This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft File: GPe8sFBdSWl9bFFzJBWGc257DXA.mft (raw, json) Hash identifier: qJog5NOm1iOvO13SCF3wKkIegt9Y5zxjS7DB4pejbco= Subject key identifier: 06:F1:AD:B0:8B:71:7F:8A:D9:F1:58:76:9B:19:E8:4A:1A:2A:56:A5 Authority key identifier: 18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70 Certificate issuer: /CN=18f7bcb0505d49697d6c5173241586736e7b0d70 Certificate serial: 019AF23FB02511D9899773C8C388B6698419 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 06:00:51 +0000 Manifest this update: Sat 06 Dec 2025 06:00:51 +0000 Manifest next update: Sun 07 Dec 2025 06:00:51 +0000 Files and hashes: 1: GPe8sFBdSWl9bFFzJBWGc257DXA.crl (hash: sYE+2BQZLlvMT729dsRQhwjw1VNResqvmZk+F7agk/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b0:25:11:d9:89:97:73:c8:c3:88:b6:69:84:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f7bcb0505d49697d6c5173241586736e7b0d70 Validity Not Before: Dec 6 06:00:51 2025 GMT Not After : Dec 7 06:00:51 2025 GMT Subject: CN=06f1adb08b717f8ad9f158769b19e84a1a2a56a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:87:a1:ff:43:66:2b:8a:80:3f:26:52:44:36: 89:55:8c:21:ec:2c:00:4d:6b:a8:bf:8a:dc:d0:0a: 4a:d4:e1:c2:22:5a:d8:97:f9:d0:cd:fe:88:8f:e1: 52:bf:e5:c1:0d:e7:a0:6f:53:87:f7:ec:48:60:71: 86:63:45:9e:dd:94:73:76:e3:67:d5:ee:02:ba:70: fa:cb:31:3e:38:eb:4c:83:f8:1c:d9:7d:7b:9a:e9: 6a:da:c6:2c:80:2f:fb:f4:98:35:37:4b:50:c4:56: a4:16:df:15:e4:c7:61:09:0b:4d:29:ac:b3:70:59: c9:3b:83:a0:f3:df:72:e9:86:af:e0:10:69:cf:9e: 7c:30:14:3f:6b:c9:a4:2a:47:8d:ed:41:3f:c9:22: 3b:17:07:da:24:2b:cf:e2:b0:8e:22:29:1d:ce:03: e8:fc:a1:fa:20:67:0c:c5:a6:3e:51:fe:97:f4:77: 3d:8a:0f:1b:9b:37:9e:4c:f2:fc:2f:fc:f4:6f:6b: 73:f6:de:9b:64:12:fb:84:f5:7d:e7:b0:2c:5f:dc: 27:0f:6f:fe:f9:38:be:2c:d8:cc:44:17:f8:43:a8: 69:86:1f:b6:a2:19:78:96:fb:4f:03:12:55:fe:c8: 42:39:74:17:79:3e:cc:91:f1:27:71:a0:73:9e:b2: db:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F1:AD:B0:8B:71:7F:8A:D9:F1:58:76:9B:19:E8:4A:1A:2A:56:A5 X509v3 Authority Key Identifier: keyid:18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:70:61:7a:5f:e6:1c:65:9d:8c:75:6b:96:5a:2b:63:54:2a: 3e:1d:93:a2:54:f5:ae:28:32:ef:62:a5:b7:c6:8f:5e:0d:54: 43:b0:18:e2:a8:df:cd:b7:34:a8:a4:57:6b:08:fe:77:3a:b0: ad:04:ed:ca:ae:48:84:bc:ab:c1:39:7d:26:6d:9a:02:ac:00: f8:86:a2:2f:18:46:72:aa:d1:82:63:dc:39:6e:24:68:d6:42: 80:d1:9b:2e:96:34:3c:96:aa:33:2e:6f:98:88:68:b5:f7:13: 55:f7:6d:62:bd:64:e9:b8:c5:b5:5c:4b:de:52:da:ca:72:22: 52:b2:c9:80:ed:5d:b9:04:87:2a:5d:3e:79:98:23:3b:09:42: 2b:88:94:31:e5:5b:6b:83:77:de:ba:8f:be:d5:85:2b:f5:47: 62:50:be:21:1a:47:dc:f6:00:33:a8:eb:38:06:82:39:6f:19: 5a:a3:25:fd:c6:b1:26:f2:05:95:a0:19:b4:dc:33:f2:b4:f0: 9a:19:92:62:88:f4:bf:c7:03:b6:c4:ff:ce:3f:57:71:32:56: 53:15:2d:45:7a:5b:41:b6:7b:c5:db:b2:32:ef:84:7e:9b:7e: e6:7c:40:7e:cf:6f:f5:d0:80:9c:8e:cd:67:a1:b1:3b:92:25: a0:58:49:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7AlEdmJl3PIw4i2aYQZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZjdiY2IwNTA1ZDQ5Njk3ZDZjNTE3MzI0MTU4NjczNmU3 YjBkNzAwHhcNMjUxMjA2MDYwMDUxWhcNMjUxMjA3MDYwMDUxWjAzMTEwLwYDVQQD EygwNmYxYWRiMDhiNzE3ZjhhZDlmMTU4NzY5YjE5ZTg0YTFhMmE1NmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYeh/0NmK4qAPyZSRDaJVYwh7CwA TWuov4rc0ApK1OHCIlrYl/nQzf6Ij+FSv+XBDeegb1OH9+xIYHGGY0We3ZRzduNn 1e4CunD6yzE+OOtMg/gc2X17mulq2sYsgC/79Jg1N0tQxFakFt8V5MdhCQtNKayz cFnJO4Og899y6Yav4BBpz558MBQ/a8mkKkeN7UE/ySI7FwfaJCvP4rCOIikdzgPo /KH6IGcMxaY+Uf6X9Hc9ig8bmzeeTPL8L/z0b2tz9t6bZBL7hPV957AsX9wnD2/+ +Ti+LNjMRBf4Q6hphh+2ohl4lvtPAxJV/shCOXQXeT7MkfEncaBznrLbqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbxrbCLcX+K2fFYdpsZ6EoaKlalMB8GA1UdIwQY MBaAFBj3vLBQXUlpfWxRcyQVhnNuew1wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1BlOHNGQmRTV2w5YkZGekpCV0djMjU3RFhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mMjYyYjAtNWNkMC00ZjQxLTlmNzct ZTU4NGQ5ZTQ4MDIyLzEvR1BlOHNGQmRTV2w5YkZGekpCV0djMjU3RFhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9mMjYyYjAtNWNkMC00ZjQxLTlmNzctZTU4NGQ5ZTQ4MDIy LzEvR1BlOHNGQmRTV2w5YkZGekpCV0djMjU3RFhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHBhel/m HGWdjHVrllorY1QqPh2TolT1rigy72Klt8aPXg1UQ7AY4qjfzbc0qKRXawj+dzqw rQTtyq5IhLyrwTl9Jm2aAqwA+IaiLxhGcqrRgmPcOW4kaNZCgNGbLpY0PJaqMy5v mIhotfcTVfdtYr1k6bjFtVxL3lLaynIiUrLJgO1duQSHKl0+eZgjOwlCK4iUMeVb a4N33rqPvtWFK/VHYlC+IRpH3PYAM6jrOAaCOW8ZWqMl/caxJvIFlaAZtNwz8rTw mhmSYoj0v8cDtsT/zj9XcTJWUxUtRXpbQbZ7xduyMu+Efpt+5nxAfs9v9dCAnI7N Z6GxO5IloFhJwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:37:05 2025 by rpki-client