This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft File: GJiU_9B_W6Edxlvzj9lexByK944.mft (raw, json) Hash identifier: QW5ZXzd+TsTXKSKJduFtyUNLWnAUJiQ2f/vdREA5w1Y= Subject key identifier: 35:6B:22:2F:AE:A7:69:15:EB:1D:07:20:E4:7F:3C:C0:38:E5:D8:5D Authority key identifier: 18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E Certificate issuer: /CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e Certificate serial: 019AF20997E75336EA90D0C84B9C3A93432B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft Manifest number: 149A Signing time: Sat 06 Dec 2025 05:01:46 +0000 Manifest this update: Sat 06 Dec 2025 05:01:46 +0000 Manifest next update: Sun 07 Dec 2025 05:01:46 +0000 Files and hashes: 1: GJiU_9B_W6Edxlvzj9lexByK944.crl (hash: 4sD3JKzTFefZIEQpFNzOIXi3RzTh2FMJa9xBzAs9Ir8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:97:e7:53:36:ea:90:d0:c8:4b:9c:3a:93:43:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e Validity Not Before: Dec 6 05:01:46 2025 GMT Not After : Dec 7 05:01:46 2025 GMT Subject: CN=356b222faea76915eb1d0720e47f3cc038e5d85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:aa:82:fb:07:67:44:42:89:ef:91:dc:6a:89: 7e:85:c7:a1:7b:7a:d9:bc:6b:78:22:08:57:8b:35: 6e:52:1c:8a:7f:77:04:96:ee:0d:8d:19:b4:49:09: 96:14:5a:26:02:aa:72:dc:b7:0d:d3:82:e9:49:30: 18:09:bb:c7:4b:de:91:1a:ec:1d:b1:fe:6d:db:a3: fc:f3:8f:c2:69:99:09:ac:d2:29:a7:5a:a6:63:b2: 9d:4c:89:e1:71:97:f9:fe:13:0a:44:1d:fb:d1:e7: 76:de:46:b9:af:06:85:18:9a:ba:d3:9f:6f:0f:64: 4b:53:26:77:2e:8d:7f:4a:71:2f:7e:41:1b:bc:1d: 5d:91:cd:6f:90:c9:5d:fe:72:29:93:9c:e7:9f:4c: a4:20:1b:fe:c6:f4:99:11:18:f4:b7:0d:17:9b:50: 7f:5e:72:e3:c4:de:f2:77:98:84:e1:f6:7a:b7:4c: e0:27:2f:f0:d8:9f:60:55:ee:bd:b9:91:15:0e:d0: c9:cc:d1:1f:cb:b8:c0:f5:b8:c9:35:d3:c8:ae:18: 55:09:ef:03:64:a2:2f:4b:cb:2c:7b:0c:aa:5f:95: 6e:fd:2b:a1:8e:82:ac:22:b8:d0:89:0f:7d:ee:dc: d3:76:f0:bf:99:09:dd:6f:5c:cf:ac:7a:dd:29:d5: 29:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6B:22:2F:AE:A7:69:15:EB:1D:07:20:E4:7F:3C:C0:38:E5:D8:5D X509v3 Authority Key Identifier: keyid:18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:3c:fd:12:bf:66:81:91:cc:8f:c5:48:75:d0:0e:e0:4d:1c: 6e:1c:e2:cf:32:c6:64:a3:81:bb:b8:9b:53:7b:cc:28:bf:66: 08:9d:8d:a5:9c:60:bd:78:b8:30:62:2d:d4:2c:61:27:56:40: 57:b5:34:79:d8:5f:c4:b8:46:22:28:13:8d:b9:8e:8c:9a:05: d6:c4:7f:a0:f4:a8:5e:38:6a:f2:8a:01:89:08:bf:2a:57:51: f4:fb:4b:6b:1a:65:ad:51:9d:1f:d5:90:db:80:7e:b1:0d:81: 16:80:12:a2:26:a2:17:4f:b5:2a:84:59:3e:6d:d8:8f:cb:95: 01:d9:78:f0:07:bd:f3:8f:17:14:fa:f1:e9:90:8b:44:1a:27: 0c:a1:d0:91:ab:8c:01:2b:86:71:15:62:99:a4:0d:70:bf:e3: 0d:d0:e9:34:af:ec:f2:a3:3e:7b:4a:e5:68:e1:0e:ff:7e:e9: 6e:44:53:27:32:6c:1a:f9:48:cd:32:3b:31:be:ee:f9:31:b0: 78:7a:63:f3:3e:8f:c1:51:9a:69:ed:fb:2c:31:27:10:25:38: 96:98:7e:80:b2:2e:83:6b:6b:04:e9:37:6f:df:44:b5:d7:b5: 99:ac:05:cf:9c:f9:ff:53:f2:e2:78:47:75:e1:b8:0e:8a:e0: 6a:ba:16:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZfnUzbqkNDIS5w6k0MrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OTg5NGZmZDA3ZjViYTExZGM2NWJmMzhmZDk1ZWM0MWM4 YWY3OGUwHhcNMjUxMjA2MDUwMTQ2WhcNMjUxMjA3MDUwMTQ2WjAzMTEwLwYDVQQD EygzNTZiMjIyZmFlYTc2OTE1ZWIxZDA3MjBlNDdmM2NjMDM4ZTVkODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKqC+wdnREKJ75Hcaol+hcehe3rZ vGt4IghXizVuUhyKf3cElu4NjRm0SQmWFFomAqpy3LcN04LpSTAYCbvHS96RGuwd sf5t26P884/CaZkJrNIpp1qmY7KdTInhcZf5/hMKRB370ed23ka5rwaFGJq6059v D2RLUyZ3Lo1/SnEvfkEbvB1dkc1vkMld/nIpk5znn0ykIBv+xvSZERj0tw0Xm1B/ XnLjxN7yd5iE4fZ6t0zgJy/w2J9gVe69uZEVDtDJzNEfy7jA9bjJNdPIrhhVCe8D ZKIvS8ssewyqX5Vu/SuhjoKsIrjQiQ997tzTdvC/mQndb1zPrHrdKdUpRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVrIi+up2kV6x0HIOR/PMA45dhdMB8GA1UdIwQY MBaAFBiYlP/Qf1uhHcZb84/ZXsQciveOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0ppVV85Ql9XNkVkeGx2emo5bGV4QnlLOTQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81MjM0NzMtMWZlMC00ZTdlLTk0NTUt Y2NjOWIzMzdjY2EwLzEvR0ppVV85Ql9XNkVkeGx2emo5bGV4QnlLOTQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi81MjM0NzMtMWZlMC00ZTdlLTk0NTUtY2NjOWIzMzdjY2Ew LzEvR0ppVV85Ql9XNkVkeGx2emo5bGV4QnlLOTQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3Dz9Er9m gZHMj8VIddAO4E0cbhzizzLGZKOBu7ibU3vMKL9mCJ2NpZxgvXi4MGIt1CxhJ1ZA V7U0edhfxLhGIigTjbmOjJoF1sR/oPSoXjhq8ooBiQi/KldR9PtLaxplrVGdH9WQ 24B+sQ2BFoASoiaiF0+1KoRZPm3Yj8uVAdl48Ae9848XFPrx6ZCLRBonDKHQkauM ASuGcRVimaQNcL/jDdDpNK/s8qM+e0rlaOEO/37pbkRTJzJsGvlIzTI7Mb7u+TGw eHpj8z6PwVGaae37LDEnECU4lph+gLIug2trBOk3b99Etde1mawFz5z5/1Py4nhH deG4DorgaroWPA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:11 2025 by rpki-client