This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json) Hash identifier: 0dvckl6vA7uGPdJs6J67vs1jOUyNfr6VGRbFqcE9yRc= Subject key identifier: 27:B8:24:5C:2C:89:DA:D9:C5:FD:98:30:0C:6C:59:50:12:C3:9A:C0 Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd Certificate serial: 019B4A7119BB787EFA77594774F01DC3D99E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft Manifest number: 0D14 Signing time: Tue 23 Dec 2025 09:01:24 +0000 Manifest this update: Tue 23 Dec 2025 09:01:24 +0000 Manifest next update: Wed 24 Dec 2025 09:01:24 +0000 Files and hashes: 1: 4PVveBGxN8n2WuGPtmITlLn0GtI.roa (hash: cfEtfn0zg7NHGmh50mHK7LzfG79rGcilgz9AnPpzS50=) 2: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: 81k9fNxbLLQS9iFvJZb0nT/lRaw5Seg6PSfG3FCzqyQ=) 3: eIp7-TA74OpVMqMjgyn5rozHch0.roa (hash: Vk4popoaDrWGjozep9hzWTbs+ZYNrWhKKEtSBoEkXJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:19:bb:78:7e:fa:77:59:47:74:f0:1d:c3:d9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd Validity Not Before: Dec 23 09:01:24 2025 GMT Not After : Dec 24 09:01:24 2025 GMT Subject: CN=27b8245c2c89dad9c5fd98300c6c595012c39ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b7:58:cd:04:e9:37:8e:2f:d2:27:29:87:4c: c8:f8:90:d4:fe:ef:80:d2:81:00:40:6e:f5:aa:91: 09:b0:00:7a:6e:e6:49:72:7d:2f:38:40:3b:a4:a4: 74:37:fa:71:7d:e0:e7:08:f1:46:9a:af:c4:8b:fa: 6e:82:a1:b1:6d:7c:ed:f8:40:c6:b9:e9:9e:53:b9: 83:02:6e:d6:92:e8:3f:de:ce:e2:e6:22:ff:1c:64: 20:a0:00:88:98:b2:ae:13:54:b2:02:38:53:a3:57: bc:f6:6a:9f:16:3e:b5:a7:86:f0:74:84:76:cc:57: b6:df:86:3f:8c:1e:69:45:31:90:bd:a7:a1:70:2d: fc:f8:f1:b4:ca:ee:1c:e4:4c:1e:e4:82:31:74:bc: 33:f2:d1:e7:89:a5:b8:33:f2:26:d2:df:ec:60:9f: 9c:dc:2e:5d:8a:27:9c:df:f7:97:e9:f3:57:84:cf: 51:e5:a5:62:a1:23:fd:ff:2d:02:41:4d:4b:f7:e1: 5a:43:5d:fa:1b:47:6c:55:25:49:2b:fc:fc:f2:67: dd:1c:1b:2f:4d:0d:6a:e5:0b:b4:4f:45:97:0b:48: f3:2e:ad:ab:a0:3b:71:b4:41:6d:86:45:7d:7b:6b: da:ae:65:fd:41:54:11:ea:b2:06:7a:5e:80:13:f3: b7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B8:24:5C:2C:89:DA:D9:C5:FD:98:30:0C:6C:59:50:12:C3:9A:C0 X509v3 Authority Key Identifier: keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:09:f8:0a:38:58:16:4c:d9:1f:f4:dd:f3:66:e3:8b:45:7e: 3a:f4:99:e3:d3:57:02:31:4a:08:27:71:8c:cb:ec:18:d4:f3: c6:25:f1:71:0c:02:ae:45:f1:3a:f8:e1:af:60:c8:3b:59:ea: a1:5c:ed:8c:5f:cc:04:6c:d8:ae:21:ae:c3:68:8f:ec:22:b1: 3d:15:09:29:83:47:9c:3b:e4:4c:ad:f1:e2:36:fa:45:d6:f7: 4d:c3:52:9c:45:3a:3a:13:12:dc:b8:02:58:cd:47:40:f9:0d: f7:37:de:84:9a:70:01:cf:23:54:d2:64:c3:d1:17:79:27:14: 74:bf:36:21:5b:32:4f:a0:69:83:f7:da:98:ba:23:37:81:c1: 29:cd:e8:23:7e:48:be:3f:20:01:21:a0:dd:9c:b6:d7:63:6c: 1b:7c:5f:c0:85:68:8b:d0:f6:11:61:e5:04:f1:eb:a1:da:f8: a6:db:7b:64:27:ce:87:40:ed:82:ca:c0:97:26:89:4c:3c:05: 63:ab:6c:cd:fd:a3:b1:53:b5:37:9f:21:ba:09:69:80:4f:61: b1:04:82:63:17:94:a0:dd:e7:54:0c:0b:79:6d:b1:e1:56:eb: a1:8c:e6:e7:c7:50:ac:2e:9d:d0:25:95:39:be:58:b7:8d:4d: 7f:55:9b:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcRm7eH76d1lHdPAdw9meMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMWQyMTU0YjkzMjRlZmIzOWNhMzhiYTE5MzFiYTVkZmI1 OWU4ZmQwHhcNMjUxMjIzMDkwMTI0WhcNMjUxMjI0MDkwMTI0WjAzMTEwLwYDVQQD EygyN2I4MjQ1YzJjODlkYWQ5YzVmZDk4MzAwYzZjNTk1MDEyYzM5YWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLdYzQTpN44v0icph0zI+JDU/u+A 0oEAQG71qpEJsAB6buZJcn0vOEA7pKR0N/pxfeDnCPFGmq/Ei/pugqGxbXzt+EDG uemeU7mDAm7Wkug/3s7i5iL/HGQgoACImLKuE1SyAjhTo1e89mqfFj61p4bwdIR2 zFe234Y/jB5pRTGQvaehcC38+PG0yu4c5Ewe5IIxdLwz8tHniaW4M/Im0t/sYJ+c 3C5diiec3/eX6fNXhM9R5aVioSP9/y0CQU1L9+FaQ136G0dsVSVJK/z88mfdHBsv TQ1q5Qu0T0WXC0jzLq2roDtxtEFthkV9e2varmX9QVQR6rIGel6AE/O3gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCe4JFwsidrZxf2YMAxsWVASw5rAMB8GA1UdIwQY MBaAFBodIVS5Mk77Oco4uhkxul37Wej9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAt ODkwMWIwNTJiODZiLzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAtODkwMWIwNTJiODZi LzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvQn4CjhY FkzZH/Td82bji0V+OvSZ49NXAjFKCCdxjMvsGNTzxiXxcQwCrkXxOvjhr2DIO1nq oVztjF/MBGzYriGuw2iP7CKxPRUJKYNHnDvkTK3x4jb6Rdb3TcNSnEU6OhMS3LgC WM1HQPkN9zfehJpwAc8jVNJkw9EXeScUdL82IVsyT6Bpg/famLojN4HBKc3oI35I vj8gASGg3Zy212NsG3xfwIVoi9D2EWHlBPHrodr4ptt7ZCfOh0DtgsrAlyaJTDwF Y6tszf2jsVO1N58huglpgE9hsQSCYxeUoN3nVAwLeW2x4VbroYzm58dQrC6d0CWV Ob5Yt41Nf1WbeQ== -----END CERTIFICATE-----Generated at Tue Dec 23 18:53:19 2025 by rpki-client