This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
File: GR4nsp9lok2flCFXFc02cYJanq4.mft (raw, json)
Hash identifier: 2b1avWJ2TmIboWVsTkCmTYR4TOrN+XhlXQSu9xBnY/0=
Subject key identifier: 9A:95:88:D1:F1:60:DA:A0:DF:A4:30:F6:54:B5:9A:14:E2:55:D0:4C
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Certificate issuer: /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial: 019B5004CCF9775F2F2E3830E3722B7372E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
Manifest number: 1791
Signing time: Wed 24 Dec 2025 11:00:50 +0000
Manifest this update: Wed 24 Dec 2025 11:00:50 +0000
Manifest next update: Thu 25 Dec 2025 11:00:50 +0000
Files and hashes: 1: 5e-_Trj6W_VvY6i2dnnp3w-mcfM.roa (hash: rbJ/g1lxaGdX1l1Qsb1CM90SCy/vuc2QYKPLcuERRRA=)
2: GR4nsp9lok2flCFXFc02cYJanq4.crl (hash: jrd+9P1jHfe+Xp2P56wUnR1sXQqYUnA+ztG/oOs77BM=)
3: HaiHFPazwgQRJw4yytWvokUzRVs.roa (hash: Pe9HBJh+6DQK8Oywez23C2fyZVdlN/Z1EykYUUEzvY8=)
4: S8o_O7bWlN_dw6Lg8CuwZ8LoUHc.roa (hash: jCRliwE7M56nachVgLavJu6eAn/WCFjPFVilXX1EXTs=)
5: kRGf0bWxjWUh8sdGXabcomhWjno.roa (hash: 9dSAfgPcrU0QfkObtWRj3oGya1C5FzdCWWHZarkr0hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:50:04:cc:f9:77:5f:2f:2e:38:30:e3:72:2b:73:72:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
Validity
Not Before: Dec 24 11:00:50 2025 GMT
Not After : Dec 25 11:00:50 2025 GMT
Subject: CN=9a9588d1f160daa0dfa430f654b59a14e255d04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:58:ee:7b:b7:15:5b:b3:4c:df:ee:7d:ce:
a4:14:a0:87:80:b8:e9:b5:cc:e0:8c:33:94:7a:01:
26:e1:21:45:84:f8:17:b8:7e:22:d7:e5:8a:2d:1b:
c4:bc:14:5e:e3:b2:4c:26:c3:0d:4f:93:ae:48:65:
a4:a4:9e:20:b8:0e:35:58:08:fe:39:65:90:d5:28:
29:87:6e:fb:15:ce:fb:63:70:f7:ba:4a:3d:9a:25:
7d:1b:42:2b:18:b7:72:6a:32:58:5a:a4:e5:ed:06:
6d:44:79:5b:08:cf:63:0c:e4:c3:c2:ef:8b:c0:00:
57:ca:59:25:05:83:0f:6f:4a:c0:55:72:84:7d:36:
8d:6d:8f:b7:f1:d8:ca:5c:69:ca:52:8b:0d:9e:f5:
4b:aa:d2:34:83:ab:cb:92:4a:b9:82:cd:a9:25:8d:
59:08:eb:f0:50:d5:c3:34:ea:e0:96:82:8d:2a:f3:
27:91:27:37:4d:6d:f7:2f:1f:d6:f9:88:9c:79:11:
f4:8c:d7:c4:f1:01:91:9d:ba:52:6f:0e:78:3c:ec:
2d:08:56:26:01:1d:0d:21:83:40:00:f0:3a:27:dd:
91:cb:df:d3:3b:99:5a:c9:11:d0:ff:a6:be:8e:f9:
bd:2b:32:81:f1:24:d2:ab:66:92:9e:cd:bf:d9:37:
a1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:95:88:D1:F1:60:DA:A0:DF:A4:30:F6:54:B5:9A:14:E2:55:D0:4C
X509v3 Authority Key Identifier:
keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:20:bc:10:4c:21:1b:d2:4e:79:5d:27:fb:b5:7a:e6:ff:c4:
