This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft File: GAIUWTANFfrFUHBc9uJYmZ09hro.mft (raw, json) Hash identifier: LovMs6+Thi9gnOWmzcyHv5OSMhG9KSq/VXMKy59us30= Subject key identifier: 78:DA:C1:E8:5C:99:45:F4:56:62:11:10:3E:8A:34:AE:88:7D:61:E2 Authority key identifier: 18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA Certificate issuer: /CN=18021459300d15fac550705cf6e258999d3d86ba Certificate serial: 019AF0880E71FA1A90C421BAFBA2ADD0CDE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft Manifest number: 0C43 Signing time: Fri 05 Dec 2025 22:00:39 +0000 Manifest this update: Fri 05 Dec 2025 22:00:39 +0000 Manifest next update: Sat 06 Dec 2025 22:00:39 +0000 Files and hashes: 1: GAIUWTANFfrFUHBc9uJYmZ09hro.crl (hash: h7+Tu4NI/BWia17ivhMBoZylGe32iU21+2ErPtPtWRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:0e:71:fa:1a:90:c4:21:ba:fb:a2:ad:d0:cd:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18021459300d15fac550705cf6e258999d3d86ba Validity Not Before: Dec 5 22:00:39 2025 GMT Not After : Dec 6 22:00:39 2025 GMT Subject: CN=78dac1e85c9945f4566211103e8a34ae887d61e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:02:47:3c:2d:37:fb:ff:c7:b2:1a:d5:ec:b8: 8f:97:71:ff:0d:9e:30:df:1b:36:52:84:a5:59:cf: 46:65:d2:6d:9b:b8:02:18:3a:39:50:ed:bc:cc:44: 08:ff:62:33:c3:ec:78:8b:64:5d:af:c4:b8:0a:8b: dc:bb:92:4e:87:e2:d3:60:43:73:a0:a3:8b:4a:bc: 5d:17:16:4f:a9:b9:5b:6d:48:c3:83:5a:b8:81:fe: 0b:fb:c0:01:d2:dc:9e:a4:fd:5b:af:b1:cf:af:62: 3b:25:f9:08:08:1f:ce:6f:60:b8:9c:eb:df:e8:97: 13:31:7b:ab:09:2d:bc:7c:67:46:a5:16:4e:33:b8: 00:39:1e:67:54:72:ca:82:32:35:1f:22:ab:19:fd: 0c:44:49:79:05:79:ca:5a:0d:14:97:3b:3b:bf:82: 50:4d:da:56:ab:9d:dd:b0:90:4d:65:b7:79:2c:16: 29:a8:82:56:c9:73:42:dd:c8:fe:55:0f:b8:01:a6: 77:5f:48:9b:81:f5:16:86:9a:24:ec:7a:e0:c0:c1: 65:bd:97:6f:da:c1:7a:65:07:a8:b3:6f:d6:0e:05: 21:76:78:a0:c1:e0:f2:40:df:d8:2c:f8:38:fd:06: 41:87:94:dc:9c:09:f3:f7:22:90:84:ad:30:40:f3: 7b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DA:C1:E8:5C:99:45:F4:56:62:11:10:3E:8A:34:AE:88:7D:61:E2 X509v3 Authority Key Identifier: keyid:18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:3d:84:45:af:0f:c6:ab:b3:82:fd:39:54:d3:10:93:49:62: 7c:5d:38:e2:b1:53:b2:68:d0:4f:e5:ea:c4:21:37:b0:3a:91: d8:93:2b:35:5d:33:26:be:24:c0:74:fc:ae:69:eb:3a:fd:c8: