This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft File: gRsX62FjiTMhtH5K9_pWsBxfN7U.mft (raw, json) Hash identifier: DguFG2Ek2cnUsDMZtzNCeFAaYi+gQXPBUR+kM6OY5A0= Subject key identifier: 1A:24:A9:48:2D:E2:60:C5:7B:A3:72:50:E8:52:E8:C0:56:A5:D3:0B Authority key identifier: 81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5 Certificate issuer: /CN=811b17eb6163893321b47e4af7fa56b01c5f37b5 Certificate serial: 019AF20973092715890B3AFCD923CB6C1D96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 05:01:36 +0000 Manifest this update: Sat 06 Dec 2025 05:01:36 +0000 Manifest next update: Sun 07 Dec 2025 05:01:36 +0000 Files and hashes: 1: gRsX62FjiTMhtH5K9_pWsBxfN7U.crl (hash: qDVUod+WpWip51KA4w/tyyf/CI/Cg25M+duhkQrpwjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:73:09:27:15:89:0b:3a:fc:d9:23:cb:6c:1d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=811b17eb6163893321b47e4af7fa56b01c5f37b5 Validity Not Before: Dec 6 05:01:36 2025 GMT Not After : Dec 7 05:01:36 2025 GMT Subject: CN=1a24a9482de260c57ba37250e852e8c056a5d30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a8:e1:4e:1a:53:90:72:19:ae:87:50:96:b5: b5:13:df:07:b8:b5:11:3e:e6:63:94:9c:75:09:4a: fc:dd:99:b8:a4:ac:a4:2e:99:17:19:a0:ad:80:59: bd:e2:0b:4b:b4:83:9b:84:85:04:44:d9:de:b8:b9: ce:b0:a7:30:d1:18:fe:b0:8e:50:cc:1a:91:98:88: 04:c1:68:50:68:45:83:2d:78:73:0b:04:33:57:86: af:86:99:6b:01:92:6f:15:c3:49:b2:a7:fe:83:f2: 48:7b:b7:a9:e7:06:be:d5:32:64:14:07:6e:62:f0: f1:bd:94:c3:ff:32:ab:f4:c4:0c:d6:03:6c:75:1b: 69:48:dc:3a:c7:28:51:d3:db:3d:73:c4:5e:ce:7d: 4d:f4:15:82:9b:58:58:2d:95:5b:00:53:74:f8:9b: 55:e5:a3:3e:e4:ac:42:4c:62:0c:1a:e4:3e:03:7b: 06:de:96:07:f2:8d:4b:ad:0f:b4:36:ab:b0:e8:94: c7:28:1d:dc:90:05:f2:63:fd:47:2e:dd:03:04:45: 85:37:2e:81:80:ac:1d:1e:53:8b:4b:aa:3b:9b:f7: f5:2b:16:2b:e3:ce:15:66:53:7a:43:a1:d2:9e:fb: 14:e9:ed:b5:f0:14:27:92:5e:55:bf:69:2e:dc:59: ca:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:24:A9:48:2D:E2:60:C5:7B:A3:72:50:E8:52:E8:C0:56:A5:D3:0B X509v3 Authority Key Identifier: keyid:81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:4f:45:70:a6:40:ef:29:5d:8b:b1:fb:86:e3:95:87:09:10: 6b:4b:f9:a8:a1:f1:03:77:21:96:dc:f6:fa:b9:42:e9:7e:ab: df:19:a2:0d:b4:64:fb:0d:3c:0b:bb:54:13:fa:8f:db:b8:de: 97:da:b1:43:c7:81:05:aa:6f:b3:11:6d:c3:0b:85:10:ed:be: 49:c6:6e:9d:55:fc:71:bd:53:da:5b:90:7d:b4:78:2f:ad:13: 75:38:ff:66:60:42:54:6c:bf:e1:ab:54:07:31:6f:e6:d0:77: 78:a9:58:24:9f:d3:38:9b:fb:3d:10:f9:70:6e:d2:04:a8:af: 98:41:7f:1e:10:54:ea:ef:e5:ee:d5:2d:e0:6d:a4:8a:8e:18: 9c:0e:e9:bb:b9:54:15:7e:0c:7b:9b:3b:19:48:fb:c7:dc:5e: b5:ad:ba:dd:8d:3a:94:ab:a7:6b:8a:10:a2:4f:cb:e6:6c:91: 74:99:b2:c3:8c:b7:9a:c8:7f:dc:15:c2:a1:09:fd:95:ee:b7: 0e:74:6c:98:77:9e:a2:ae:53:0d:f6:54:c5:51:33:85:23:27: a2:4a:46:61:5c:b4:28:4e:ab:2f:d9:e8:b6:04:18:bc:30:ba: b6:66:a0:40:a3:95:75:e1:4d:bd:59:7d:06:2a:14:9b:19:2c: 64:31:81:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXMJJxWJCzr82SPLbB2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMWIxN2ViNjE2Mzg5MzMyMWI0N2U0YWY3ZmE1NmIwMWM1 ZjM3YjUwHhcNMjUxMjA2MDUwMTM2WhcNMjUxMjA3MDUwMTM2WjAzMTEwLwYDVQQD EygxYTI0YTk0ODJkZTI2MGM1N2JhMzcyNTBlODUyZThjMDU2YTVkMzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6jhThpTkHIZrodQlrW1E98HuLUR PuZjlJx1CUr83Zm4pKykLpkXGaCtgFm94gtLtIObhIUERNneuLnOsKcw0Rj+sI5Q zBqRmIgEwWhQaEWDLXhzCwQzV4avhplrAZJvFcNJsqf+g/JIe7ep5wa+1TJkFAdu YvDxvZTD/zKr9MQM1gNsdRtpSNw6xyhR09s9c8Rezn1N9BWCm1hYLZVbAFN0+JtV 5aM+5KxCTGIMGuQ+A3sG3pYH8o1LrQ+0Nquw6JTHKB3ckAXyY/1HLt0DBEWFNy6B gKwdHlOLS6o7m/f1KxYr484VZlN6Q6HSnvsU6e218BQnkl5Vv2ku3FnKKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBokqUgt4mDFe6NyUOhS6MBWpdMLMB8GA1UdIwQY MBaAFIEbF+thY4kzIbR+Svf6VrAcXze1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1JzWDYyRmppVE1odEg1SzlfcFdzQnhmTjdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTFjNTctZjQwMC00NjEzLWFhNTkt ZDRhN2JhNjYwY2VlLzEvZ1JzWDYyRmppVE1odEg1SzlfcFdzQnhmTjdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My83ZTFjNTctZjQwMC00NjEzLWFhNTktZDRhN2JhNjYwY2Vl LzEvZ1JzWDYyRmppVE1odEg1SzlfcFdzQnhmTjdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl09FcKZA 7yldi7H7huOVhwkQa0v5qKHxA3chltz2+rlC6X6r3xmiDbRk+w08C7tUE/qP27je l9qxQ8eBBapvsxFtwwuFEO2+ScZunVX8cb1T2luQfbR4L60TdTj/ZmBCVGy/4atU BzFv5tB3eKlYJJ/TOJv7PRD5cG7SBKivmEF/HhBU6u/l7tUt4G2kio4YnA7pu7lU FX4Me5s7GUj7x9xeta263Y06lKuna4oQok/L5myRdJmyw4y3msh/3BXCoQn9le63 DnRsmHeeoq5TDfZUxVEzhSMnokpGYVy0KE6rL9notgQYvDC6tmagQKOVdeFNvVl9 BioUmxksZDGBSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:16 2025 by rpki-client