25:ec:8d:9d:4f:8f:5a:26:be:88:eb:91:80:12:8c:ad:dc:ad:
4f:a8:3e:ac:78:de:4e:7e:0c:06:89:7a:66:1a:43:b6:96:84:
d2:9b:1e:88:25:0a:a1:84:89:bd:9d:5d:4f:ec:1e:d6:4c:c0:
d5:f2:34:aa:e7:2e:1f:14:c4:fe:9c:c1:da:a0:90:f8:3b:5d:
6e:c5:2a:d1:81:45:4d:5c:fa:aa:c9:46:02:3f:80:50:48:bd:
a5:f6:65:9d:e8:33:b3:36:45:86:aa:46:2e:9f:19:fc:c4:50:
f8:b0:df:a5:ca:03:9f:eb:81:2f:c2:87:33:40:f4:29:be:ed:
aa:cd:a1:16:4b:1e:dd:56:4f:a4:1a:fa:c5:7d:75:85:fb:de:
9f:d2:ec:b0:12:69:b5:b1:1f:98:73:e8:a1:0d:6c:4e:46:59:
51:c2:85:4b:25:51:5f:2c:5b:2b:58:b6:bd:0b:21:db:e9:e3:
af:36:e2:d6:21:42:5e:be:e5:12:7b:be:8d:57:cc:27:ce:93:
d7:74:6c:59:51:02:bb:9c:80:be:33:bd:e8:1a:b6:14:3d:55:
bc:4f:33:e4:ca:05:e5:c5:9e:0b:ec:37:ef:d3:52:d1:ad:c8:
e6:06:31:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtQBMz5d18vLjgw43Irc3LgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MWUyN2IyOWY2NWEyNGQ5Zjk0MjE1NzE1Y2QzNjcxODI1
YTllYWUwHhcNMjUxMjI0MTEwMDUwWhcNMjUxMjI1MTEwMDUwWjAzMTEwLwYDVQQD
Eyg5YTk1ODhkMWYxNjBkYWEwZGZhNDMwZjY1NGI1OWExNGUyNTVkMDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbRY7nu3FVuzTN/ufc6kFKCHgLjp
tczgjDOUegEm4SFFhPgXuH4i1+WKLRvEvBRe47JMJsMNT5OuSGWkpJ4guA41WAj+
OWWQ1Sgph277Fc77Y3D3uko9miV9G0IrGLdyajJYWqTl7QZtRHlbCM9jDOTDwu+L
wABXylklBYMPb0rAVXKEfTaNbY+38djKXGnKUosNnvVLqtI0g6vLkkq5gs2pJY1Z
COvwUNXDNOrgloKNKvMnkSc3TW33Lx/W+YiceRH0jNfE8QGRnbpSbw54POwtCFYm
AR0NIYNAAPA6J92Ry9/TO5layRHQ/6a+jvm9KzKB8STSq2aSns2/2TehswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqViNHxYNqg36Qw9lS1mhTiVdBMMB8GA1UdIwQY
MBaAFBkeJ7KfZaJNn5QhVxXNNnGCWp6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1I0bnNwOWxvazJmbENGWEZjMDJjWUphbnE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hODk4MDEtYzcyMS00MWJiLWI1MTct
YjhjNjY2ZTZkMzUxLzEvR1I0bnNwOWxvazJmbENGWEZjMDJjWUphbnE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hODk4MDEtYzcyMS00MWJiLWI1MTctYjhjNjY2ZTZkMzUx
LzEvR1I0bnNwOWxvazJmbENGWEZjMDJjWUphbnE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsyC8EEwh
G9JOeV0n+7V65v/EJeyNnU+PWia+iOuRgBKMrdytT6g+rHjeTn4MBol6ZhpDtpaE
0pseiCUKoYSJvZ1dT+we1kzA1fI0qucuHxTE/pzB2qCQ+DtdbsUq0YFFTVz6qslG
Aj+AUEi9pfZlnegzszZFhqpGLp8Z/MRQ+LDfpcoDn+uBL8KHM0D0Kb7tqs2hFkse
3VZPpBr6xX11hfven9LssBJptbEfmHPooQ1sTkZZUcKFSyVRXyxbK1i2vQsh2+nj
rzbi1iFCXr7lEnu+jVfMJ86T13RsWVECu5yAvjO96Bq2FD1VvE8z5MoF5cWeC+w3
79NS0a3I5gYxbg==
-----END CERTIFICATE-----
Generated at Wed Dec 24 18:38:24 2025 by rpki-client