This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft File: ggA1PrKBit3XElx4FCFDMUneb2I.mft (raw, json) Hash identifier: 6rPYzUVStJTgacPtGxQhzJpefZtudmGkbRGS15oaGHI= Subject key identifier: 4F:AD:85:79:33:B5:46:F5:16:06:8A:27:C0:13:0D:36:C1:93:D7:A2 Authority key identifier: 82:00:35:3E:B2:81:8A:DD:D7:12:5C:78:14:21:43:31:49:DE:6F:62 Certificate issuer: /CN=8200353eb2818addd7125c781421433149de6f62 Certificate serial: 019AF31C3776CE81ADCF9D73361E5B126BBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ggA1PrKBit3XElx4FCFDMUneb2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft Manifest number: 06D8 Signing time: Sat 06 Dec 2025 10:01:43 +0000 Manifest this update: Sat 06 Dec 2025 10:01:43 +0000 Manifest next update: Sun 07 Dec 2025 10:01:43 +0000 Files and hashes: 1: ggA1PrKBit3XElx4FCFDMUneb2I.crl (hash: pM3r+bkOF+5Jp/OdFLa3egn0wl+T+6VWpLgMe07tkuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft rsync://rpki.ripe.net/repository/DEFAULT/ggA1PrKBit3XElx4FCFDMUneb2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:37:76:ce:81:ad:cf:9d:73:36:1e:5b:12:6b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8200353eb2818addd7125c781421433149de6f62 Validity Not Before: Dec 6 10:01:43 2025 GMT Not After : Dec 7 10:01:43 2025 GMT Subject: CN=4fad857933b546f516068a27c0130d36c193d7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:26:66:42:54:60:6e:16:c9:7a:72:a1:e9:58: e9:ce:42:54:28:c0:9c:40:0a:b5:4d:d8:be:5d:00: b4:1f:9b:a4:90:d2:d3:cf:d4:48:e8:23:51:b5:85: 5c:a4:86:49:76:6a:0c:e2:6e:85:73:62:2d:85:98: 76:df:5f:d7:63:e6:0e:05:40:f6:09:a5:7d:51:ed: 03:cc:f9:54:86:6d:ac:b3:0e:13:70:4e:09:e0:3f: 6e:71:20:ad:8e:22:f6:c0:03:cb:c8:fa:8e:2c:f9: 8a:d5:9c:41:2c:c7:fb:60:f0:4a:58:61:60:26:b8: 71:f9:59:79:16:c6:38:84:df:f5:b0:34:8c:09:a6: 40:d0:bb:28:28:6e:fc:ad:c3:7e:cd:2a:9f:82:aa: 9b:bd:8b:12:7f:86:28:48:01:ce:5e:94:43:00:84: e2:65:fb:94:18:a5:76:90:0f:c5:ba:5f:ce:7e:b2: 97:bd:9f:8d:6b:f3:22:40:a5:88:a4:00:3a:31:0c: cf:52:d2:2a:90:3e:42:cf:55:8d:a6:b2:0d:96:bc: c7:4e:41:e8:a5:05:c0:74:80:61:78:a4:c2:61:e5: bf:dd:e5:ee:84:1a:e2:6c:77:1a:57:61:96:4d:c2: 1c:c5:ae:94:a5:a8:69:ae:ca:9b:f0:02:88:4d:46: 92:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AD:85:79:33:B5:46:F5:16:06:8A:27:C0:13:0D:36:C1:93:D7:A2 X509v3 Authority Key Identifier: keyid:82:00:35:3E:B2:81:8A:DD:D7:12:5C:78:14:21:43:31:49:DE:6F:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggA1PrKBit3XElx4FCFDMUneb2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:68:59:cf:41:5f:e4:bf:fc:b5:9a:03:9e:04:30:9a:54:da: