This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft File: GtYaUvEILs9Ml7USK0YRIlBzRRs.mft (raw, json) Hash identifier: Q0ir2sLrsenhQPJ2xOR8gQgDjuUPyBvC2j+IpDvggZo= Subject key identifier: B1:2E:0B:D9:23:3F:D5:60:89:32:48:CE:9A:81:C4:E3:97:AE:6F:52 Authority key identifier: 1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B Certificate issuer: /CN=1ad61a52f1082ecf4c97b5122b4611225073451b Certificate serial: 019B736C92DD6B8C1E6188D335BCD040435F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft Manifest number: 17A4 Signing time: Wed 31 Dec 2025 08:00:53 +0000 Manifest this update: Wed 31 Dec 2025 08:00:53 +0000 Manifest next update: Thu 01 Jan 2026 08:00:53 +0000 Files and hashes: 1: GtYaUvEILs9Ml7USK0YRIlBzRRs.crl (hash: 3nKzBExoWQdiJupDFdl0lQyX2AeeOmKc26MKlDBDrQE=) 2: rDCQZOSrxJZ5t1EHBcAmewJ2zuE.roa (hash: 5o5LCz2EfBpIGStnQttGujPIzxdxxRQF2IZp5UipRj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:6c:92:dd:6b:8c:1e:61:88:d3:35:bc:d0:40:43:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ad61a52f1082ecf4c97b5122b4611225073451b Validity Not Before: Dec 31 08:00:53 2025 GMT Not After : Jan 1 08:00:53 2026 GMT Subject: CN=b12e0bd9233fd560893248ce9a81c4e397ae6f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:3a:70:0a:4f:fd:5a:01:b1:30:d9:bd:b6: 2f:91:de:14:3d:c7:5c:6b:82:bf:de:1f:9b:78:16: 43:60:ba:43:e1:3b:0c:ec:af:81:64:3a:fb:90:0b: 81:b1:0f:73:d6:98:23:cc:3c:b2:fd:06:f0:01:f4: c0:5e:23:62:eb:9c:af:cd:5d:0a:32:8f:a0:17:be: 59:37:0f:9c:d0:5b:8d:ba:08:56:0c:ca:80:2e:15: 90:93:6a:c3:59:a6:f5:bb:8d:5b:0c:ea:d4:34:ce: ef:4b:f6:6e:0e:37:4f:2f:6f:9e:9f:5a:7a:d2:75: 40:51:5b:77:7d:5d:e0:3a:c1:48:e5:0f:0d:0a:5a: 87:2c:5b:08:65:41:1c:ea:96:50:30:40:ce:d7:47: b0:a3:ae:de:02:99:68:b8:96:57:a4:2b:fc:6b:ea: b2:1b:d7:08:01:07:45:07:04:00:38:40:f3:c2:7c: 74:2c:de:3d:e3:85:80:8b:73:0f:df:9b:08:97:ed: c2:51:2a:8b:3f:75:31:a5:0d:27:49:c0:c3:d3:d4: cb:81:d4:f9:44:f4:81:54:37:38:ba:52:c9:5f:55: eb:56:d0:5f:00:47:8e:51:8d:cf:d9:c8:63:10:c4: 2b:bb:0f:a9:e8:88:6c:64:1d:22:28:56:55:cc:36: 2f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2E:0B:D9:23:3F:D5:60:89:32:48:CE:9A:81:C4:E3:97:AE:6F:52 X509v3 Authority Key Identifier: keyid:1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:17:13:12:09:c4:3f:25:28:12:4a:fd:4b:54:25:bd:b1:1f: 6d:ca:c7:f3:97:d6:81:65:bf:3a:26:b7:30:9a:97:fe:e8:d3: 