This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft File: GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft (raw, json) Hash identifier: mBJtVcvV1q7deLmDgd68TZqdEbUj5JfyQ//Kidayy0A= Subject key identifier: 53:22:12:C6:F8:CC:6C:78:D9:9F:5F:5A:B1:6C:97:B2:93:33:38:68 Authority key identifier: 19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01 Certificate issuer: /CN=195a12a0e73482d993260598a25c8f5a5c49d201 Certificate serial: 019AF5E622EBFFAFB72897B470537317272A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 23:01:31 +0000 Manifest this update: Sat 06 Dec 2025 23:01:31 +0000 Manifest next update: Sun 07 Dec 2025 23:01:31 +0000 Files and hashes: 1: GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl (hash: oh87bOpgUUCwhg/Yb/kj7jjSy7NQSHrM07auy+fM5v0=) 2: UkXF7s7wvZTNugO0xMbM-tho3CU.roa (hash: haf3+lwW0Ofrlk+CxaFcagM4HVa+8i2mqBkmuNQ3QQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:22:eb:ff:af:b7:28:97:b4:70:53:73:17:27:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=195a12a0e73482d993260598a25c8f5a5c49d201 Validity Not Before: Dec 6 23:01:31 2025 GMT Not After : Dec 7 23:01:31 2025 GMT Subject: CN=532212c6f8cc6c78d99f5f5ab16c97b293333868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:3e:54:6c:a8:6c:1f:fd:77:63:ea:5f:81: 3b:a7:54:11:02:4e:68:e6:a4:d6:63:b4:51:c9:af: e7:47:3b:28:68:50:48:55:80:7b:38:1b:e4:83:fc: 89:48:44:ac:bc:c1:9a:a3:2b:9c:c4:9e:80:ce:00: 9e:bb:b3:dd:66:ef:3b:8a:e3:4f:39:01:38:0c:6e: 26:c7:b7:a0:79:ed:e8:da:43:1e:8b:f9:0b:f2:7e: b1:8d:22:53:ac:91:5b:a8:e7:7c:2b:45:6f:2d:e9: aa:a0:e2:85:ec:16:0a:cc:e3:04:53:ea:3b:19:92: 6f:12:45:46:c4:97:5e:f0:51:a5:2f:d0:de:b0:c3: 90:1a:bd:61:fe:d6:8d:60:6b:38:df:52:8a:05:bd: a4:39:59:65:03:8d:48:80:27:18:4d:8b:0c:2a:5f: 00:55:7a:07:7d:eb:07:45:62:2a:84:4d:ad:8c:cb: f2:4c:0b:0c:77:1d:3c:d3:56:da:f5:35:07:12:1d: e6:cc:c1:23:be:86:28:a2:b4:c9:f1:b5:fa:a7:d8: e5:6a:2c:e2:a7:5e:47:fa:0a:f8:93:04:85:01:5a: b7:d0:76:08:e5:5c:2c:9e:82:16:fb:6f:1d:aa:08: 52:e3:69:34:ee:6e:2d:0e:56:fa:8d:bf:36:08:85: 80:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:22:12:C6:F8:CC:6C:78:D9:9F:5F:5A:B1:6C:97:B2:93:33:38:68 X509v3 Authority Key Identifier: keyid:19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:7f:47:ba:c1:d5:80:a5:f9:1c:23:4a:02:7d:36:be:1c:e3: b8:e4:ab:fe:e9:ea:9e:92:1b:ab:e6:b0:bb:a1:6e:e6:7c:d3: 