This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft File: GnGBD-yOewtewmKemciWNZJsYlE.mft (raw, json) Hash identifier: e2erLEwkslz4Scek6jdak6MtCikmaD4eKZ87G6oAjAk= Subject key identifier: 8C:7D:05:8B:F3:21:FD:75:9D:48:12:B1:D7:4C:D9:00:33:B6:B8:5E Authority key identifier: 1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51 Certificate issuer: /CN=1a71810fec8e7b0b5ec2629e99c89635926c6251 Certificate serial: 019AF31CF07BFAB77ABF78C36EAC089E09CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft Manifest number: 0C88 Signing time: Sat 06 Dec 2025 10:02:31 +0000 Manifest this update: Sat 06 Dec 2025 10:02:31 +0000 Manifest next update: Sun 07 Dec 2025 10:02:31 +0000 Files and hashes: 1: GnGBD-yOewtewmKemciWNZJsYlE.crl (hash: l0X2WHdqq6nKbismK8BITBqkHfLZl+RVyGdjiOX8cXQ=) 2: ainOGSMqgrVPlJbCQ0XAVp3Eo1w.roa (hash: aUARFD50cGug83O2CiAa13xLrj1Z/zyZ8nx2FGmkrjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:f0:7b:fa:b7:7a:bf:78:c3:6e:ac:08:9e:09:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a71810fec8e7b0b5ec2629e99c89635926c6251 Validity Not Before: Dec 6 10:02:31 2025 GMT Not After : Dec 7 10:02:31 2025 GMT Subject: CN=8c7d058bf321fd759d4812b1d74cd90033b6b85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a3:e9:55:cc:15:bb:06:9e:c0:de:91:e9:4f: 74:77:38:f4:ac:08:e3:5f:19:c2:d6:3c:32:2e:c7: 49:d1:6b:6a:c5:22:74:66:25:82:a4:42:6e:f5:96: d0:ca:9c:61:7e:ec:b1:40:9f:27:c5:d0:91:d1:c0: 64:a5:1c:a9:66:24:aa:7c:20:cf:3e:9e:c8:f1:78: ad:dd:f0:0c:37:1b:1b:ba:51:dd:38:38:15:a9:3c: 1c:0e:a9:9b:6c:04:f8:00:a5:81:3b:82:6a:27:8b: d1:6a:0d:de:64:9a:f6:ea:e5:3b:e1:d1:a2:41:5a: f3:c1:78:e6:33:03:59:bc:55:99:c1:e7:6c:97:a0: 4d:44:74:c6:2c:dd:de:25:7d:77:b4:e1:02:7b:b5: 65:5c:25:ef:38:a2:db:4b:7e:92:41:79:df:fe:e0: fe:10:d5:ff:0d:21:79:49:f4:ca:04:8a:14:26:fe: 7a:a5:82:23:fa:32:ff:34:e8:e5:3f:33:ff:4d:d9: f7:b9:8c:c9:fb:13:82:de:60:ba:86:10:c5:46:72: a1:b8:82:90:68:9a:31:57:9c:1a:65:1d:16:b7:f8: 9f:c3:51:63:dd:87:93:a9:31:28:43:5c:cc:be:3d: 9c:a4:6f:0f:cd:76:19:78:93:82:f8:b3:8a:17:b4: 31:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7D:05:8B:F3:21:FD:75:9D:48:12:B1:D7:4C:D9:00:33:B6:B8:5E X509v3 Authority Key Identifier: keyid:1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:bc:49:4c:f1:40:98:c5:f3:8d:98:ab:e4:e3:01:63:9f:47: 83:a1:4f:aa:60:be:75:4b:d3:70:bd:a0:d8:68:d5:01:84:69: 