This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft File: gmAVLt1HazFwhARFKVhhW2Xdywo.mft (raw, json) Hash identifier: 6gY1we8XY8AxmqNqfOhgmNHLTBoAIpebiljbfZuoesU= Subject key identifier: E4:B7:68:35:1D:C6:A9:68:92:26:48:C7:63:C1:7A:DC:6E:A9:7A:37 Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A Certificate issuer: /CN=8260152edd476b31708404452958615b65ddcb0a Certificate serial: 019AF1D256F78BE44E572246F69B01A427E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:01:25 +0000 Manifest this update: Sat 06 Dec 2025 04:01:25 +0000 Manifest next update: Sun 07 Dec 2025 04:01:25 +0000 Files and hashes: 1: ABnX77DVikk7gn2fQ6SCyXZp5CY.roa (hash: tGweD2UyMDN3jg0C7H8c7WDDk9iUdxSAoQTdTpfDf5g=) 2: gmAVLt1HazFwhARFKVhhW2Xdywo.crl (hash: 5e6KOt5zERJ8ndY8NyGFHpbzImaTmeW/zs+bqimxJ/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:56:f7:8b:e4:4e:57:22:46:f6:9b:01:a4:27:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8260152edd476b31708404452958615b65ddcb0a Validity Not Before: Dec 6 04:01:25 2025 GMT Not After : Dec 7 04:01:25 2025 GMT Subject: CN=e4b768351dc6a968922648c763c17adc6ea97a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:29:ee:ca:0a:8a:46:18:84:54:64:de:e9:5a: 0c:c7:8b:cc:7e:21:1d:01:a5:cf:5f:74:2e:37:6d: ae:87:54:43:ec:d0:59:b7:0e:dc:27:e8:20:cb:c6: 79:86:b5:e5:a5:4e:e9:05:51:71:5e:f5:fc:8e:c1: e8:ca:7f:b7:b0:27:5c:67:2e:b5:15:d8:54:8c:51: 2a:5d:cf:4e:cf:f4:cb:6b:84:5b:df:ab:31:30:1e: 24:46:42:4a:02:8b:03:59:93:b7:8f:1f:ab:ba:99: b2:42:3a:cd:64:13:61:b7:8c:af:0a:14:5b:ad:6a: d6:00:00:c4:e3:57:86:05:d3:cc:2e:93:1f:d3:35: 2c:54:99:3b:48:98:5e:f9:ab:fc:84:8b:c8:2a:9a: 0f:54:57:4c:c5:4e:65:4f:de:45:6d:27:21:86:17: 8e:00:1b:c5:14:e6:9f:5f:49:61:84:9a:0a:54:81: 19:c3:4e:db:2c:eb:d9:59:76:6d:24:bf:fe:f7:77: d5:15:07:82:fe:11:47:a9:c7:83:66:62:75:2b:51: df:84:7b:8b:81:39:ad:29:3f:d7:d0:c3:73:de:38: af:45:2e:57:22:4d:a5:13:8d:d2:bc:2c:70:a1:48: c1:cd:c6:d0:d7:ad:3a:a6:7c:2e:21:eb:87:48:c7: 6a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B7:68:35:1D:C6:A9:68:92:26:48:C7:63:C1:7A:DC:6E:A9:7A:37 X509v3 Authority Key Identifier: keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:29:cc:74:85:68:5e:a8:fa:f7:58:d0:4f:f5:0d:cf:39:86: f0:52:27:77:b2:67:87:23:2f:d0:c6:cb:a2:0f:37:96:19:5d: 96:17:2a:ac:59:0d:7a:90:0d:87:de:60:c8:f4:cc:bb:9c:88: 