This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft File: GHRUZrThRoMLlit0kG2xxtCB_HA.mft (raw, json) Hash identifier: uNzIu8wypik/V77CRD2UuyAOaiV8vNSeBcQbQan6/lE= Subject key identifier: 97:7D:22:FA:26:82:7A:A5:BE:06:D6:02:0F:76:2A:B5:8A:0F:A7:DD Authority key identifier: 18:74:54:66:B4:E1:46:83:0B:96:2B:74:90:6D:B1:C6:D0:81:FC:70 Certificate issuer: /CN=18745466b4e146830b962b74906db1c6d081fc70 Certificate serial: 019B3CEC08AF407AC29F65356B472DFD599E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHRUZrThRoMLlit0kG2xxtCB_HA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft Manifest number: 174E Signing time: Sat 20 Dec 2025 18:01:00 +0000 Manifest this update: Sat 20 Dec 2025 18:01:00 +0000 Manifest next update: Sun 21 Dec 2025 18:01:00 +0000 Files and hashes: 1: GHRUZrThRoMLlit0kG2xxtCB_HA.crl (hash: fRfMHWd/IhKp8AV4q02AAHXnqbDLEHtiNOVhDmON4No=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft rsync://rpki.ripe.net/repository/DEFAULT/GHRUZrThRoMLlit0kG2xxtCB_HA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:08:af:40:7a:c2:9f:65:35:6b:47:2d:fd:59:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18745466b4e146830b962b74906db1c6d081fc70 Validity Not Before: Dec 20 18:01:00 2025 GMT Not After : Dec 21 18:01:00 2025 GMT Subject: CN=977d22fa26827aa5be06d6020f762ab58a0fa7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5a:3d:36:47:68:ef:28:4e:2b:ae:56:67:11: b0:f4:41:7e:ae:f6:c4:cc:74:1e:a9:18:17:65:e5: 30:88:da:68:62:bf:9b:56:43:8d:97:00:a9:ca:34: 58:ef:25:0d:40:1b:a2:10:a8:da:ba:bd:fe:f0:73: 3e:5e:63:5b:04:2e:d7:9e:cb:6e:43:bf:e8:d0:47: 66:28:07:e8:ec:79:ae:b6:5d:ff:6c:6c:43:9d:73: f0:b9:6f:17:11:e9:87:b3:04:fe:cd:23:0a:92:97: e8:9a:e6:5c:1d:e0:42:59:e9:2b:c9:b8:5f:7f:85: 52:3b:c8:b1:1e:08:32:ea:4d:aa:5b:fa:05:31:57: 02:10:51:58:40:f2:fb:83:04:3d:2d:56:69:d5:6c: 3a:eb:4d:1b:d2:0a:f2:57:dd:a1:8d:0c:a9:ff:db: 69:98:48:aa:c8:13:15:7b:73:81:f0:b9:d0:d7:2a: 22:4a:43:a1:35:6c:dc:28:79:8e:eb:14:5d:96:7c: e7:2e:a5:37:8a:eb:1e:59:59:1f:7b:41:f4:b3:76: ad:ce:67:60:34:9b:56:91:21:72:0a:c7:05:5e:f6: d2:62:69:5a:b2:54:58:5a:5e:46:e0:9c:68:50:8a: 98:2e:2c:65:5d:4d:23:14:43:b3:5c:ac:8a:d9:d1: 9a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7D:22:FA:26:82:7A:A5:BE:06:D6:02:0F:76:2A:B5:8A:0F:A7:DD X509v3 Authority Key Identifier: keyid:18:74:54:66:B4:E1:46:83:0B:96:2B:74:90:6D:B1:C6:D0:81:FC:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHRUZrThRoMLlit0kG2xxtCB_HA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e1:b8:3f:74:16:af:a2:0f:80:41:1d:87:82:ee:38:d5:b5: 