13:ca:83:8a:91:e9:b9:c8:98:dd:ac:6a:c6:de:19:38:6a:30: bc:87:6a:72:ab:fb:83:1f:c2:cd:eb:fa:4a:d6:c4:f0:06:77: e4:68:cf:5a:23:1e:7d:a1:cd:f3:e0:51:2b:91:2c:2a:85:0a: 15:39:6c:cd:57:29:ef:8e:0f:4c:9c:c9:61:d1:1c:eb:1a:0e: 55:60:59:b9:4e:b5:37:c8:20:89:95:e4:81:18:4f:bc:ed:e5: 8f:21:72:a4:88:f7:45:33:00:61:e2:53:6a:78:12:b5:63:da: 69:5e:a7:c9:80:08:8f:c9:ee:37:fc:77:f7:3c:29:a1:28:70: c2:0e:f6:5b:a6:4e:bf:d3:78:fe:52:b6:7c:fa:59:6f:90:d9: b2:be:9d:4b:da:61:ca:ba:a2:bf:a7:72:50:f1:d6:1e:5f:bb: e3:e8:63:c9:10:e7:80:57:a5:85:30:c7:50:57:c3:13:70:f8: 00:67:ea:81:31:c5:de:2f:e9:8b:6a:1f:1f:83:e0:d0:b3:01: 45:b2:49:5b:76:55:10:c5:ad:2d:33:76:0f:80:c5:57:a2:ed: e3:b0:8c:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHPB7+rd6v3jDbqwIngnPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNzE4MTBmZWM4ZTdiMGI1ZWMyNjI5ZTk5Yzg5NjM1OTI2 YzYyNTEwHhcNMjUxMjA2MTAwMjMxWhcNMjUxMjA3MTAwMjMxWjAzMTEwLwYDVQQD Eyg4YzdkMDU4YmYzMjFmZDc1OWQ0ODEyYjFkNzRjZDkwMDMzYjZiODVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaPpVcwVuwaewN6R6U90dzj0rAjj XxnC1jwyLsdJ0WtqxSJ0ZiWCpEJu9ZbQypxhfuyxQJ8nxdCR0cBkpRypZiSqfCDP Pp7I8Xit3fAMNxsbulHdODgVqTwcDqmbbAT4AKWBO4JqJ4vRag3eZJr26uU74dGi QVrzwXjmMwNZvFWZwedsl6BNRHTGLN3eJX13tOECe7VlXCXvOKLbS36SQXnf/uD+ ENX/DSF5SfTKBIoUJv56pYIj+jL/NOjlPzP/Tdn3uYzJ+xOC3mC6hhDFRnKhuIKQ aJoxV5waZR0Wt/ifw1Fj3YeTqTEoQ1zMvj2cpG8PzXYZeJOC+LOKF7QxGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIx9BYvzIf11nUgSsddM2QAztrheMB8GA1UdIwQY MBaAFBpxgQ/sjnsLXsJinpnIljWSbGJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR25HQkQteU9ld3Rld21LZW1jaVdOWkpzWWxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jYzI0YjktNTkxOC00NTU3LWE4MzIt NDAxN2NlZjViY2E5LzEvR25HQkQteU9ld3Rld21LZW1jaVdOWkpzWWxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9jYzI0YjktNTkxOC00NTU3LWE4MzItNDAxN2NlZjViY2E5 LzEvR25HQkQteU9ld3Rld21LZW1jaVdOWkpzWWxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrxJTPFA mMXzjZir5OMBY59Hg6FPqmC+dUvTcL2g2GjVAYRpE8qDipHpuciY3axqxt4ZOGow vIdqcqv7gx/Czev6StbE8AZ35GjPWiMefaHN8+BRK5EsKoUKFTlszVcp744PTJzJ YdEc6xoOVWBZuU61N8ggiZXkgRhPvO3ljyFypIj3RTMAYeJTangStWPaaV6nyYAI j8nuN/x39zwpoShwwg72W6ZOv9N4/lK2fPpZb5DZsr6dS9phyrqiv6dyUPHWHl+7 4+hjyRDngFelhTDHUFfDE3D4AGfqgTHF3i/pi2ofH4Pg0LMBRbJJW3ZVEMWtLTN2 D4DFV6Lt47CMVA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:22 2025 by rpki-client