This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft File: GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft (raw, json) Hash identifier: kgPYtpweiU6ffmzjW4iSAH3K/sWDO7hQPt9WnVbpllY= Subject key identifier: E7:79:11:64:7B:B9:6A:ED:4D:E9:65:EA:34:27:B3:12:E5:7B:6A:C9 Authority key identifier: 18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC Certificate issuer: /CN=186590ee4a796301c422e033f944d263d6adeebc Certificate serial: 019AF12DDC14FCEFFEF0971F28F1497D0740 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft Manifest number: 1290 Signing time: Sat 06 Dec 2025 01:01:45 +0000 Manifest this update: Sat 06 Dec 2025 01:01:45 +0000 Manifest next update: Sun 07 Dec 2025 01:01:45 +0000 Files and hashes: 1: GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl (hash: WCb7Hloumxvf5u0N6DtK7a+fvBdCgx/jMfzzOROMduU=) 2: xbbxTo9rn50nwhGlFUGMbwhSzbo.roa (hash: zFleJFRgd2evTBBfHWP3ENqdzORcbjMKg0D2r2qzukQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:dc:14:fc:ef:fe:f0:97:1f:28:f1:49:7d:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=186590ee4a796301c422e033f944d263d6adeebc Validity Not Before: Dec 6 01:01:45 2025 GMT Not After : Dec 7 01:01:45 2025 GMT Subject: CN=e77911647bb96aed4de965ea3427b312e57b6ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:8c:48:6a:00:13:82:b1:b1:6e:9e:7d:22: d2:1a:68:67:94:46:c1:9e:6c:94:71:73:c6:61:d2: 37:67:c8:db:1a:a5:3f:8c:26:77:55:bf:44:a1:98: 98:26:c8:10:9f:91:aa:aa:b2:71:a2:28:7a:e9:df: ce:ca:69:b1:d0:6b:7e:bf:76:4f:13:a3:5d:19:5d: 30:23:c0:7c:5e:c2:c4:aa:8c:8d:14:1c:4f:c9:c1: 2e:85:71:26:ad:91:84:56:4e:1e:51:27:d9:33:29: 8e:ab:17:97:01:da:9b:4f:f6:da:4b:a6:05:f9:0f: cb:36:59:ec:27:52:a3:f4:c1:09:3f:c1:06:6f:f3: 9c:29:01:22:41:e2:13:c1:d6:e2:f4:c7:e9:5b:da: 06:96:e0:01:3d:7b:5c:c8:84:49:9a:cd:d2:49:b1: 7f:e5:93:11:29:9f:9f:49:31:14:ca:63:3a:a9:d4: d6:e8:55:eb:3d:5f:28:89:b3:08:c5:e5:30:df:75: 4c:13:06:01:b5:2b:54:84:f7:26:8c:b5:2f:e9:f6: 10:9c:91:bd:39:c4:bb:20:73:21:17:ba:23:fe:ad: 0d:44:c5:54:38:28:59:e2:fb:01:b8:41:af:26:eb: 01:d6:36:79:85:c6:29:64:74:11:af:2a:2e:bf:4f: 21:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:79:11:64:7B:B9:6A:ED:4D:E9:65:EA:34:27:B3:12:E5:7B:6A:C9 X509v3 Authority Key Identifier: keyid:18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ac:99:09:3f:b1:cf:79:2d:0f:b0:05:81:54:07:10:39:78: 