This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft File: GPijrw2MDVHeLd0mWtVNq5e95s4.mft (raw, json) Hash identifier: O740DsSdJbtxQ9EuU3znvcWF/y7S89vs22VmTHaAM3Y= Subject key identifier: 12:54:A0:AC:1C:F1:95:D5:C6:3F:77:E7:B1:FB:FD:97:08:97:E7:22 Authority key identifier: 18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE Certificate issuer: /CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce Certificate serial: 019AF2E4340404C2EF381E7646AAFEE4D025 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft Manifest number: 0F Signing time: Sat 06 Dec 2025 09:00:33 +0000 Manifest this update: Sat 06 Dec 2025 09:00:33 +0000 Manifest next update: Sun 07 Dec 2025 09:00:33 +0000 Files and hashes: 1: GPijrw2MDVHeLd0mWtVNq5e95s4.crl (hash: dxzdTHMZ83N2MRKbHTozImbkDA6a2E94+kmVLyWAn/Y=) 2: jtoBQwIUDDJGQnPKKMk_RqjJnM8.roa (hash: qs/ndOyS1IApu6dntwwwn/J4lhn/hjfKt5trUC8kNUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:34:04:04:c2:ef:38:1e:76:46:aa:fe:e4:d0:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce Validity Not Before: Dec 6 09:00:33 2025 GMT Not After : Dec 7 09:00:33 2025 GMT Subject: CN=1254a0ac1cf195d5c63f77e7b1fbfd970897e722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2d:c3:3c:e5:e2:68:88:e4:c0:d0:8b:f6:4f: 6b:07:72:84:ac:54:86:87:03:3c:91:68:9f:90:17: cd:80:5e:02:29:14:2c:e5:bd:86:87:f8:b1:de:e3: 33:38:09:6f:84:42:1c:7b:9a:8f:70:3d:dd:0f:ba: 17:60:98:6a:a9:8b:54:bf:55:70:ff:c0:b1:fb:45: 4b:0b:d6:10:ff:7c:58:c6:d0:93:c8:6e:7d:14:63: 33:76:eb:d6:0f:0d:91:15:6c:f0:30:98:73:8c:d4: 16:f4:eb:c8:da:b9:29:60:a6:68:fa:f2:9e:a5:af: 84:d0:2d:e6:9f:e6:39:04:a9:a9:9b:77:c7:2b:f5: d1:47:0e:27:5a:d3:5d:cf:76:53:bc:f2:8c:5c:04: 78:a8:07:41:25:61:73:59:75:a9:22:01:3d:3c:40: 08:76:d9:e1:95:0f:82:7b:5f:2d:67:7a:86:22:1b: f1:a0:c1:52:fa:89:4b:92:7e:f2:f7:f0:b5:7e:9b: 69:9d:44:67:71:78:af:21:2f:72:d5:18:2d:b0:46: 70:b3:96:77:a2:db:b0:9c:fd:f3:21:bb:24:ed:48: 95:18:ee:7f:55:8a:d9:66:af:04:2e:b9:73:df:5e: 6f:3c:fe:b2:de:c8:1c:b0:8a:ef:52:00:e7:b6:8c: 58:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:54:A0:AC:1C:F1:95:D5:C6:3F:77:E7:B1:FB:FD:97:08:97:E7:22 X509v3 Authority Key Identifier: keyid:18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:36:9f:f1:02:6b:d3:45:79:79:fc:12:c4:63:c0:f9:b3:43: 83:07:af:2a:42:42:d9:82:fe:66:88:52:af:b3:66:56:6e:d1: c8:7d:e7:74:56:8b:08:22:b2:cb:ef:d7:94:50:e9:f5:3e:8a: 70:c2:db:ff:29:0b:00:68:37:01:a2:49:f3:6a:9e:a6:73:e4: 31:3e:4b:11:b6:ba:19:06:da:c3:ea:8a:8d:8e:c6:23:ed:88: be:7e:2a:1c:25:e6:69:00:3a:81:5f:b7:df:9f:10:ce:11:83: c8:ed:b8:1d:90:54:7b:d8:97:59:77:5b:58:eb:20:f8:63:89: 50:e5:fb:24:0d:b5:1b:4b:78:64:d1:03:48:ae:b1:68:9d:cd: ab:4e:81:b7:a6:f2:33:92:2f:32:fd:a7:26:77:5f:52:18:47: a3:55:62:cc:8b:72:fb:00:c3:05:9f:a2:80:7d:6e:f1:2c:e7: 9f:b4:99:89:af:53:d6:e8:84:ed:29:e9:98:47:62:52:86:f7: d1:6c:9d:b1:94:cf:91:8d:74:8d:40:ec:89:d4:89:98:d4:d4: ed:9b:43:48:58:82:fb:93:a9:5d:13:bf:bf:99:79:34:3a:97: 45:5b:95:c4:32:a8:06:a2:fc:ad:61:a8:e0:e9:54:11:5b:f6: bd:8f:a7:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5DQEBMLvOB52Rqr+5NAlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZjhhM2FmMGQ4YzBkNTFkZTJkZGQyNjVhZDU0ZGFiOTdi ZGU2Y2UwHhcNMjUxMjA2MDkwMDMzWhcNMjUxMjA3MDkwMDMzWjAzMTEwLwYDVQQD EygxMjU0YTBhYzFjZjE5NWQ1YzYzZjc3ZTdiMWZiZmQ5NzA4OTdlNzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S3DPOXiaIjkwNCL9k9rB3KErFSG hwM8kWifkBfNgF4CKRQs5b2Gh/ix3uMzOAlvhEIce5qPcD3dD7oXYJhqqYtUv1Vw /8Cx+0VLC9YQ/3xYxtCTyG59FGMzduvWDw2RFWzwMJhzjNQW9OvI2rkpYKZo+vKe pa+E0C3mn+Y5BKmpm3fHK/XRRw4nWtNdz3ZTvPKMXAR4qAdBJWFzWXWpIgE9PEAI dtnhlQ+Ce18tZ3qGIhvxoMFS+olLkn7y9/C1fptpnURncXivIS9y1RgtsEZws5Z3 otuwnP3zIbsk7UiVGO5/VYrZZq8ELrlz315vPP6y3sgcsIrvUgDntoxYSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJUoKwc8ZXVxj9357H7/ZcIl+ciMB8GA1UdIwQY MBaAFBj4o68NjA1R3i3dJlrVTauXvebOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1BpanJ3Mk1EVkhlTGQwbVd0Vk5xNWU5NXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9lNTMzMTMtZDU4Ny00OTJjLWFkMTgt NDc2MzdlYjFlYzQ5LzEvR1BpanJ3Mk1EVkhlTGQwbVd0Vk5xNWU5NXM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9lNTMzMTMtZDU4Ny00OTJjLWFkMTgtNDc2MzdlYjFlYzQ5 LzEvR1BpanJ3Mk1EVkhlTGQwbVd0Vk5xNWU5NXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDaf8QJr 00V5efwSxGPA+bNDgwevKkJC2YL+ZohSr7NmVm7RyH3ndFaLCCKyy+/XlFDp9T6K cMLb/ykLAGg3AaJJ82qepnPkMT5LEba6GQbaw+qKjY7GI+2Ivn4qHCXmaQA6gV+3 358QzhGDyO24HZBUe9iXWXdbWOsg+GOJUOX7JA21G0t4ZNEDSK6xaJ3Nq06Bt6by M5IvMv2nJndfUhhHo1VizIty+wDDBZ+igH1u8Sznn7SZia9T1uiE7SnpmEdiUob3 0WydsZTPkY10jUDsidSJmNTU7ZtDSFiC+5OpXRO/v5l5NDqXRVuVxDKoBqL8rWGo 4OlUEVv2vY+n2g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:20:03 2025 by rpki-client