This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft File: GRGmWD3HmkFVGxeutDFNspMRy-s.mft (raw, json) Hash identifier: P8/iQV61qpJn0L2ATKKI+Gf+Nwl2aUqGXZZ43WpWB9M= Subject key identifier: 74:89:17:93:02:17:19:A8:B8:71:D2:69:F5:5A:15:E7:56:D7:08:94 Authority key identifier: 19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB Certificate issuer: /CN=1911a6583dc79a41551b17aeb4314db29311cbeb Certificate serial: 019AF31BB4316F5744A05A8F17F418BE6041 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft Manifest number: 1678 Signing time: Sat 06 Dec 2025 10:01:10 +0000 Manifest this update: Sat 06 Dec 2025 10:01:10 +0000 Manifest next update: Sun 07 Dec 2025 10:01:10 +0000 Files and hashes: 1: GRGmWD3HmkFVGxeutDFNspMRy-s.crl (hash: dEpzL+lig4D2bwqUFmkKTNVyYzQasUxdGb7cIIWH2/E=) 2: NGlvLAmeCUBqhZ9wnIddvIcLHQE.roa (hash: DjDvlZwqQlOEZrmGSn2/QarvAyBTsIXhSALa8HhYpv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:b4:31:6f:57:44:a0:5a:8f:17:f4:18:be:60:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1911a6583dc79a41551b17aeb4314db29311cbeb Validity Not Before: Dec 6 10:01:10 2025 GMT Not After : Dec 7 10:01:10 2025 GMT Subject: CN=74891793021719a8b871d269f55a15e756d70894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ef:ca:da:85:1f:2b:22:32:c9:8a:42:0b:31: a7:56:40:21:1a:bc:a1:3c:23:78:00:e0:29:97:d1: 2b:15:40:c2:c7:95:1c:3a:26:6c:b7:e8:1b:06:a9: d1:e7:87:36:a9:ef:4b:c6:ab:dc:e0:90:dd:ba:cc: d5:b6:9e:77:ae:a9:d3:a1:22:02:45:23:78:d0:ae: 9f:24:69:f0:4c:e4:7e:50:72:32:da:4d:10:6f:b2: a3:8f:bf:e1:ea:f6:28:de:f9:93:12:cd:3e:d9:51: a9:de:24:fd:62:59:a6:b9:1b:b2:b1:cd:7b:1d:89: 29:74:3b:89:7a:de:85:54:5a:61:82:c5:d1:fa:5a: 10:1d:8e:a9:92:e2:2e:5c:37:ad:0e:71:1b:c5:f6: fa:4d:64:15:a8:03:be:61:3c:8b:86:c3:a3:4d:28: 40:55:3c:01:f8:0a:21:12:a0:50:f1:52:4f:3d:47: 8e:85:b2:35:7f:5e:ae:87:cd:e7:25:3f:1c:a0:5a: 88:14:f9:82:35:3e:f0:94:69:71:21:a4:aa:ab:ce: 58:ba:26:54:02:65:51:de:ed:93:27:3c:09:e3:3a: cf:ea:44:ff:6c:15:ee:eb:88:1f:e0:e7:a8:53:e1: a7:66:04:5c:1f:1c:03:ae:8d:99:de:69:ff:7b:f3: 89:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:89:17:93:02:17:19:A8:B8:71:D2:69:F5:5A:15:E7:56:D7:08:94 X509v3 Authority Key Identifier: keyid:19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:8d:93:e5:05:ac:fa:8b:e0:3f:3b:4c:c6:46:26:45:d2:52: be:87:d1:68:2a:6b:f7:6a:ac:d9:00:83:fc:11:cf:9d:21:2f: