This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json) Hash identifier: sWEop8aNvRtzKQDIOiRU2xspUI1giAiH03e06GMHO40= Subject key identifier: 00:AF:40:F2:9D:52:FD:F4:70:E9:B5:7D:C6:B0:E4:74:7F:BD:23:EC Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92 Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692 Certificate serial: 019B3B6BE4D3C14AEB6F17E6EDE14A7129E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft Manifest number: 096C Signing time: Sat 20 Dec 2025 11:01:25 +0000 Manifest this update: Sat 20 Dec 2025 11:01:25 +0000 Manifest next update: Sun 21 Dec 2025 11:01:25 +0000 Files and hashes: 1: 8np8dFC03aZy-NSvKyaibYkoD2c.roa (hash: yH2zRDSO2w0uHZTYPQwRFl05v2muoqWJ+Z0OUk1oMhY=) 2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: kzRFpo3lDgZcjzMjryo4i9N7KnSiLpwYmemSeaSgZXQ=) 3: dl7fBf_Q9iWR2RTbgzduCGEsnu0.roa (hash: eVfjDssVSwbldy+Bqk+kwlieiStmiWJtJAkqUXW89hA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:e4:d3:c1:4a:eb:6f:17:e6:ed:e1:4a:71:29:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692 Validity Not Before: Dec 20 11:01:25 2025 GMT Not After : Dec 21 11:01:25 2025 GMT Subject: CN=00af40f29d52fdf470e9b57dc6b0e4747fbd23ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:15:57:07:eb:b2:72:d1:94:58:58:14:01:b2: 1f:86:bc:aa:53:36:2b:a8:4a:95:3f:e8:19:71:15: d0:f8:07:f0:3a:7c:13:c5:41:c2:c8:67:d0:10:df: ee:c4:31:a8:b6:b4:a9:6c:95:fa:ee:94:a4:07:fa: d8:25:7d:e6:39:6d:2f:ac:14:e8:de:e4:72:93:0e: 23:e9:19:48:ba:15:8b:0e:0f:59:a3:71:32:c2:40: 9e:d8:73:f3:eb:68:4f:df:69:9e:92:5c:e1:9b:78: de:dc:ad:e4:16:fe:fd:7c:e1:24:2d:06:42:f1:02: 3e:f1:58:01:91:60:43:f2:44:6b:eb:9c:b2:4a:dc: 88:cd:59:f6:01:82:44:3f:ea:45:10:33:1d:04:65: 77:a3:ff:3f:41:83:b7:a9:77:02:58:14:89:78:4b: 99:7c:30:73:d5:ae:b1:64:6f:4d:50:1f:84:d1:0d: bc:45:23:b1:14:0c:00:55:29:b2:46:52:ca:e4:ae: eb:96:49:06:23:df:ab:28:df:ca:2a:1a:92:9f:18: 02:be:a1:55:e8:b2:37:9f:44:8f:47:a4:23:3a:39: f4:91:0f:e9:a3:d5:5b:f1:d7:c7:61:14:fc:81:71: 4e:0b:51:1f:b2:c6:84:63:b6:79:86:04:f3:03:c8: 3d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AF:40:F2:9D:52:FD:F4:70:E9:B5:7D:C6:B0:E4:74:7F:BD:23:EC X509v3 Authority Key Identifier: keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:91:04:68:af:a5:69:fa:63:d7:20:bd:2d:49:29:75:36:66: 5c:ab:cf:fc:f0:01:4d:a0:3b:ab:fe:fa:24:e3:4a:2e:f2:81: a1:57:f4:31:2e:85:3c:5d:4a:4a:b5:84:66:cc:3d:75:20:b2: 6f:ab:b2:13:71:b6:17:78:af:cf:ad:36:11:82:8a:9c:a5:2f: 67:4f:b3:0d:3f:06:dd:bd:0a:64:88:58:dc:b4:12:c9:3f:15: 71:aa:7c:52:0c:92:e1:0f:ce:2f:17:e6:93:5d:f9:43:a5:a2: d8:b1:90:a4:71:fa:6e:c6:6b:e6:e3:41:6d:fc:bd:59:d1:4b: 2c:80:e8:3a:c4:f4:fa:16:97:72:ae:83:88:9a:7b:54:3e:1e: 62:bf:72:13:a9:67:b5:24:2a:d7:04:7f:5b:5d:b6:b6:aa:c1: 64:72:43:f1:14:90:a3:f9:dc:c7:26:e5:10:84:6f:10:a9:10: 5e:16:ca:0b:30:ab:a1:c8:3b:c9:2a:57:60:69:53:91:2b:9d: a4:fe:52:48:7e:76:59:ac:8f:a9:e7:6a:80:62:f7:b7:b7:14: 25:78:b8:84:65:90:de:29:36:53:31:e3:3d:b5:f1:d8:d5:e1: b1:ab:ee:cd:0d:30:8c:b2:b6:2c:20:c2:5e:c1:68:84:49:d8: 68:b4:6e:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a+TTwUrrbxfm7eFKcSnlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMzFkY2E4ODdkOGJlNjA2MDE5ZDBhMTU5M2ExNmZmZDM5 ZmQ2OTIwHhcNMjUxMjIwMTEwMTI1WhcNMjUxMjIxMTEwMTI1WjAzMTEwLwYDVQQD EygwMGFmNDBmMjlkNTJmZGY0NzBlOWI1N2RjNmIwZTQ3NDdmYmQyM2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxVXB+uyctGUWFgUAbIfhryqUzYr qEqVP+gZcRXQ+AfwOnwTxUHCyGfQEN/uxDGotrSpbJX67pSkB/rYJX3mOW0vrBTo 3uRykw4j6RlIuhWLDg9Zo3EywkCe2HPz62hP32meklzhm3je3K3kFv79fOEkLQZC 8QI+8VgBkWBD8kRr65yyStyIzVn2AYJEP+pFEDMdBGV3o/8/QYO3qXcCWBSJeEuZ fDBz1a6xZG9NUB+E0Q28RSOxFAwAVSmyRlLK5K7rlkkGI9+rKN/KKhqSnxgCvqFV 6LI3n0SPR6QjOjn0kQ/po9Vb8dfHYRT8gXFOC1EfssaEY7Z5hgTzA8g9XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACvQPKdUv30cOm1fcaw5HR/vSPsMB8GA1UdIwQY MBaAFBox3KiH2L5gYBnQoVk6Fv/Tn9aSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNzgwY2UtNGYyNi00YjY0LWI3ZjEt OTBjOTk5ZDM1ZWQ4LzEvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yNzgwY2UtNGYyNi00YjY0LWI3ZjEtOTBjOTk5ZDM1ZWQ4 LzEvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArZEEaK+l afpj1yC9LUkpdTZmXKvP/PABTaA7q/76JONKLvKBoVf0MS6FPF1KSrWEZsw9dSCy b6uyE3G2F3ivz602EYKKnKUvZ0+zDT8G3b0KZIhY3LQSyT8Vcap8UgyS4Q/OLxfm k135Q6Wi2LGQpHH6bsZr5uNBbfy9WdFLLIDoOsT0+haXcq6DiJp7VD4eYr9yE6ln tSQq1wR/W122tqrBZHJD8RSQo/ncxyblEIRvEKkQXhbKCzCrocg7ySpXYGlTkSud pP5SSH52WayPqedqgGL3t7cUJXi4hGWQ3ik2UzHjPbXx2NXhsavuzQ0wjLK2LCDC XsFohEnYaLRuHw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:09:42 2025 by rpki-client