This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft File: GPkZTU3X1Le3d8kgB55AHTolM7Y.mft (raw, json) Hash identifier: 4K4j1Yq3FM9imdVVKBEl/NUr7zdCjWGlhKaHidM/Ljk= Subject key identifier: AC:3E:E5:FB:CD:D7:F9:23:F1:4F:CC:6A:01:F4:A1:7B:39:A9:BD:16 Authority key identifier: 18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6 Certificate issuer: /CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6 Certificate serial: 019AF577F4FE0BEDBC2308156DE9EACD1491 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft Manifest number: 03C9 Signing time: Sat 06 Dec 2025 21:01:10 +0000 Manifest this update: Sat 06 Dec 2025 21:01:10 +0000 Manifest next update: Sun 07 Dec 2025 21:01:10 +0000 Files and hashes: 1: GPkZTU3X1Le3d8kgB55AHTolM7Y.crl (hash: 0VToW7al0cXzxk92obv8P4sS8UXWpTLt8tmoT+KuUwE=) 2: tGnfBpcM9WdZcGTV2u32zJOiBt8.roa (hash: gFwI+sP0Z829K3A/AxDldH8I51IlzJyC6UwEbaoL6wI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:f4:fe:0b:ed:bc:23:08:15:6d:e9:ea:cd:14:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6 Validity Not Before: Dec 6 21:01:10 2025 GMT Not After : Dec 7 21:01:10 2025 GMT Subject: CN=ac3ee5fbcdd7f923f14fcc6a01f4a17b39a9bd16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2e:47:c8:f1:a4:df:d5:9d:11:08:9e:89:57: 03:13:9f:2f:7f:be:4b:ac:04:fb:14:5f:5d:de:3e: 1c:71:35:a4:66:42:03:d6:62:75:b7:0b:a2:cb:7f: b8:99:6b:c7:3d:03:cb:7c:8b:b0:59:c1:27:5e:dc: 3c:da:82:f0:a6:d7:9e:3d:ff:8d:ec:b4:a1:7b:78: e2:82:2e:62:64:96:05:46:b7:82:60:68:e7:5f:1e: 04:1e:98:12:74:56:87:c6:e5:58:05:86:66:21:17: 44:a4:dd:ee:ea:f6:ad:4c:fc:59:5c:6f:cd:7f:e5: 55:89:3a:ca:21:c8:d9:57:28:ed:d0:1d:c8:4e:49: 3f:85:e9:3b:79:9e:41:cf:0e:64:a7:d9:b2:1c:98: 5d:4c:92:c5:25:b2:3a:5c:0c:99:c2:14:31:c4:7a: 04:a6:38:9c:16:16:fe:b2:20:50:b3:fd:8d:af:20: 5b:59:8a:da:23:77:95:57:a2:6a:35:02:f6:37:b3: ac:bc:e6:63:d4:75:a7:7a:fc:09:e6:95:77:20:3d: d5:54:22:75:f9:02:58:09:b3:bd:96:63:3b:6c:46: 81:5a:1b:99:49:62:85:82:0b:f8:07:3f:1b:db:2e: e3:f2:57:d3:f5:46:f0:ee:c5:21:d0:59:4a:1b:7a: 0a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3E:E5:FB:CD:D7:F9:23:F1:4F:CC:6A:01:F4:A1:7B:39:A9:BD:16 X509v3 Authority Key Identifier: keyid:18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:50:f4:1d:11:c9:8a:35:bb:d2:85:49:ef:e9:65:6f:9b:20: b0:00:7f:0e:cd:6b:56:a0:1d:23:15:83:58:12:2c:d1:50:12: 