This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft File: GvujiocH_SMcOIfkpSvc3tqyAyM.mft (raw, json) Hash identifier: /a3khk9gLVw/CXcj6iLE7TIXoPfaJKeX3YbjHotrOmE= Subject key identifier: CA:D8:4F:2C:5B:F5:8C:34:33:A4:7A:77:C2:0F:BD:1B:F2:A8:2B:C9 Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23 Certificate issuer: /CN=1afba38a8707fd231c3887e4a52bdcdedab20323 Certificate serial: 019AF19AD50C5B49A6C80253EBA57458C189 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft Manifest number: 08BF Signing time: Sat 06 Dec 2025 03:00:47 +0000 Manifest this update: Sat 06 Dec 2025 03:00:47 +0000 Manifest next update: Sun 07 Dec 2025 03:00:47 +0000 Files and hashes: 1: GvujiocH_SMcOIfkpSvc3tqyAyM.crl (hash: 7YogRfxGFVLdgpG934SVBZ+5qSHEkG8kkfUJqJH/bSs=) 2: MBByOIj39pYIect2LdRi3wnM4oc.roa (hash: tdzNEKUZ3mXK0KXsFeqcPam83cZmJKXuHjjqHDm2aqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d5:0c:5b:49:a6:c8:02:53:eb:a5:74:58:c1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323 Validity Not Before: Dec 6 03:00:47 2025 GMT Not After : Dec 7 03:00:47 2025 GMT Subject: CN=cad84f2c5bf58c3433a47a77c20fbd1bf2a82bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1f:8a:7b:e1:be:58:32:64:e3:3b:95:9f:1e: fc:1d:b7:8a:af:c8:78:43:bb:15:bf:a5:ec:c9:05: 87:2c:e3:84:d7:6d:d0:c9:89:c0:60:b5:6b:50:71: 03:1e:4c:21:df:d9:a5:fa:dd:85:1c:93:01:c8:1b: 10:3c:77:fb:12:f8:18:2a:e9:7c:7d:07:01:f6:f8: 20:28:31:65:f0:42:b0:9f:ec:5e:4f:3e:87:46:fe: 2f:d0:9b:a3:d0:53:14:12:b3:c9:4b:2c:75:e0:90: db:16:ed:80:12:d2:3a:d1:b5:da:bf:74:0b:df:7d: 8d:0d:97:aa:ee:3e:e8:d2:51:2b:6b:ab:92:76:3a: 24:b9:f8:7c:60:7c:c7:26:38:c2:7c:7c:57:5e:6e: 66:40:58:f0:96:d5:fe:cb:21:8d:25:f8:2d:57:4a: 02:e3:54:79:05:ef:bb:91:58:76:47:40:04:71:b7: 42:0a:c1:f3:dd:d2:48:30:3e:1d:01:25:66:53:82: 85:e1:bf:08:41:8e:e5:c3:cd:d8:fb:76:62:fa:5a: 78:24:48:6a:f2:a6:85:a7:a6:aa:cb:8a:1c:33:6c: 3f:bb:4b:ca:49:77:e8:f0:ff:81:72:ea:13:db:5c: d5:7d:bb:c6:61:37:6d:50:3c:02:45:ca:51:3b:59: a6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D8:4F:2C:5B:F5:8C:34:33:A4:7A:77:C2:0F:BD:1B:F2:A8:2B:C9 X509v3 Authority Key Identifier: keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:7e:b1:c7:ed:f5:7d:a4:04:1f:cb:84:6d:c2:5a:af:37:53: 13:2e:b1:93:cf:a7:e5:40:b5:73:cc:7a:ce:dd:80:04:b2:c5: 