This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft File: GnCnIdG1PtkdhbbFNaxytJBPnD0.mft (raw, json) Hash identifier: SVJMN2EC3DNjyZxoqWr5t4usCT1MDHYfiEFWqru+6iQ= Subject key identifier: D2:BD:07:64:CF:6D:B8:64:63:68:3D:E6:93:49:44:AC:41:8B:C9:EA Authority key identifier: 1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D Certificate issuer: /CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d Certificate serial: 019AF0F5C60F77940AD4807A87BD83BB3894 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft Manifest number: 7F Signing time: Sat 06 Dec 2025 00:00:29 +0000 Manifest this update: Sat 06 Dec 2025 00:00:29 +0000 Manifest next update: Sun 07 Dec 2025 00:00:29 +0000 Files and hashes: 1: GnCnIdG1PtkdhbbFNaxytJBPnD0.crl (hash: 7JiBF1az8E2F5zrlwmVmRKJWQzeaNc9kfDB1TWPEoag=) 2: NcvL-cWiOsIwbHlPpjJOxwZQhdo.roa (hash: Esp//dlbeL22yi1M90HkNJoPvC1Y47F4dd714WYg0sw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:c6:0f:77:94:0a:d4:80:7a:87:bd:83:bb:38:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d Validity Not Before: Dec 6 00:00:29 2025 GMT Not After : Dec 7 00:00:29 2025 GMT Subject: CN=d2bd0764cf6db86463683de6934944ac418bc9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:90:96:66:8c:3a:0d:3b:77:76:82:d2:c6:25: 34:4b:8c:93:99:8c:1d:dc:e3:95:9e:c2:1e:f1:3a: a9:91:2d:08:56:b5:62:e3:48:b7:a5:82:63:3d:54: 61:8a:50:bc:45:99:64:3a:0e:b8:de:5c:4b:b8:3d: 45:05:b8:f3:88:12:ff:47:92:56:dd:72:3e:21:26: e9:70:6e:3c:7e:2d:f3:7d:26:a7:b2:16:ad:6d:9f: a8:82:fd:33:57:8d:34:08:5f:c0:22:bf:72:6c:23: 99:1f:04:16:59:f9:74:e3:d4:cd:68:e0:90:25:fe: fe:b8:dc:0b:40:0c:c4:95:db:59:92:ed:ec:b9:a2: 67:24:76:87:a2:62:c8:1a:95:60:28:d7:a6:59:26: a4:54:40:0c:08:7d:6b:e3:c4:60:c6:d2:67:0e:8e: c3:7a:ea:56:6b:af:83:55:9b:2d:70:bb:21:53:bc: d9:72:5f:11:4a:07:0a:9e:15:a4:44:af:f0:65:07: 6b:5a:f1:df:b4:a6:8b:64:48:f2:ed:f3:75:c1:74: a7:c7:e2:c7:14:74:00:28:c3:d0:0a:6c:fe:b6:06: c4:bb:fd:d3:f0:29:d1:00:61:dd:3b:8c:f2:71:36: 09:51:06:63:16:cb:b9:31:07:43:75:14:0f:e6:8c: e8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BD:07:64:CF:6D:B8:64:63:68:3D:E6:93:49:44:AC:41:8B:C9:EA X509v3 Authority Key Identifier: keyid:1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:b7:6a:fc:ec:0d:1b:e6:bc:0d:ce:4f:b1:20:d5:23:65:fd: a6:f8:fc:74:49:e6:e5:ad:d2:15:f8:76:af:52:15:1a:b1:3d: 