0e:3e:a3:74:a1:38:ab:86:d1:6e:04:75:18:58:e6:86:27:7d: 50:f8:4f:72:bf:00:8b:90:c2:09:c1:1f:ee:66:33:1c:7c:24: 32:2e:02:2b:10:47:d3:23:da:e9:b6:f1:63:fe:22:58:bf:9d: a2:33:e0:18:de:a2:5f:12:e2:e1:7a:b1:42:94:96:7d:4d:71: e6:9c:44:ee:69:45:8c:93:cf:74:3b:97:c6:c9:81:a0:83:ad: 9d:c1:47:95:50:4b:93:ab:b3:a9:5d:35:b1:46:a1:52:cb:e7: 22:c2:d9:98:44:c0:0a:2d:de:8b:c6:67:4a:bb:af:ec:43:44: 3b:e0:94:41:52:56:dc:bb:39:c4:68:43:eb:14:8b:48:a2:65: 69:34:fc:95:77:51:83:f7:52:d5:1c:3e:f7:ff:a7:11:94:80: a2:c9:68:e5:1b:86:57:99:d4:23:fd:cf:87:54:d3:ca:d2:c8: 38:e9:c2:de:d2:7f:61:1f:83:98:0f:40:17:a2:ef:19:c4:42: 40:50:ca:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lb3i+ROVyJG9psBpCfjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjAxNTJlZGQ0NzZiMzE3MDg0MDQ0NTI5NTg2MTViNjVk ZGNiMGEwHhcNMjUxMjA2MDQwMTI1WhcNMjUxMjA3MDQwMTI1WjAzMTEwLwYDVQQD EyhlNGI3NjgzNTFkYzZhOTY4OTIyNjQ4Yzc2M2MxN2FkYzZlYTk3YTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSnuygqKRhiEVGTe6VoMx4vMfiEd AaXPX3QuN22uh1RD7NBZtw7cJ+ggy8Z5hrXlpU7pBVFxXvX8jsHoyn+3sCdcZy61 FdhUjFEqXc9Oz/TLa4Rb36sxMB4kRkJKAosDWZO3jx+rupmyQjrNZBNht4yvChRb rWrWAADE41eGBdPMLpMf0zUsVJk7SJhe+av8hIvIKpoPVFdMxU5lT95FbSchhheO ABvFFOafX0lhhJoKVIEZw07bLOvZWXZtJL/+93fVFQeC/hFHqceDZmJ1K1HfhHuL gTmtKT/X0MNz3jivRS5XIk2lE43SvCxwoUjBzcbQ1606pnwuIeuHSMdqPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOS3aDUdxqlokiZIx2PBetxuqXo3MB8GA1UdIwQY MBaAFIJgFS7dR2sxcIQERSlYYVtl3csKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21BVkx0MUhhekZ3aEFSRktWaGhXMlhkeXdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80OWY0MGMtNTQ0OC00MjE3LTk1NmYt Y2NmOWIwZjBlMjI3LzEvZ21BVkx0MUhhekZ3aEFSRktWaGhXMlhkeXdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80OWY0MGMtNTQ0OC00MjE3LTk1NmYtY2NmOWIwZjBlMjI3 LzEvZ21BVkx0MUhhekZ3aEFSRktWaGhXMlhkeXdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCnMdIVo Xqj691jQT/UNzzmG8FInd7JnhyMv0MbLog83lhldlhcqrFkNepANh95gyPTMu5yI Dj6jdKE4q4bRbgR1GFjmhid9UPhPcr8Ai5DCCcEf7mYzHHwkMi4CKxBH0yPa6bbx Y/4iWL+dojPgGN6iXxLi4XqxQpSWfU1x5pxE7mlFjJPPdDuXxsmBoIOtncFHlVBL k6uzqV01sUahUsvnIsLZmETACi3ei8ZnSruv7ENEO+CUQVJW3Ls5xGhD6xSLSKJl aTT8lXdRg/dS1Rw+9/+nEZSAoslo5RuGV5nUI/3Ph1TTytLIOOnC3tJ/YR+DmA9A F6LvGcRCQFDKLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:52 2025 by rpki-client