55:05:c5:cb:62:13:c9:f0:f8:ae:fc:32:06:0c:0b:36:96:20: a0:84:2a:fd:0d:a8:23:4f:18:af:5e:fc:cd:b1:77:8f:fe:b2: f6:70:f7:94:70:30:b6:f0:92:24:11:22:28:c3:49:ab:61:69: b3:66:c7:8e:8a:32:ec:09:83:06:51:61:94:7a:c6:48:e7:76: b4:79:b2:dd:e6:10:23:a8:df:ac:4a:37:47:b9:ce:6f:de:5b: a1:9a:3e:da:3f:31:57:f2:c3:d4:4c:d8:41:9e:2a:5e:e9:67: 20:17:6b:5f:db:de:23:58:fb:e9:46:f3:26:fd:3f:44:df:cf: e7:61:53:25:ee:15:09:1f:98:7a:5e:14:c0:2c:c5:bf:c3:a8: 27:8e:d0:71:fc:75:c8:04:27:05:c4:15:68:39:d6:54:4d:b6: 0a:5d:38:a5:26:59:e9:0f:56:31:a7:28:55:a4:90:8a:2f:61: 5a:73:0e:a2:02:04:8d:d0:12:db:99:ec:23:ff:a4:54:0f:93: d0:1d:d4:b7:d6:33:ac:87:4b:6f:8e:36:43:b0:41:c2:2e:fe: 76:af:f5:66:77:37:4b:d5:02:f5:44:f8:ad:7f:71:81:05:53: 8d:da:fe:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdwU/O/+8JcfKPFJfQdAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NjU5MGVlNGE3OTYzMDFjNDIyZTAzM2Y5NDRkMjYzZDZh ZGVlYmMwHhcNMjUxMjA2MDEwMTQ1WhcNMjUxMjA3MDEwMTQ1WjAzMTEwLwYDVQQD EyhlNzc5MTE2NDdiYjk2YWVkNGRlOTY1ZWEzNDI3YjMxMmU1N2I2YWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOiMSGoAE4KxsW6efSLSGmhnlEbB nmyUcXPGYdI3Z8jbGqU/jCZ3Vb9EoZiYJsgQn5GqqrJxoih66d/Oymmx0Gt+v3ZP E6NdGV0wI8B8XsLEqoyNFBxPycEuhXEmrZGEVk4eUSfZMymOqxeXAdqbT/baS6YF +Q/LNlnsJ1Kj9MEJP8EGb/OcKQEiQeITwdbi9MfpW9oGluABPXtcyIRJms3SSbF/ 5ZMRKZ+fSTEUymM6qdTW6FXrPV8oibMIxeUw33VMEwYBtStUhPcmjLUv6fYQnJG9 OcS7IHMhF7oj/q0NRMVUOChZ4vsBuEGvJusB1jZ5hcYpZHQRryouv08hjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOd5EWR7uWrtTell6jQnsxLle2rJMB8GA1UdIwQY MBaAFBhlkO5KeWMBxCLgM/lE0mPWre68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0dXUTdrcDVZd0hFSXVBei1VVFNZOWF0N3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84MGI4Y2YtNTc2ZC00MDQ0LWE2MjQt YWU3MmJmZDNmNzgyLzEvR0dXUTdrcDVZd0hFSXVBei1VVFNZOWF0N3J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS84MGI4Y2YtNTc2ZC00MDQ0LWE2MjQtYWU3MmJmZDNmNzgy LzEvR0dXUTdrcDVZd0hFSXVBei1VVFNZOWF0N3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKyZCT+x z3ktD7AFgVQHEDl4VQXFy2ITyfD4rvwyBgwLNpYgoIQq/Q2oI08Yr178zbF3j/6y 9nD3lHAwtvCSJBEiKMNJq2Fps2bHjooy7AmDBlFhlHrGSOd2tHmy3eYQI6jfrEo3 R7nOb95boZo+2j8xV/LD1EzYQZ4qXulnIBdrX9veI1j76UbzJv0/RN/P52FTJe4V CR+Yel4UwCzFv8OoJ47Qcfx1yAQnBcQVaDnWVE22Cl04pSZZ6Q9WMacoVaSQii9h WnMOogIEjdAS25nsI/+kVA+T0B3Ut9YzrIdLb442Q7BBwi7+dq/1Znc3S9UC9UT4 rX9xgQVTjdr+hQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:40 2025 by rpki-client