This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft File: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft (raw, json) Hash identifier: a0FahVvoAfLi5hBMYTbG9MKcpwmgYvxDEsuM1pedamE= Subject key identifier: C4:D7:1D:1D:83:AA:65:02:E4:71:06:A4:F8:35:42:66:5B:43:4D:D4 Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4 Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4 Certificate serial: 019B3A218D9F5488BC84ACCF9C9C5835B125 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 05:00:36 +0000 Manifest this update: Sat 20 Dec 2025 05:00:36 +0000 Manifest next update: Sun 21 Dec 2025 05:00:36 +0000 Files and hashes: 1: 6UgffgqyRmXA4X4lQkfxVrdwBsA.roa (hash: evXeFj81thsrgyrUvw1aQVJLYDNLbEIIyY5wmZWNCGU=) 2: EMVnap43Y9UsFWtlCe55L5ZXNno.roa (hash: 79QWn/jDXhxzY15VXil6olMuq2XcT6cSiSrWZxg+0Gg=) 3: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl (hash: hKsW8kkabgEvMTdutasGzas0nKtjidiofRNKZvuJQJo=) 4: LxmN4uMoK6wh408GJ6l9gH0ugu0.roa (hash: kJ1RLjAnYMeLDEzPUcjx7KqkgbH5nyx8Lbk4P/H0Wtw=) 5: ST5QgStVsZ8VLKir2fIMPSp6_jU.roa (hash: 2UGwzfV+8KmtBgovMvwjTZRncLGcWbahxwdG9QTxnao=) 6: fRi0G2cIUxI61l2GTTKIFQAG9RE.roa (hash: IiPf4Yv8/FcDmWTn4xUhoGH8CrL6FWqGZiw6UQ0WOHg=) 7: yAm1lV_S8WQU9xUYSz0xhS5WWFk.roa (hash: +RLHgrQThKYdngYSU7w4Ac27ABqxEk770X6x0K5R6ZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:8d:9f:54:88:bc:84:ac:cf:9c:9c:58:35:b1:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4 Validity Not Before: Dec 20 05:00:36 2025 GMT Not After : Dec 21 05:00:36 2025 GMT Subject: CN=c4d71d1d83aa6502e47106a4f83542665b434dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:86:13:c7:c0:71:37:02:84:03:c1:54:b3:35: 96:25:5a:78:ee:d5:d5:9b:6e:16:6d:f7:a6:c9:a8: 5a:22:b5:02:83:20:ef:23:3c:0d:0a:e4:2f:06:83: 21:a7:54:9d:38:3e:b7:94:0e:05:15:1d:d7:b1:52: 68:00:80:67:87:67:e2:4a:8d:5e:ab:71:c4:c9:24: a3:ec:5e:2e:ff:a9:0b:00:9f:8a:a7:b3:8b:c5:57: 9d:25:fc:35:ed:75:dd:af:ac:71:e8:61:d8:eb:69: ed:d4:90:72:5a:a8:2a:39:44:9e:12:af:75:22:77: 04:28:90:6a:6b:1b:d4:7f:f9:f5:3c:49:b8:52:e4: 51:87:5f:72:ae:40:9e:1d:c5:40:43:21:d4:b2:ef: 34:cc:8a:52:18:51:3e:12:7d:a7:6c:76:9f:ce:e2: ab:69:6a:64:f2:3c:31:bb:24:8b:94:66:39:b7:6e: 85:62:27:e6:58:75:84:ed:a3:91:5a:90:40:c0:1a: 29:5c:6a:9b:d3:42:7d:e5:b0:67:b3:7c:53:4b:7e: 40:42:0a:81:f7:a1:91:94:a8:8b:a3:fe:3e:73:3b: 2f:ac:4d:97:59:ab:4a:25:4a:97:2e:c3:51:1d:ac: c4:8e:c7:67:b0:4c:a0:bb:22:bb:96:08:76:bc:2b: 