5b:55:71:c6:cb:c2:a9:e2:92:40:eb:ac:b3:f0:7e:bc:09:63: d2:61:18:69:c9:5c:aa:16:96:83:38:c2:50:55:e4:3c:e8:36: 38:ab:52:85:7c:02:ac:92:87:13:6d:3b:62:da:4f:ed:3f:03: d8:b0:ea:42:65:a1:1d:6f:e7:c2:63:23:7e:6b:26:d6:77:44: 45:f8:d3:43:2e:28:cc:e2:08:e8:e0:f2:2b:40:31:55:b6:e7: 6d:e1:1e:f9:5d:b1:b2:dc:c0:10:a5:1f:6d:be:6e:ee:1d:ee: 1e:50:8d:61:4d:91:21:a4:93:09:31:dc:9a:37:59:d2:75:3c: 81:97:6c:2f:36:8d:3d:79:72:94:7c:1d:00:12:62:28:43:1f: 29:c0:d9:68:63:b8:60:66:b4:03:2d:3c:1e:44:4c:98:55:2e: 67:5e:b6:9a:18:f7:3a:27:cd:33:58:8d:ee:3f:6d:02:22:62: f9:9d:86:21:3c:7b:55:05:ef:24:5e:b0:a7:34:fd:d0:2f:f8: f6:25:66:9c:c6:45:d3:11:5a:bb:04:35:bb:51:59:80:a7:d7: a3:8f:e3:7f:2c:29:cb:7d:75:6c:5e:84:30:7b:6d:d4:80:cb: e5:eb:e7:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87AivQHrCn2U1a0ct/VmeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NzQ1NDY2YjRlMTQ2ODMwYjk2MmI3NDkwNmRiMWM2ZDA4 MWZjNzAwHhcNMjUxMjIwMTgwMTAwWhcNMjUxMjIxMTgwMTAwWjAzMTEwLwYDVQQD Eyg5NzdkMjJmYTI2ODI3YWE1YmUwNmQ2MDIwZjc2MmFiNThhMGZhN2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Vo9Nkdo7yhOK65WZxGw9EF+rvbE zHQeqRgXZeUwiNpoYr+bVkONlwCpyjRY7yUNQBuiEKjaur3+8HM+XmNbBC7Xnstu Q7/o0EdmKAfo7Hmutl3/bGxDnXPwuW8XEemHswT+zSMKkpfomuZcHeBCWekrybhf f4VSO8ixHggy6k2qW/oFMVcCEFFYQPL7gwQ9LVZp1Ww6600b0gryV92hjQyp/9tp mEiqyBMVe3OB8LnQ1yoiSkOhNWzcKHmO6xRdlnznLqU3iuseWVkfe0H0s3atzmdg NJtWkSFyCscFXvbSYmlaslRYWl5G4JxoUIqYLixlXU0jFEOzXKyK2dGa5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJd9IvomgnqlvgbWAg92KrWKD6fdMB8GA1UdIwQY MBaAFBh0VGa04UaDC5YrdJBtscbQgfxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0hSVVpyVGhSb01MbGl0MGtHMnh4dENCX0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS83Yjk4MWMtMDFlMy00ODk1LWJmMWYt ZjFmYzA1NDFjNjQ5LzEvR0hSVVpyVGhSb01MbGl0MGtHMnh4dENCX0hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS83Yjk4MWMtMDFlMy00ODk1LWJmMWYtZjFmYzA1NDFjNjQ5 LzEvR0hSVVpyVGhSb01MbGl0MGtHMnh4dENCX0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOG4P3QW r6IPgEEdh4LuONW1W1VxxsvCqeKSQOuss/B+vAlj0mEYaclcqhaWgzjCUFXkPOg2 OKtShXwCrJKHE207YtpP7T8D2LDqQmWhHW/nwmMjfmsm1ndERfjTQy4ozOII6ODy K0AxVbbnbeEe+V2xstzAEKUfbb5u7h3uHlCNYU2RIaSTCTHcmjdZ0nU8gZdsLzaN PXlylHwdABJiKEMfKcDZaGO4YGa0Ay08HkRMmFUuZ162mhj3OifNM1iN7j9tAiJi +Z2GITx7VQXvJF6wpzT90C/49iVmnMZF0xFauwQ1u1FZgKfXo4/jfywpy311bF6E MHtt1IDL5evnZA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:34:29 2025 by rpki-client