5a:4f:f0:85:ac:35:ff:3f:07:43:c8:99:38:f1:8d:ea:c7:75: 09:e9:a4:2f:18:79:79:68:d0:12:93:52:79:d0:07:c5:4b:45: e5:db:07:80:f1:fe:21:f9:ec:17:35:f0:cd:5d:85:5f:cf:a1: 5e:47:3a:31:aa:9a:3e:38:80:d8:7b:69:cf:0d:4c:d9:62:8b: ed:3c:f8:1d:50:61:3d:fb:54:98:89:b0:d6:d2:73:ea:de:e1: 20:49:ea:4d:eb:f1:38:b8:f6:cb:a5:0e:8b:eb:cd:0b:8e:5a: 74:5c:c7:40:ef:fe:40:ba:5e:64:60:8e:a3:44:1e:31:b0:05: 4f:01:03:87:9d:22:3d:88:16:6c:aa:7d:b9:1a:c5:cc:cb:0c: ab:74:15:c2:f7:a5:5b:05:92:89:2b:20:9a:db:fa:f3:58:d8: 67:83:e7:bc:fd:a8:89:18:42:22:b9:cc:0a:61:6c:7c:e0:57: df:0e:88:17:26:16:df:c6:d0:79:7c:6b:04:51:c3:38:c2:30: ec:70:7c:fb:c5:7c:5c:a4:41:31:74:18:6e:c3:37:3c:83:0b: 3e:61:23:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtUMW0mmyAJT66V0WMGJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZmJhMzhhODcwN2ZkMjMxYzM4ODdlNGE1MmJkY2RlZGFi MjAzMjMwHhcNMjUxMjA2MDMwMDQ3WhcNMjUxMjA3MDMwMDQ3WjAzMTEwLwYDVQQD EyhjYWQ4NGYyYzViZjU4YzM0MzNhNDdhNzdjMjBmYmQxYmYyYTgyYmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB+Ke+G+WDJk4zuVnx78HbeKr8h4 Q7sVv6XsyQWHLOOE123QyYnAYLVrUHEDHkwh39ml+t2FHJMByBsQPHf7EvgYKul8 fQcB9vggKDFl8EKwn+xeTz6HRv4v0Juj0FMUErPJSyx14JDbFu2AEtI60bXav3QL 332NDZeq7j7o0lEra6uSdjokufh8YHzHJjjCfHxXXm5mQFjwltX+yyGNJfgtV0oC 41R5Be+7kVh2R0AEcbdCCsHz3dJIMD4dASVmU4KF4b8IQY7lw83Y+3Zi+lp4JEhq 8qaFp6aqy4ocM2w/u0vKSXfo8P+BcuoT21zVfbvGYTdtUDwCRcpRO1mmdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrYTyxb9Yw0M6R6d8IPvRvyqCvJMB8GA1UdIwQY MBaAFBr7o4qHB/0jHDiH5KUr3N7asgMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3Z1amlvY0hfU01jT0lma3BTdmMzdHF5QXlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83YTliYTItNmE2YS00YzdjLTg4MmEt MDk5NmFlZDMyZjNiLzEvR3Z1amlvY0hfU01jT0lma3BTdmMzdHF5QXlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83YTliYTItNmE2YS00YzdjLTg4MmEtMDk5NmFlZDMyZjNi LzEvR3Z1amlvY0hfU01jT0lma3BTdmMzdHF5QXlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdH6xx+31 faQEH8uEbcJarzdTEy6xk8+n5UC1c8x6zt2ABLLFWk/whaw1/z8HQ8iZOPGN6sd1 CemkLxh5eWjQEpNSedAHxUtF5dsHgPH+IfnsFzXwzV2FX8+hXkc6MaqaPjiA2Htp zw1M2WKL7Tz4HVBhPftUmImw1tJz6t7hIEnqTevxOLj2y6UOi+vNC45adFzHQO/+ QLpeZGCOo0QeMbAFTwEDh50iPYgWbKp9uRrFzMsMq3QVwvelWwWSiSsgmtv681jY Z4PnvP2oiRhCIrnMCmFsfOBX3w6IFyYW38bQeXxrBFHDOMIw7HB8+8V8XKRBMXQY bsM3PIMLPmEjEA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:29 2025 by rpki-client