This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft File: GFjKpoMqoqPnzG0URRX49DG2Z2I.mft (raw, json) Hash identifier: UWVlSJkNyjf58po6pw8ton2wanpXfFHD8EmfWGXu3rw= Subject key identifier: 28:34:4E:F1:0B:CD:94:21:EF:D8:E0:A4:6D:FF:F3:54:CE:3D:FC:65 Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62 Certificate issuer: /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762 Certificate serial: 019B4FCE67329C555204F9DAAAB8E95F5AD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 10:01:25 +0000 Manifest this update: Wed 24 Dec 2025 10:01:25 +0000 Manifest next update: Thu 25 Dec 2025 10:01:25 +0000 Files and hashes: 1: 84Vy4QZqvQZUIRmhoX03xS6PmHg.asa (hash: mu6fp0Fipel740MCIXuJN9FB1rFnZw35tGJ95/rLm3o=) 2: 8s2ldX9oHHwyl8fUEVLqhDsQqu4.roa (hash: 8RTmSwJoya32i12kM5MRjAc5F89+JLBUKY/2kNp2yVc=) 3: GFjKpoMqoqPnzG0URRX49DG2Z2I.crl (hash: qRQym3a/okKZUwbV9eg+cy39dEZSxbCAuIft0TxNvmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:67:32:9c:55:52:04:f9:da:aa:b8:e9:5f:5a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762 Validity Not Before: Dec 24 10:01:25 2025 GMT Not After : Dec 25 10:01:25 2025 GMT Subject: CN=28344ef10bcd9421efd8e0a46dfff354ce3dfc65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:d2:3b:87:f6:a6:38:36:bf:00:1b:af:41: b0:c5:6c:67:60:f2:c4:6b:75:5e:ce:56:bc:02:58: 01:01:3e:24:a8:69:44:c0:1a:b9:be:78:ee:a8:5e: b8:74:80:82:24:8f:e0:bf:99:76:a3:88:a4:9c:c2: 23:35:23:b8:fe:57:59:af:cf:a1:59:f7:64:73:88: dd:9d:01:ed:5e:af:2c:30:2f:e3:9f:58:39:bb:b1: 27:8e:56:5d:71:16:4e:33:75:4f:6c:30:6f:ed:0e: 05:99:fe:ea:7d:f9:65:0d:a9:15:49:99:b7:9c:b0: 88:d9:06:8c:ae:fc:df:5c:84:4d:52:40:5a:bb:72: e5:17:38:98:02:f6:a4:84:3e:b1:bc:99:df:f1:b3: 0b:11:bb:e8:c4:49:15:b4:cf:56:5c:02:af:aa:14: 30:6f:90:fb:9b:98:f8:54:c1:46:81:c0:92:72:70: 6a:90:2a:b7:5e:92:b3:6e:88:03:d5:00:50:71:ae: c7:ed:cd:10:51:06:54:58:82:04:18:15:48:4c:bb: 7f:7f:1e:47:74:95:81:76:08:ae:5a:49:c2:46:33: 51:91:99:78:aa:68:78:b0:21:74:fe:9a:60:12:f7: b0:bd:92:ba:65:06:15:6f:c1:49:4b:bd:87:53:2e: 1f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:34:4E:F1:0B:CD:94:21:EF:D8:E0:A4:6D:FF:F3:54:CE:3D:FC:65 X509v3 Authority Key Identifier: keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:83:ab:83:0d:ba:61:b4:1f:89:0d:c3:d0:0f:9b:26:51:25: 8a:31:89:89:92:b1:ce:d6:04:33:ef:11:05:74:ce:be:ce:56: 25:7d:cc:01:13:f8:cd:59:a6:9e:6c:5d:58:72:b2:84:bf:68: e9:ff:e5:9a:c5:c4:a0:a9:75:42:65:b7:94:7e:92:1c:36:4f: 8d:8a:c9:8d:4f:6f:f9:56:01:1d:fc:72:45:3d:f0:46:b6:a6: dd:8d:aa:d6:a4:67:bc:67:10:9e:a6:26:62:c8:6e:13:24:52: 7f:e1:db:fc:c2:b0:5c:2e:18:a8:24:dc:bb:d6:ee:19:a8:f8: 93:2d:59:18:7a:18:11:ff:a6:e3:cc:f5:80:6b:84:70:4d:a3: f5:a0:95:e3:47:c1:2b:02:5b:86:e0:f2:d2:52:2e:d3:bf:a5: bb:ec:b0:24:39:66:92:27:cf:6a:98:41:86:f8:ea:1b:12:0e: 81:76:2a:30:86:c0:50:34:d7:7a:77:46:1b:f8:a3:e4:79:01: bf:bf:47:fc:89:14:cf:7e:43:26:5d:2c:22:27:a7:24:28:b2: 4e:0a:d0:11:0e:ce:4d:ba:3b:2c:c8:06:de:dc:c0:b1:b0:c7: c7:65:5c:0f:f6:7d:77:d4:78:12:6a:79:7e:11:5e:c9:19:62: c0:4d:25:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzmcynFVSBPnaqrjpX1rUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NThjYWE2ODMyYWEyYTNlN2NjNmQxNDQ1MTVmOGY0MzFi NjY3NjIwHhcNMjUxMjI0MTAwMTI1WhcNMjUxMjI1MTAwMTI1WjAzMTEwLwYDVQQD EygyODM0NGVmMTBiY2Q5NDIxZWZkOGUwYTQ2ZGZmZjM1NGNlM2RmYzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBfSO4f2pjg2vwAbr0GwxWxnYPLE a3Vezla8AlgBAT4kqGlEwBq5vnjuqF64dICCJI/gv5l2o4iknMIjNSO4/ldZr8+h Wfdkc4jdnQHtXq8sMC/jn1g5u7EnjlZdcRZOM3VPbDBv7Q4Fmf7qffllDakVSZm3 nLCI2QaMrvzfXIRNUkBau3LlFziYAvakhD6xvJnf8bMLEbvoxEkVtM9WXAKvqhQw b5D7m5j4VMFGgcCScnBqkCq3XpKzbogD1QBQca7H7c0QUQZUWIIEGBVITLt/fx5H dJWBdgiuWknCRjNRkZl4qmh4sCF0/ppgEvewvZK6ZQYVb8FJS72HUy4fJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCg0TvELzZQh79jgpG3/81TOPfxlMB8GA1UdIwQY MBaAFBhYyqaDKqKj58xtFEUV+PQxtmdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83OTI2YjgtNmVhNy00NWI0LTk1M2Ut YWFiN2ZjM2Y4YWM1LzEvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83OTI2YjgtNmVhNy00NWI0LTk1M2UtYWFiN2ZjM2Y4YWM1 LzEvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIOrgw26 YbQfiQ3D0A+bJlElijGJiZKxztYEM+8RBXTOvs5WJX3MARP4zVmmnmxdWHKyhL9o 6f/lmsXEoKl1QmW3lH6SHDZPjYrJjU9v+VYBHfxyRT3wRram3Y2q1qRnvGcQnqYm YshuEyRSf+Hb/MKwXC4YqCTcu9buGaj4ky1ZGHoYEf+m48z1gGuEcE2j9aCV40fB KwJbhuDy0lIu07+lu+ywJDlmkifPaphBhvjqGxIOgXYqMIbAUDTXendGG/ij5HkB v79H/IkUz35DJl0sIienJCiyTgrQEQ7OTbo7LMgG3tzAsbDHx2VcD/Z9d9R4Emp5 fhFeyRliwE0law== -----END CERTIFICATE-----Generated at Wed Dec 24 12:00:20 2025 by rpki-client