f2:f0:9d:ea:36:b8:13:52:43:a3:11:6e:60:2a:8c:b3:64:2a: d7:a3:ca:f4:bc:65:f9:24:c5:3e:ff:fe:6c:4d:95:4f:05:00: 9a:fc:92:f0:60:b8:32:32:64:15:21:66:32:6c:c4:3c:5a:8d: aa:7c:ca:f9:00:c8:39:1e:74:6d:d9:ea:e6:35:06:fa:a5:cb: 6b:72:dd:3a:39:2a:c0:55:1c:b3:c4:b7:74:30:ec:f3:d3:c5: db:91:5a:64:af:fc:b0:73:2d:29:93:fa:08:75:4e:b8:26:2f: b4:5f:cf:37:6b:d9:ae:ce:38:59:65:30:c2:d5:d1:16:54:b1: 97:73:51:19:9c:cc:f9:82:70:f4:af:54:49:86:2b:0f:1d:53: 86:18:22:68:a5:f5:2e:b8:3e:be:4c:11:7e:33:73:2d:d4:49: cc:dc:d5:0c:c3:ea:26:2c:3b:e2:a8:b5:41:37:f8:39:1c:da: 91:31:9e:4d:ef:6c:c5:c1:00:39:14:49:36:b1:33:86:9c:42: 60:9f:fa:75:d5:4e:66:29:1b:72:51:19:87:7d:b3:69:91:6b: b2:fd:ce:85:e1:f5:da:fd:1a:87:0f:6f:a3:e7:49:71:b4:ea: ae:d5:2f:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDd2zoGtz51zNh5bEmu+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMDAzNTNlYjI4MThhZGRkNzEyNWM3ODE0MjE0MzMxNDlk ZTZmNjIwHhcNMjUxMjA2MTAwMTQzWhcNMjUxMjA3MTAwMTQzWjAzMTEwLwYDVQQD Eyg0ZmFkODU3OTMzYjU0NmY1MTYwNjhhMjdjMDEzMGQzNmMxOTNkN2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliZmQlRgbhbJenKh6VjpzkJUKMCc QAq1Tdi+XQC0H5ukkNLTz9RI6CNRtYVcpIZJdmoM4m6Fc2IthZh231/XY+YOBUD2 CaV9Ue0DzPlUhm2ssw4TcE4J4D9ucSCtjiL2wAPLyPqOLPmK1ZxBLMf7YPBKWGFg Jrhx+Vl5FsY4hN/1sDSMCaZA0LsoKG78rcN+zSqfgqqbvYsSf4YoSAHOXpRDAITi ZfuUGKV2kA/Ful/OfrKXvZ+Na/MiQKWIpAA6MQzPUtIqkD5Cz1WNprINlrzHTkHo pQXAdIBheKTCYeW/3eXuhBribHcaV2GWTcIcxa6Upahprsqb8AKITUaS6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+thXkztUb1FgaKJ8ATDTbBk9eiMB8GA1UdIwQY MBaAFIIANT6ygYrd1xJceBQhQzFJ3m9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2dBMVByS0JpdDNYRWx4NEZDRkRNVW5lYjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9kMjMxMGYtMjQzOC00NzVhLWIzOTEt N2NkNjEzYTUyN2QxLzEvZ2dBMVByS0JpdDNYRWx4NEZDRkRNVW5lYjJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9kMjMxMGYtMjQzOC00NzVhLWIzOTEtN2NkNjEzYTUyN2Qx LzEvZ2dBMVByS0JpdDNYRWx4NEZDRkRNVW5lYjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomhZz0Ff 5L/8tZoDngQwmlTa8vCd6ja4E1JDoxFuYCqMs2Qq16PK9Lxl+STFPv/+bE2VTwUA mvyS8GC4MjJkFSFmMmzEPFqNqnzK+QDIOR50bdnq5jUG+qXLa3LdOjkqwFUcs8S3 dDDs89PF25FaZK/8sHMtKZP6CHVOuCYvtF/PN2vZrs44WWUwwtXRFlSxl3NRGZzM +YJw9K9USYYrDx1ThhgiaKX1Lrg+vkwRfjNzLdRJzNzVDMPqJiw74qi1QTf4ORza kTGeTe9sxcEAORRJNrEzhpxCYJ/6ddVOZikbclEZh32zaZFrsv3OheH12v0ahw9v o+dJcbTqrtUv8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:16 2025 by rpki-client