U6xdP2pShXxZUrGX93HcttnKraf8I8o4JpqWbxULLPBhDN
uDTrjJ4tZjzhV7Mkv/3x7/xIcu72dKhpIGMk44AKMhvIvc1YK6h78jC5uG52InXL
3NzziSRcYwmLSXibF7EopxdfpW7qu+DzJVlak8MDbf3g5uYHa4Yx1NFGOvc5Hkcq
R095F58WRz+9UhpPG0glRp62iV5e3LWLk1YhVNUOrMBKARtPF6mlOsP4R6VGZjcy
+fHpn8DrRYumVg==
-----END CERTIFICATE-----
Generated at Wed Dec 24 03:32:08 2025 by rpki-client