This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft File: GVmXqL_GmLjrnoco7K8SpSezV98.mft (raw, json) Hash identifier: PvOunJrM6T3/ormprIr2iBgdPPe65uE9QIN+PNIg6gQ= Subject key identifier: 24:63:0C:D3:7C:C4:E3:E7:EC:94:08:34:4A:75:19:E3:C4:6D:F0:DF Authority key identifier: 19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF Certificate issuer: /CN=195997a8bfc698b8eb9e8728ecaf12a527b357df Certificate serial: 019AF209A33610B5BEE8E81E3B2442DAF32C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft Manifest number: 0A67 Signing time: Sat 06 Dec 2025 05:01:49 +0000 Manifest this update: Sat 06 Dec 2025 05:01:49 +0000 Manifest next update: Sun 07 Dec 2025 05:01:49 +0000 Files and hashes: 1: GVmXqL_GmLjrnoco7K8SpSezV98.crl (hash: +bofJfP0Xi3cq0e28s0fTV7KYiebruYpzyPpDatnKYE=) 2: xSRj9AL7LP2z8yZaMDfviXxDydk.roa (hash: 2o2eUqaQbQdiuk4n3UmnVUKsg19YQAtxvu//olNpHNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a3:36:10:b5:be:e8:e8:1e:3b:24:42:da:f3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=195997a8bfc698b8eb9e8728ecaf12a527b357df Validity Not Before: Dec 6 05:01:49 2025 GMT Not After : Dec 7 05:01:49 2025 GMT Subject: CN=24630cd37cc4e3e7ec9408344a7519e3c46df0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f2:11:5f:eb:a6:d2:33:2c:c1:a9:93:42:43: 56:49:f9:0e:04:d4:dd:94:87:97:45:9d:da:0d:18: 4a:aa:4d:5a:99:48:a9:52:8e:e6:b2:6c:da:6f:88: 6b:15:95:59:71:fe:ac:e0:57:f5:40:3d:7a:05:33: 03:70:e8:cf:a1:8a:93:ec:99:89:35:70:35:48:96: 56:49:d1:c9:91:9f:ea:a1:b5:d6:06:b9:10:74:0a: c7:57:d1:51:93:37:eb:81:3b:bd:17:c0:c8:29:c2: c4:c2:af:b1:41:be:56:85:06:e2:bc:35:76:e6:7b: 6f:c5:59:c7:a6:f9:3f:03:50:4d:27:7d:f4:9f:a9: 6d:ed:ff:52:ec:eb:f3:60:3c:a1:c9:fe:c1:e0:c8: 55:9d:56:c0:79:91:6e:0d:08:3c:3d:c7:79:bf:06: a2:71:c1:9b:f2:9e:6c:e9:0d:db:a2:d1:80:cb:52: 03:77:b4:d1:47:95:bc:b8:12:06:18:8d:17:59:ab: e7:76:d2:05:bd:a4:7b:f2:90:a3:2b:6e:b4:f5:88: 60:0c:1e:2f:a9:c4:a3:b2:cb:3b:1f:2c:59:24:e3: 4d:81:ea:f2:5d:41:77:e6:bd:66:35:d5:10:ba:93: 54:89:44:46:ed:7f:e3:6c:70:6e:68:d5:ed:80:bb: 3c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:63:0C:D3:7C:C4:E3:E7:EC:94:08:34:4A:75:19:E3:C4:6D:F0:DF X509v3 Authority Key Identifier: keyid:19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e6:d2:e5:28:c5:90:d8:e8:72:99:7b:e0:25:0b:9a:c6:49: 41:22:bf:e3:94:17:7c:de:a8:91:da:58:6d:5d:e7:e0:ee:a1: 