This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft File: GrXCK_U7cFx6K7JzunPj8MBZW3s.mft (raw, json) Hash identifier: H8fyjeubJednXkhmIfWly8VK9bfrh+LwfpHlZTWg7XM= Subject key identifier: 13:80:A9:75:AB:B0:45:CB:27:82:9C:68:5E:C9:9E:90:49:3E:6C:2B Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b Certificate serial: 019AFBB0CB9239EA3EE29E28197C2ECB9798 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft Manifest number: 176E Signing time: Mon 08 Dec 2025 02:00:58 +0000 Manifest this update: Mon 08 Dec 2025 02:00:58 +0000 Manifest next update: Tue 09 Dec 2025 02:00:58 +0000 Files and hashes: 1: GrXCK_U7cFx6K7JzunPj8MBZW3s.crl (hash: xSV25Y0S+m14nl9V7zkFLZVAcjwZaYXBKP4OHa4q/1U=) 2: TAjwEkYL5KO0Dfjzk7M82ORwOSM.roa (hash: pnECVJ4MeoU++jvXvp1eJP9csOhoOVkA1NrmjgLij+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:b0:cb:92:39:ea:3e:e2:9e:28:19:7c:2e:cb:97:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b Validity Not Before: Dec 8 02:00:58 2025 GMT Not After : Dec 9 02:00:58 2025 GMT Subject: CN=1380a975abb045cb27829c685ec99e90493e6c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:29:d5:be:2a:a5:e7:38:87:93:44:1f:5a: 12:e6:3b:c7:c5:d5:a8:dc:d9:9d:54:ca:53:b7:b2: 00:ff:e3:f1:73:8b:ea:05:4d:d5:25:9e:cb:60:7b: aa:d0:37:a0:d7:31:13:2f:f4:15:42:ad:79:b1:7d: 98:44:5e:f0:ad:f5:4b:bf:c2:a7:40:e4:48:38:99: c2:86:49:6c:5b:22:d8:67:2f:5f:f4:0f:09:18:75: c4:c4:a3:1e:ad:92:76:6e:54:45:e3:11:87:5d:30: be:c7:1b:01:ee:8b:17:b5:09:90:46:15:88:8f:ec: 0e:91:42:09:88:a4:51:2f:85:db:58:12:3d:fb:ce: 71:ec:e0:be:19:33:4c:5e:99:f6:fa:ed:8d:9d:cc: a2:9a:e3:cd:70:ac:2d:cd:f2:d9:d2:e5:b7:e1:d5: bd:90:1f:a6:c4:de:e4:11:06:b9:cc:95:12:52:76: d3:26:aa:7a:d4:3d:5c:2e:d9:86:87:13:41:a4:56: ed:51:b0:7d:22:39:c0:6c:d0:ba:1d:37:a2:cb:a3: fb:39:61:63:8b:5f:80:38:d8:3f:0d:d3:85:7f:7a: af:c4:d8:50:c8:1b:5f:9a:ce:f6:63:21:a2:e7:d0: be:33:1c:4e:cb:af:ce:a7:31:38:a9:2e:a9:27:6a: 98:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:80:A9:75:AB:B0:45:CB:27:82:9C:68:5E:C9:9E:90:49:3E:6C:2B X509v3 Authority Key Identifier: keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:03:e4:ba:fe:27:c1:99:86:cb:4f:00:ae:64:2b:9c:ca:50: 20:c3:24:5b:82:ff:af:0b:b8:f8:0a:c8:33:24:f4:e0:6d:09: 1f:63:de:b9:1b:f3:27:b3:ac:99:e3:dd:d8:8a:3f:be:e6:55: 