8e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D7:1D:1D:83:AA:65:02:E4:71:06:A4:F8:35:42:66:5B:43:4D:D4 X509v3 Authority Key Identifier: keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:9e:88:9f:1e:37:46:87:bb:17:cc:48:73:49:24:85:f0:12: ad:ce:46:17:1b:33:86:09:69:3f:c6:d4:59:32:bb:c6:00:51: 79:1c:36:1d:a8:fb:bc:2d:fa:ce:5a:61:6a:0c:63:c4:33:44: 99:28:7a:ea:17:bd:0d:b6:56:6e:b5:88:b2:57:01:d0:52:91: 93:2c:a9:2a:7a:f0:87:eb:38:84:6b:28:8d:2b:ac:45:95:d9: c7:25:92:39:d7:25:19:66:03:ad:30:33:c6:00:21:a3:c5:34: 95:85:4b:6b:77:7a:15:08:83:03:0b:be:48:30:dc:95:d2:33: 69:ee:71:dc:d0:ce:06:fb:29:d1:f3:f9:aa:b6:d8:82:fb:aa: 72:14:6e:e9:20:bd:5d:2e:31:69:fe:c8:76:b1:b6:52:8f:06: c1:9a:e8:c4:98:48:c8:5c:2e:e7:a2:0d:d0:d9:c2:02:0e:b5: db:1b:16:09:ea:91:99:ec:35:4c:38:60:05:58:08:05:87:2a: 82:bb:ca:e5:a8:20:af:9f:d0:2b:78:f2:4d:b2:f6:d8:5e:1e: 0e:b8:78:80:89:0b:95:97:da:0d:da:66:26:d0:e4:c7:b9:24: 0a:f4:c4:e3:50:78:36:41:98:bb:ab:99:72:99:96:9a:14:ef: f8:d9:45:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IY2fVIi8hKzPnJxYNbElMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRkMTE1NTQyNDdiZDJiZDMwMWNlYTQzZmY1MTgwMzcy YzM4ZTQwHhcNMjUxMjIwMDUwMDM2WhcNMjUxMjIxMDUwMDM2WjAzMTEwLwYDVQQD EyhjNGQ3MWQxZDgzYWE2NTAyZTQ3MTA2YTRmODM1NDI2NjViNDM0ZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14YTx8BxNwKEA8FUszWWJVp47tXV m24WbfemyahaIrUCgyDvIzwNCuQvBoMhp1SdOD63lA4FFR3XsVJoAIBnh2fiSo1e q3HEySSj7F4u/6kLAJ+Kp7OLxVedJfw17XXdr6xx6GHY62nt1JByWqgqOUSeEq91 IncEKJBqaxvUf/n1PEm4UuRRh19yrkCeHcVAQyHUsu80zIpSGFE+En2nbHafzuKr aWpk8jwxuySLlGY5t26FYifmWHWE7aORWpBAwBopXGqb00J95bBns3xTS35AQgqB 96GRlKiLo/4+czsvrE2XWatKJUqXLsNRHazEjsdnsEyguyK7lgh2vCuO8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTXHR2DqmUC5HEGpPg1QmZbQ03UMB8GA1UdIwQY MBaAFBpN0RVUJHvSvTAc6kP/UYA3LDjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUt M2JhNWYzMGNhYWJmLzEvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUtM2JhNWYzMGNhYWJm LzEvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV56Inx43 Roe7F8xIc0kkhfASrc5GFxszhglpP8bUWTK7xgBReRw2Haj7vC36zlphagxjxDNE mSh66he9DbZWbrWIslcB0FKRkyypKnrwh+s4hGsojSusRZXZxyWSOdclGWYDrTAz xgAho8U0lYVLa3d6FQiDAwu+SDDcldIzae5x3NDOBvsp0fP5qrbYgvuqchRu6SC9 XS4xaf7IdrG2Uo8GwZroxJhIyFwu56IN0NnCAg612xsWCeqRmew1TDhgBVgIBYcq grvK5aggr5/QK3jyTbL22F4eDrh4gIkLlZfaDdpmJtDkx7kkCvTE41B4NkGYu6uZ cpmWmhTv+NlFQA== -----END CERTIFICATE-----Generated at Sat Dec 20 14:07:54 2025 by rpki-client