This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft File: gh9un_H7vyH2QToTfnNn3YqMA1w.mft (raw, json) Hash identifier: bHnz8+Gvc8TExiN+EygRxt/30ftbFtw+LzoGevO8K2k= Subject key identifier: AA:39:D9:E3:7A:8A:08:CB:6A:4C:77:79:49:E8:F2:C6:8F:D4:A7:FB Authority key identifier: 82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C Certificate issuer: /CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c Certificate serial: 019B3268737BEE99A4728966F0054A324E14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft Manifest number: 0FC5 Signing time: Thu 18 Dec 2025 17:01:04 +0000 Manifest this update: Thu 18 Dec 2025 17:01:04 +0000 Manifest next update: Fri 19 Dec 2025 17:01:04 +0000 Files and hashes: 1: LGI_BMqz48rF1CAQFBrnzf381U0.roa (hash: eJvU6iSIuiB2ZVQ2ar/OXbcHw5p8L+QuWzmrOM6M7qg=) 2: gh9un_H7vyH2QToTfnNn3YqMA1w.crl (hash: 4bH7EAOgYDxplDTnhmxQTSeSb8dkmUs4POuar1pvwj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:73:7b:ee:99:a4:72:89:66:f0:05:4a:32:4e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c Validity Not Before: Dec 18 17:01:04 2025 GMT Not After : Dec 19 17:01:04 2025 GMT Subject: CN=aa39d9e37a8a08cb6a4c777949e8f2c68fd4a7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:61:79:85:36:d9:50:71:12:26:07:f7:02: d4:36:d9:22:99:31:45:d8:3c:ee:10:ab:d9:b8:94: 9e:34:2e:e4:bb:89:3e:23:b5:d5:f6:d4:25:17:b1: 29:7c:22:2e:38:6c:42:3b:7a:00:e1:08:64:21:bc: 5c:6e:11:bf:0b:6c:e8:e7:cd:66:e6:17:97:52:4a: a8:f5:f3:db:bd:16:06:07:b1:72:23:20:ef:51:8c: 14:1c:75:ff:e7:73:21:ae:85:c3:29:33:41:2e:89: e4:86:3c:b3:f8:a9:62:14:41:64:9c:32:9d:b9:e9: e7:7b:d5:2e:94:c8:65:d2:b6:35:5c:1e:03:9f:b2: b8:59:2c:c5:49:f9:2b:c3:8e:d7:9d:35:eb:74:89: 94:27:f2:39:a0:c3:2f:0d:2b:cf:9b:e0:66:de:4c: a8:98:f7:4c:29:6a:48:48:b6:95:da:9d:2e:22:96: 8c:aa:d9:0e:25:f5:ad:09:57:18:5f:7c:b4:63:08: 4c:95:68:85:76:8e:e7:e5:00:36:57:a8:52:4b:fe: ec:15:d5:f9:da:96:97:61:40:14:21:e0:62:b9:4a: 71:a4:18:3f:14:11:f4:78:26:6d:5e:47:d2:e2:df: 37:38:fa:c9:ef:b1:16:57:aa:e0:80:9c:cb:88:63: 11:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:39:D9:E3:7A:8A:08:CB:6A:4C:77:79:49:E8:F2:C6:8F:D4:A7:FB X509v3 Authority Key Identifier: keyid:82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:cb:33:b5:5b:d3:bc:0e:fb:5e:6b:d3:f1:37:46:64:c1:39: e7:c1:ce:2d:e2:9f:2f:0d:54:6e:a1:a2:ca:6c:1d:ed:85:f7: ce:b2:1e:01:d9:38:fc:31:5b:6c:d5:7d:01:6d:d1:e1:eb:c4: 26:d2:83:98:14:8b:06:de:33:0f:89:69:43:2b:02:c6:8b:69: 3b:79:67:33:af:29:9e:5f:d1:55:2c:ea:6e:9e:a0:cf:a6:ee: d8:fe:ca:b1:34:b2:06:4a:1a:9f:82:5d:5a:70:07:b1:6e:5b: c8:bb:50:e7:54:70:e3:f6:0b:6f:99:58:0a:5e:3b:b0:12:af: 80:f8:76:44:9e:b2:00:da:3e:f9:01:42:bc:84:1e:ba:b7:80: f3:fb:29:e5:38:67:0f:2a:95:ad:b0:1b:6a:03:92:68:e1:9e: ac:09:d2:c4:11:b9:e5:7d:7c:cf:3e:03:36:5b:30:27:03:61: 22:de:af:e7:97:e8:99:1a:9c:99:e9:aa:aa:a5:cc:14:f5:c6: d3:71:60:5b:79:f5:f4:8d:5c:23:09:3f:5b:fb:f5:a1:33:fa: b9:0e:cc:84:4f:19:89:6d:b5:73:40:9d:2c:aa:1d:90:9b:ae: f7:8e:c2:1d:cd:23:a3:41:ab:3b:76:52:e7:8f:1f:35:f7:d9: ec:99:93:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaHN77pmkcolm8AVKMk4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWY2ZTlmZjFmYmJmMjFmNjQxM2ExMzdlNzM2N2RkOGE4 YzAzNWMwHhcNMjUxMjE4MTcwMTA0WhcNMjUxMjE5MTcwMTA0WjAzMTEwLwYDVQQD EyhhYTM5ZDllMzdhOGEwOGNiNmE0Yzc3Nzk0OWU4ZjJjNjhmZDRhN2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi5heYU22VBxEiYH9wLUNtkimTFF 2DzuEKvZuJSeNC7ku4k+I7XV9tQlF7EpfCIuOGxCO3oA4QhkIbxcbhG/C2zo581m 5heXUkqo9fPbvRYGB7FyIyDvUYwUHHX/53MhroXDKTNBLonkhjyz+KliFEFknDKd uenne9UulMhl0rY1XB4Dn7K4WSzFSfkrw47XnTXrdImUJ/I5oMMvDSvPm+Bm3kyo mPdMKWpISLaV2p0uIpaMqtkOJfWtCVcYX3y0YwhMlWiFdo7n5QA2V6hSS/7sFdX5 2paXYUAUIeBiuUpxpBg/FBH0eCZtXkfS4t83OPrJ77EWV6rggJzLiGMRZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKo52eN6igjLakx3eUno8saP1Kf7MB8GA1UdIwQY MBaAFIIfbp/x+78h9kE6E35zZ92KjANcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2g5dW5fSDd2eUgyUVRvVGZuTm4zWXFNQTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lMDc2ZGMtMTBkOC00NGNjLThhYTUt NWE5NGFkMTMzMTE4LzEvZ2g5dW5fSDd2eUgyUVRvVGZuTm4zWXFNQTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9lMDc2ZGMtMTBkOC00NGNjLThhYTUtNWE5NGFkMTMzMTE4 LzEvZ2g5dW5fSDd2eUgyUVRvVGZuTm4zWXFNQTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgssztVvT vA77XmvT8TdGZME558HOLeKfLw1UbqGiymwd7YX3zrIeAdk4/DFbbNV9AW3R4evE JtKDmBSLBt4zD4lpQysCxotpO3lnM68pnl/RVSzqbp6gz6bu2P7KsTSyBkoan4Jd WnAHsW5byLtQ51Rw4/YLb5lYCl47sBKvgPh2RJ6yANo++QFCvIQeureA8/sp5Thn DyqVrbAbagOSaOGerAnSxBG55X18zz4DNlswJwNhIt6v55fomRqcmemqqqXMFPXG 03FgW3n19I1cIwk/W/v1oTP6uQ7MhE8ZiW21c0CdLKodkJuu947CHc0jo0GrO3ZS 548fNffZ7JmTBw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:25:53 2025 by rpki-client