This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft File: grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json) Hash identifier: XafLx5pq4gpIB4zfXL4Wt+QbNroiFVk8oYQ1UMTd55Y= Subject key identifier: C4:CE:B7:6C:9B:81:34:FA:7A:89:8A:8A:8A:82:3F:E7:4F:1C:20:08 Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b Certificate serial: 019AF31CDC90F1FBBF4C3A2780B81BF43B45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft Manifest number: 16D1 Signing time: Sat 06 Dec 2025 10:02:26 +0000 Manifest this update: Sat 06 Dec 2025 10:02:26 +0000 Manifest next update: Sun 07 Dec 2025 10:02:26 +0000 Files and hashes: 1: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: +Ekq/6NXElIisKLQ5hlSjaW/iTjnyjExwc59yMTZ7XY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:dc:90:f1:fb:bf:4c:3a:27:80:b8:1b:f4:3b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b Validity Not Before: Dec 6 10:02:26 2025 GMT Not After : Dec 7 10:02:26 2025 GMT Subject: CN=c4ceb76c9b8134fa7a898a8a8a823fe74f1c2008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:55:84:a1:07:f0:60:2f:38:19:75:df:48:d3: 76:aa:34:85:e4:20:72:36:ef:2a:fc:56:d5:3e:5c: ea:2a:e6:87:54:c3:17:4e:ca:45:d6:d1:65:70:7e: 4b:cb:5a:68:55:d1:8d:86:d5:f2:d4:ce:18:f7:8e: 19:49:8e:d5:5d:2f:14:c4:43:f6:13:07:d0:a5:16: 97:0f:dd:18:90:b9:fa:72:0d:2a:45:8e:27:52:4c: 45:7b:65:62:5a:6a:2c:f4:d5:97:a6:1f:f3:e3:7e: 69:ee:a4:32:88:95:ad:02:71:33:75:de:64:0b:d8: 0b:87:91:6c:d8:08:94:e8:46:22:a4:dd:fc:9e:3b: 20:c8:fa:42:3a:71:66:f9:14:5d:69:02:ce:a1:b3: 57:e1:25:06:a4:d3:a9:07:6e:d5:a3:dc:1e:cb:5b: 97:20:ae:b7:ca:07:b8:cd:8f:d1:34:39:92:54:96: 34:60:94:63:60:91:84:51:7e:37:22:a5:d6:8a:45: be:29:86:5d:ff:2a:79:28:7f:09:aa:31:3b:a4:e5: 35:c2:76:53:10:58:9b:98:5d:b0:aa:bb:47:02:90: fd:af:68:cf:57:62:d4:c6:cf:54:60:f4:7e:f4:b7: ed:e2:e6:1a:a8:5c:ae:8b:91:23:da:84:97:d0:e2: bc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CE:B7:6C:9B:81:34:FA:7A:89:8A:8A:8A:82:3F:E7:4F:1C:20:08 X509v3 Authority Key Identifier: keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:40:90:50:95:93:0c:c0:82:ec:d5:d7:98:9a:11:1f:ca:6c: 4b:7b:92:4f:57:8f:c0:40:33:43:37:89:c8:bb:66:bd:69:b5: 37:84:1e:c2:ea:4c:58:51:37:25:cd:f6:3c:62:79:0b:c8:79: f1:5b:3e:d4:72:ff:41:d8:a6:3c:6e:96:eb:13:25:54:d0:23: 49:83:4a:a1:9c:28:28:a2:b3:39:a8:9d:3a:17:b8:dd:49:4e: 0c:52:b7:83:44:86:27:e8:66:c6:d1:4d:bf:b6:15:72:92:1d: 50:ce:dd:07:c6:30:8b:81:f0:a6:4a:6d:d6:6e:39:a5:8e:c1: 73:0a:fd:21:f3:c7:8f:22:56:93:56:cc:de:6f:a1:a7:e6:d4: 10:42:63:6f:a7:ff:e8:ce:fd:91:c1:09:01:98:71:6b:8a:6b: c7:ed:48:ef:7a:33:22:32:0f:bd:64:65:0e:e7:ad:02:ea:03: 86:b4:7c:c8:fa:19:05:3e:73:ac:77:04:10:a1:d6:1c:f4:b3: 70:12:1f:fe:f4:56:3c:52:c5:f9:37:cd:0c:9f:f7:56:a3:56: f8:c4:46:f5:b8:b2:02:97:75:30:9b:df:b3:08:16:05:1c:b9: 45:c2:f0:f7:2e:2f:86:ef:08:f5:52:58:d5:35:84:a9:ca:af: 40:a2:f2:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNyQ8fu/TDongLgb9DtFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYmM2MzNlMjg0NjY0YTRjYTUxYWQ1OTc2YzdmYWYyYzYy NDZiNGIwHhcNMjUxMjA2MTAwMjI2WhcNMjUxMjA3MTAwMjI2WjAzMTEwLwYDVQQD EyhjNGNlYjc2YzliODEzNGZhN2E4OThhOGE4YTgyM2ZlNzRmMWMyMDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVWEoQfwYC84GXXfSNN2qjSF5CBy Nu8q/FbVPlzqKuaHVMMXTspF1tFlcH5Ly1poVdGNhtXy1M4Y944ZSY7VXS8UxEP2 EwfQpRaXD90YkLn6cg0qRY4nUkxFe2ViWmos9NWXph/z435p7qQyiJWtAnEzdd5k C9gLh5Fs2AiU6EYipN38njsgyPpCOnFm+RRdaQLOobNX4SUGpNOpB27Vo9wey1uX IK63yge4zY/RNDmSVJY0YJRjYJGEUX43IqXWikW+KYZd/yp5KH8JqjE7pOU1wnZT EFibmF2wqrtHApD9r2jPV2LUxs9UYPR+9Lft4uYaqFyui5Ej2oSX0OK8QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTOt2ybgTT6eomKioqCP+dPHCAIMB8GA1UdIwQY MBaAFIK8Yz4oRmSkylGtWXbH+vLGJGtLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAt MmE5MWMyY2QyMDc5LzEvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAtMmE5MWMyY2QyMDc5 LzEvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0CQUJWT DMCC7NXXmJoRH8psS3uST1ePwEAzQzeJyLtmvWm1N4QewupMWFE3Jc32PGJ5C8h5 8Vs+1HL/QdimPG6W6xMlVNAjSYNKoZwoKKKzOaidOhe43UlODFK3g0SGJ+hmxtFN v7YVcpIdUM7dB8Ywi4Hwpkpt1m45pY7Bcwr9IfPHjyJWk1bM3m+hp+bUEEJjb6f/ 6M79kcEJAZhxa4prx+1I73ozIjIPvWRlDuetAuoDhrR8yPoZBT5zrHcEEKHWHPSz cBIf/vRWPFLF+TfNDJ/3VqNW+MRG9biyApd1MJvfswgWBRy5RcLw9y4vhu8I9VJY 1TWEqcqvQKLymA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:20 2025 by rpki-client