This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json) Hash identifier: SSrzW3uoUJyyFjFo03XY7XvXJa7KIVncYLO67eCM5bg= Subject key identifier: 90:77:5F:1B:E8:10:4B:E5:88:CE:38:1C:F0:0E:14:DF:5B:F5:A0:53 Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16 Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516 Certificate serial: 019B3D2307E2677FA72F636A669B2D78E1D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 19:01:04 +0000 Manifest this update: Sat 20 Dec 2025 19:01:04 +0000 Manifest next update: Sun 21 Dec 2025 19:01:04 +0000 Files and hashes: 1: 3n_Nd4cUj6teASapK4pWavXgfU0.roa (hash: KngeXtbNNWR05hMf2WkynvKsVClU9oGlPMx0Mk7lMOM=) 2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: DtMe/MKzGJDp5Fm8+OfKzw4ec9s5kSGytebHIC+A1C4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:07:e2:67:7f:a7:2f:63:6a:66:9b:2d:78:e1:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516 Validity Not Before: Dec 20 19:01:04 2025 GMT Not After : Dec 21 19:01:04 2025 GMT Subject: CN=90775f1be8104be588ce381cf00e14df5bf5a053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:95:27:b7:ed:71:58:0a:6f:9d:1a:6d:6a:45: 39:25:c3:da:80:c7:ad:4a:ab:93:eb:49:6a:05:06: e8:ee:5e:b8:59:16:3a:34:45:53:3c:5c:71:22:44: d8:fd:df:ef:ad:3f:e2:23:5c:f6:f5:a3:ae:3c:8d: 69:72:c4:2a:7d:14:c9:16:83:69:99:d9:87:70:6f: c4:0a:60:ee:2c:00:3f:34:44:db:16:bc:cb:40:72: ac:80:a1:34:8e:06:5d:76:e5:20:32:e7:cb:c4:4c: 7e:da:a9:4a:1c:6b:d7:10:e6:b0:bd:a0:5f:b3:89: 25:26:01:39:51:0d:d5:c0:f3:73:82:53:ae:54:3c: 99:92:0f:45:a5:a2:f6:23:37:f3:9c:b3:16:db:f6: 46:c4:4b:62:6b:86:0e:84:22:6e:53:00:1a:a4:71: 77:b5:70:18:4c:37:e4:eb:f2:d7:eb:17:16:7b:05: 14:b2:59:44:f7:4c:35:0e:f4:a7:1f:bf:bd:42:4a: 10:16:ea:83:24:ba:34:15:bc:6b:c6:88:e5:6a:a4: 63:5a:73:bd:c3:c2:af:3d:e5:78:8a:3e:f7:f9:23: 24:dd:6b:33:33:23:05:b5:c5:e6:e3:72:e6:a2:28: 2b:fa:09:2b:88:e0:25:23:8b:0a:70:aa:46:9f:d4: e3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:77:5F:1B:E8:10:4B:E5:88:CE:38:1C:F0:0E:14:DF:5B:F5:A0:53 X509v3 Authority Key Identifier: keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ce:53:b8:c6:92:ae:00:0f:6a:4d:46:e2:20:0e:13:ac:88: 20:12:ba:f3:05:4a:fb:53:5c:b5:a5:ea:1e:44:27:99:00:5f: 24:bc:e6:23:00:6b:78:f4:48:cc:1b:e9:2a:f5:ad:b3:1b:d6: 95:bf:c3:4e:be:8b:82:ea:38:2a:53:48:bb:5c:16:e0:e1:08: 9a:57:70:31:9f:9b:16:02:07:c9:cc:85:9d:b9:0e:1c:0a:63: 6e:96:e5:f5:99:38:96:be:e3:64:0a:09:fe:26:7c:1e:32:16: e8:2f:62:76:a8:86:f7:4a:11:f2:3e:ad:73:ac:06:75:c6:e4: 9e:07:6e:ea:ac:25:c1:b9:6f:11:75:6e:b7:c7:9d:ac:5a:00: ff:5b:d9:04:dc:88:61:32:75:05:12:ee:2d:10:1d:7d:76:df: 22:85:5c:b9:c6:aa:70:8e:42:5c:1e:e2:4d:84:ed:04:6d:07: 72:72:92:54:56:89:ac:0d:d1:9b:dc:37:08:d9:62:c1:5e:9d: 2f:eb:ab:67:2f:89:23:d9:7b:18:e7:14:f7:b0:cb:5d:ce:0f: 26:73:05:94:e9:d0:1d:22:e8:17:6a:5d:96:5d:a5:e4:f5:bc: b2:26:28:48:77:3a:0b:0d:80:eb:39:2b:bb:5e:5f:86:c6:40: f1:a3:54:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IwfiZ3+nL2NqZpsteOHWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMTc4MDkyNzA0NzBkN2MyNTY3MTEyZmI0MGE5ZWY3MTI2 MDA1MTYwHhcNMjUxMjIwMTkwMTA0WhcNMjUxMjIxMTkwMTA0WjAzMTEwLwYDVQQD Eyg5MDc3NWYxYmU4MTA0YmU1ODhjZTM4MWNmMDBlMTRkZjViZjVhMDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupUnt+1xWApvnRptakU5JcPagMet SquT60lqBQbo7l64WRY6NEVTPFxxIkTY/d/vrT/iI1z29aOuPI1pcsQqfRTJFoNp mdmHcG/ECmDuLAA/NETbFrzLQHKsgKE0jgZdduUgMufLxEx+2qlKHGvXEOawvaBf s4klJgE5UQ3VwPNzglOuVDyZkg9FpaL2IzfznLMW2/ZGxEtia4YOhCJuUwAapHF3 tXAYTDfk6/LX6xcWewUUsllE90w1DvSnH7+9QkoQFuqDJLo0FbxrxojlaqRjWnO9 w8KvPeV4ij73+SMk3WszMyMFtcXm43Lmoigr+gkriOAlI4sKcKpGn9TjeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJB3XxvoEEvliM44HPAOFN9b9aBTMB8GA1UdIwQY MBaAFBoXgJJwRw18JWcRL7QKnvcSYAUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mNDc3MTAtNGEyMy00YmRjLTk1NDEt OGFmYTc0ZDg3NjlmLzEvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9mNDc3MTAtNGEyMy00YmRjLTk1NDEtOGFmYTc0ZDg3Njlm LzEvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFs5TuMaS rgAPak1G4iAOE6yIIBK68wVK+1NctaXqHkQnmQBfJLzmIwBrePRIzBvpKvWtsxvW lb/DTr6Lguo4KlNIu1wW4OEImldwMZ+bFgIHycyFnbkOHApjbpbl9Zk4lr7jZAoJ /iZ8HjIW6C9idqiG90oR8j6tc6wGdcbkngdu6qwlwblvEXVut8edrFoA/1vZBNyI YTJ1BRLuLRAdfXbfIoVcucaqcI5CXB7iTYTtBG0HcnKSVFaJrA3Rm9w3CNliwV6d L+urZy+JI9l7GOcU97DLXc4PJnMFlOnQHSLoF2pdll2l5PW8siYoSHc6Cw2A6zkr u15fhsZA8aNUxw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:45:21 2025 by rpki-client