23:b2:8c:45:4f:e0:c9:6c:2b:31:16:d1:bf:1c:3c:98:52:7c: da:40:98:4b:0d:76:b1:20:99:a5:15:21:4f:b2:09:58:34:ba: f4:3b:1f:0f:8b:f7:30:ce:57:ce:40:15:ae:31:e7:b8:42:bc: 28:dd:34:b1:9f:8f:ad:5b:1d:05:96:46:fa:88:57:6d:a1:95: f8:b4:60:1e:e1:47:2c:a8:e7:8c:39:bf:f5:7c:af:d6:a5:76: 8f:38:21:6f:1f:06:f5:ad:ca:ae:f1:c9:b6:e8:97:83:51:7f: ef:92:01:a4:96:a8:3e:d1:52:e7:ca:93:31:5b:88:a4:ba:d3: 61:d0:2b:8c:00:55:6f:70:68:8a:9f:5e:04:36:88:5f:3f:74: cc:e7:4f:b7:d1:df:c4:00:4a:f1:d9:18:c2:0e:b1:ea:4f:94: 28:0f:2d:69:88:1c:68:1c:fa:a0:a5:19:b7:7a:f8:c3:98:ed: 40:36:76:6b:af:42:35:2d:ee:80:9e:81:20:09:a6:7d:89:35: 8c:26:a2:49:e3:ed:ef:9e:0c:d7:b7:ce:32:57:7e:66:29:1e: c1:ae:f4:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9cYPd5QK1IB6h72DuziUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNzBhNzIxZDFiNTNlZDkxZDg1YjZjNTM1YWM3MmI0OTA0 ZjljM2QwHhcNMjUxMjA2MDAwMDI5WhcNMjUxMjA3MDAwMDI5WjAzMTEwLwYDVQQD EyhkMmJkMDc2NGNmNmRiODY0NjM2ODNkZTY5MzQ5NDRhYzQxOGJjOWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5CWZow6DTt3doLSxiU0S4yTmYwd 3OOVnsIe8TqpkS0IVrVi40i3pYJjPVRhilC8RZlkOg643lxLuD1FBbjziBL/R5JW 3XI+ISbpcG48fi3zfSanshatbZ+ogv0zV400CF/AIr9ybCOZHwQWWfl049TNaOCQ Jf7+uNwLQAzEldtZku3suaJnJHaHomLIGpVgKNemWSakVEAMCH1r48RgxtJnDo7D eupWa6+DVZstcLshU7zZcl8RSgcKnhWkRK/wZQdrWvHftKaLZEjy7fN1wXSnx+LH FHQAKMPQCmz+tgbEu/3T8CnRAGHdO4zycTYJUQZjFsu5MQdDdRQP5ozohQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNK9B2TPbbhkY2g95pNJRKxBi8nqMB8GA1UdIwQY MBaAFBpwpyHRtT7ZHYW2xTWscrSQT5w9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR25DbklkRzFQdGtkaGJiRk5heHl0SkJQbkQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wZTA5NWItNjg5MS00NWM1LWEzYTEt ZjBjNGViMTU0MjYxLzEvR25DbklkRzFQdGtkaGJiRk5heHl0SkJQbkQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wZTA5NWItNjg5MS00NWM1LWEzYTEtZjBjNGViMTU0MjYx LzEvR25DbklkRzFQdGtkaGJiRk5heHl0SkJQbkQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu7dq/OwN G+a8Dc5PsSDVI2X9pvj8dEnm5a3SFfh2r1IVGrE9I7KMRU/gyWwrMRbRvxw8mFJ8 2kCYSw12sSCZpRUhT7IJWDS69DsfD4v3MM5XzkAVrjHnuEK8KN00sZ+PrVsdBZZG +ohXbaGV+LRgHuFHLKjnjDm/9Xyv1qV2jzghbx8G9a3KrvHJtuiXg1F/75IBpJao PtFS58qTMVuIpLrTYdArjABVb3Boip9eBDaIXz90zOdPt9HfxABK8dkYwg6x6k+U KA8taYgcaBz6oKUZt3r4w5jtQDZ2a69CNS3ugJ6BIAmmfYk1jCaiSePt754M17fO Mld+Zikewa70HA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:22 2025 by rpki-client