This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft File: GfGp3RJvNyN84gD7hhb_k3vKlmw.mft (raw, json) Hash identifier: 8xm8hJfkawPilVC3wXB6yX/HrHQCXjrPl1nN5NtFOzo= Subject key identifier: AB:74:BE:52:91:D3:A3:B1:C1:30:49:51:75:65:0D:5C:9D:C9:B6:F7 Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C Certificate issuer: /CN=19f1a9dd126f37237ce200fb8616ff937bca966c Certificate serial: 019B3B6B8FBBC6BAF4F5F1DE07E330201616 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 11:01:03 +0000 Manifest this update: Sat 20 Dec 2025 11:01:03 +0000 Manifest next update: Sun 21 Dec 2025 11:01:03 +0000 Files and hashes: 1: BegdDrTAjfq3QF_xE0SFA-JsmmY.roa (hash: UdhM2lVwgozCDdJmvHRy0hTuIS1j9lD7X7Mun/eqHgw=) 2: GfGp3RJvNyN84gD7hhb_k3vKlmw.crl (hash: XDLVcMDN0xHF7sOPM3Zfakk+P2INRjJRKTWQNfzYZdY=) 3: Q-JTW2pMbNHJuQzQ3GB1MFwgWco.roa (hash: Lazq6w2zk0BI/gQTS7LpUxVn4e7nb0oKSy4DjZT1z9U=) 4: czVnbZc92doWqy2gBGIdv1iBjnw.roa (hash: FGIHMIe1fM4M87IQciBzvSamGa61S/MPL+xAE/AMTyI=) 5: h31D8UJNE_u1sTKbKP1SFsGVcFY.roa (hash: kwansroYJJGhl0jfhBp7y2GRUoE1YU2JrM6J/UDWiVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:8f:bb:c6:ba:f4:f5:f1:de:07:e3:30:20:16:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c Validity Not Before: Dec 20 11:01:03 2025 GMT Not After : Dec 21 11:01:03 2025 GMT Subject: CN=ab74be5291d3a3b1c130495175650d5c9dc9b6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:38:e8:63:19:7d:2a:1f:80:60:c8:cd:16:cb: 88:2c:f1:83:dc:41:af:59:64:44:b4:9f:d1:b6:0f: 6f:13:78:ca:77:75:ff:ce:b8:e6:04:87:13:d2:33: ec:ee:a6:68:c3:e4:58:15:c7:ca:40:1f:c8:49:d9: bb:c7:6e:5d:a9:36:9a:17:c9:6b:42:33:d1:7f:1d: 38:35:be:d5:4c:8c:d9:d1:9f:35:69:6c:bb:97:08: 88:c6:33:97:7f:a8:ca:c1:13:3c:88:41:8a:9f:ae: 23:fc:ab:ba:d4:e0:5f:d4:dd:65:d1:1f:90:b4:27: b2:cf:0c:f0:3e:75:0c:1d:0a:19:a5:2e:6e:31:c2: 1d:ad:43:be:51:56:87:11:8c:d2:e9:af:f8:01:da: 31:41:88:88:1d:65:c3:f2:3f:d8:bb:81:64:8e:55: 12:34:1e:7b:7d:51:95:f4:e0:98:5e:70:36:a9:bd: 0a:e2:9e:dd:4d:b8:ab:e2:00:22:42:58:3c:44:c8: 03:0e:bd:3b:2f:d6:58:45:d7:41:cf:c5:9b:29:8f: fe:41:36:2d:48:45:2a:6d:ef:3e:75:8e:f6:72:0e: 8c:45:11:df:50:61:cf:35:cf:4d:38:e4:40:9c:c1: a3:6e:b5:e2:4b:7d:aa:14:81:8d:f7:38:db:43:9e: dd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:74:BE:52:91:D3:A3:B1:C1:30:49:51:75:65:0D:5C:9D:C9:B6:F7 X509v3 