This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json) Hash identifier: dTqpNNHOXGtkCWnmfP29UWfWR6VLnYUyRsf4iXHZbSk= Subject key identifier: B4:24:3E:2F:F1:18:97:46:F6:E1:F5:28:AB:87:DF:8C:28:69:F0:F4 Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92 Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492 Certificate serial: 019B397D8A1A6852E59DAFCE32DE89268024 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft Manifest number: 179A Signing time: Sat 20 Dec 2025 02:01:27 +0000 Manifest this update: Sat 20 Dec 2025 02:01:27 +0000 Manifest next update: Sun 21 Dec 2025 02:01:27 +0000 Files and hashes: 1: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: hmvCPzfsJm9Q/rxw97m4ShQqDsOD98OCMlZYv7NI0bI=) 2: bDbEU-n8q6DljyAoCb2HG5IpwAM.roa (hash: eRAv8rRBi2xmtRMeoh59gG1sQ1a+pnNx2m0jnwKDhWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:8a:1a:68:52:e5:9d:af:ce:32:de:89:26:80:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492 Validity Not Before: Dec 20 02:01:27 2025 GMT Not After : Dec 21 02:01:27 2025 GMT Subject: CN=b4243e2ff1189746f6e1f528ab87df8c2869f0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:61:0c:fc:b0:51:01:fe:1f:38:9a:63:c6:2c: 55:8e:e7:f5:c4:2a:94:71:82:22:32:be:98:30:16: f2:a1:33:c6:79:ec:29:b7:2f:49:6b:06:9a:a9:04: 84:37:5a:14:d2:fb:87:58:37:5e:fc:5b:c9:72:76: 16:5b:b1:16:db:de:2e:ec:21:3b:62:cc:ec:80:30: c7:01:f5:c8:41:ed:91:36:ac:a9:14:e7:c8:a2:86: 1a:86:16:cb:dc:ad:5f:c2:6a:5a:73:38:a9:fa:5f: fe:d1:01:21:6d:5c:ee:1b:0e:90:03:f1:f2:5f:6a: a1:f7:b6:e0:bb:a8:0e:db:e9:89:c7:a0:b6:a6:b7: 1f:00:51:29:c9:e1:bb:b6:07:c3:f5:3a:5d:0e:b6: 04:94:51:8d:0c:ac:02:9a:c9:26:a6:c7:c2:a3:7b: aa:28:22:dc:67:32:12:58:37:97:58:af:b3:5c:52: 17:1a:df:0f:8c:03:e8:5d:07:b3:55:b8:c3:86:6f: 54:fc:c1:6b:40:ab:34:ee:6e:fa:5c:01:6d:2c:6b: 0e:31:ee:49:c0:77:75:50:6d:f5:d8:5f:2c:b2:6d: e8:c5:bb:44:bb:35:2e:9a:da:bc:04:f9:f6:24:41: 06:a0:1e:e6:3b:6a:75:08:d2:9e:0e:d9:81:d3:f0: 16:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:24:3E:2F:F1:18:97:46:F6:E1:F5:28:AB:87:DF:8C:28:69:F0:F4 X509v3 Authority Key Identifier: keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:83:d6:da:c3:86:b4:ec:3b:27:d0:6e:a1:17:5a:38:c6:00: 00:d2:d8:5f:cc:f4:bc:0e:e7:f6:fb:a4:56:00:b7:1a:eb:02: ec:78:86:71:ed:e1:6f:e3:03:94:83:b4:3b:55:60:b7:d2:6d: f5:d9:f8:4d:76:6f:9b:c6:b2:a9:3c:8c:cf:4a:76:81:eb:cc: e9:bc:aa:69:9a:cf:a8:92:70:6b:fb:16:3c:4f:f9:28:57:91: c8:be:f1:1c:df:de:ae:3c:5b:52:23:31:a6:c9:5d:81:b9:df: 2e:c3:65:c1:d8:93:b3:0d:72:b5:54:a7:9d:12:5e:0f:de:11: 42:b9:ec:2c:01:8e:37:34:a3:10:b3:54:22:e5:66:30:8f:49: 82:86:f3:41:cb:f3:68:6f:83:96:c2:d5:9d:df:b5:ae:39:3f: d3:6d:9e:5d:db:c7:65:8c:f7:54:21:62:e2:bd:16:8b:5b:34: 54:c6:84:40:19:7b:1a:bb:8f:7f:02:07:86:f5:2b:e0:f9:37: 58:71:c1:5b:b9:57:8f:e6:c9:b7:86:25:ee:a4:40:db:c8:15: 74:15:b2:07:d0:c9:c8:ad:a5:6d:3e:6a:3b:73:60:16:b1:36: cb:5c:a1:18:32:8c:56:40:6b:5d:27:b0:da:1a:02:4b:52:b4: 69:bb:63:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fYoaaFLlna/OMt6JJoAkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZmZmZjI4OWYyZGFkMGZjMDg0NTZiMGJhZDU0ZDdiYTQ0 OWE0OTIwHhcNMjUxMjIwMDIwMTI3WhcNMjUxMjIxMDIwMTI3WjAzMTEwLwYDVQQD EyhiNDI0M2UyZmYxMTg5NzQ2ZjZlMWY1MjhhYjg3ZGY4YzI4NjlmMGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmEM/LBRAf4fOJpjxixVjuf1xCqU cYIiMr6YMBbyoTPGeewpty9JawaaqQSEN1oU0vuHWDde/FvJcnYWW7EW294u7CE7 YszsgDDHAfXIQe2RNqypFOfIooYahhbL3K1fwmpaczip+l/+0QEhbVzuGw6QA/Hy X2qh97bgu6gO2+mJx6C2prcfAFEpyeG7tgfD9TpdDrYElFGNDKwCmskmpsfCo3uq KCLcZzISWDeXWK+zXFIXGt8PjAPoXQezVbjDhm9U/MFrQKs07m76XAFtLGsOMe5J wHd1UG312F8ssm3oxbtEuzUumtq8BPn2JEEGoB7mO2p1CNKeDtmB0/AWgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQkPi/xGJdG9uH1KKuH34woafD0MB8GA1UdIwQY MBaAFBn//yifLa0PwIRWsLrVTXukSaSSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2ZfX0tKOHRyUV9BaEZhd3V0Vk5lNlJKcEpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jMTFjODctZWZiYi00NWU4LTliMDMt ZDUyNTcxOGFhNDRhLzEvR2ZfX0tKOHRyUV9BaEZhd3V0Vk5lNlJKcEpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jMTFjODctZWZiYi00NWU4LTliMDMtZDUyNTcxOGFhNDRh LzEvR2ZfX0tKOHRyUV9BaEZhd3V0Vk5lNlJKcEpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYPW2sOG tOw7J9BuoRdaOMYAANLYX8z0vA7n9vukVgC3GusC7HiGce3hb+MDlIO0O1Vgt9Jt 9dn4TXZvm8ayqTyMz0p2gevM6byqaZrPqJJwa/sWPE/5KFeRyL7xHN/erjxbUiMx psldgbnfLsNlwdiTsw1ytVSnnRJeD94RQrnsLAGONzSjELNUIuVmMI9JgobzQcvz aG+DlsLVnd+1rjk/022eXdvHZYz3VCFi4r0Wi1s0VMaEQBl7GruPfwIHhvUr4Pk3 WHHBW7lXj+bJt4Yl7qRA28gVdBWyB9DJyK2lbT5qO3NgFrE2y1yhGDKMVkBrXSew 2hoCS1K0abtjIw== -----END CERTIFICATE-----Generated at Sat Dec 20 06:40:35 2025 by rpki-client