This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft File: GUoR_la49HpaFBUDK3f_n7CC4D8.mft (raw, json) Hash identifier: UaacQNCDvRBjJ3Dy0qhfPXNRP3xRylppKvakvJACo7s= Subject key identifier: 39:BE:BB:53:06:45:83:77:93:0C:C8:2B:11:C5:6A:AA:E6:C3:EE:C9 Authority key identifier: 19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F Certificate issuer: /CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f Certificate serial: 019AF12DF457DE45C3D938AC726F12C6C350 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft Manifest number: 121F Signing time: Sat 06 Dec 2025 01:01:51 +0000 Manifest this update: Sat 06 Dec 2025 01:01:51 +0000 Manifest next update: Sun 07 Dec 2025 01:01:51 +0000 Files and hashes: 1: GUoR_la49HpaFBUDK3f_n7CC4D8.crl (hash: 1lvwIJIR5LfyaKuEEC8FiuyVrAHrG324bzg7LZqa8rc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f4:57:de:45:c3:d9:38:ac:72:6f:12:c6:c3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f Validity Not Before: Dec 6 01:01:51 2025 GMT Not After : Dec 7 01:01:51 2025 GMT Subject: CN=39bebb5306458377930cc82b11c56aaae6c3eec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:16:db:e0:00:7b:fb:6b:10:22:05:35:07:3e: d2:4b:0a:b7:e9:5d:e0:e6:51:ff:17:6f:aa:e2:50: a4:77:b8:1e:2f:a0:17:85:6e:b9:2b:7e:c1:7b:a1: d6:d0:f5:c2:03:e8:47:f0:40:9f:06:99:41:54:6e: 7b:6e:fe:07:a4:88:12:cc:e4:0f:be:67:01:01:9a: 41:d4:9b:ee:de:34:74:ab:27:7a:70:f1:9c:e4:b2: 8b:7d:65:97:73:25:18:63:e8:82:e3:63:0f:58:d3: fd:e9:c8:b4:14:ca:7e:7a:30:b9:90:1c:c5:d5:92: 32:69:ac:aa:b0:17:45:5c:b5:d7:52:ab:d0:d4:86: 59:94:11:fa:06:18:7f:c8:21:d7:51:e9:54:18:c1: 65:a1:8c:04:bf:09:f5:ed:78:22:2e:29:bf:d2:c1: d7:54:58:5d:ab:b9:35:77:33:6d:4a:da:2b:8d:73: 20:0a:d7:ac:70:8e:de:08:35:d5:7f:ec:0c:f7:02: 63:45:aa:22:7b:43:9c:91:a7:6b:16:46:da:ab:22: c4:3a:c3:23:9c:0b:72:30:68:65:69:39:5a:63:6e: b3:a1:25:ea:5a:72:98:24:43:c8:1e:83:4a:e4:0a: f4:6a:0a:94:23:b6:b9:35:03:15:44:a8:69:c2:bd: 67:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BE:BB:53:06:45:83:77:93:0C:C8:2B:11:C5:6A:AA:E6:C3:EE:C9 X509v3 Authority Key Identifier: keyid:19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ed:80:d9:d5:37:78:84:4f:a9:d1:5c:7b:3b:54:15:0d:d4: bd:df:ac:08:36:ff:7c:e8:85:e8:43:b9:54:8d:22:cd:01:b5: 2d:a2:89:ba:dc:23:df:59:46:bf:86:4d:c7:4d:81:a8:ea:6a: 82:fd:6e:9c:f0:c5:da:58:f2:37:2e:52:04:1d:7a:e3:b9:2a: 22:79:4b:bc:59:c5:cd:16:cc:a4:1f:21:05:e7:f7:9d:32:c0: 4a:ec:96:40:88:7b:c6:81:4b:f4:a3:09:fa:e6:de:67:cf:53: 43:97:95:b8:3a:b5:b2:e2:d3:1d:b3:3c:21:c1:36:7c:22:aa: b6:c1:41:7d:b5:48:0e:56:b1:5d:f4:84:1c:fb:74:57:b5:37: 8f:a5:d6:12:8e:94:3f:c7:9f:c4:57:be:1b:72:af:ea:8e:f3: d6:10:ee:a5:4f:81:85:fa:69:b0:b7:89:c8:35:41:96:1b:3c: ed:d2:59:3d:f1:57:66:4a:9b:c9:39:f0:e8:9f:e4:9d:33:f1: e8:35:40:66:99:c1:9d:a6:d0:2b:11:04:c1:e5:49:89:e7:98: 84:ec:aa:e7:d3:85:0a:bc:bc:3f:e3:b8:73:b1:1f:67:f6:44: 28:0a:ee:76:3b:40:4a:f9:05:cf:20:38:b0:2c:2c:eb:07:83: fa:21:ec:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfRX3kXD2Tiscm8SxsNQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NGExMWZlNTZiOGY0N2E1YTE0MTUwMzJiNzdmZjlmYjA4 MmUwM2YwHhcNMjUxMjA2MDEwMTUxWhcNMjUxMjA3MDEwMTUxWjAzMTEwLwYDVQQD EygzOWJlYmI1MzA2NDU4Mzc3OTMwY2M4MmIxMWM1NmFhYWU2YzNlZWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixbb4AB7+2sQIgU1Bz7SSwq36V3g 5lH/F2+q4lCkd7geL6AXhW65K37Be6HW0PXCA+hH8ECfBplBVG57bv4HpIgSzOQP vmcBAZpB1Jvu3jR0qyd6cPGc5LKLfWWXcyUYY+iC42MPWNP96ci0FMp+ejC5kBzF 1ZIyaayqsBdFXLXXUqvQ1IZZlBH6Bhh/yCHXUelUGMFloYwEvwn17XgiLim/0sHX VFhdq7k1dzNtStorjXMgCtescI7eCDXVf+wM9wJjRaoie0OckadrFkbaqyLEOsMj nAtyMGhlaTlaY26zoSXqWnKYJEPIHoNK5Ar0agqUI7a5NQMVRKhpwr1nxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDm+u1MGRYN3kwzIKxHFaqrmw+7JMB8GA1UdIwQY MBaAFBlKEf5WuPR6WhQVAyt3/5+wguA/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VvUl9sYTQ5SHBhRkJVREszZl9uN0NDNEQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hYWFlYzAtMGZiYS00ZWZjLTk4YjYt YzZhMTZkZTQ0MmJmLzEvR1VvUl9sYTQ5SHBhRkJVREszZl9uN0NDNEQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hYWFlYzAtMGZiYS00ZWZjLTk4YjYtYzZhMTZkZTQ0MmJm LzEvR1VvUl9sYTQ5SHBhRkJVREszZl9uN0NDNEQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+2A2dU3 eIRPqdFceztUFQ3Uvd+sCDb/fOiF6EO5VI0izQG1LaKJutwj31lGv4ZNx02BqOpq gv1unPDF2ljyNy5SBB1647kqInlLvFnFzRbMpB8hBef3nTLASuyWQIh7xoFL9KMJ +ubeZ89TQ5eVuDq1suLTHbM8IcE2fCKqtsFBfbVIDlaxXfSEHPt0V7U3j6XWEo6U P8efxFe+G3Kv6o7z1hDupU+BhfppsLeJyDVBlhs87dJZPfFXZkqbyTnw6J/knTPx 6DVAZpnBnabQKxEEweVJieeYhOyq59OFCry8P+O4c7EfZ/ZEKArudjtASvkFzyA4 sCws6weD+iHsnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:59 2025 by rpki-client