This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft File: GjrGrWXloJkgm4i4ec9KCK8IaN4.mft (raw, json) Hash identifier: zrrfwEbmFBjJo7B0+ys/Ml7BcycmJxA0MTYDSRX4PPw= Subject key identifier: A6:58:14:04:06:9B:FC:F2:AA:8E:A4:91:D7:D9:29:E9:0F:78:4D:B6 Authority key identifier: 1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE Certificate issuer: /CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de Certificate serial: 019AF389EF1DC38B5F89A225464E946637EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft Manifest number: 1651 Signing time: Sat 06 Dec 2025 12:01:34 +0000 Manifest this update: Sat 06 Dec 2025 12:01:34 +0000 Manifest next update: Sun 07 Dec 2025 12:01:34 +0000 Files and hashes: 1: GjrGrWXloJkgm4i4ec9KCK8IaN4.crl (hash: YErOTmuT5BHd3PJzEoacPaerOPhfIwLdiOqY34ZWng8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:ef:1d:c3:8b:5f:89:a2:25:46:4e:94:66:37:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de Validity Not Before: Dec 6 12:01:34 2025 GMT Not After : Dec 7 12:01:34 2025 GMT Subject: CN=a6581404069bfcf2aa8ea491d7d929e90f784db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:11:78:84:66:c7:44:dd:bc:a8:70:3e:74:3f: 94:5d:b1:31:b7:e6:b9:4c:2a:fe:31:09:56:05:ad: 66:c5:ad:20:9e:46:43:d4:f2:96:6a:e3:dc:63:b8: 89:dc:90:80:35:fd:da:d9:f1:c9:74:ef:1d:e5:fb: f5:ea:58:f8:3e:e9:7f:55:d5:f7:9d:a7:c0:e9:16: 0e:32:cc:49:c4:08:24:1a:d6:b1:b8:5b:46:33:a9: 4c:20:8f:48:95:53:a4:03:51:2e:5f:ac:f8:81:a8: af:b0:6a:80:b6:38:4b:fd:94:0a:7a:c9:69:4b:9d: cf:f4:e9:df:4b:ec:ef:48:fe:2b:64:53:ee:80:a5: 7e:14:77:38:c2:dc:b3:b5:ab:7b:c8:81:a3:77:b9: c8:07:a3:02:49:56:f1:ba:50:71:29:ee:38:4e:b8: 44:3b:f7:9a:28:48:07:c3:57:d6:10:89:b5:16:eb: 18:d9:83:b2:c0:34:44:ef:f0:a0:96:cf:0c:dc:69: be:22:10:ee:b9:0b:92:b8:49:53:6a:a8:a5:4e:54: a7:57:50:b0:c4:22:55:c6:2e:dc:da:31:64:88:15: e7:04:9b:df:f7:1a:d9:1c:da:69:95:25:e5:14:a3: b5:0e:50:f0:16:09:ed:b1:34:e6:ca:3b:83:d5:96: 12:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:58:14:04:06:9B:FC:F2:AA:8E:A4:91:D7:D9:29:E9:0F:78:4D:B6 X509v3 Authority Key Identifier: keyid:1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a1:d7:b7:22:3e:c3:e1:10:67:24:dd:11:b4:c7:74:fc:37: fa:ba:b0:6a:d2:f0:b5:a2:a1:9a:54:91:0b:38:b3:b6:10:f7: 57:7d:ec:3f:b3:e9:10:75:aa:5c:61:16:22:20:75:ce:6b:8e: c4:39:ac:dd:4d:65:86:c0:ac:73:f5:49:b9:17:06:e9:6a:40: 60:fe:a6:f5:08:4f:06:ab:9f:a9:fc:0a:9e:2d:9d:ab:0c:dd: 3e:36:90:04:66:8b:de:dc:c6:54:d5:d0:0a:70:29:ab:cf:55: 21:ad:ff:6e:ca:96:11:18:ec:6d:cc:46:b1:2e:86:eb:c0:e5: 3f:1d:a8:4e:2d:fd:57:20:db:68:01:b6:5b:0b:1d:86:57:5d: 25:e0:0d:12:a9:e7:c1:2b:7f:47:cb:5b:de:19:b3:37:b4:cc: ca:26:ee:bb:c5:e3:cf:17:5f:99:8d:fa:d6:d7:4b:4a:7f:50: ba:15:3d:62:b7:04:c5:48:3d:06:04:aa:56:f2:dd:84:40:bb: 61:4e:b1:e1:0f:d2:19:8e:87:72:d1:eb:a7:f8:ee:0d:dd:8f: 8e:8b:70:0d:a6:f1:43:8a:b5:c7:9a:a4:59:8b:6e:db:66:a0: 4c:ba:10:f6:88:01:85:a2:15:b2:24:90:13:b9:5e:db:4d:d7: 15:bc:f3:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzie8dw4tfiaIlRk6UZjfuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhM2FjNmFkNjVlNWEwOTkyMDliODhiODc5Y2Y0YTA4YWYw ODY4ZGUwHhcNMjUxMjA2MTIwMTM0WhcNMjUxMjA3MTIwMTM0WjAzMTEwLwYDVQQD EyhhNjU4MTQwNDA2OWJmY2YyYWE4ZWE0OTFkN2Q5MjllOTBmNzg0ZGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRF4hGbHRN28qHA+dD+UXbExt+a5 TCr+MQlWBa1mxa0gnkZD1PKWauPcY7iJ3JCANf3a2fHJdO8d5fv16lj4Pul/VdX3 nafA6RYOMsxJxAgkGtaxuFtGM6lMII9IlVOkA1EuX6z4gaivsGqAtjhL/ZQKeslp S53P9OnfS+zvSP4rZFPugKV+FHc4wtyztat7yIGjd7nIB6MCSVbxulBxKe44TrhE O/eaKEgHw1fWEIm1FusY2YOywDRE7/Cgls8M3Gm+IhDuuQuSuElTaqilTlSnV1Cw xCJVxi7c2jFkiBXnBJvf9xrZHNpplSXlFKO1DlDwFgntsTTmyjuD1ZYSTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZYFAQGm/zyqo6kkdfZKekPeE22MB8GA1UdIwQY MBaAFBo6xq1l5aCZIJuIuHnPSgivCGjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2pyR3JXWGxvSmtnbTRpNGVjOUtDSzhJYU40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8yZWIyNzYtMmM3Mi00NWE5LWI5ZGUt NzBjYmU5NjI0MWY1LzEvR2pyR3JXWGxvSmtnbTRpNGVjOUtDSzhJYU40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8yZWIyNzYtMmM3Mi00NWE5LWI5ZGUtNzBjYmU5NjI0MWY1 LzEvR2pyR3JXWGxvSmtnbTRpNGVjOUtDSzhJYU40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqHXtyI+ w+EQZyTdEbTHdPw3+rqwatLwtaKhmlSRCzizthD3V33sP7PpEHWqXGEWIiB1zmuO xDms3U1lhsCsc/VJuRcG6WpAYP6m9QhPBqufqfwKni2dqwzdPjaQBGaL3tzGVNXQ CnApq89VIa3/bsqWERjsbcxGsS6G68DlPx2oTi39VyDbaAG2WwsdhlddJeANEqnn wSt/R8tb3hmzN7TMyibuu8XjzxdfmY361tdLSn9QuhU9YrcExUg9BgSqVvLdhEC7 YU6x4Q/SGY6HctHrp/juDd2PjotwDabxQ4q1x5qkWYtu22agTLoQ9ogBhaIVsiSQ E7le203XFbzzFA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:05 2025 by rpki-client