This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft File: GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft (raw, json) Hash identifier: 6ctChLig/VwTWnkGr/ZXVVpnp7O/9aZnKECZPsEjyLM= Subject key identifier: 85:4C:17:1F:60:CF:24:F2:1A:18:A7:16:3E:9D:CA:0D:EE:1B:4C:89 Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26 Certificate issuer: /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26 Certificate serial: 019B3946BC5AE9A64A62674300DCE706B384 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 01:01:35 +0000 Manifest this update: Sat 20 Dec 2025 01:01:35 +0000 Manifest next update: Sun 21 Dec 2025 01:01:35 +0000 Files and hashes: 1: Co6M_nxOxRb4ejhwPMZFPOzlY1U.roa (hash: sSWEBAjRZaqtAdwjOfykVqgf7b7OWWPQ8cRcY8XqZmU=) 2: GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl (hash: s3fe8qLIUO43qNkvhsT/xb7KvhqgVphZX1zjUctCSig=) 3: LASNDVJFR7nISIIuLJuen3qOehA.roa (hash: zvljnKWMuxdFNbiIQd7aWSR9xyeCp6tRJSsTE0UC5w8=) 4: y0q_mnHeqqODRkh3mN1XsHcA07o.roa (hash: vPYM1qZGBQlB55R1ITXDPJhnP7mpA1SIlCNpOTcVP6w=) 5: zO1aOnWzpH8Vmp45J1jZtXxaKKw.roa (hash: N6qZrGzU3tG6EdhOgnUHNSlOSI1pX79eNnDUPpj91So=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:bc:5a:e9:a6:4a:62:67:43:00:dc:e7:06:b3:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26 Validity Not Before: Dec 20 01:01:35 2025 GMT Not After : Dec 21 01:01:35 2025 GMT Subject: CN=854c171f60cf24f21a18a7163e9dca0dee1b4c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c8:0f:8a:a3:f4:bb:9c:7d:2d:56:75:4a:ad: d1:40:d0:2e:3e:ea:da:09:c3:c7:b5:80:5d:ae:c2: e2:52:47:12:cc:db:6d:1e:b5:1c:26:a6:64:81:04: ca:24:41:36:1e:cf:05:a5:95:d0:04:a9:bc:53:96: c9:1d:cb:e1:0d:ce:43:47:8b:05:a4:0b:3f:20:70: 06:49:87:ae:82:dc:d0:1c:3b:72:7f:53:6a:98:39: bc:28:11:64:ce:1f:07:e7:05:60:b2:50:a3:33:c4: f7:87:d2:79:e3:d3:31:94:4a:2e:3c:2b:8c:0f:0e: 76:83:86:b4:c7:48:d3:8a:52:e4:9e:9f:95:5b:d8: a0:c4:45:8a:32:6d:ef:81:57:20:6e:99:bc:fb:2e: 84:f4:70:86:53:64:51:70:15:41:c5:35:53:5a:67: c0:e2:49:9a:47:2e:65:8f:68:f7:40:06:35:6a:3c: 5d:42:27:11:64:b8:8f:ca:90:fc:9a:e2:e3:45:02: ea:d7:d9:df:68:e8:21:5b:14:4b:a5:74:1a:66:b4: 6b:6d:72:f9:16:50:63:31:49:cf:2e:65:71:84:a5: a1:b9:90:ef:8c:21:cc:7a:3d:02:af:20:a4:79:5b: e5:34:7e:82:84:c8:b6:df:53:d0:ab:c6:c2:8f:91: be:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4C:17:1F:60:CF:24:F2:1A:18:A7:16:3E:9D:CA:0D:EE:1B:4C:89 X509v3 Authority Key Identifier: keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:79:d2:b2:6b:1f:ab:cc:70:5c:c7:4b:fe:b5:5f:d7:df:39: 06:c2:3d:a5:20:2c:43:21:ad:28:0a:e5:90:a6:c7:58:19:80: 8d:bf:3a:e9:dd:23:17:a7:59:6a:21:81:c4:0c:10:a4:88:4f: 2e:51:5f:14:b4:74:7e:29:9a:6a:d0:f4:79:a6:4e:43:2a:47: 28:64:7d:33:7f:6c:ba:a3:5f:5f:cc:4a:35:14:06:bb:39:11: 76:ba:4a:40:f4:1a:1e:b1:e2:84:db:46:da:35:bf:3f:ca:e4: f8:42:e3:1f:89:86:94:7f:a5:ed:60:8a:12:fa:45:4b:13:58: 01:70:d3:c3:e6:f0:8b:5a:a7:f7:92:e2:0c:9c:6f:8c:82:ef: 4a:d5:1e:16:83:4b:2e:85:76:7f:0f:8e:1f:1d:49:eb:02:3f: 3c:96:6c:51:56:e7:df:0e:c4:19:95:c0:10:cd:84:fb:da:bd: 48:5c:4a:4a:13:76:6c:c1:03:19:c1:f2:3b:18:f4:3a:f2:b7: f8:04:dd:39:c2:46:99:ba:9f:3d:40:b6:67:ea:f7:77:12:2c: 5c:92:74:5e:d1:98:e9:a3:7b:d1:49:b3:23:51:49:a0:b8:87: 21:ea:ff:88:77:dd:81:8e:c1:40:81:c5:2a:3b:0a:71:32:d3: a2:d5:a3:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Rrxa6aZKYmdDANznBrOEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4Y2FlYjE0YTAxZWUxNmQ4MzY1NjVlMTRmYTUzYjRhYjNj M2NkMjYwHhcNMjUxMjIwMDEwMTM1WhcNMjUxMjIxMDEwMTM1WjAzMTEwLwYDVQQD Eyg4NTRjMTcxZjYwY2YyNGYyMWExOGE3MTYzZTlkY2EwZGVlMWI0Yzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsgPiqP0u5x9LVZ1Sq3RQNAuPura CcPHtYBdrsLiUkcSzNttHrUcJqZkgQTKJEE2Hs8FpZXQBKm8U5bJHcvhDc5DR4sF pAs/IHAGSYeugtzQHDtyf1NqmDm8KBFkzh8H5wVgslCjM8T3h9J549MxlEouPCuM Dw52g4a0x0jTilLknp+VW9igxEWKMm3vgVcgbpm8+y6E9HCGU2RRcBVBxTVTWmfA 4kmaRy5lj2j3QAY1ajxdQicRZLiPypD8muLjRQLq19nfaOghWxRLpXQaZrRrbXL5 FlBjMUnPLmVxhKWhuZDvjCHMej0CryCkeVvlNH6ChMi231PQq8bCj5G+YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVMFx9gzyTyGhinFj6dyg3uG0yJMB8GA1UdIwQY MBaAFBjK6xSgHuFtg2Vl4U+lO0qzw80mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR01yckZLQWU0VzJEWldYaFQ2VTdTclBEelNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lN2IxZDctM2Q3YS00NmFiLTgxMGYt ZWRkZjIzYzFiYTZkLzEvR01yckZLQWU0VzJEWldYaFQ2VTdTclBEelNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9lN2IxZDctM2Q3YS00NmFiLTgxMGYtZWRkZjIzYzFiYTZk LzEvR01yckZLQWU0VzJEWldYaFQ2VTdTclBEelNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHnSsmsf q8xwXMdL/rVf1985BsI9pSAsQyGtKArlkKbHWBmAjb866d0jF6dZaiGBxAwQpIhP LlFfFLR0fimaatD0eaZOQypHKGR9M39suqNfX8xKNRQGuzkRdrpKQPQaHrHihNtG 2jW/P8rk+ELjH4mGlH+l7WCKEvpFSxNYAXDTw+bwi1qn95LiDJxvjILvStUeFoNL LoV2fw+OHx1J6wI/PJZsUVbn3w7EGZXAEM2E+9q9SFxKShN2bMEDGcHyOxj0OvK3 +ATdOcJGmbqfPUC2Z+r3dxIsXJJ0XtGY6aN70UmzI1FJoLiHIer/iHfdgY7BQIHF KjsKcTLTotWj6A== -----END CERTIFICATE-----Generated at Sat Dec 20 02:51:32 2025 by rpki-client