db:35:f6:0c:22:e5:b7:d9:e3:8a:f0:4e:7c:9a:99:1a:d1:df: 4d:8f:10:50:08:8d:e4:21:ab:e1:a3:4f:07:2f:45:85:e4:ec: d9:24:17:99:75:42:3c:43:59:b8:da:69:32:f2:89:97:b9:20: bb:21:a8:09:61:9b:29:8d:45:a0:40:e6:5e:8e:59:99:23:ea: 9d:68:11:cf:cb:f2:43:75:f1:1e:d1:ac:79:41:f5:10:71:95: 87:41:67:d6:19:b0:ff:ca:29:ca:4b:9c:c7:5d:2a:87:f5:1a: c5:09:96:94:e2:1a:09:d1:6c:6d:05:8b:b6:73:96:43:45:9e: 38:a5:2e:66:e4:f5:c5:ac:fe:66:49:5b:c3:65:10:f6:42:b7: 4f:ab:af:25:78:05:c8:c9:ac:4d:3f:e6:8e:d6:46:93:72:92: 35:1e:59:d2:20:6c:0b:73:9e:4c:8b:49:fd:cb:94:ef:8e:30: 0f:24:96:c5:7e:ee:13:fc:01:b0:39:e4:dc:92:c9:63:2b:9d: 4b:01:de:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiA5x+hqQxCG6+6Kt0M3iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MDIxNDU5MzAwZDE1ZmFjNTUwNzA1Y2Y2ZTI1ODk5OWQz ZDg2YmEwHhcNMjUxMjA1MjIwMDM5WhcNMjUxMjA2MjIwMDM5WjAzMTEwLwYDVQQD Eyg3OGRhYzFlODVjOTk0NWY0NTY2MjExMTAzZThhMzRhZTg4N2Q2MWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQJHPC03+//HshrV7LiPl3H/DZ4w 3xs2UoSlWc9GZdJtm7gCGDo5UO28zEQI/2Izw+x4i2Rdr8S4Covcu5JOh+LTYENz oKOLSrxdFxZPqblbbUjDg1q4gf4L+8AB0tyepP1br7HPr2I7JfkICB/Ob2C4nOvf 6JcTMXurCS28fGdGpRZOM7gAOR5nVHLKgjI1HyKrGf0MREl5BXnKWg0Ulzs7v4JQ TdpWq53dsJBNZbd5LBYpqIJWyXNC3cj+VQ+4AaZ3X0ibgfUWhpok7HrgwMFlvZdv 2sF6ZQeos2/WDgUhdnigweDyQN/YLPg4/QZBh5TcnAnz9yKQhK0wQPN7gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjawehcmUX0VmIRED6KNK6IfWHiMB8GA1UdIwQY MBaAFBgCFFkwDRX6xVBwXPbiWJmdPYa6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0FJVVdUQU5GZnJGVUhCYzl1SlltWjA5aHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZDMzMjctNzA4NC00Y2VkLTk5Njct OTIyNGNlMmU5NjVhLzEvR0FJVVdUQU5GZnJGVUhCYzl1SlltWjA5aHJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83ZDMzMjctNzA4NC00Y2VkLTk5NjctOTIyNGNlMmU5NjVh LzEvR0FJVVdUQU5GZnJGVUhCYzl1SlltWjA5aHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVz2ERa8P xquzgv05VNMQk0lifF044rFTsmjQT+XqxCE3sDqR2JMrNV0zJr4kwHT8rmnrOv3I 2zX2DCLlt9njivBOfJqZGtHfTY8QUAiN5CGr4aNPBy9FheTs2SQXmXVCPENZuNpp MvKJl7kguyGoCWGbKY1FoEDmXo5ZmSPqnWgRz8vyQ3XxHtGseUH1EHGVh0Fn1hmw /8opykucx10qh/UaxQmWlOIaCdFsbQWLtnOWQ0WeOKUuZuT1xaz+Zklbw2UQ9kK3 T6uvJXgFyMmsTT/mjtZGk3KSNR5Z0iBsC3OeTItJ/cuU744wDySWxX7uE/wBsDnk 3JLJYyudSwHefw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:03 2025 by rpki-client