This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft File: grLg0A3Xcank1gu_S-UhFOp32wM.mft (raw, json) Hash identifier: lElJi6xBaW2S1vWEgVa41QrtYHwvqe6lP1A8BhjTTrU= Subject key identifier: 42:93:10:C9:53:AC:1F:25:71:34:DE:B0:80:00:A2:71:D6:46:0F:AB Authority key identifier: 82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03 Certificate issuer: /CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03 Certificate serial: 019B3CB4BE927B55D3198EDC43040F456168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft Manifest number: 0D04 Signing time: Sat 20 Dec 2025 17:00:36 +0000 Manifest this update: Sat 20 Dec 2025 17:00:36 +0000 Manifest next update: Sun 21 Dec 2025 17:00:36 +0000 Files and hashes: 1: 5GAvl6a2LhO40IHXb3FEQRL43dI.roa (hash: /6XSNGfrUMapG8xHohOBC097pXOO/8yE7oieep3PnkA=) 2: UEpNb3wmOOdCK7UvN3lXTC2DcUk.roa (hash: pmS4hRe0q9ReL0MLHSlxbOJsASxbtpyjkGhM1kcVhvc=) 3: grLg0A3Xcank1gu_S-UhFOp32wM.crl (hash: 3sZGM5FwbJ8qCYmWROeFLYsuF+mjEzJecTVTduHrFQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:be:92:7b:55:d3:19:8e:dc:43:04:0f:45:61:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03 Validity Not Before: Dec 20 17:00:36 2025 GMT Not After : Dec 21 17:00:36 2025 GMT Subject: CN=429310c953ac1f257134deb08000a271d6460fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3b:7f:2f:96:44:59:d8:99:14:64:f9:08:e7: 92:d3:de:ca:95:8f:fd:4a:96:41:48:9b:ab:d1:10: 5d:4a:45:f9:3b:5d:2f:ac:7d:76:a3:7e:a2:da:fc: ec:70:4a:52:bb:b3:82:87:8e:23:69:e7:59:2e:d2: 17:f9:3a:a6:be:bb:38:2c:d5:24:a0:38:40:dc:bd: 7e:1d:a3:47:da:b2:ca:95:51:d7:fb:64:e3:29:f6: 60:0c:08:7e:5e:83:0f:59:45:ce:77:cd:42:15:c2: 97:68:e2:08:b8:b2:24:26:89:ee:5c:02:ec:17:14: 8d:a3:ba:ff:6e:13:4a:28:60:56:b2:b3:9a:25:23: 7f:4e:a8:34:40:0f:9b:6c:c6:5a:23:cb:a6:96:c3: 86:ab:00:fe:7a:c0:97:d6:f9:3c:b1:e1:60:0a:fb: 69:10:75:ea:76:00:72:5b:b4:04:c0:f2:cc:ca:53: be:dd:9f:1d:3b:a0:44:78:3a:13:6b:bb:e0:d0:90: 4c:04:26:6c:89:b8:25:1c:d4:ff:73:b0:0d:e4:d0: 67:36:1d:fb:8a:4e:fe:f8:e4:e4:7f:26:b2:02:df: b6:f7:35:02:60:71:c1:bd:f9:2d:db:f9:89:8a:66: e3:a7:e3:f2:41:98:9a:bd:98:97:ab:06:1f:13:72: 35:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:93:10:C9:53:AC:1F:25:71:34:DE:B0:80:00:A2:71:D6:46:0F:AB X509v3 Authority Key Identifier: keyid:82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ea:2f:5d:b2:f2:94:ad:e9:8c:f5:8e:00:83:44:af:26:c7: 