This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json) Hash identifier: OZkN1tWyDJAJeupnHj4z6GCGA54R9/tDPIPFBJZVaT8= Subject key identifier: 01:C8:7F:BA:16:6F:38:78:5B:49:DC:44:1B:D4:96:2C:CA:E5:F7:41 Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd Certificate serial: 019B5FAEF1679521C2452E54FA102166A636 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft Manifest number: 0D1F Signing time: Sat 27 Dec 2025 12:00:59 +0000 Manifest this update: Sat 27 Dec 2025 12:00:59 +0000 Manifest next update: Sun 28 Dec 2025 12:00:59 +0000 Files and hashes: 1: 4PVveBGxN8n2WuGPtmITlLn0GtI.roa (hash: cfEtfn0zg7NHGmh50mHK7LzfG79rGcilgz9AnPpzS50=) 2: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: +Swao3lOnT3oKyQUQxb4RIV58rSAkJ9/4nAFHW22C7Q=) 3: eIp7-TA74OpVMqMjgyn5rozHch0.roa (hash: Vk4popoaDrWGjozep9hzWTbs+ZYNrWhKKEtSBoEkXJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:ae:f1:67:95:21:c2:45:2e:54:fa:10:21:66:a6:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd Validity Not Before: Dec 27 12:00:59 2025 GMT Not After : Dec 28 12:00:59 2025 GMT Subject: CN=01c87fba166f38785b49dc441bd4962ccae5f741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5b:b5:5f:7a:33:a5:12:4d:e5:d8:6c:bf:bf: f7:8d:58:81:bf:aa:15:e4:4f:7f:27:e7:13:ae:fe: 0e:8a:38:56:d8:3e:a8:2c:ad:55:81:3e:22:1c:4c: b1:ed:84:80:0f:58:2e:1c:35:d6:f9:b7:11:21:59: 67:8c:e2:9d:2c:2e:c8:62:25:32:d7:44:c7:2c:78: b9:de:64:5e:af:da:3f:0d:68:6e:6c:3a:1e:5d:50: e0:e2:8c:94:65:f4:8c:a5:7c:1c:51:a0:8d:37:fc: bd:78:31:4b:7c:6f:97:76:c8:1a:ea:d0:f2:cd:b8: d0:4e:7d:f6:a6:62:13:1f:36:96:eb:de:58:3c:65: bf:ed:b3:15:18:6e:c5:44:e1:de:f5:82:e3:21:aa: d5:a2:f7:de:05:55:47:98:57:6d:1d:d0:d8:70:59: 3f:ff:fb:f9:17:d7:96:db:f2:14:b3:ec:2f:61:a6: fe:fe:f4:fd:ba:8b:81:08:a7:a4:ec:ff:52:f7:78: df:01:bb:be:e2:04:74:eb:63:d6:20:d6:da:74:50: fc:e4:41:94:05:76:c4:34:1d:4b:ba:86:d5:c3:77: 6a:5b:87:e4:64:ab:7d:3b:b6:39:57:db:5c:9f:3e: 4c:0e:dd:a0:f6:22:a8:24:89:65:e8:b6:64:ab:4e: 3e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C8:7F:BA:16:6F:38:78:5B:49:DC:44:1B:D4:96:2C:CA:E5:F7:41 X509v3 Authority Key Identifier: keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:20:20:73:86:f6:49:f5:18:fa:69:ac:8a:1e:0c:3c:fa:18: 82:5a:99:28:5d:0e:2a:d4:4e:9f:32:e7:fc:5b:17:21:98:0a: 6e:fe:18:ba:8f:55:e9:65:ed:76:38:43:85:48:88:60:4f:9e: 1e:33:05:6b:5b:0b:af:b7:02:7a:a3:c1:03:4f:6b:41:ec:80: 96:e2:06:9d:d6:f2:48:e3:6e:d2:2e:b6:fa:af:3b:19:4e:18: c6:4e:5b:6f:19:55:d5:ea:e6:53:d3:cc:a9:32:28:8a:46:37: 6a:e1:7a:b5:39:e6:93:2d:cc:6d:4b:e9:fc:fa:3b:64:c0:44: 5c:ee:4d:41:b6:83:13:8a:af:1f:0e:78:52:75:a7:42:bf:fb: bb:89:d9:29:6f:f3:5c:ad:71:1d:cc:d8:75:b4:ff:89:97:7d: 45:1a:53:0c:50:25:30:c3:76:ce:3b:d8:ae:c6:f8:42:d9:b7: 69:73:b8:a7:ee:72:a1:8d:14:a2:11:9d:b8:fe:b9:da:1f:f6: e3:e3:b7:76:89:f7:ec:2c:e9:01:27:a4:87:42:7a:df:9b:8e: c1:b2:f9:4f:18:10:d2:74:40:4c:95:61:0a:ca:68:6f:34:5d: 7d:3f:d8:24:3c:d6:14:e1:37:81:04:64:9e:af:68:f7:23:06: 6c:86:be:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfrvFnlSHCRS5U+hAhZqY2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMWQyMTU0YjkzMjRlZmIzOWNhMzhiYTE5MzFiYTVkZmI1 OWU4ZmQwHhcNMjUxMjI3MTIwMDU5WhcNMjUxMjI4MTIwMDU5WjAzMTEwLwYDVQQD EygwMWM4N2ZiYTE2NmYzODc4NWI0OWRjNDQxYmQ0OTYyY2NhZTVmNzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlu1X3ozpRJN5dhsv7/3jViBv6oV 5E9/J+cTrv4OijhW2D6oLK1VgT4iHEyx7YSAD1guHDXW+bcRIVlnjOKdLC7IYiUy 10THLHi53mRer9o/DWhubDoeXVDg4oyUZfSMpXwcUaCNN/y9eDFLfG+Xdsga6tDy zbjQTn32pmITHzaW695YPGW/7bMVGG7FROHe9YLjIarVovfeBVVHmFdtHdDYcFk/ //v5F9eW2/IUs+wvYab+/vT9uouBCKek7P9S93jfAbu+4gR062PWINbadFD85EGU BXbENB1LuobVw3dqW4fkZKt9O7Y5V9tcnz5MDt2g9iKoJIll6LZkq04+ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHIf7oWbzh4W0ncRBvUlizK5fdBMB8GA1UdIwQY MBaAFBodIVS5Mk77Oco4uhkxul37Wej9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAt ODkwMWIwNTJiODZiLzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAtODkwMWIwNTJiODZi LzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCAgc4b2 SfUY+mmsih4MPPoYglqZKF0OKtROnzLn/FsXIZgKbv4Yuo9V6WXtdjhDhUiIYE+e HjMFa1sLr7cCeqPBA09rQeyAluIGndbySONu0i62+q87GU4Yxk5bbxlV1ermU9PM qTIoikY3auF6tTnmky3MbUvp/Po7ZMBEXO5NQbaDE4qvHw54UnWnQr/7u4nZKW/z XK1xHczYdbT/iZd9RRpTDFAlMMN2zjvYrsb4Qtm3aXO4p+5yoY0UohGduP652h/2 4+O3don37CzpASekh0J635uOwbL5TxgQ0nRATJVhCspobzRdfT/YJDzWFOE3gQRk nq9o9yMGbIa+BQ== -----END CERTIFICATE-----Generated at Sat Dec 27 15:50:06 2025 by rpki-client