This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft File: _GpMWV8LLdBaH-Zyh8E84OvICts.mft (raw, json) Hash identifier: xh4Pmcg+H5In/zqPskDo8TYK8g9Mq4poTZuW8nbfz8I= Subject key identifier: 1F:D9:88:33:4E:98:21:56:DC:C2:35:09:61:DD:09:A0:D0:81:38:ED Authority key identifier: FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB Certificate issuer: /CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb Certificate serial: 019B6CFC7B5551D644CD86CD4139170F551E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft Manifest number: 17A1 Signing time: Tue 30 Dec 2025 02:00:44 +0000 Manifest this update: Tue 30 Dec 2025 02:00:44 +0000 Manifest next update: Wed 31 Dec 2025 02:00:44 +0000 Files and hashes: 1: PcG8Sq5FdbAe30rm_n_GcaQonsg.roa (hash: Bm8FQyjRUmW9/pGMLb92kJbH7eLAq4FPc7+Cd5r6swA=) 2: _GpMWV8LLdBaH-Zyh8E84OvICts.crl (hash: ow76cRjEIFh5HBdOxMG4FQpDNRaT3KWvzYDvnrvkI/Y=) 3: vCyJ_4gbyrukZoytmDIUJKLGPq0.roa (hash: MURqYSpROMIIkoPGoMUJ5DUudVIqQ91/GFdxEyduads=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:7b:55:51:d6:44:cd:86:cd:41:39:17:0f:55:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb Validity Not Before: Dec 30 02:00:44 2025 GMT Not After : Dec 31 02:00:44 2025 GMT Subject: CN=1fd988334e982156dcc2350961dd09a0d08138ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:99:44:dc:16:d7:7e:b2:aa:4b:9a:c6:9e:8e: 26:d4:50:e6:bd:6c:3f:84:30:8d:c8:f8:fb:e1:73: d9:9f:95:fa:9a:fc:8b:8f:a8:12:01:40:86:76:2b: fa:05:b5:73:b9:58:90:34:e1:12:96:a6:40:bf:ed: 01:c8:21:46:ec:00:fc:1d:17:f3:9a:eb:ae:3f:89: 93:18:4a:6a:c7:a0:89:c6:01:15:b3:25:1c:af:53: ac:21:34:52:c2:d4:17:01:ae:dd:67:8c:d7:c5:0e: 2c:fd:c8:db:a6:fd:0d:fd:60:7a:f7:11:13:c3:b2: 05:ef:a6:a2:3c:ef:21:98:fd:74:0b:14:10:27:5b: 80:ca:ce:80:16:ff:d0:af:84:d9:47:40:5e:68:47: 76:18:dd:ec:6a:be:11:ed:64:50:e1:9a:46:65:31: 31:80:60:33:b6:eb:ee:bb:48:1e:9f:fa:19:7a:fc: f0:55:44:49:22:62:2d:8a:96:33:15:a9:4b:7f:15: cb:c8:09:25:59:6b:9b:99:cf:83:d9:55:3b:bd:7a: 41:99:14:82:01:44:15:e7:98:80:c2:16:90:58:cd: 57:c0:8e:6d:97:94:f2:e1:e3:b0:46:fd:ca:e6:9f: 70:53:f2:13:8d:7d:6c:6f:1d:bf:db:3f:b7:39:5e: 0c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D9:88:33:4E:98:21:56:DC:C2:35:09:61:DD:09:A0:D0:81:38:ED X509v3 Authority Key Identifier: keyid:FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5a:6f:f8:a9:24:08:8e:c8:6b:c9:92:58:18:ee:18:41:8e: 