This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft File: GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json) Hash identifier: Vv0owU/zOa9Dhbjqkf8LTptb8ROPwMcbp7MJJST1FCY= Subject key identifier: 29:D4:18:9D:FE:54:4F:9A:8D:8C:79:84:06:B7:4B:07:C2:6D:B4:E3 Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B Certificate issuer: /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b Certificate serial: 019B3E6E2624DA349A7294A13B4F4794368B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft Manifest number: 0907 Signing time: Sun 21 Dec 2025 01:02:44 +0000 Manifest this update: Sun 21 Dec 2025 01:02:44 +0000 Manifest next update: Mon 22 Dec 2025 01:02:44 +0000 Files and hashes: 1: 57MdEJb-nBShQLLCWdO0TGMwrmU.roa (hash: AI0OebgvFdQLqYYDJFtpVuV594/Dy/OB9klpHE+tsqU=) 2: B7Qapo5g1oDmbBkmOp4VI6hXM-Q.roa (hash: QPX22bu8lrGVz4DhZjKtOs7g7eex/hilxfsr4fUW4YM=) 3: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: 6coGDYmQSkC8Ta7UiMo7fSm8dpog4xq2T8SvkrEbBNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:26:24:da:34:9a:72:94:a1:3b:4f:47:94:36:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b Validity Not Before: Dec 21 01:02:44 2025 GMT Not After : Dec 22 01:02:44 2025 GMT Subject: CN=29d4189dfe544f9a8d8c798406b74b07c26db4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:86:30:b1:77:fb:9f:3d:cc:97:39:7b:9d:1a: 65:97:58:fd:b0:f1:a3:85:2f:38:75:df:b7:48:01: df:a1:6c:f8:20:2d:b8:fa:8a:1b:89:f3:62:d2:21: b5:91:f4:76:c5:cc:08:c6:f9:16:c8:7b:2b:2c:6b: 2b:18:db:e4:9a:a9:82:76:2f:e9:8a:8b:95:23:ef: 1c:73:6f:e1:dc:c6:25:79:7f:3d:5d:40:03:f8:e3: 3d:e3:06:77:c4:e4:25:44:bc:2a:05:a0:79:7f:85: 39:42:bd:d0:43:ec:62:35:09:57:b4:ab:b1:4c:51: 56:d4:34:53:b5:c7:2f:9b:2f:d0:8c:ee:71:2f:ca: d8:07:d2:2e:03:a8:13:39:b2:d1:1f:fa:2e:60:20: 37:53:2e:a6:6a:31:7a:be:30:af:6e:7a:85:7a:24: 10:ea:15:9c:4d:4f:dd:26:df:1e:6f:1e:9d:dc:1b: bb:b2:15:09:b5:8e:87:c1:da:cc:fb:16:96:c4:a5: 41:07:90:37:18:4f:ce:aa:3a:56:0e:5f:0e:ad:1b: fc:36:b7:96:30:6c:02:a9:60:fe:41:c2:da:cc:b5: bb:dc:7b:64:08:6f:a5:15:8a:b7:1c:c3:c3:11:de: 24:3d:09:48:7c:45:46:a1:44:94:ea:98:3d:ee:a6: 26:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D4:18:9D:FE:54:4F:9A:8D:8C:79:84:06:B7:4B:07:C2:6D:B4:E3 X509v3 Authority Key Identifier: keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:de:20:07:53:e5:96:f0:32:47:88:da:37:a0:37:ad:1e:9e: 08:4b:51:90:bb:cf:94:fc:d1:03:55:03:10:ad:2d:d4:e8:26: 63:11:8f:39:63:ac:ed:9b:e4:5f:4c:d3:de:93:8a:fe:cd:ff: 9d:d1:6c:dc:e8:ee:95:37:ca:d6:51:84:00:eb:0e:df:ba:bf: bb:f3:98:72:a5:81:36:07:67:47:03:a9:04:e5:19:ce:7d:cd: 57:21:7f:9d:d6:ac:bc:c1:20:88:cd:d3:01:d5:f8:8a:58:57: c8:2c:22:0b:7c:01:c6:bf:0e:68:3f:3d:d2:41:74:6e:c3:c6: 07:65:52:38:70:ba:2b:5e:fa:a1:73:aa:08:bf:8e:75:1c:86: c4:7e:bc:12:e4:fa:b2:34:45:0c:e9:49:cb:bb:38:3d:c1:8a: a5:82:8e:b7:9e:7e:25:4e:c1:06:f5:84:08:93:30:b2:34:a7: 41:65:a1:93:3c:d6:f8:a8:3f:35:c8:9b:9c:6c:96:65:ee:a0: 11:cc:82:09:bf:7b:29:57:85:04:78:02:46:6c:4b:55:12:4f: 74:20:af:8e:06:ff:c8:b3:43:d3:a0:7a:1a:32:92:3b:da:89: e8:dd:6a:a7:20:1e:f0:73:2b:18:94:dc:90:73:bf:fe:1f:71: 96:41:26:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+biYk2jSacpShO09HlDaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZWFjMGY2MzI1N2IyMjRlYzE3MTA2ZTFiY2RlZmQzMmMy NDc3OGIwHhcNMjUxMjIxMDEwMjQ0WhcNMjUxMjIyMDEwMjQ0WjAzMTEwLwYDVQQD EygyOWQ0MTg5ZGZlNTQ0ZjlhOGQ4Yzc5ODQwNmI3NGIwN2MyNmRiNGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4YwsXf7nz3Mlzl7nRpll1j9sPGj hS84dd+3SAHfoWz4IC24+oobifNi0iG1kfR2xcwIxvkWyHsrLGsrGNvkmqmCdi/p iouVI+8cc2/h3MYleX89XUAD+OM94wZ3xOQlRLwqBaB5f4U5Qr3QQ+xiNQlXtKux TFFW1DRTtccvmy/QjO5xL8rYB9IuA6gTObLRH/ouYCA3Uy6majF6vjCvbnqFeiQQ 6hWcTU/dJt8ebx6d3Bu7shUJtY6HwdrM+xaWxKVBB5A3GE/OqjpWDl8OrRv8NreW MGwCqWD+QcLazLW73HtkCG+lFYq3HMPDEd4kPQlIfEVGoUSU6pg97qYmIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnUGJ3+VE+ajYx5hAa3SwfCbbTjMB8GA1UdIwQY MBaAFBrqwPYyV7Ik7BcQbhvN79MsJHeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82YzA2ODAtN2M4ZC00ZGVjLWIyYTgt Mjk4YjU1OTY5NzZhLzEvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni82YzA2ODAtN2M4ZC00ZGVjLWIyYTgtMjk4YjU1OTY5NzZh LzEvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnN4gB1Pl lvAyR4jaN6A3rR6eCEtRkLvPlPzRA1UDEK0t1OgmYxGPOWOs7ZvkX0zT3pOK/s3/ ndFs3OjulTfK1lGEAOsO37q/u/OYcqWBNgdnRwOpBOUZzn3NVyF/ndasvMEgiM3T AdX4ilhXyCwiC3wBxr8OaD890kF0bsPGB2VSOHC6K176oXOqCL+OdRyGxH68EuT6 sjRFDOlJy7s4PcGKpYKOt55+JU7BBvWECJMwsjSnQWWhkzzW+Kg/NcibnGyWZe6g EcyCCb97KVeFBHgCRmxLVRJPdCCvjgb/yLND06B6GjKSO9qJ6N1qpyAe8HMrGJTc kHO//h9xlkEmXA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:58:06 2025 by rpki-client