This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json) Hash identifier: cRjdFo4z0W1b0Bc+147FHcRq3X7FoErYGwty5pl9mq8= Subject key identifier: 65:8F:40:4B:15:5E:2E:20:30:6D:C8:09:9A:FA:0F:86:AC:84:A9:3D Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22 Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522 Certificate serial: 019AF2ADDC50F6CB50D03616FF0576200353 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft Manifest number: 0339 Signing time: Sat 06 Dec 2025 08:01:11 +0000 Manifest this update: Sat 06 Dec 2025 08:01:11 +0000 Manifest next update: Sun 07 Dec 2025 08:01:11 +0000 Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: kB6YwXXRYJnRSo+fGK3BSafW5wwjtpTcV/AAPai8uo8=) 2: RyTD8ysj6_4VmnUX2OFrVA27p2U.roa (hash: dgeC3fAtFGdk1IystX/d2Lto62C1ZW8Kifsbnvy1J74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:dc:50:f6:cb:50:d0:36:16:ff:05:76:20:03:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522 Validity Not Before: Dec 6 08:01:11 2025 GMT Not After : Dec 7 08:01:11 2025 GMT Subject: CN=658f404b155e2e20306dc8099afa0f86ac84a93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fa:df:8a:4c:21:56:c2:cb:9d:5a:8a:a6:b9: 4d:d5:9a:73:0f:f4:99:24:8a:22:0b:b6:55:97:53: 53:81:d9:b8:db:3e:7b:53:8a:2c:f8:49:54:50:93: c3:a4:7b:77:6a:b8:2a:a3:04:bc:72:f2:21:f4:54: 4b:e0:64:6f:20:df:c1:00:49:3c:69:5c:9a:12:47: b0:41:31:4b:a8:08:1e:7c:c5:58:6a:ca:86:6a:38: ee:34:bd:b1:0b:82:68:1d:e4:c8:8c:fd:51:55:22: 98:15:d1:17:3a:28:9c:23:96:b6:2d:6a:0a:a8:41: bc:7a:32:a4:34:a1:ee:f0:53:cb:70:a8:37:69:2c: 20:51:27:d6:3f:f1:f5:36:98:db:0e:22:55:7f:16: cb:97:f9:6b:77:5e:bb:f8:4b:61:ff:79:36:9a:45: 24:9e:99:fc:97:fa:ff:8a:9c:c2:ae:33:77:b6:a9: d3:25:f7:05:58:37:2e:31:1e:2b:6e:ab:2a:e9:de: 43:18:8b:a9:e3:87:6d:46:01:d4:b8:09:c2:41:4a: b4:56:a3:a6:fd:c1:13:31:72:03:1c:47:9c:e1:be: 8e:f5:2e:90:f5:60:05:d7:9f:44:da:fb:52:ef:fe: 2c:40:ea:ad:02:e9:c1:9c:b4:22:53:23:0d:17:ce: f7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8F:40:4B:15:5E:2E:20:30:6D:C8:09:9A:FA:0F:86:AC:84:A9:3D X509v3 Authority Key Identifier: keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e4:27:31:7f:db:41:c6:2e:34:db:0c:08:f8:6d:da:6d:c7: f0:ce:9d:02:f6:7f:45:b3:97:cf:2f:86:da:bf:5d:20:71:28: a2:02:f2:e0:5c:27:bd:e6:ab:18:36:ef:aa:7b:43:3e:99:73: 89:b4:a1:c3:4f:4c:81:e3:f7:d2:c9:cb:30:4f:b5:cf:b3:53: 3e:74:d6:7d:0c:ad:ad:67:e4:01:c6:fe:d9:61:e0:07:fb:9f: 25:6b:c6:63:29:1e:a0:86:9a:6c:52:31:ff:1f:48:df:42:a7: 8c:c1:ea:2d:0c:37:f0:fd:d3:a9:50:19:53:a7:ac:3f:c9:d6: 02:3b:52:9d:e2:f4:dd:b3:b8:3f:e9:5e:47:f8:f6:a7:97:fc: 51:06:d1:03:7f:de:37:38:8e:d4:3f:ee:7c:bf:93:76:fc:8a: cc:8f:07:f8:0c:91:b5:56:41:1f:47:f1:37:6a:26:1c:7d:37: f1:80:51:ce:19:94:02:d6:05:ef:3d:af:bb:be:c7:e6:bd:c8: 79:15:2a:19:06:3c:ea:83:6d:ca:c8:b3:4a:8b:1d:10:08:ee: d4:99:8b:23:cb:9a:25:77:85:a8:23:48:a2:65:dc:8a:f2:fb: 00:ad:c1:c9:de:10:f3:54:02:49:a9:c1:db:93:da:bf:d1:3e: d5:ab:85:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdxQ9stQ0DYW/wV2IANTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNzRmMjc3MDJhNjJjNmI2MjdjNWVhNzBiOTZmZDI5ODIz NjQ1MjIwHhcNMjUxMjA2MDgwMTExWhcNMjUxMjA3MDgwMTExWjAzMTEwLwYDVQQD Eyg2NThmNDA0YjE1NWUyZTIwMzA2ZGM4MDk5YWZhMGY4NmFjODRhOTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvrfikwhVsLLnVqKprlN1ZpzD/SZ JIoiC7ZVl1NTgdm42z57U4os+ElUUJPDpHt3argqowS8cvIh9FRL4GRvIN/BAEk8 aVyaEkewQTFLqAgefMVYasqGajjuNL2xC4JoHeTIjP1RVSKYFdEXOiicI5a2LWoK qEG8ejKkNKHu8FPLcKg3aSwgUSfWP/H1NpjbDiJVfxbLl/lrd167+Eth/3k2mkUk npn8l/r/ipzCrjN3tqnTJfcFWDcuMR4rbqsq6d5DGIup44dtRgHUuAnCQUq0VqOm /cETMXIDHEec4b6O9S6Q9WAF159E2vtS7/4sQOqtAunBnLQiUyMNF873CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWPQEsVXi4gMG3ICZr6D4ashKk9MB8GA1UdIwQY MBaAFBp08ncCpixrYnxepwuW/SmCNkUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUt MTQ1MGVmYmQ5ZTM1LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUtMTQ1MGVmYmQ5ZTM1 LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+QnMX/b QcYuNNsMCPht2m3H8M6dAvZ/RbOXzy+G2r9dIHEoogLy4FwnvearGDbvqntDPplz ibShw09MgeP30snLME+1z7NTPnTWfQytrWfkAcb+2WHgB/ufJWvGYykeoIaabFIx /x9I30KnjMHqLQw38P3TqVAZU6esP8nWAjtSneL03bO4P+leR/j2p5f8UQbRA3/e NziO1D/ufL+TdvyKzI8H+AyRtVZBH0fxN2omHH038YBRzhmUAtYF7z2vu77H5r3I eRUqGQY86oNtysizSosdEAju1JmLI8uaJXeFqCNIomXcivL7AK3Byd4Q81QCSanB 25Pav9E+1auF+w== -----END CERTIFICATE-----Generated at Sat Dec 6 17:22:40 2025 by rpki-client