Authority Key Identifier: keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:23:e4:0d:7d:8a:50:41:ab:88:20:4e:d2:fc:78:89:de:18: 18:54:cf:50:26:09:16:24:7a:02:5f:7f:de:ef:e0:7b:24:0b: 6e:1c:36:61:64:7d:c1:e6:07:04:e6:1e:47:dd:37:21:40:6a: d4:fe:57:1a:fb:6f:68:bc:42:83:ce:29:1f:16:2d:e8:ed:c7: ed:c8:09:9d:75:40:51:d3:b9:91:93:e8:3e:10:34:9c:ea:c0: b9:52:cc:0b:2c:8a:84:97:61:7a:25:19:69:b3:f0:c8:80:00: f8:9f:31:43:19:59:3d:27:33:a1:a3:ab:3d:e3:e5:14:31:a4: f4:54:1b:38:8f:5f:54:4d:49:5c:9b:0c:0f:ff:11:ed:da:83: d4:8b:18:43:e7:4a:09:b5:c0:75:74:51:bb:08:da:2f:56:26: 33:c6:cd:97:ab:bb:90:71:05:0c:4f:62:75:24:b8:96:93:09: 6d:d0:bf:d1:bd:34:ab:bb:99:67:11:87:c0:a2:02:28:c7:9a: 3a:07:50:23:ba:d8:8b:55:35:71:8c:43:00:54:f7:47:9c:99: d5:81:4a:53:c3:77:0a:4d:d2:e8:f3:9c:b3:b8:79:1b:77:03: a1:8c:42:21:dd:ac:91:4f:9a:6a:a0:04:fe:16:67:18:b8:d7: 1b:fe:d5:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a4+7xrr09fHeB+MwIBYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZjFhOWRkMTI2ZjM3MjM3Y2UyMDBmYjg2MTZmZjkzN2Jj YTk2NmMwHhcNMjUxMjIwMTEwMTAzWhcNMjUxMjIxMTEwMTAzWjAzMTEwLwYDVQQD EyhhYjc0YmU1MjkxZDNhM2IxYzEzMDQ5NTE3NTY1MGQ1YzlkYzliNmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DjoYxl9Kh+AYMjNFsuILPGD3EGv WWREtJ/Rtg9vE3jKd3X/zrjmBIcT0jPs7qZow+RYFcfKQB/ISdm7x25dqTaaF8lr QjPRfx04Nb7VTIzZ0Z81aWy7lwiIxjOXf6jKwRM8iEGKn64j/Ku61OBf1N1l0R+Q tCeyzwzwPnUMHQoZpS5uMcIdrUO+UVaHEYzS6a/4AdoxQYiIHWXD8j/Yu4FkjlUS NB57fVGV9OCYXnA2qb0K4p7dTbir4gAiQlg8RMgDDr07L9ZYRddBz8WbKY/+QTYt SEUqbe8+dY72cg6MRRHfUGHPNc9NOORAnMGjbrXiS32qFIGN9zjbQ57d6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKt0vlKR06OxwTBJUXVlDVydybb3MB8GA1UdIwQY MBaAFBnxqd0SbzcjfOIA+4YW/5N7ypZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgt M2ZkMzA5ODhmNjc3LzEvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgtM2ZkMzA5ODhmNjc3 LzEvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCPkDX2K UEGriCBO0vx4id4YGFTPUCYJFiR6Al9/3u/geyQLbhw2YWR9weYHBOYeR903IUBq 1P5XGvtvaLxCg84pHxYt6O3H7cgJnXVAUdO5kZPoPhA0nOrAuVLMCyyKhJdheiUZ abPwyIAA+J8xQxlZPSczoaOrPePlFDGk9FQbOI9fVE1JXJsMD/8R7dqD1IsYQ+dK CbXAdXRRuwjaL1YmM8bNl6u7kHEFDE9idSS4lpMJbdC/0b00q7uZZxGHwKICKMea OgdQI7rYi1U1cYxDAFT3R5yZ1YFKU8N3Ck3S6POcs7h5G3cDoYxCId2skU+aaqAE /hZnGLjXG/7Vug== -----END CERTIFICATE-----Generated at Sat Dec 20 17:50:58 2025 by rpki-client