87:58:c3:ad:aa:e5:d4:cb:94:a3:46:36:c0:ad:16:eb:8a:72: 8c:16:f1:1f:9d:fe:0f:e4:92:a1:ff:93:1e:91:3d:83:7c:d1: d8:a1:cf:1c:77:e4:46:23:fd:d3:cb:5f:0a:77:57:e2:c0:b1: d6:b3:eb:37:13:3b:0b:e5:38:17:a6:40:5b:a6:e8:ac:ab:8a: 7c:40:aa:98:21:d0:25:f6:8b:59:56:b8:e3:17:24:c3:3c:89: 8f:2b:e7:39:18:4b:d1:9a:d9:48:d8:2a:a1:e6:31:4e:75:ce: f7:97:dc:54:04:53:85:c5:ce:3a:e4:cd:3a:5c:6f:f9:9e:25: da:6d:e7:ff:27:0c:7c:4c:15:c3:8b:6e:94:2c:f7:ff:71:f6: e0:9d:f7:28:91:04:12:35:93:64:c3:fe:d9:9c:b4:01:d9:9d: 2f:93:52:7a:7f:3a:62:9a:7c:68:9a:6a:85:4d:5e:de:a1:05: d8:cd:e5:60:1d:4a:31:8d:0c:75:b9:0c:2e:4d:dd:3a:8b:3a: e2:44:7c:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7sMuSOeo+4p4oGXwuy5eYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYjVjMjJiZjUzYjcwNWM3YTJiYjI3M2JhNzNlM2YwYzA1 OTViN2IwHhcNMjUxMjA4MDIwMDU4WhcNMjUxMjA5MDIwMDU4WjAzMTEwLwYDVQQD EygxMzgwYTk3NWFiYjA0NWNiMjc4MjljNjg1ZWM5OWU5MDQ5M2U2YzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveEp1b4qpec4h5NEH1oS5jvHxdWo 3NmdVMpTt7IA/+Pxc4vqBU3VJZ7LYHuq0Deg1zETL/QVQq15sX2YRF7wrfVLv8Kn QORIOJnChklsWyLYZy9f9A8JGHXExKMerZJ2blRF4xGHXTC+xxsB7osXtQmQRhWI j+wOkUIJiKRRL4XbWBI9+85x7OC+GTNMXpn2+u2NncyimuPNcKwtzfLZ0uW34dW9 kB+mxN7kEQa5zJUSUnbTJqp61D1cLtmGhxNBpFbtUbB9IjnAbNC6HTeiy6P7OWFj i1+AONg/DdOFf3qvxNhQyBtfms72YyGi59C+MxxOy6/OpzE4qS6pJ2qYywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOAqXWrsEXLJ4KcaF7JnpBJPmwrMB8GA1UdIwQY MBaAFBq1wiv1O3Bceiuyc7pz4/DAWVt7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3JYQ0tfVTdjRng2SzdKenVuUGo4TUJaVzNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi83YzhiZjQtNmFiNi00MTk5LWIzYTct YjRiMWY2Zjk4YTkwLzEvR3JYQ0tfVTdjRng2SzdKenVuUGo4TUJaVzNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi83YzhiZjQtNmFiNi00MTk5LWIzYTctYjRiMWY2Zjk4YTkw LzEvR3JYQ0tfVTdjRng2SzdKenVuUGo4TUJaVzNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQPkuv4n wZmGy08ArmQrnMpQIMMkW4L/rwu4+ArIMyT04G0JH2PeuRvzJ7OsmePd2Io/vuZV h1jDrarl1MuUo0Y2wK0W64pyjBbxH53+D+SSof+THpE9g3zR2KHPHHfkRiP908tf CndX4sCx1rPrNxM7C+U4F6ZAW6borKuKfECqmCHQJfaLWVa44xckwzyJjyvnORhL 0ZrZSNgqoeYxTnXO95fcVARThcXOOuTNOlxv+Z4l2m3n/ycMfEwVw4tulCz3/3H2 4J33KJEEEjWTZMP+2Zy0AdmdL5NSen86Ypp8aJpqhU1e3qEF2M3lYB1KMY0MdbkM Lk3dOos64kR8Wg== -----END CERTIFICATE-----Generated at Mon Dec 8 09:36:04 2025 by rpki-client