57:ac:89:12:f9:31:33:9b:89:30:bb:53:0d:60:f1:3f:d0:4c: 8e:2c:ae:fb:6c:f2:98:c2:04:30:52:4a:cd:03:ae:49:54:39: 91:56:f9:dc:7e:7a:39:5a:64:1c:71:83:98:29:8f:e0:03:d3: 7f:96:6e:4a:ab:cf:ba:fc:45:a6:9e:70:bf:29:eb:20:b9:67: 77:db:c6:77:1d:72:4a:36:f2:57:62:8b:93:7e:3a:22:fd:59: 32:db:09:f9:e6:74:f7:8b:ee:0c:23:dc:b6:86:7c:7b:20:fb: 20:9d:36:51:e5:41:0b:15:9d:65:d8:0f:7b:6c:c2:4a:ec:65: 54:6e:0e:4d:9a:95:9b:de:a8:5c:8b:50:82:06:50:54:08:ba: 58:08:ea:67:06:66:f0:49:9a:a4:88:4a:4f:81:e8:c3:26:df: f3:db:ed:5f:40:bc:0d:c1:32:53:59:bc:aa:2f:a7:01:b1:4d: d8:b1:60:8b:55:73:04:ca:a3:87:96:11:1d:ef:13:b8:96:0d: ba:9e:09:7f:72:e7:ca:af:b0:f1:a4:67:9a:89:24:30:47:1f: c3:48:64:27:6f:af:9a:1a:6e:b8:9b:d6:5d:56:97:91:05:b4: e9:ff:74:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/HtVUdZEzYbNQTkXD1UeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNmE0YzU5NWYwYjJkZDA1YTFmZTY3Mjg3YzEzY2UwZWJj ODBhZGIwHhcNMjUxMjMwMDIwMDQ0WhcNMjUxMjMxMDIwMDQ0WjAzMTEwLwYDVQQD EygxZmQ5ODgzMzRlOTgyMTU2ZGNjMjM1MDk2MWRkMDlhMGQwODEzOGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2plE3BbXfrKqS5rGno4m1FDmvWw/ hDCNyPj74XPZn5X6mvyLj6gSAUCGdiv6BbVzuViQNOESlqZAv+0ByCFG7AD8HRfz muuuP4mTGEpqx6CJxgEVsyUcr1OsITRSwtQXAa7dZ4zXxQ4s/cjbpv0N/WB69xET w7IF76aiPO8hmP10CxQQJ1uAys6AFv/Qr4TZR0BeaEd2GN3sar4R7WRQ4ZpGZTEx gGAztuvuu0gen/oZevzwVURJImItipYzFalLfxXLyAklWWubmc+D2VU7vXpBmRSC AUQV55iAwhaQWM1XwI5tl5Ty4eOwRv3K5p9wU/ITjX1sbx2/2z+3OV4MxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/ZiDNOmCFW3MI1CWHdCaDQgTjtMB8GA1UdIwQY MBaAFPxqTFlfCy3QWh/mcofBPODryArbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0dwTVdWOExMZEJhSC1aeWg4RTg0T3ZJQ3RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wNjk3MGEtMjg2Ni00ODlkLWI3MWEt ODRlNmNkMjIzMmFjLzEvX0dwTVdWOExMZEJhSC1aeWg4RTg0T3ZJQ3RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wNjk3MGEtMjg2Ni00ODlkLWI3MWEtODRlNmNkMjIzMmFj LzEvX0dwTVdWOExMZEJhSC1aeWg4RTg0T3ZJQ3RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1pv+Kkk CI7Ia8mSWBjuGEGOV6yJEvkxM5uJMLtTDWDxP9BMjiyu+2zymMIEMFJKzQOuSVQ5 kVb53H56OVpkHHGDmCmP4APTf5ZuSqvPuvxFpp5wvynrILlnd9vGdx1ySjbyV2KL k346Iv1ZMtsJ+eZ094vuDCPctoZ8eyD7IJ02UeVBCxWdZdgPe2zCSuxlVG4OTZqV m96oXItQggZQVAi6WAjqZwZm8EmapIhKT4Howybf89vtX0C8DcEyU1m8qi+nAbFN 2LFgi1VzBMqjh5YRHe8TuJYNup4Jf3Lnyq+w8aRnmokkMEcfw0hkJ2+vmhpuuJvW XVaXkQW06f90QQ== -----END CERTIFICATE-----Generated at Tue Dec 30 06:15:46 2025 by rpki-client