This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft File: GkIazkbF3ViinUbNkfso_DnFb-4.mft (raw, json) Hash identifier: fvDmXQxa/fNUQhV88HXqzxRj3W1sEADBeHCrcC/qCGA= Subject key identifier: 84:10:6E:BE:EE:1D:1A:0D:CE:7E:83:33:72:65:AF:FB:09:36:EC:C0 Authority key identifier: 1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE Certificate issuer: /CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee Certificate serial: 019B35D79227513C0462DCECEF9920286104 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 09:01:18 +0000 Manifest this update: Fri 19 Dec 2025 09:01:18 +0000 Manifest next update: Sat 20 Dec 2025 09:01:18 +0000 Files and hashes: 1: GkIazkbF3ViinUbNkfso_DnFb-4.crl (hash: L0yqEbHJkgXzzAxK1zYiquEHr+IDVRzcRsIiG+E5530=) 2: iYCONvh_-VwWy1qAcfbIbkJR5L0.roa (hash: Mqum/pcnON+fvDqDFxLCGm1Sd5nnM2fK5bauzDteg4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:92:27:51:3c:04:62:dc:ec:ef:99:20:28:61:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee Validity Not Before: Dec 19 09:01:18 2025 GMT Not After : Dec 20 09:01:18 2025 GMT Subject: CN=84106ebeee1d1a0dce7e83337265affb0936ecc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4b:70:f1:f3:19:6d:db:45:ad:e8:80:98:33: 05:b9:ee:73:7b:f5:89:af:20:5a:df:4e:ca:54:cc: d2:9d:77:14:ea:d9:45:cf:41:22:83:7f:53:f4:a5: a0:d1:bf:35:88:ed:87:9c:f8:c8:07:f3:e8:bb:00: 06:c0:af:2f:ed:ad:d5:88:d2:aa:0b:28:ac:f2:f3: dd:0a:37:90:dc:6b:a1:7c:f6:f7:b4:1a:e7:9c:4c: 22:cb:a0:eb:06:47:2c:96:b0:88:ef:13:b5:e4:2f: 30:d9:ee:98:d2:37:a6:58:35:2e:56:3c:df:9a:28: 62:c0:24:34:a9:ee:60:c5:db:60:6e:7f:a6:71:cc: 7e:06:b9:37:10:3b:a6:0b:87:da:c8:8d:f6:e4:9f: 8a:cb:91:a9:df:e5:37:60:c3:ad:d7:bf:e3:29:a8: dd:f5:7b:1e:df:ac:c5:0f:7f:c3:83:3d:2d:2a:ce: ab:23:dd:7c:d0:93:84:72:55:54:0c:d2:aa:b1:6b: 15:52:e1:71:86:1f:ae:7c:25:a5:a5:e2:15:f4:d1: 25:d3:e1:d5:b6:ed:bf:ea:08:e6:48:d5:7f:56:9e: 92:00:4a:71:db:9a:89:4e:d1:9e:09:1b:58:87:2c: 7c:5e:15:6e:67:e4:93:78:40:06:11:a5:d0:ee:6b: b9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:10:6E:BE:EE:1D:1A:0D:CE:7E:83:33:72:65:AF:FB:09:36:EC:C0 X509v3 Authority Key Identifier: keyid:1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d9:dd:7b:52:82:96:9d:c4:e7:48:73:2d:73:d0:1a:d1:91: 7c:a4:b4:ce:51:f1:02:cc:e3:10:08:86:58:35:7e:12:03:fb: fd:69:a9:9c:ce:fb:6b:d7:8a:8b:4a:f3:ff:13:e4:53:12:90: 