This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft File: gRsX62FjiTMhtH5K9_pWsBxfN7U.mft (raw, json) Hash identifier: nBzLgaArJHf0lCrerULymZzBzz6UoaHovVRwhZ6Rj+M= Subject key identifier: 97:21:C3:BC:31:2C:D6:37:88:C0:F4:14:7F:04:D1:CB:F2:13:D6:DF Authority key identifier: 81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5 Certificate issuer: /CN=811b17eb6163893321b47e4af7fa56b01c5f37b5 Certificate serial: 019B397D47D986C7FCFBD58CB3E887C9B3EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft Manifest number: 1783 Signing time: Sat 20 Dec 2025 02:01:10 +0000 Manifest this update: Sat 20 Dec 2025 02:01:10 +0000 Manifest next update: Sun 21 Dec 2025 02:01:10 +0000 Files and hashes: 1: gRsX62FjiTMhtH5K9_pWsBxfN7U.crl (hash: x2uA+0rMdtOvuBJUr4ff+6BlNNtFJ6nDWyk+b97vzXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:47:d9:86:c7:fc:fb:d5:8c:b3:e8:87:c9:b3:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=811b17eb6163893321b47e4af7fa56b01c5f37b5 Validity Not Before: Dec 20 02:01:10 2025 GMT Not After : Dec 21 02:01:10 2025 GMT Subject: CN=9721c3bc312cd63788c0f4147f04d1cbf213d6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bc:fb:9f:8b:09:8a:be:79:31:a2:8a:11:ac: 93:97:ee:1f:2e:43:50:5d:9c:a0:c1:f3:5e:89:f0: 40:a6:22:b5:14:0e:7b:0e:8a:90:b7:67:f1:a9:78: b1:c4:7c:bf:89:54:35:92:27:a1:99:36:08:70:27: 03:78:b0:e0:21:08:0d:cc:9c:29:e0:1b:bb:3e:e9: 90:66:ae:34:8c:fd:1e:2c:fc:63:12:af:18:47:bc: d1:61:f8:17:72:88:16:1e:85:e4:18:86:2a:54:2d: 9c:82:5c:06:4c:e1:d5:ef:37:88:f7:3d:0e:72:66: 64:87:fb:bf:fa:7a:df:97:38:45:05:f0:41:c8:b1: 44:9e:3c:77:bd:81:0b:ae:41:9c:06:28:d1:8a:81: 11:7d:a9:48:f9:fd:9a:a3:b0:4c:a7:b1:e5:1c:3e: 03:38:0e:73:c3:b1:ac:fa:27:3d:04:70:4c:21:97: 22:19:16:7a:5f:06:85:cd:8a:96:0a:1a:19:33:2f: 27:80:a5:77:89:d1:53:75:a7:1a:2a:50:46:1b:87: 0a:14:f2:36:1f:58:de:46:3b:c4:2f:98:f4:2e:59: 1b:76:0e:71:24:b5:7d:c6:77:df:89:e2:ed:82:4b: 0a:e3:dc:54:91:08:48:d7:1f:43:18:f6:12:0c:ff: a6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:21:C3:BC:31:2C:D6:37:88:C0:F4:14:7F:04:D1:CB:F2:13:D6:DF X509v3 Authority Key Identifier: keyid:81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:00:1e:ba:1c:47:7d:86:4b:d3:f7:14:aa:09:a2:09:b2:00: b3:ae:8a:26:38:23:b7:9a:a7:3b:9f:0a:9c:2e:d0:37:07:b1: 88:91:18:90:1f:6c:dc:16:0d:40:6f:71:e6:65:54:f0:23:ae: 