This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json) Hash identifier: QPmX1C45R8GZy0KJNqiWmWC9rOYcudrzCH9lCjXS9nY= Subject key identifier: 25:47:C2:18:6C:AF:B2:ED:62:DB:8F:D7:86:86:72:77:A5:BF:54:07 Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b Certificate serial: 019AF12D1BCF966D9A6583E2F9F282D82577 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:00:56 +0000 Manifest this update: Sat 06 Dec 2025 01:00:56 +0000 Manifest next update: Sun 07 Dec 2025 01:00:56 +0000 Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: djRkpkXnRTnGPr4534hGA7rWHuaeD6tjRwW2uKXzuKs=) 2: bZLHtasaTPjY31e6RPfAq2RJKnA.roa (hash: ID+iO3817M9kW6iqLKBAKlaZVewlrBg5mSajuX6nX2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:1b:cf:96:6d:9a:65:83:e2:f9:f2:82:d8:25:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b Validity Not Before: Dec 6 01:00:56 2025 GMT Not After : Dec 7 01:00:56 2025 GMT Subject: CN=2547c2186cafb2ed62db8fd786867277a5bf5407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:91:d2:51:e2:e9:38:e9:22:95:ed:64:0b:93: e9:08:be:b3:55:57:9a:03:e2:97:87:99:e5:f3:80: b3:ec:30:04:e0:80:fd:75:10:f8:34:70:66:f5:10: b3:0a:05:44:c5:02:9f:ed:c8:9e:8a:c9:39:2d:92: 07:a4:9e:49:36:1d:d5:83:0a:89:8d:40:e7:3f:74: fa:82:ea:4e:2f:3c:ed:2d:55:80:77:8c:7a:cd:a5: 4f:42:47:55:7e:e4:94:a9:3a:b2:94:d8:90:44:f0: 58:c2:47:07:35:23:50:a1:49:0c:a3:bf:8c:da:69: cd:43:91:49:60:91:e5:cf:12:de:2a:4d:6a:fc:c2: 7a:6f:23:be:fa:cc:70:a6:b1:a4:3f:89:d9:33:be: d9:51:10:6d:69:88:c3:f2:50:e3:75:fe:d2:27:6b: 1c:70:24:30:8d:f9:e4:7c:e2:14:08:05:de:0f:73: 8e:a1:94:d3:2f:ce:b4:ae:89:cf:e8:ce:0f:6e:03: a7:84:97:9b:61:29:fd:44:c2:3c:d3:93:ca:03:21: 93:99:81:93:6d:72:33:42:4b:93:ab:b6:0a:0f:a1: a6:61:ae:21:5f:50:f8:6f:ac:02:75:c6:3b:21:4a: 87:5f:ca:73:83:8b:77:18:4a:a5:02:8d:3a:e6:bf: 41:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:47:C2:18:6C:AF:B2:ED:62:DB:8F:D7:86:86:72:77:A5:BF:54:07 X509v3 Authority Key Identifier: keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:36:1b:ee:15:a7:d4:3e:67:26:7d:76:b6:90:5b:e7:94:bd: 95:6d:62:c5:fc:88:0f:51:0b:dd:34:d1:6a:c5:e4:df:00:96: df:6e:02:6a:82:f5:90:1d:f9:23:bf:cc:e8:56:85:3c:06:2c: e3:3a:8a:23:da:bb:8b:4a:0e:f8:ab:b1:8c:9a:85:90:30:b2: 5c:08:47:80:b2:32:a6:a7:d5:21:58:6f:36:7f:d9:96:c2:e5: 06:05:85:eb:80:f4:4a:e5:25:c8:3e:d7:b6:ee:7e:78:2f:31: 12:ea:40:b5:89:a4:2e:bd:96:7a:ae:63:90:42:d2:ba:22:c8: 4a:1d:57:43:ef:73:26:83:65:a1:38:9f:bf:3a:9d:2d:49:77: f5:8f:63:b2:22:17:c8:cb:30:2f:9c:4c:80:2a:79:60:32:87: 5b:c5:e3:dd:d2:64:7a:09:47:62:21:3a:85:51:13:4a:5d:42: 23:d4:88:ab:ed:7f:00:22:27:49:6b:33:40:bf:ba:97:9d:f6: ab:97:6d:1e:eb:8a:1d:26:78:bd:ed:de:7e:1e:c4:3b:95:12: f4:95:12:00:c4:df:e7:7c:d9:8a:73:f6:ce:b7:63:22:dc:e9: 49:0d:b3:77:a2:8d:82:da:b1:b4:9e:3b:75:82:23:bf:22:c6: 60:36:50:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRvPlm2aZYPi+fKC2CV3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMjliMmE0NWRlMDEzNmZlYWJiZmFlNGJhYTcwMTcyYWE4 NjYxOWIwHhcNMjUxMjA2MDEwMDU2WhcNMjUxMjA3MDEwMDU2WjAzMTEwLwYDVQQD EygyNTQ3YzIxODZjYWZiMmVkNjJkYjhmZDc4Njg2NzI3N2E1YmY1NDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pHSUeLpOOkile1kC5PpCL6zVVea A+KXh5nl84Cz7DAE4ID9dRD4NHBm9RCzCgVExQKf7cieisk5LZIHpJ5JNh3VgwqJ jUDnP3T6gupOLzztLVWAd4x6zaVPQkdVfuSUqTqylNiQRPBYwkcHNSNQoUkMo7+M 2mnNQ5FJYJHlzxLeKk1q/MJ6byO++sxwprGkP4nZM77ZURBtaYjD8lDjdf7SJ2sc cCQwjfnkfOIUCAXeD3OOoZTTL860ronP6M4PbgOnhJebYSn9RMI805PKAyGTmYGT bXIzQkuTq7YKD6GmYa4hX1D4b6wCdcY7IUqHX8pzg4t3GEqlAo065r9BvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVHwhhsr7LtYtuP14aGcnelv1QHMB8GA1UdIwQY MBaAFBopsqRd4BNv6rv65LqnAXKqhmGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNmMxNWEtM2RmZi00NGQ3LWE1Mzgt YTk1MWYyMDBmNjUyLzEvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kNmMxNWEtM2RmZi00NGQ3LWE1MzgtYTk1MWYyMDBmNjUy LzEvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTYb7hWn 1D5nJn12tpBb55S9lW1ixfyID1EL3TTRasXk3wCW324CaoL1kB35I7/M6FaFPAYs 4zqKI9q7i0oO+KuxjJqFkDCyXAhHgLIypqfVIVhvNn/ZlsLlBgWF64D0SuUlyD7X tu5+eC8xEupAtYmkLr2Weq5jkELSuiLISh1XQ+9zJoNloTifvzqdLUl39Y9jsiIX yMswL5xMgCp5YDKHW8Xj3dJkeglHYiE6hVETSl1CI9SIq+1/ACInSWszQL+6l532 q5dtHuuKHSZ4ve3efh7EO5US9JUSAMTf53zZinP2zrdjItzpSQ2zd6KNgtqxtJ47 dYIjvyLGYDZQhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:16:37 2025 by rpki-client