This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft File: Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft (raw, json) Hash identifier: ENzr33v0V2SavUtS7R3w+N0Ns33A9CdFNCardNp+lJ8= Subject key identifier: B1:B0:F8:78:5E:D6:B8:94:BB:1B:13:2A:81:73:95:BD:BC:F9:EC:D8 Authority key identifier: 1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43 Certificate issuer: /CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43 Certificate serial: 019AF1D24FA2D85E14F54DEEF558C00AB4B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 04:01:23 +0000 Manifest this update: Sat 06 Dec 2025 04:01:23 +0000 Manifest next update: Sun 07 Dec 2025 04:01:23 +0000 Files and hashes: 1: Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl (hash: qX4jqDrtBrEypzD6SLvMJANgs0IrNIJhvkmdfmYkt5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4f:a2:d8:5e:14:f5:4d:ee:f5:58:c0:0a:b4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43 Validity Not Before: Dec 6 04:01:23 2025 GMT Not After : Dec 7 04:01:23 2025 GMT Subject: CN=b1b0f8785ed6b894bb1b132a817395bdbcf9ecd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:75:88:e8:04:d4:ae:23:c8:fe:39:55:af:4e: b7:e8:1c:e7:da:bd:ca:9a:68:98:cd:43:a0:7f:94: bf:b8:f4:6e:35:94:2c:b7:1c:4d:71:32:99:a9:b3: 05:ec:8d:09:34:d8:8f:2b:ab:6a:d7:fc:b9:25:3f: 5a:19:1e:e1:0d:48:6b:8f:0e:c4:c8:5d:90:b3:92: 1f:b3:10:61:db:e6:8c:20:24:4c:b8:27:fb:95:78: ba:c9:de:56:cf:6e:6b:62:c1:32:b2:fe:6f:6f:10: 67:0e:a0:41:f3:a0:84:b0:b5:ad:97:80:99:59:4b: 0d:fc:34:af:20:4c:e7:1d:ff:93:cd:e2:ff:8a:ff: d5:20:25:ec:e1:3d:56:87:01:50:c0:cd:9d:9a:a5: 13:49:20:03:dc:50:fc:ec:bd:7e:7a:e6:70:21:2b: d7:1a:c2:ed:b9:66:96:90:5e:b3:79:97:6e:3a:55: 3c:a7:be:21:43:65:9a:89:0c:1f:ca:f5:ac:58:0f: a7:b8:69:be:7f:e6:30:52:d9:82:5e:36:e8:14:f8: a8:0a:ed:c9:61:57:f5:83:ce:fe:17:02:97:64:ce: 91:a4:95:dc:64:65:de:85:d5:b3:e5:ac:d4:ac:74: f4:38:ab:64:39:62:2b:c4:50:e6:6e:3b:32:e9:55: 4c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B0:F8:78:5E:D6:B8:94:BB:1B:13:2A:81:73:95:BD:BC:F9:EC:D8 X509v3 Authority Key Identifier: keyid:1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:34:22:dd:e5:1f:7f:16:31:41:89:56:eb:19:b8:36:2b:3d: b8:ad:f4:38:d0:ab:48:c5:3b:1a:5f:41:1b:28:8f:13:d8:5c: 60:9c:b5:3e:df:5e:c3:a4:30:8d:30:d8:c4:ec:89:b5:0d:fd: 20:25:88:be:c5:76:de:b3:0d:f0:f4:fa:31:4a:fc:b7:87:78: a3:e2:cd:04:b7:14:8d:00:b6:b2:db:a1:1d:b9:2e:81:ec:a4: 62:54:b6:95:1c:c3:39:d7:c5:97:01:f5:b4:77:1f:6a:03:1a: 63:f7:2a:1c:ea:22:54:9d:fb:d6:d4:f2:07:17:f2:76:bc:6b: 28:0e:3d:4f:f1:fd:45:d3:8e:ff:79:f9:14:ea:87:d5:80:5d: e0:4f:f1:94:5b:34:67:1b:bf:1d:c6:9d:50:5b:a8:6c:ec:b9: b4:75:91:f6:c0:a2:6e:e8:a2:07:e3:ee:3c:71:37:aa:3e:32: 4d:50:3a:a0:54:72:02:26:81:10:96:1f:18:1a:8e:71:7b:06: 98:cb:80:31:3c:44:64:12:ec:02:5a:96:89:92:7f:7b:9e:2e: 3c:0d:7d:41:46:84:0a:39:99:c8:2d:5c:0d:40:e7:6f:29:03: f4:5a:2c:00:de:9a:61:28:ca:12:5c:4e:84:0a:d4:46:8d:70: a0:29:d7:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0k+i2F4U9U3u9VjACrS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMGY4NGQ2OTczYWFmMmFjNDQ4ZDBkMzJhYzdmMzRkNzQw ODVhNDMwHhcNMjUxMjA2MDQwMTIzWhcNMjUxMjA3MDQwMTIzWjAzMTEwLwYDVQQD EyhiMWIwZjg3ODVlZDZiODk0YmIxYjEzMmE4MTczOTViZGJjZjllY2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnWI6ATUriPI/jlVr0636Bzn2r3K mmiYzUOgf5S/uPRuNZQstxxNcTKZqbMF7I0JNNiPK6tq1/y5JT9aGR7hDUhrjw7E yF2Qs5IfsxBh2+aMICRMuCf7lXi6yd5Wz25rYsEysv5vbxBnDqBB86CEsLWtl4CZ WUsN/DSvIEznHf+TzeL/iv/VICXs4T1WhwFQwM2dmqUTSSAD3FD87L1+euZwISvX GsLtuWaWkF6zeZduOlU8p74hQ2WaiQwfyvWsWA+nuGm+f+YwUtmCXjboFPioCu3J YVf1g87+FwKXZM6RpJXcZGXehdWz5azUrHT0OKtkOWIrxFDmbjsy6VVMJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGw+Hhe1riUuxsTKoFzlb28+ezYMB8GA1UdIwQY MBaAFBoPhNaXOq8qxEjQ0yrH8010CFpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9mMGUxZWYtMjFhMS00OWZkLWJhNjkt NTRhNmFkYWNjYjdkLzEvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9mMGUxZWYtMjFhMS00OWZkLWJhNjktNTRhNmFkYWNjYjdk LzEvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDQi3eUf fxYxQYlW6xm4Nis9uK30ONCrSMU7Gl9BGyiPE9hcYJy1Pt9ew6QwjTDYxOyJtQ39 ICWIvsV23rMN8PT6MUr8t4d4o+LNBLcUjQC2stuhHbkugeykYlS2lRzDOdfFlwH1 tHcfagMaY/cqHOoiVJ371tTyBxfydrxrKA49T/H9RdOO/3n5FOqH1YBd4E/xlFs0 Zxu/HcadUFuobOy5tHWR9sCibuiiB+PuPHE3qj4yTVA6oFRyAiaBEJYfGBqOcXsG mMuAMTxEZBLsAlqWiZJ/e54uPA19QUaECjmZyC1cDUDnbykD9FosAN6aYSjKElxO hArURo1woCnXKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:49 2025 by rpki-client