66:96:18:d2:86:24:35:d7:6f:e7:f6:55:91:21:0f:0c:f7:9a: 99:96:47:f4:45:f1:f5:08:a2:bd:cb:49:22:61:18:73:d6:57: 4e:f3:d8:99:a7:ed:6e:86:a9:ec:89:92:47:3e:5c:04:14:00: b2:66:8a:29:37:9e:16:f1:b5:81:e7:1a:92:8e:f6:7e:c6:2f: 99:0e:b1:b0:2c:74:f9:9b:5b:9e:3d:55:72:1d:52:2c:ce:0f: b4:e4:05:de:dd:a2:32:23:3b:b2:20:32:c8:e3:8a:ad:3f:c9: ce:2a:2f:1e:e3:7d:0e:a3:d0:fc:77:21:45:eb:24:a0:1c:0c: f2:bc:7e:1b:ec:17:00:1c:b8:9e:85:6e:a9:25:98:b7:e4:cd: 1c:15:46:4c:7b:e5:cc:40:b9:20:e5:b3:a4:37:08:ae:40:70: e8:48:eb:c9:33:7a:14:a5:e8:53:ec:d4:c2:f7:c7:9a:0e:e8: 72:df:e6:61:42:4d:66:c4:65:46:e2:13:51:ad:0d:18:07:a2: 34:40:13:11:19:e8:fd:3c:dc:d4:ed:e5:b1:87:64:2e:97:35: b8:5a:34:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15iLr/6+3KJe0cFNzFycqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NWExMmEwZTczNDgyZDk5MzI2MDU5OGEyNWM4ZjVhNWM0 OWQyMDEwHhcNMjUxMjA2MjMwMTMxWhcNMjUxMjA3MjMwMTMxWjAzMTEwLwYDVQQD Eyg1MzIyMTJjNmY4Y2M2Yzc4ZDk5ZjVmNWFiMTZjOTdiMjkzMzMzODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVU+VGyobB/9d2PqX4E7p1QRAk5o 5qTWY7RRya/nRzsoaFBIVYB7OBvkg/yJSESsvMGaoyucxJ6AzgCeu7PdZu87iuNP OQE4DG4mx7egee3o2kMei/kL8n6xjSJTrJFbqOd8K0VvLemqoOKF7BYKzOMEU+o7 GZJvEkVGxJde8FGlL9DesMOQGr1h/taNYGs431KKBb2kOVllA41IgCcYTYsMKl8A VXoHfesHRWIqhE2tjMvyTAsMdx0801ba9TUHEh3mzMEjvoYoorTJ8bX6p9jlaizi p15H+gr4kwSFAVq30HYI5VwsnoIW+28dqghS42k07m4tDlb6jb82CIWAawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMiEsb4zGx42Z9fWrFsl7KTMzhoMB8GA1UdIwQY MBaAFBlaEqDnNILZkyYFmKJcj1pcSdIBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1ZvU29PYzBndG1USmdXWW9seVBXbHhKMGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8wYzE0ZjQtOWE0Ny00YTVhLWEzN2Qt ZjM1NTVkZGYyODBhLzEvR1ZvU29PYzBndG1USmdXWW9seVBXbHhKMGdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8wYzE0ZjQtOWE0Ny00YTVhLWEzN2QtZjM1NTVkZGYyODBh LzEvR1ZvU29PYzBndG1USmdXWW9seVBXbHhKMGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw39HusHV gKX5HCNKAn02vhzjuOSr/unqnpIbq+awu6Fu5nzTZpYY0oYkNddv5/ZVkSEPDPea mZZH9EXx9QiivctJImEYc9ZXTvPYmaftboap7ImSRz5cBBQAsmaKKTeeFvG1geca ko72fsYvmQ6xsCx0+Ztbnj1Vch1SLM4PtOQF3t2iMiM7siAyyOOKrT/JziovHuN9 DqPQ/HchReskoBwM8rx+G+wXABy4noVuqSWYt+TNHBVGTHvlzEC5IOWzpDcIrkBw 6EjryTN6FKXoU+zUwvfHmg7oct/mYUJNZsRlRuITUa0NGAeiNEATERno/Tzc1O3l sYdkLpc1uFo0cQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:07:58 2025 by rpki-client