This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft File: GPJ8DAs13dQruJLBaEWmOwAnocc.mft (raw, json) Hash identifier: puCbVkNWEGTnbp0HV+whe+mafGo+DnShqFo/NjJ1ilk= Subject key identifier: 2A:B7:66:2D:76:48:97:4B:A4:87:BB:60:50:9F:AF:C5:D8:EC:1D:14 Authority key identifier: 18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7 Certificate issuer: /CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7 Certificate serial: 019AF12CDB0F0B5BB186B75084230BC5245F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft Manifest number: 025E Signing time: Sat 06 Dec 2025 01:00:39 +0000 Manifest this update: Sat 06 Dec 2025 01:00:39 +0000 Manifest next update: Sun 07 Dec 2025 01:00:39 +0000 Files and hashes: 1: 0yoRjSV7Roa_6RLApu60JbNvhn0.roa (hash: zY5w8MSwqL9WHbjRx7fb+VonzMqXyw8rTcBHB5IjZKc=) 2: GPJ8DAs13dQruJLBaEWmOwAnocc.crl (hash: L7ivHhoERDjMuSQMSQ4veKL+n4wc4zW4MFghTo2PRDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:db:0f:0b:5b:b1:86:b7:50:84:23:0b:c5:24:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7 Validity Not Before: Dec 6 01:00:39 2025 GMT Not After : Dec 7 01:00:39 2025 GMT Subject: CN=2ab7662d7648974ba487bb60509fafc5d8ec1d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c3:f1:28:59:0a:55:be:7c:35:1b:ac:57:79: f1:60:d4:3f:60:70:80:da:1e:86:7c:e8:ce:99:e3: dc:bf:0c:67:6e:7c:3b:30:ef:7a:e5:c0:09:ea:43: 0e:66:e8:3b:25:20:3a:05:66:71:04:2a:8b:0c:7d: 99:c4:a1:88:63:8f:2d:14:d0:c4:ed:b2:00:4f:aa: 6b:d3:b5:7c:a3:5a:2a:28:e1:c6:04:1d:e4:76:43: 2a:e6:13:a7:ea:1e:21:04:f8:4b:fc:e0:ad:78:a8: 59:bf:be:2d:d6:a1:d8:4f:76:19:d3:13:ab:99:19: 76:41:f8:ea:e1:44:bc:56:bd:4e:80:a5:6e:a9:30: b0:81:31:f7:17:97:60:2d:cd:7d:b4:5e:10:a4:00: 32:b4:ee:58:00:b3:0b:03:db:9d:2d:e5:f7:ca:fd: 57:b0:c1:6c:d4:74:10:1d:00:c2:5a:cb:60:4b:ca: 32:5e:ca:00:e1:6e:54:4c:12:9c:d3:e7:90:5e:50: f1:ea:75:19:16:d4:dd:14:fa:73:d9:c8:a8:b8:37: 1c:d3:b6:7b:04:ae:87:cd:77:98:a0:e6:2e:53:fb: 96:cb:00:00:15:16:27:98:98:ce:9c:35:63:c1:8b: a9:65:94:6c:43:0b:cd:50:d7:10:dc:7e:2f:11:76: 17:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B7:66:2D:76:48:97:4B:A4:87:BB:60:50:9F:AF:C5:D8:EC:1D:14 X509v3 Authority Key Identifier: keyid:18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:5b:d4:25:48:3b:26:08:4d:5b:82:ef:26:92:8f:e7:f1:80: 50:0c:da:0b:b2:99:4d:bb:28:2e:0d:eb:b4:2b:7b:59:8a:05: b1:41:82:5d:02:a1:ae:3b:a3:f9:27:cf:0c:d5:b1:7f:c9:39: 7f:ce:ec:c7:87:e0:81:3b:5e:11:1a:52:d8:4c:18:4c:98:99: f0:12:f0:52:29:4e:2c:86:ea:20:58:e7:aa:2d:dd:98:9c:9b: 9e:4d:fe:18:0b:28:aa:95:c5:c8:24:fd:4d:c5:92:d5:b8:c5: 9d:3e:9f:b8:db:98:d6:9e:dc:80:44:c7:c3:06:4e:53:ac:84: 11:ad:3f:74:d2:0d:25:0c:48:ad:b9:a4:e5:98:28:cb:bf:9b: 5f:53:fd:fd:cd:e1:bc:de:e4:10:2e:f6:57:00:f9:ec:50:a1: 1f:ad:5e:d2:ee:98:46:c1:d3:13:06:14:f5:bf:28:15:06:0e: 59:bf:41:ee:06:22:5b:8b:b3:79:79:80:7b:b0:87:90:d0:1c: 9a:ca:4e:f9:7b:a7:6d:f8:a8:76:7b:85:e9:f6:26:fb:8e:f9: 3b:91:ff:3c:6d:04:c8:d8:37:c2:26:9b:bc:67:e2:a0:5b:52: 98:b9:46:c7:0e:f0:9b:cc:bd:e0:e4:fb:f3:68:22:77:a6:b3: 7c:ea:3b:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNsPC1uxhrdQhCMLxSRfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZjI3YzBjMGIzNWRkZDQyYmI4OTJjMTY4NDVhNjNiMDAy N2ExYzcwHhcNMjUxMjA2MDEwMDM5WhcNMjUxMjA3MDEwMDM5WjAzMTEwLwYDVQQD EygyYWI3NjYyZDc2NDg5NzRiYTQ4N2JiNjA1MDlmYWZjNWQ4ZWMxZDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8PxKFkKVb58NRusV3nxYNQ/YHCA 2h6GfOjOmePcvwxnbnw7MO965cAJ6kMOZug7JSA6BWZxBCqLDH2ZxKGIY48tFNDE 7bIAT6pr07V8o1oqKOHGBB3kdkMq5hOn6h4hBPhL/OCteKhZv74t1qHYT3YZ0xOr mRl2Qfjq4US8Vr1OgKVuqTCwgTH3F5dgLc19tF4QpAAytO5YALMLA9udLeX3yv1X sMFs1HQQHQDCWstgS8oyXsoA4W5UTBKc0+eQXlDx6nUZFtTdFPpz2ciouDcc07Z7 BK6HzXeYoOYuU/uWywAAFRYnmJjOnDVjwYupZZRsQwvNUNcQ3H4vEXYXIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCq3Zi12SJdLpIe7YFCfr8XY7B0UMB8GA1UdIwQY MBaAFBjyfAwLNd3UK7iSwWhFpjsAJ6HHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1BKOERBczEzZFFydUpMQmFFV21Pd0Fub2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zMmJmZTMtOTAxYy00Njg1LWJlMGEt YWZhYzIwNGQ5OTBmLzEvR1BKOERBczEzZFFydUpMQmFFV21Pd0Fub2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zMmJmZTMtOTAxYy00Njg1LWJlMGEtYWZhYzIwNGQ5OTBm LzEvR1BKOERBczEzZFFydUpMQmFFV21Pd0Fub2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVvUJUg7 JghNW4LvJpKP5/GAUAzaC7KZTbsoLg3rtCt7WYoFsUGCXQKhrjuj+SfPDNWxf8k5 f87sx4fggTteERpS2EwYTJiZ8BLwUilOLIbqIFjnqi3dmJybnk3+GAsoqpXFyCT9 TcWS1bjFnT6fuNuY1p7cgETHwwZOU6yEEa0/dNINJQxIrbmk5Zgoy7+bX1P9/c3h vN7kEC72VwD57FChH61e0u6YRsHTEwYU9b8oFQYOWb9B7gYiW4uzeXmAe7CHkNAc mspO+XunbfiodnuF6fYm+475O5H/PG0EyNg3wiabvGfioFtSmLlGxw7wm8y94OT7 82gid6azfOo73w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:12 2025 by rpki-client