This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft File: GryfszEqSr8d3ChRjnYI4Owydd8.mft (raw, json) Hash identifier: GXOMCTkUAjKhoY/zFKiNEKXQuwQjHz8BNjrqILqyXME= Subject key identifier: 2A:0D:27:D9:57:34:E7:10:2C:82:58:DE:61:26:7A:12:3A:C0:2E:ED Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF Certificate issuer: /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df Certificate serial: 019B360E2180876D3049C92435000B153BA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft Manifest number: 33 Signing time: Fri 19 Dec 2025 10:00:54 +0000 Manifest this update: Fri 19 Dec 2025 10:00:54 +0000 Manifest next update: Sat 20 Dec 2025 10:00:54 +0000 Files and hashes: 1: 5zKpxo06ZotmTkgOl7qLdtQlPF8.roa (hash: AacG7xxNKndGGBdKjipHCKUNNm/+m4yG1PsJKPfONKw=) 2: 98i3Sl-SVX0lpDc75YAMSzat4vY.roa (hash: 9lFUyk5c07EpRsIY8lyUNHmS+FtMIqyYvJKJxjtLoKI=) 3: FuNQyguetL9HUiuWXSYdXghLjdI.roa (hash: mnRKzXCVNJHAPGVrHNh8Q+nK1Fo7PynOoyKcNt2f8Cc=) 4: GryfszEqSr8d3ChRjnYI4Owydd8.crl (hash: 2I90EYihDjT7N9a/dJV4laiRrtSZYi3dg+HewR6Z9oQ=) 5: PKUvfHbMyWxol9e6o_KImjFDt1M.roa (hash: Uw1mXrwQRaqUc4sj0hqORTjZRxV0jUwss0xyBFHdDfA=) 6: YlVsrGk2FZaYHg9DL_b6T31F-PE.roa (hash: 6ghnnb7YLDy1rZ3UtZpJiI6PWk771A2KY0/uSf7gTno=) 7: _RelMXyqVvatSoVuVmnYjAhfL1g.roa (hash: 9i79ip05V8wfMGU8MmuJQC48JRJKFZbVh5oydWx0TJQ=) 8: qThv5Dn9-qqsuNIICPACaTpfi2Y.roa (hash: MxnlHH8jSB1lnRDj8hbwISSVcoLyKx3BOa7K+Kz+tQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:21:80:87:6d:30:49:c9:24:35:00:0b:15:3b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df Validity Not Before: Dec 19 10:00:54 2025 GMT Not After : Dec 20 10:00:54 2025 GMT Subject: CN=2a0d27d95734e7102c8258de61267a123ac02eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:38:72:46:8d:40:94:a4:9c:f0:04:a9:ba: 26:ea:13:5f:4d:f4:b8:b1:0e:dc:71:66:f3:ba:f1: 80:ec:a8:4d:6f:ea:e3:c0:86:21:f7:e0:30:a0:42: a8:c5:bc:cb:81:d6:ce:24:07:ba:9e:47:40:63:0e: 19:24:44:dd:dc:ad:68:bb:fd:c4:a8:59:75:de:88: 93:dc:ee:e4:c3:9c:9a:1f:8b:c0:c6:26:25:98:81: 20:27:5a:0f:3c:c5:d0:a8:08:50:b5:14:e5:02:c1: f9:8b:e9:d7:63:cd:80:7d:f9:15:b4:73:5c:b1:ed: 17:65:4e:b3:cb:26:65:3c:70:22:9e:f3:ed:3c:1b: 70:aa:d8:32:3f:c1:7a:73:5f:7b:6c:e4:22:51:2a: cb:6a:f9:96:be:6d:5f:b3:f0:f8:9b:c6:9f:f8:2b: fb:1a:23:c4:2e:7b:a0:09:5a:b5:1c:76:9d:f9:6b: 09:bc:b0:33:96:4b:36:38:2a:31:55:10:4b:4b:99: 1e:91:94:52:f8:e6:79:c5:26:8e:6b:b1:22:02:93: 97:df:88:5c:2d:0e:75:c6:b2:68:6c:a4:37:eb:93: 66:66:be:cd:1a:79:fa:54:c1:4c:d0:23:62:e9:5d: ed:70:45:87:bc:05:b3:cd:d9:bf:21:e7:21:16:12: f5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0D:27:D9:57:34:E7:10:2C:82:58:DE:61:26:7A:12:3A:C0:2E:ED X509v3 Authority Key Identifier: keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:fd:02:99:5b:9f:03:c9:e0:76:3c:c0:2d:3a:da:42:5e:4b: 24:da:ad:78:40:d2:7b:49:4f:e9:42:1b:73:e8:3a:c4:bb:d1: be:b5:71:07:d1:b5:25:c1:cd:cc:80:f9:ae:b0:3a:ea:28:40: 38:c9:c6:a0:7b:08:1e:c1:b0:b7:72:c0:4f:3b:70:02:45:d3: 3e:f9:66:04:91:09:1a:02:60:ea:b5:bc:5f:22:93:9e:c4:57: 8d:ff:40:ed:dc:71:f3:46:53:b1:7e:b0:d5:b0:a5:a9:90:2c: c7:56:2c:fa:a1:8d:9c:db:4b:47:02:01:6a:a3:47:02:93:ff: aa:4e:d3:c3:51:63:7b:fc:58:aa:fc:47:97:fd:fb:74:c2:21: d3:e0:58:66:cb:84:1c:2c:f6:23:cb:0b:64:87:c4:c6:56:ea: cd:88:27:2b:14:d5:07:df:e0:20:f7:de:bc:2a:d9:35:3d:67: 71:b9:16:ff:bd:7b:96:e8:fd:e8:86:1f:73:f5:d8:a2:0f:2b: 57:b5:63:38:27:68:9f:8a:d2:55:ee:0a:a4:1b:ee:3a:26:d5: e1:80:91:f6:1f:ad:2f:4f:76:4c:81:ab:26:63:d8:05:2f:af: 6f:0e:80:a0:66:6e:38:33:95:dd:45:e8:10:b9:82:8b:46:8c: 9e:fe:74:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DiGAh20wSckkNQALFTugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYmM5ZmIzMzEyYTRhYmYxZGRjMjg1MThlNzYwOGUwZWMz Mjc1ZGYwHhcNMjUxMjE5MTAwMDU0WhcNMjUxMjIwMTAwMDU0WjAzMTEwLwYDVQQD EygyYTBkMjdkOTU3MzRlNzEwMmM4MjU4ZGU2MTI2N2ExMjNhYzAyZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYE4ckaNQJSknPAEqbom6hNfTfS4 sQ7ccWbzuvGA7KhNb+rjwIYh9+AwoEKoxbzLgdbOJAe6nkdAYw4ZJETd3K1ou/3E qFl13oiT3O7kw5yaH4vAxiYlmIEgJ1oPPMXQqAhQtRTlAsH5i+nXY82AffkVtHNc se0XZU6zyyZlPHAinvPtPBtwqtgyP8F6c197bOQiUSrLavmWvm1fs/D4m8af+Cv7 GiPELnugCVq1HHad+WsJvLAzlks2OCoxVRBLS5kekZRS+OZ5xSaOa7EiApOX34hc LQ51xrJobKQ365NmZr7NGnn6VMFM0CNi6V3tcEWHvAWzzdm/IechFhL1SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoNJ9lXNOcQLIJY3mEmehI6wC7tMB8GA1UdIwQY MBaAFBq8n7MxKkq/HdwoUY52CODsMnXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2Qt ZDFkNmRlYTk4NzkwLzEvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2QtZDFkNmRlYTk4Nzkw LzEvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATP0CmVuf A8ngdjzALTraQl5LJNqteEDSe0lP6UIbc+g6xLvRvrVxB9G1JcHNzID5rrA66ihA OMnGoHsIHsGwt3LATztwAkXTPvlmBJEJGgJg6rW8XyKTnsRXjf9A7dxx80ZTsX6w 1bClqZAsx1Ys+qGNnNtLRwIBaqNHApP/qk7Tw1Fje/xYqvxHl/37dMIh0+BYZsuE HCz2I8sLZIfExlbqzYgnKxTVB9/gIPfevCrZNT1ncbkW/717luj96IYfc/XYog8r V7VjOCdon4rSVe4KpBvuOibV4YCR9h+tL092TIGrJmPYBS+vbw6AoGZuODOV3UXo ELmCi0aMnv50Jg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:18:33 2025 by rpki-client