59:1e:ac:c6:14:1e:b5:7c:d8:b0:79:5c:af:ff:47:78:52:4f: a8:a2:fd:37:a5:59:37:5d:a7:2a:20:91:87:14:b4:5f:e2:fd: 4c:d6:cc:12:14:27:61:fd:e8:f2:fd:6d:07:98:ea:c5:8e:63: f6:bd:da:59:e1:c0:ce:80:cb:64:a8:85:aa:45:33:a1:b7:89: cf:9d:1a:34:11:da:0e:eb:c1:9f:c2:20:43:e8:6f:ce:af:14: a1:8a:51:b9:23:56:63:c4:b0:40:6b:ac:39:84:e6:07:82:42: 0f:32:32:87:94:77:de:46:c3:14:77:2b:29:ba:47:e9:62:97: c5:22:69:71:d0:55:79:cc:4f:35:ed:13:01:4b:77:05:c2:81: 67:f9:cd:05:15:f7:2f:42:0e:6a:f9:09:61:05:f0:04:84:6a: d4:bf:da:b9:40:ca:d1:59:72:35:29:5a:4d:1e:2a:30:93:ad: 85:ff:6c:ed:11:99:5b:00:b1:59:c5:ea:c6:26:08:f1:66:80: e8:d3:95:13:d1:1f:56:d3:c1:32:a9:52:e6:ce:42:63:f9:eb: 76:e2:92:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d/T+C+28IwgVbenqzRSRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZjkxOTRkNGRkN2Q0YjdiNzc3YzkyMDA3OWU0MDFkM2Ey NTMzYjYwHhcNMjUxMjA2MjEwMTEwWhcNMjUxMjA3MjEwMTEwWjAzMTEwLwYDVQQD EyhhYzNlZTVmYmNkZDdmOTIzZjE0ZmNjNmEwMWY0YTE3YjM5YTliZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC5HyPGk39WdEQieiVcDE58vf75L rAT7FF9d3j4ccTWkZkID1mJ1twuiy3+4mWvHPQPLfIuwWcEnXtw82oLwpteePf+N 7LShe3jigi5iZJYFRreCYGjnXx4EHpgSdFaHxuVYBYZmIRdEpN3u6vatTPxZXG/N f+VViTrKIcjZVyjt0B3ITkk/hek7eZ5Bzw5kp9myHJhdTJLFJbI6XAyZwhQxxHoE pjicFhb+siBQs/2NryBbWYraI3eVV6JqNQL2N7OsvOZj1HWnevwJ5pV3ID3VVCJ1 +QJYCbO9lmM7bEaBWhuZSWKFggv4Bz8b2y7j8lfT9Ubw7sUh0FlKG3oK0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKw+5fvN1/kj8U/MagH0oXs5qb0WMB8GA1UdIwQY MBaAFBj5GU1N19S3t3fJIAeeQB06JTO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1BrWlRVM1gxTGUzZDhrZ0I1NUFIVG9sTTdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMmM2ODktZWMzNi00ZWRmLTk2ZjQt Mzg5OTVmMjRiMWVmLzEvR1BrWlRVM1gxTGUzZDhrZ0I1NUFIVG9sTTdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kMmM2ODktZWMzNi00ZWRmLTk2ZjQtMzg5OTVmMjRiMWVm LzEvR1BrWlRVM1gxTGUzZDhrZ0I1NUFIVG9sTTdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVD0HRHJ ijW70oVJ7+llb5sgsAB/Ds1rVqAdIxWDWBIs0VASWR6sxhQetXzYsHlcr/9HeFJP qKL9N6VZN12nKiCRhxS0X+L9TNbMEhQnYf3o8v1tB5jqxY5j9r3aWeHAzoDLZKiF qkUzobeJz50aNBHaDuvBn8IgQ+hvzq8UoYpRuSNWY8SwQGusOYTmB4JCDzIyh5R3 3kbDFHcrKbpH6WKXxSJpcdBVecxPNe0TAUt3BcKBZ/nNBRX3L0IOavkJYQXwBIRq 1L/auUDK0VlyNSlaTR4qMJOthf9s7RGZWwCxWcXqxiYI8WaA6NOVE9EfVtPBMqlS 5s5CY/nrduKSSw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:55:42 2025 by rpki-client