16:24:a6:92:36:0b:ec:50:99:0e:de:fd:4d:e7:73:0c:ad:5a: 32:70:14:89:46:82:20:0b:49:f7:e8:63:2d:97:e2:b1:b6:f5: 45:00:3f:55:8b:ee:3a:b2:b7:04:70:70:df:12:ea:14:75:74: 5b:81:a1:38:fe:c2:c9:74:4e:d4:ab:dd:84:ec:e6:51:ae:3b: 0e:bf:7c:b1:a8:5b:6a:f3:3d:d4:2b:de:d1:55:24:9e:cd:91: f9:51:f5:ae:ec:69:31:c8:a9:3c:0b:76:cd:68:16:06:15:ba: 47:fd:13:e8:ea:2b:47:a7:d0:d9:0c:2a:3d:dc:b1:12:ef:0c: 28:9e:7e:12:4a:ff:b3:4d:ae:6a:98:08:17:d9:35:7e:f6:c4: 55:fa:25:f7:09:80:b2:30:b6:c0:dd:40:b5:10:79:d5:a6:8a: fc:a2:04:33:fb:e5:49:37:15:c7:dc:99:3d:68:e9:7b:56:98: f9:a0:24:24:22:3e:75:87:1f:d0:ee:7b:e0:8b:b2:bc:ea:7a: eb:b3:39:c6:62:8d:50:11:c9:c7:35:55:cf:68:ee:df:75:1f: 5e:68:34:79:75:d8:59:8d:e4:03:f3:e7:7f:c2:63:cd:58:40: 64:34:0a:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tL6Se1XTGY7cQwQPRWFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYjJlMGQwMGRkNzcxYTllNGQ2MGJiZjRiZTUyMTE0ZWE3 N2RiMDMwHhcNMjUxMjIwMTcwMDM2WhcNMjUxMjIxMTcwMDM2WjAzMTEwLwYDVQQD Eyg0MjkzMTBjOTUzYWMxZjI1NzEzNGRlYjA4MDAwYTI3MWQ2NDYwZmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjt/L5ZEWdiZFGT5COeS097KlY/9 SpZBSJur0RBdSkX5O10vrH12o36i2vzscEpSu7OCh44jaedZLtIX+Tqmvrs4LNUk oDhA3L1+HaNH2rLKlVHX+2TjKfZgDAh+XoMPWUXOd81CFcKXaOIIuLIkJonuXALs FxSNo7r/bhNKKGBWsrOaJSN/Tqg0QA+bbMZaI8umlsOGqwD+esCX1vk8seFgCvtp EHXqdgByW7QEwPLMylO+3Z8dO6BEeDoTa7vg0JBMBCZsibglHNT/c7AN5NBnNh37 ik7++OTkfyayAt+29zUCYHHBvfkt2/mJimbjp+PyQZiavZiXqwYfE3I1cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKTEMlTrB8lcTTesIAAonHWRg+rMB8GA1UdIwQY MBaAFIKy4NAN13Gp5NYLv0vlIRTqd9sDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3JMZzBBM1hjYW5rMWd1X1MtVWhGT3AzMndNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zNzk0YjEtY2E3Zi00YTU3LThiN2It MDZkM2M0ZTYzYzIwLzEvZ3JMZzBBM1hjYW5rMWd1X1MtVWhGT3AzMndNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8zNzk0YjEtY2E3Zi00YTU3LThiN2ItMDZkM2M0ZTYzYzIw LzEvZ3JMZzBBM1hjYW5rMWd1X1MtVWhGT3AzMndNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+ovXbLy lK3pjPWOAINErybHFiSmkjYL7FCZDt79TedzDK1aMnAUiUaCIAtJ9+hjLZfisbb1 RQA/VYvuOrK3BHBw3xLqFHV0W4GhOP7CyXRO1KvdhOzmUa47Dr98sahbavM91Cve 0VUkns2R+VH1ruxpMcipPAt2zWgWBhW6R/0T6OorR6fQ2QwqPdyxEu8MKJ5+Ekr/ s02uapgIF9k1fvbEVfol9wmAsjC2wN1AtRB51aaK/KIEM/vlSTcVx9yZPWjpe1aY +aAkJCI+dYcf0O574IuyvOp667M5xmKNUBHJxzVVz2ju33UfXmg0eXXYWY3kA/Pn f8JjzVhAZDQKug== -----END CERTIFICATE-----Generated at Sat Dec 20 22:55:13 2025 by rpki-client