7b:a9:87:77:53:99:34:2a:a8:c9:b5:65:a2:69:b0:3b:c6:f6: e5:27:bd:95:42:f9:8c:f5:53:da:b5:fa:94:7c:0a:bd:d0:c1: 32:95:b4:7d:39:5d:64:45:25:b8:42:77:b3:c9:b1:96:50:a2: d9:56:ac:d9:6e:1b:19:bb:b9:a0:be:7e:ac:79:0a:2e:01:7b: b3:8c:f5:0c:14:ea:3b:da:2c:a4:34:36:4a:d3:19:c6:4d:67: d7:4c:20:27:e9:86:74:21:3b:e4:0a:cc:48:c3:f1:4d:0b:2e: 4b:ed:45:ca:54:6b:93:05:b6:18:7e:82:af:e3:f4:b6:1e:2b: ac:c4:cc:02:63:9f:76:bd:bc:01:7c:3d:04:80:71:0e:38:2c: 3b:04:c1:d4:95:49:4d:ef:7b:bc:78:99:c1:12:fc:a6:33:89: ee:28:a8:fb:73:a4:ac:50:80:c4:4e:89:47:b1:4c:54:f7:38: c3:c4:67:5a:60:c7:0e:95:d0:a7:0e:ab:18:35:ea:ab:c7:96: 39:86:5e:82:24:cc:e0:a4:bd:04:b7:ac:50:f8:0d:af:ba:b6: 8a:76:a8:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzbJLda4weYYjTNbzQQENfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZDYxYTUyZjEwODJlY2Y0Yzk3YjUxMjJiNDYxMTIyNTA3 MzQ1MWIwHhcNMjUxMjMxMDgwMDUzWhcNMjYwMTAxMDgwMDUzWjAzMTEwLwYDVQQD EyhiMTJlMGJkOTIzM2ZkNTYwODkzMjQ4Y2U5YTgxYzRlMzk3YWU2ZjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcw6cApP/VoBsTDZvbYvkd4UPcdc a4K/3h+beBZDYLpD4TsM7K+BZDr7kAuBsQ9z1pgjzDyy/QbwAfTAXiNi65yvzV0K Mo+gF75ZNw+c0FuNughWDMqALhWQk2rDWab1u41bDOrUNM7vS/ZuDjdPL2+en1p6 0nVAUVt3fV3gOsFI5Q8NClqHLFsIZUEc6pZQMEDO10ewo67eAplouJZXpCv8a+qy G9cIAQdFBwQAOEDzwnx0LN4944WAi3MP35sIl+3CUSqLP3UxpQ0nScDD09TLgdT5 RPSBVDc4ulLJX1XrVtBfAEeOUY3P2chjEMQruw+p6IhsZB0iKFZVzDYvHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEuC9kjP9VgiTJIzpqBxOOXrm9SMB8GA1UdIwQY MBaAFBrWGlLxCC7PTJe1EitGESJQc0UbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3RZYVV2RUlMczlNbDdVU0swWVJJbEJ6UlJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81OWQ1NTUtMjBiZC00YzQyLTg0YmEt NzJjZTk1YmE5YWZhLzEvR3RZYVV2RUlMczlNbDdVU0swWVJJbEJ6UlJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81OWQ1NTUtMjBiZC00YzQyLTg0YmEtNzJjZTk1YmE5YWZh LzEvR3RZYVV2RUlMczlNbDdVU0swWVJJbEJ6UlJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhcTEgnE PyUoEkr9S1QlvbEfbcrH85fWgWW/Oia3MJqX/ujTe6mHd1OZNCqoybVlommwO8b2 5Se9lUL5jPVT2rX6lHwKvdDBMpW0fTldZEUluEJ3s8mxllCi2Vas2W4bGbu5oL5+ rHkKLgF7s4z1DBTqO9ospDQ2StMZxk1n10wgJ+mGdCE75ArMSMPxTQsuS+1FylRr kwW2GH6Cr+P0th4rrMTMAmOfdr28AXw9BIBxDjgsOwTB1JVJTe97vHiZwRL8pjOJ 7iio+3OkrFCAxE6JR7FMVPc4w8RnWmDHDpXQpw6rGDXqq8eWOYZegiTM4KS9BLes UPgNr7q2inaoDA== -----END CERTIFICATE-----Generated at Wed Dec 31 09:35:05 2025 by rpki-client