This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft File: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft (raw, json) Hash identifier: tio7ebJYq5ggaRLyTmd8JW4gBfS1iXMTgYA2opfhgxM= Subject key identifier: C1:12:55:7F:A9:BF:BA:1E:F3:7E:FF:E8:F5:DD:B3:CC:E0:15:9E:C2 Authority key identifier: 18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B Certificate issuer: /CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b Certificate serial: 019B4815BBAEF65537FDFD09674B1EBA48DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 22:02:22 +0000 Manifest this update: Mon 22 Dec 2025 22:02:22 +0000 Manifest next update: Tue 23 Dec 2025 22:02:22 +0000 Files and hashes: 1: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl (hash: S8EhOi3d5I9qQlSx7Q3pPfvaIBCPD1ZWoTZuaS5i8y4=) 2: YuDsO55F13UZ0cxSF251Oa2EzOk.roa (hash: E2zFm6YI+MUI5s6ZcM5A4TjlG7YlaadinjimTXzpUsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:bb:ae:f6:55:37:fd:fd:09:67:4b:1e:ba:48:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b Validity Not Before: Dec 22 22:02:22 2025 GMT Not After : Dec 23 22:02:22 2025 GMT Subject: CN=c112557fa9bfba1ef37effe8f5ddb3cce0159ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:d0:3e:15:09:60:6b:8d:65:ba:78:a9:8f: e1:50:cc:4d:7c:da:ac:f0:1b:d5:3a:27:bf:fd:3f: e7:e5:7a:c2:19:43:b6:8b:1e:41:6f:aa:88:2c:e4: 79:93:1e:97:db:e5:c0:2c:73:75:e0:86:50:e5:ef: e3:93:04:f9:9a:be:1b:55:fa:db:c7:25:b6:07:f6: 97:52:29:1d:6c:ec:9a:39:52:4b:a4:9a:3c:d8:31: 13:00:81:fd:4c:e0:9d:83:cc:9c:ec:19:04:7e:1e: c3:45:a7:37:bf:a0:5e:9a:87:1b:81:84:18:4a:a9: ef:92:15:90:c8:37:7f:f4:ed:81:86:ac:b1:5f:42: 77:e8:e8:ed:ec:10:85:dd:99:e7:c8:4b:53:70:36: 49:0f:0b:8f:f8:0e:24:5b:de:10:98:cd:78:94:74: a0:21:d8:f9:49:3e:07:52:03:71:24:ff:a8:15:ea: 1b:24:cf:72:07:95:61:53:78:05:37:d8:bc:1d:97: ab:c4:62:99:04:cf:6a:bd:54:2b:54:79:08:6f:5d: 73:41:92:55:94:b4:cc:47:1f:6b:a5:c6:65:74:62: 71:a9:a2:7d:a2:9e:6e:01:30:65:c7:96:03:66:38: cc:8a:0c:88:ac:0b:f9:a7:9b:8c:d3:d6:aa:af:f3: d3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:12:55:7F:A9:BF:BA:1E:F3:7E:FF:E8:F5:DD:B3:CC:E0:15:9E:C2 X509v3 Authority Key Identifier: keyid:18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:00:55:51:f4:8e:df:f5:2e:a7:c1:de:58:27:aa:eb:b0:57: 13:9a:cd:df:a6:95:a5:c5:0b:07:c2:84:6d:38:59:d3:06:4d: 1b:39:ed:9c:10:08:aa:7f:bc:94:08:db:66:d7:4e:e4:c0:35: 67:d3:6b:2f:14:27:4c:65:de:76:f7:45:81:a5:cc:20:0a:35: 0d:1c:3b:de:c7:f9:28:68:ca:11:f6:22:06:f2:ac:99:9d:22: db:0f:cc:65:c1:45:15:ab:8a:28:e9:30:1a:f6:d4:d1:d2:d7: 4d:c6:16:de:48:de:34:08:11:4a:de:d2:15:85:f9:11:b4:4a: 3e:9b:2d:92:35:d3:5c:31:43:77:7e:2e:16:d1:d3:98:55:75: 6f:fd:07:ad:9a:c0:1d:29:a1:94:9a:ab:f4:14:25:2b:30:55: 27:38:c7:51:23:5a:3e:81:03:91:4c:20:85:f2:10:53:3a:ec: 79:69:e1:93:14:1b:a7:1c:76:78:ca:c7:34:01:62:31:ef:dc: 02:d3:4c:65:8f:70:b2:73:fb:69:95:04:3f:d3:4f:3d:8c:6f: 71:84:80:f9:ac:68:8a:86:f3:58:ba:5d:af:c1:48:de:bd:fc: d5:34:68:f9:e9:1b:a0:1b:8a:db:20:66:01:04:ea:5f:06:92: 76:60:04:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFbuu9lU3/f0JZ0seukjfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OTk0N2E5YTVkODhjYzYyY2M4OTgyNjhmMmJjYWZkNmE3 ZmZjNWIwHhcNMjUxMjIyMjIwMjIyWhcNMjUxMjIzMjIwMjIyWjAzMTEwLwYDVQQD EyhjMTEyNTU3ZmE5YmZiYTFlZjM3ZWZmZThmNWRkYjNjY2UwMTU5ZWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw97QPhUJYGuNZbp4qY/hUMxNfNqs 8BvVOie//T/n5XrCGUO2ix5Bb6qILOR5kx6X2+XALHN14IZQ5e/jkwT5mr4bVfrb xyW2B/aXUikdbOyaOVJLpJo82DETAIH9TOCdg8yc7BkEfh7DRac3v6BemocbgYQY SqnvkhWQyDd/9O2BhqyxX0J36Ojt7BCF3ZnnyEtTcDZJDwuP+A4kW94QmM14lHSg Idj5ST4HUgNxJP+oFeobJM9yB5VhU3gFN9i8HZerxGKZBM9qvVQrVHkIb11zQZJV lLTMRx9rpcZldGJxqaJ9op5uATBlx5YDZjjMigyIrAv5p5uM09aqr/PT+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMESVX+pv7oe837/6PXds8zgFZ7CMB8GA1UdIwQY MBaAFBiZR6ml2IzGLMiYJo8ryv1qf/xbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0psSHFhWFlqTVlzeUpnbWp5dktfV3BfX0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83MjlmOTItNWYwMy00MTU4LTkwYWMt NmQ0MjhmMWMxNWZkLzEvR0psSHFhWFlqTVlzeUpnbWp5dktfV3BfX0ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS83MjlmOTItNWYwMy00MTU4LTkwYWMtNmQ0MjhmMWMxNWZk LzEvR0psSHFhWFlqTVlzeUpnbWp5dktfV3BfX0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgBVUfSO 3/Uup8HeWCeq67BXE5rN36aVpcULB8KEbThZ0wZNGzntnBAIqn+8lAjbZtdO5MA1 Z9NrLxQnTGXedvdFgaXMIAo1DRw73sf5KGjKEfYiBvKsmZ0i2w/MZcFFFauKKOkw GvbU0dLXTcYW3kjeNAgRSt7SFYX5EbRKPpstkjXTXDFDd34uFtHTmFV1b/0HrZrA HSmhlJqr9BQlKzBVJzjHUSNaPoEDkUwghfIQUzrseWnhkxQbpxx2eMrHNAFiMe/c AtNMZY9wsnP7aZUEP9NPPYxvcYSA+axoiobzWLpdr8FI3r381TRo+ekboBuK2yBm AQTqXwaSdmAETg== -----END CERTIFICATE-----Generated at Tue Dec 23 02:57:13 2025 by rpki-client