This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft File: GvzYfmH5F2XCwQAgQUG1lNMsey4.mft (raw, json) Hash identifier: thZpE2FAM+nBdHzIcup4NiwX30aBnmxxbznXSrnJYKs= Subject key identifier: A6:2A:CC:67:F1:06:DE:19:DE:E4:F5:FE:2E:72:F4:27:57:FE:9D:E8 Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E Certificate issuer: /CN=1afcd87e61f91765c2c100204141b594d32c7b2e Certificate serial: 019AF2096F00885F45976581C272C0336DE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft Manifest number: 028A Signing time: Sat 06 Dec 2025 05:01:35 +0000 Manifest this update: Sat 06 Dec 2025 05:01:35 +0000 Manifest next update: Sun 07 Dec 2025 05:01:35 +0000 Files and hashes: 1: GvzYfmH5F2XCwQAgQUG1lNMsey4.crl (hash: e4j5WbH12Evqu6TeYm0ozP4I5yVvOgC6vawUDGi9Zvo=) 2: uNOJmAq6voVkPfj182da4gb5W7g.roa (hash: /Vgo6Tc+QicjXS2eidHAg9cx4rFLuic3fsDr6FFDDKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:6f:00:88:5f:45:97:65:81:c2:72:c0:33:6d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e Validity Not Before: Dec 6 05:01:35 2025 GMT Not After : Dec 7 05:01:35 2025 GMT Subject: CN=a62acc67f106de19dee4f5fe2e72f42757fe9de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:4f:da:b0:30:e2:74:f1:6c:97:af:63:25: 42:43:b0:6c:c5:83:f3:e4:6a:d7:b3:63:28:51:68: 4f:f7:94:d0:01:24:87:01:52:82:2a:92:d8:28:53: 66:8e:c6:7a:11:6f:44:2c:58:1c:44:d9:03:9f:04: c4:11:92:1d:4f:80:87:65:a8:aa:fe:e7:9b:3a:6f: 80:da:73:2e:ac:66:7a:ff:32:d4:08:28:81:6e:df: 3a:00:bf:06:e3:da:36:09:fa:be:05:e4:c8:da:ab: 3b:90:39:38:53:e3:66:72:7c:c7:39:d8:55:b4:cd: 58:34:2f:0d:ec:11:e0:d8:c2:b4:58:2a:be:95:0f: 36:01:12:64:2e:9a:1c:ae:aa:67:8a:96:c9:3b:1d: f6:e9:75:1c:89:d4:34:c5:1c:2d:a0:f9:ed:8f:f3: a1:5b:40:3c:0c:c9:41:3a:c7:41:59:61:f6:16:cd: 24:29:4a:22:ab:48:69:35:08:78:f8:45:3c:80:e3: 19:24:83:77:44:04:36:68:a7:ff:a0:e3:4e:a1:68: 28:ef:91:2d:e3:b5:68:63:78:5f:86:2e:ef:e7:ac: 94:f7:31:0e:b1:e7:80:bf:99:95:bc:f7:b9:b5:2e: c5:8e:23:ba:a2:8a:d2:1d:40:ff:5e:4f:66:86:9a: d6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2A:CC:67:F1:06:DE:19:DE:E4:F5:FE:2E:72:F4:27:57:FE:9D:E8 X509v3 Authority Key Identifier: keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:b7:5e:6e:8e:0b:e2:43:1e:06:98:4b:2b:0d:a1:11:05:15: e1:e4:db:04:7c:e9:85:35:7b:a0:1d:80:c8:22:cc:51:a7:7d: 22:d3:8a:87:ef:db:82:c5:02:f9:27:1d:f3:74:6d:69:71:e7: 47:31:42:52:72:83:16:10:c2:ae:08:17:4a:d7:4c:91:c6:f1: f9:9d:ce:fb:4b:f4:b7:3e:81:8e:9a:b9:87:9f:a1:94:5e:74: 94:9f:dc:22:16:6a:a6:1c:b8:ec:2e:5c:f8:92:47:de:05:14: af:62:9b:a0:38:b1:37:69:ae:42:8a:06:e2:49:55:d3:16:60: 86:ea:28:92:5e:72:c3:41:5d:81:fb:89:dc:0f:86:a4:da:2b: 10:fa:d1:5e:5b:39:dc:81:55:aa:0c:15:81:ae:b5:b8:24:10: b9:7f:4e:25:e8:5d:19:30:3c:ff:d0:d1:7c:c7:c8:26:79:9c: 5b:25:e8:77:b5:3d:c8:2e:9a:66:c3:70:dd:5b:5d:3d:84:d7: 35:ec:2f:d9:bb:ee:29:33:84:f9:06:22:a2:ee:66:c5:20:c2: d9:d0:0a:4b:f4:49:ca:8a:a5:3f:c0:56:d1:03:d6:97:9a:9a: c1:17:01:52:2d:ba:73:df:c8:4f:a4:dc:95:15:78:1e:9a:a9: d7:63:d4:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCW8AiF9Fl2WBwnLAM23kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZmNkODdlNjFmOTE3NjVjMmMxMDAyMDQxNDFiNTk0ZDMy YzdiMmUwHhcNMjUxMjA2MDUwMTM1WhcNMjUxMjA3MDUwMTM1WjAzMTEwLwYDVQQD EyhhNjJhY2M2N2YxMDZkZTE5ZGVlNGY1ZmUyZTcyZjQyNzU3ZmU5ZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE5P2rAw4nTxbJevYyVCQ7BsxYPz 5GrXs2MoUWhP95TQASSHAVKCKpLYKFNmjsZ6EW9ELFgcRNkDnwTEEZIdT4CHZaiq /uebOm+A2nMurGZ6/zLUCCiBbt86AL8G49o2Cfq+BeTI2qs7kDk4U+NmcnzHOdhV tM1YNC8N7BHg2MK0WCq+lQ82ARJkLpocrqpnipbJOx326XUcidQ0xRwtoPntj/Oh W0A8DMlBOsdBWWH2Fs0kKUoiq0hpNQh4+EU8gOMZJIN3RAQ2aKf/oONOoWgo75Et 47VoY3hfhi7v56yU9zEOseeAv5mVvPe5tS7FjiO6oorSHUD/Xk9mhprWMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYqzGfxBt4Z3uT1/i5y9CdX/p3oMB8GA1UdIwQY MBaAFBr82H5h+RdlwsEAIEFBtZTTLHsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS81NDI3NGItNjFjYi00Njg2LWFiOGEt NGNmOGNmNGZmNmNkLzEvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS81NDI3NGItNjFjYi00Njg2LWFiOGEtNGNmOGNmNGZmNmNk LzEvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArLdebo4L 4kMeBphLKw2hEQUV4eTbBHzphTV7oB2AyCLMUad9ItOKh+/bgsUC+Scd83RtaXHn RzFCUnKDFhDCrggXStdMkcbx+Z3O+0v0tz6Bjpq5h5+hlF50lJ/cIhZqphy47C5c +JJH3gUUr2KboDixN2muQooG4klV0xZghuookl5yw0FdgfuJ3A+GpNorEPrRXls5 3IFVqgwVga61uCQQuX9OJehdGTA8/9DRfMfIJnmcWyXod7U9yC6aZsNw3VtdPYTX Newv2bvuKTOE+QYiou5mxSDC2dAKS/RJyoqlP8BW0QPWl5qawRcBUi26c9/IT6Tc lRV4Hpqp12PUlQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:29 2025 by rpki-client