4d:df:0a:64:0d:5c:5f:aa:8e:96:cf:2c:4f:2a:06:4d:bb:f0: f9:e7:72:3d:73:cb:29:5d:9b:92:d0:c7:fe:a2:72:a0:c6:d3: 54:f6:87:66:6d:99:8b:92:f5:fd:a4:cb:0e:e5:c5:0a:17:96: c0:0c:48:67:b1:ff:cc:4b:95:14:51:fa:00:37:ec:f1:1b:7d: eb:9b:94:cd:fd:83:50:89:a4:95:52:52:b5:30:b7:3b:83:23: 1c:6d:22:05:1e:9e:ea:4b:2d:7b:e1:83:d4:15:f1:e8:f0:db: d8:ce:14:a3:65:7c:9b:df:31:95:63:d0:12:b1:88:04:9e:28: 83:34:03:3e:d6:97:c6:82:7e:6d:4d:dd:bd:40:79:62:9d:f4: fe:d4:cc:03:c1:8d:a7:86:30:f3:d9:9e:f1:1d:f2:f4:62:5b: 7f:84:44:3b:ed:87:57:80:03:18:12:d9:f1:6a:6e:67:0d:80: 9c:4f:79:06:a7:b9:bb:ea:ae:35:83:51:42:23:6e:31:4a:ba: 3a:f0:01:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fUfZhsf8+9WMs+iHybPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMWIxN2ViNjE2Mzg5MzMyMWI0N2U0YWY3ZmE1NmIwMWM1 ZjM3YjUwHhcNMjUxMjIwMDIwMTEwWhcNMjUxMjIxMDIwMTEwWjAzMTEwLwYDVQQD Eyg5NzIxYzNiYzMxMmNkNjM3ODhjMGY0MTQ3ZjA0ZDFjYmYyMTNkNmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLz7n4sJir55MaKKEayTl+4fLkNQ XZygwfNeifBApiK1FA57DoqQt2fxqXixxHy/iVQ1kiehmTYIcCcDeLDgIQgNzJwp 4Bu7PumQZq40jP0eLPxjEq8YR7zRYfgXcogWHoXkGIYqVC2cglwGTOHV7zeI9z0O cmZkh/u/+nrflzhFBfBByLFEnjx3vYELrkGcBijRioERfalI+f2ao7BMp7HlHD4D OA5zw7Gs+ic9BHBMIZciGRZ6XwaFzYqWChoZMy8ngKV3idFTdacaKlBGG4cKFPI2 H1jeRjvEL5j0Llkbdg5xJLV9xnffieLtgksK49xUkQhI1x9DGPYSDP+mIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJchw7wxLNY3iMD0FH8E0cvyE9bfMB8GA1UdIwQY MBaAFIEbF+thY4kzIbR+Svf6VrAcXze1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1JzWDYyRmppVE1odEg1SzlfcFdzQnhmTjdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTFjNTctZjQwMC00NjEzLWFhNTkt ZDRhN2JhNjYwY2VlLzEvZ1JzWDYyRmppVE1odEg1SzlfcFdzQnhmTjdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My83ZTFjNTctZjQwMC00NjEzLWFhNTktZDRhN2JhNjYwY2Vl LzEvZ1JzWDYyRmppVE1odEg1SzlfcFdzQnhmTjdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQAeuhxH fYZL0/cUqgmiCbIAs66KJjgjt5qnO58KnC7QNwexiJEYkB9s3BYNQG9x5mVU8COu Td8KZA1cX6qOls8sTyoGTbvw+edyPXPLKV2bktDH/qJyoMbTVPaHZm2Zi5L1/aTL DuXFCheWwAxIZ7H/zEuVFFH6ADfs8Rt965uUzf2DUImklVJStTC3O4MjHG0iBR6e 6kste+GD1BXx6PDb2M4Uo2V8m98xlWPQErGIBJ4ogzQDPtaXxoJ+bU3dvUB5Yp30 /tTMA8GNp4Yw89me8R3y9GJbf4REO+2HV4ADGBLZ8WpuZw2AnE95Bqe5u+quNYNR QiNuMUq6OvABMQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:54:31 2025 by rpki-client