49:c1:71:28:cc:1e:a1:68:f2:0e:2d:e6:1e:0b:96:5d:eb:5f: 55:58:23:1e:2f:22:20:2b:81:89:33:9f:2a:38:62:cf:1d:7f: 39:36:3e:48:79:ca:5f:00:99:cc:4f:22:b5:c7:91:8b:44:78: 52:8f:32:f4:bb:77:b0:1e:b1:e2:bf:e6:46:a0:7f:cd:78:40: 5b:71:dd:fe:a3:82:36:8c:7e:33:56:a5:52:30:30:af:5c:8d: 2a:3f:bf:b1:fb:a8:ba:c9:30:9d:0e:40:63:af:be:64:c9:2a: bd:08:1a:33:1b:05:1a:ad:5d:ca:5c:7f:cb:24:cd:95:45:7d: cf:68:ee:e2:f4:18:87:63:3b:7f:db:90:60:79:d5:a7:dd:f5: 6b:39:a0:be:0e:5b:7a:c5:65:bd:3f:9d:94:0d:65:09:4b:c4: a6:4f:05:eb:7d:4a:9f:f5:2a:c6:95:3e:b6:e6:c3:a9:8a:02: 26:d8:91:53:5b:01:c2:24:33:ca:6c:9e:69:1d:33:5e:7f:10: 3d:0d:a0:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs115InUTwEYtzs75kgKGEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNDIxYWNlNDZjNWRkNThhMjlkNDZjZDkxZmIyOGZjMzlj NTZmZWUwHhcNMjUxMjE5MDkwMTE4WhcNMjUxMjIwMDkwMTE4WjAzMTEwLwYDVQQD Eyg4NDEwNmViZWVlMWQxYTBkY2U3ZTgzMzM3MjY1YWZmYjA5MzZlY2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEtw8fMZbdtFreiAmDMFue5ze/WJ ryBa307KVMzSnXcU6tlFz0Eig39T9KWg0b81iO2HnPjIB/PouwAGwK8v7a3ViNKq Cyis8vPdCjeQ3GuhfPb3tBrnnEwiy6DrBkcslrCI7xO15C8w2e6Y0jemWDUuVjzf mihiwCQ0qe5gxdtgbn+mccx+Brk3EDumC4fayI325J+Ky5Gp3+U3YMOt17/jKajd 9Xse36zFD3/Dgz0tKs6rI9180JOEclVUDNKqsWsVUuFxhh+ufCWlpeIV9NEl0+HV tu2/6gjmSNV/Vp6SAEpx25qJTtGeCRtYhyx8XhVuZ+STeEAGEaXQ7mu5pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQQbr7uHRoNzn6DM3Jlr/sJNuzAMB8GA1UdIwQY MBaAFBpCGs5Gxd1Yop1GzZH7KPw5xW/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2tJYXprYkYzVmlpblViTmtmc29fRG5GYi00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YzQ4YTAtZDNjZC00NGIzLTlhZTYt N2RmZmNlMWQ2ZTJkLzEvR2tJYXprYkYzVmlpblViTmtmc29fRG5GYi00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85YzQ4YTAtZDNjZC00NGIzLTlhZTYtN2RmZmNlMWQ2ZTJk LzEvR2tJYXprYkYzVmlpblViTmtmc29fRG5GYi00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdnde1KC lp3E50hzLXPQGtGRfKS0zlHxAszjEAiGWDV+EgP7/WmpnM77a9eKi0rz/xPkUxKQ ScFxKMweoWjyDi3mHguWXetfVVgjHi8iICuBiTOfKjhizx1/OTY+SHnKXwCZzE8i tceRi0R4Uo8y9Lt3sB6x4r/mRqB/zXhAW3Hd/qOCNox+M1alUjAwr1yNKj+/sfuo uskwnQ5AY6++ZMkqvQgaMxsFGq1dylx/yyTNlUV9z2ju4vQYh2M7f9uQYHnVp931 azmgvg5besVlvT+dlA1lCUvEpk8F631Kn/UqxpU+tubDqYoCJtiRU1sBwiQzymye aR0zXn8QPQ2g/w== -----END CERTIFICATE-----Generated at Fri Dec 19 12:55:47 2025 by rpki-client