f0:3c:b7:ef:3d:2e:70:02:1d:f7:7c:ab:01:db:bb:01:eb:76: ed:18:c6:44:bf:7d:38:b2:92:c2:42:74:4b:9e:8a:de:2c:c9: de:dc:d3:a1:4a:bf:cb:d1:e7:da:79:84:cb:88:b9:fc:69:f5: 36:97:11:6b:28:25:c5:53:a0:62:7c:a8:74:f0:13:b7:70:14: 5a:9f:17:df:ae:81:b2:ba:ee:cd:02:bc:ac:5b:4f:14:5f:26: 4a:a3:34:92:9f:22:04:ba:a1:e9:f2:a7:11:c0:8a:59:21:4f: 1e:29:c0:2e:6c:93:14:2f:77:d9:ba:a3:71:16:c1:5a:b3:1f: 2f:52:0e:a5:71:4f:05:e4:51:c4:c9:7c:a9:7b:97:56:9e:b4: c6:04:3a:49:b9:fd:5a:33:ff:93:13:54:5d:98:69:59:0e:ef: d9:ff:4e:4a:24:01:7f:19:76:4c:15:03:e9:d5:6f:21:7c:e8: 36:cc:cb:8c:0b:27:76:6e:63:74:64:f0:ca:d6:03:4b:d1:d6: 00:32:7d:97:76:d7:48:9c:d6:23:7d:5d:cd:67:bf:30:6a:d3: 36:6f:97:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7Qxb1dEoFqPF/QYvmBBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MTFhNjU4M2RjNzlhNDE1NTFiMTdhZWI0MzE0ZGIyOTMx MWNiZWIwHhcNMjUxMjA2MTAwMTEwWhcNMjUxMjA3MTAwMTEwWjAzMTEwLwYDVQQD Eyg3NDg5MTc5MzAyMTcxOWE4Yjg3MWQyNjlmNTVhMTVlNzU2ZDcwODk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe/K2oUfKyIyyYpCCzGnVkAhGryh PCN4AOApl9ErFUDCx5UcOiZst+gbBqnR54c2qe9Lxqvc4JDduszVtp53rqnToSIC RSN40K6fJGnwTOR+UHIy2k0Qb7Kjj7/h6vYo3vmTEs0+2VGp3iT9YlmmuRuysc17 HYkpdDuJet6FVFphgsXR+loQHY6pkuIuXDetDnEbxfb6TWQVqAO+YTyLhsOjTShA VTwB+AohEqBQ8VJPPUeOhbI1f16uh83nJT8coFqIFPmCNT7wlGlxIaSqq85YuiZU AmVR3u2TJzwJ4zrP6kT/bBXu64gf4OeoU+GnZgRcHxwDro2Z3mn/e/OJFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSJF5MCFxmouHHSafVaFedW1wiUMB8GA1UdIwQY MBaAFBkRplg9x5pBVRsXrrQxTbKTEcvrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1JHbVdEM0hta0ZWR3hldXRERk5zcE1SeS1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYjE2ZWItNzdmNS00MDAzLWI5MDMt MWMzNGFmZDlkNTBkLzEvR1JHbVdEM0hta0ZWR3hldXRERk5zcE1SeS1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lYjE2ZWItNzdmNS00MDAzLWI5MDMtMWMzNGFmZDlkNTBk LzEvR1JHbVdEM0hta0ZWR3hldXRERk5zcE1SeS1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhY2T5QWs +ovgPztMxkYmRdJSvofRaCpr92qs2QCD/BHPnSEv8Dy37z0ucAId93yrAdu7Aet2 7RjGRL99OLKSwkJ0S56K3izJ3tzToUq/y9Hn2nmEy4i5/Gn1NpcRayglxVOgYnyo dPATt3AUWp8X366BsrruzQK8rFtPFF8mSqM0kp8iBLqh6fKnEcCKWSFPHinALmyT FC932bqjcRbBWrMfL1IOpXFPBeRRxMl8qXuXVp60xgQ6Sbn9WjP/kxNUXZhpWQ7v 2f9OSiQBfxl2TBUD6dVvIXzoNszLjAsndm5jdGTwytYDS9HWADJ9l3bXSJzWI31d zWe/MGrTNm+XVw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:54:21 2025 by rpki-client