This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft File: GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json) Hash identifier: dohW+Q82th5p5/vemgM7obN4FoWGd+CiKmr4Z4SX3Pg= Subject key identifier: 51:DA:FA:B3:00:6E:5B:5A:42:88:48:0B:76:38:B2:50:8D:21:AB:4D Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa Certificate serial: 019AF509A7135A3E267DA869DF5F48E77BE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft Manifest number: 0909 Signing time: Sat 06 Dec 2025 19:00:41 +0000 Manifest this update: Sat 06 Dec 2025 19:00:41 +0000 Manifest next update: Sun 07 Dec 2025 19:00:41 +0000 Files and hashes: 1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: 4+I6cQSSxmdyV6FEz3HawzTg4faL6WYFEsfgJGl493Y=) 2: ch1KpBgRu3ljafWy2V7pY_YI2M4.roa (hash: ms8ZB4OSeZ322kYbRZpkd1MuHt48+zlVIWdiu6MuxZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:a7:13:5a:3e:26:7d:a8:69:df:5f:48:e7:7b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa Validity Not Before: Dec 6 19:00:41 2025 GMT Not After : Dec 7 19:00:41 2025 GMT Subject: CN=51dafab3006e5b5a4288480b7638b2508d21ab4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:15:a3:d8:46:2c:d6:01:c9:5d:87:71:35:f8: 7b:23:fc:7d:4d:eb:5a:93:73:60:59:d9:98:84:d4: c0:0b:c0:ab:82:47:3e:5e:dd:61:59:49:0f:87:48: dd:20:6b:47:86:58:e7:87:c3:67:bd:57:96:98:cc: fa:3b:b9:b7:fe:4b:3b:d8:c6:50:fc:47:fb:6a:0f: a9:b9:da:28:38:72:e7:c8:05:54:46:85:2d:41:2b: ae:58:51:0b:8b:ed:47:5b:a9:30:8c:f2:3c:9d:99: aa:ff:9c:a2:2f:b0:25:8f:7c:e2:92:96:a5:63:22: f5:b2:d8:c7:90:dc:23:6a:1f:23:68:ea:21:69:4c: 44:ea:09:48:df:aa:fa:85:9b:73:73:dd:a0:38:c5: fc:ee:c1:fb:f8:7b:c2:2b:a8:91:34:05:03:54:fd: 0a:01:b0:ce:ed:ca:af:d6:82:30:19:5b:6c:e1:8b: 8a:32:5d:08:a9:95:e0:76:db:1c:e2:f8:d6:fc:db: 2e:5c:2d:56:df:b1:d3:c1:66:2c:4f:22:83:f4:72: 69:08:85:54:d0:0f:c5:5d:30:3b:53:66:b1:af:e2: 14:ba:6a:19:49:b3:8f:f5:bd:41:4d:8b:78:1f:cd: bc:d0:63:f2:d2:59:4c:ba:8d:d5:02:ff:20:5e:f7: 0b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DA:FA:B3:00:6E:5B:5A:42:88:48:0B:76:38:B2:50:8D:21:AB:4D X509v3 Authority Key Identifier: keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:53:ce:e8:28:68:ff:62:bf:17:aa:ef:1f:94:9f:af:6f:84: 4d:08:49:13:ea:be:8a:ec:74:38:c7:e9:3d:66:f0:3f:43:18: 3f:c6:c0:fd:80:4b:39:91:ed:4c:92:d6:e5:1d:94:9c:a0:f7: fb:c3:98:4d:5d:af:5d:90:52:66:bc:b8:24:c2:0d:3b:7b:84: 39:20:e7:6e:d2:94:71:01:42:e7:01:c3:d5:96:48:40:d6:19: 6d:d7:cb:fa:ff:45:fc:9e:88:fd:b5:4e:83:cf:29:22:d3:4a: 6e:ae:1a:58:6d:ac:c2:06:f4:9a:86:0e:33:25:4f:cf:bf:24: aa:42:df:8f:68:a8:63:81:19:66:ad:a3:98:5e:68:01:d6:05: 3e:fa:c6:fb:fc:24:5a:dc:b0:ac:b7:4a:42:f8:a2:0b:55:37: fb:5f:aa:be:c6:ed:0d:df:25:9d:13:c9:79:12:cd:9a:34:72: 5c:90:ee:8c:70:3f:48:19:ca:94:19:d6:f4:d3:9d:9a:42:d9: 89:57:9e:e7:fc:c5:3a:99:21:fb:62:fc:40:e8:bb:90:89:b3: 84:85:16:a5:d9:71:36:de:a6:26:58:35:cb:dd:75:6a:9e:28: 1c:c3:16:6c:c6:db:aa:88:c2:ca:28:c3:8c:28:08:77:ef:49: ac:ea:f3:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CacTWj4mfahp319I53vkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZGMyMzUyMTE3NjAyMzIyZDc0MWM1MTM2OGNhOGI4ZGQx YTNlYWEwHhcNMjUxMjA2MTkwMDQxWhcNMjUxMjA3MTkwMDQxWjAzMTEwLwYDVQQD Eyg1MWRhZmFiMzAwNmU1YjVhNDI4ODQ4MGI3NjM4YjI1MDhkMjFhYjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRWj2EYs1gHJXYdxNfh7I/x9Teta k3NgWdmYhNTAC8Crgkc+Xt1hWUkPh0jdIGtHhljnh8NnvVeWmMz6O7m3/ks72MZQ /Ef7ag+pudooOHLnyAVURoUtQSuuWFELi+1HW6kwjPI8nZmq/5yiL7Alj3zikpal YyL1stjHkNwjah8jaOohaUxE6glI36r6hZtzc92gOMX87sH7+HvCK6iRNAUDVP0K AbDO7cqv1oIwGVts4YuKMl0IqZXgdtsc4vjW/NsuXC1W37HTwWYsTyKD9HJpCIVU 0A/FXTA7U2axr+IUumoZSbOP9b1BTYt4H8280GPy0llMuo3VAv8gXvcL6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHa+rMAbltaQohIC3Y4slCNIatNMB8GA1UdIwQY MBaAFBjcI1IRdgIyLXQcUTaMqLjdGj6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMTQzY2QtYTgxNC00ZDQ4LWE4N2Mt ZDdjMGU5MzkzZWEwLzEvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8wMTQzY2QtYTgxNC00ZDQ4LWE4N2MtZDdjMGU5MzkzZWEw LzEvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVPO6Cho /2K/F6rvH5Sfr2+ETQhJE+q+iux0OMfpPWbwP0MYP8bA/YBLOZHtTJLW5R2UnKD3 +8OYTV2vXZBSZry4JMINO3uEOSDnbtKUcQFC5wHD1ZZIQNYZbdfL+v9F/J6I/bVO g88pItNKbq4aWG2swgb0moYOMyVPz78kqkLfj2ioY4EZZq2jmF5oAdYFPvrG+/wk WtywrLdKQviiC1U3+1+qvsbtDd8lnRPJeRLNmjRyXJDujHA/SBnKlBnW9NOdmkLZ iVee5/zFOpkh+2L8QOi7kImzhIUWpdlxNt6mJlg1y911ap4oHMMWbMbbqojCyijD jCgId+9JrOrzSg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:45:14 2025 by rpki-client