63:68:c5:58:28:f9:ea:2d:18:17:bf:11:c8:77:4e:a3:1a:b6: 74:18:e4:1c:d4:d3:a3:1a:f3:e5:ac:4c:cd:7d:8d:31:90:64: 8d:af:55:f5:cd:c2:b7:de:83:ea:4d:09:f3:18:c4:aa:07:0e: 30:04:e2:e3:7d:3b:00:ab:37:8c:5f:5d:f0:52:4d:0a:40:28: 59:51:2c:21:71:0a:1c:83:11:57:79:cd:95:d1:9d:fb:97:50: 68:26:37:3e:28:26:d0:d3:03:e8:68:46:02:b8:ce:e5:40:41: 1b:85:ef:95:a1:13:49:2e:ab:79:f7:e4:52:4c:34:7d:4b:76: 72:3e:26:1e:8d:c3:7d:92:83:ba:4d:91:42:49:d2:0e:a2:e8: bf:c2:da:75:56:bf:40:4c:ce:13:bf:fc:37:02:85:f8:9d:9e: 11:f0:ce:5a:39:9d:05:a9:fc:71:79:63:8d:48:d3:c2:a5:69: 24:5c:2d:16:d9:01:79:0b:b3:f5:15:a2:49:bd:b4:ba:0a:73: 26:5d:13:ea:1f:34:e3:9d:d7:9f:51:b6:cc:26:f2:35:f2:68: 52:7d:25:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaM2ELW+6OgeOyRC2vMsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NTk5N2E4YmZjNjk4YjhlYjllODcyOGVjYWYxMmE1Mjdi MzU3ZGYwHhcNMjUxMjA2MDUwMTQ5WhcNMjUxMjA3MDUwMTQ5WjAzMTEwLwYDVQQD EygyNDYzMGNkMzdjYzRlM2U3ZWM5NDA4MzQ0YTc1MTllM2M0NmRmMGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPIRX+um0jMswamTQkNWSfkOBNTd lIeXRZ3aDRhKqk1amUipUo7msmzab4hrFZVZcf6s4Ff1QD16BTMDcOjPoYqT7JmJ NXA1SJZWSdHJkZ/qobXWBrkQdArHV9FRkzfrgTu9F8DIKcLEwq+xQb5WhQbivDV2 5ntvxVnHpvk/A1BNJ330n6lt7f9S7OvzYDyhyf7B4MhVnVbAeZFuDQg8Pcd5vwai ccGb8p5s6Q3botGAy1IDd7TRR5W8uBIGGI0XWavndtIFvaR78pCjK2609YhgDB4v qcSjsss7HyxZJONNgeryXUF35r1mNdUQupNUiURG7X/jbHBuaNXtgLs8pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRjDNN8xOPn7JQINEp1GePEbfDfMB8GA1UdIwQY MBaAFBlZl6i/xpi4656HKOyvEqUns1ffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1ZtWHFMX0dtTGpybm9jbzdLOFNwU2V6Vjk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82Y2RiNjMtOWNmZC00OTg0LTg3N2Ut MDkyMTAyMTI3MTRjLzEvR1ZtWHFMX0dtTGpybm9jbzdLOFNwU2V6Vjk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82Y2RiNjMtOWNmZC00OTg0LTg3N2UtMDkyMTAyMTI3MTRj LzEvR1ZtWHFMX0dtTGpybm9jbzdLOFNwU2V6Vjk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABObS5SjF kNjocpl74CULmsZJQSK/45QXfN6okdpYbV3n4O6hY2jFWCj56i0YF78RyHdOoxq2 dBjkHNTToxrz5axMzX2NMZBkja9V9c3Ct96D6k0J8xjEqgcOMATi4307AKs3jF9d 8FJNCkAoWVEsIXEKHIMRV3nNldGd+5dQaCY3Pigm0NMD6GhGArjO5UBBG4XvlaET SS6reffkUkw0fUt2cj4mHo3DfZKDuk2RQknSDqLov8LadVa/QEzOE7/8NwKF+J2e EfDOWjmdBan8cXljjUjTwqVpJFwtFtkBeQuz9RWiSb20ugpzJl0T6h80453Xn1G2 zCbyNfJoUn0lew== -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:56 2025 by rpki-client