This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft File: GpLjfcjPRWNLLNvPPxAFShxhFpc.mft (raw, json) Hash identifier: CSC431yMOJBoBREpYFIx8hxoaw1eF2xKlgOCv29kiDo= Subject key identifier: 42:1A:6D:FF:74:5E:4A:F6:64:35:FD:89:51:A8:1D:B9:43:84:F3:1F Authority key identifier: 1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97 Certificate issuer: /CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697 Certificate serial: 019AF0BF966AA42AB82E5B105B5759991407 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 23:01:18 +0000 Manifest this update: Fri 05 Dec 2025 23:01:18 +0000 Manifest next update: Sat 06 Dec 2025 23:01:18 +0000 Files and hashes: 1: GpLjfcjPRWNLLNvPPxAFShxhFpc.crl (hash: rrnCE7KH4pNgpoVnHfBBghsJwhSB3QWmq+43WBtiUfg=) 2: PgHBT14XbyMI_bDsD-5F89TwxvI.roa (hash: yY+dt31JYDSsLmacNs98NxKQjn/3/Xoq5ab4x7nUyV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:96:6a:a4:2a:b8:2e:5b:10:5b:57:59:99:14:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697 Validity Not Before: Dec 5 23:01:18 2025 GMT Not After : Dec 6 23:01:18 2025 GMT Subject: CN=421a6dff745e4af66435fd8951a81db94384f31f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:62:c8:eb:dc:98:af:85:7a:6f:44:10:6b:36: 33:94:e5:2d:0f:ad:11:bb:59:f4:5f:45:e8:e0:b1: 07:0c:73:1d:16:ab:4a:89:db:3a:a1:a6:89:6f:d0: 52:e9:1b:4f:7f:c4:01:53:d3:3b:fa:27:21:6c:53: ef:f4:cc:b3:e1:c1:d3:f2:6c:59:74:6d:46:eb:ee: 9a:97:29:68:a1:87:4e:dd:c1:85:f1:4d:21:7e:97: 95:46:73:ea:7a:de:2b:c7:88:a9:39:dc:d7:35:3e: 42:a0:ae:f6:17:86:a1:0d:44:db:6c:9b:08:a8:1a: 40:84:7d:78:73:4e:a4:6b:9f:6b:a3:a8:ba:b6:7e: 30:34:75:f1:7f:c5:88:a9:96:57:da:ab:8f:7e:fd: f5:bc:fb:dd:68:bb:52:56:6f:d4:dd:4f:0b:1d:fd: a8:34:71:0d:4d:16:d9:42:98:6e:66:50:08:51:93: ed:3f:b4:e6:e1:d9:a6:86:c9:ff:b6:fe:a6:97:8b: 79:4d:20:34:a5:6d:b0:d0:25:72:ba:c9:c5:68:22: 4b:38:3c:a0:d3:7b:9b:62:2e:a0:b9:b2:48:ba:8b: 42:ed:c9:a3:ed:65:78:3b:0c:94:5f:63:c0:e9:41: bc:5b:11:e2:3d:64:74:28:e6:6f:9b:61:ea:9e:69: 50:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1A:6D:FF:74:5E:4A:F6:64:35:FD:89:51:A8:1D:B9:43:84:F3:1F X509v3 Authority Key Identifier: keyid:1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:66:06:b5:e0:c4:1d:43:27:73:17:68:26:08:22:f7:06:cf: cc:ad:4e:8b:8f:e3:3e:ef:0d:ac:fd:c5:c1:09:48:38:ec:98: ae:c3:b8:c7:02:48:d8:85:0d:54:b7:74:39:24:e1:64:6e:26: f1:eb:73:1a:85:68:6a:ec:f3:d9:49:2d:ae:fa:60:24:88:f4: 7f:df:82:a7:68:28:2a:33:54:d4:e0:a0:b8:05:8d:72:b9:2a: 1d:1b:6c:2b:b5:5c:0e:8d:a8:3b:29:da:5b:e7:7a:36:e1:c3: ab:fe:cc:a5:3c:80:6e:7e:9e:47:09:41:fb:d5:b5:1c:96:80: cf:68:51:d7:b1:d5:9e:6c:6c:66:2f:5d:11:55:56:22:bc:d1: 5c:31:7c:31:a2:37:1b:88:27:a9:86:0a:6c:17:4d:ce:b4:23: 6e:1d:15:b1:09:47:2d:0a:80:ec:b8:06:d8:3a:ae:02:62:d6: 81:82:ab:30:60:d4:22:cf:81:dc:bb:9d:fd:1a:d6:fe:f4:9b: b1:96:4a:cd:db:66:02:8a:93:5c:59:2a:15:5b:9e:fb:97:7e: 69:1a:9c:05:db:41:a5:15:4c:42:83:84:f3:38:1d:96:a2:a8: a3:d8:ae:f5:df:85:27:e4:05:61:d4:22:7d:e8:79:e3:6a:3c: cd:e5:71:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5ZqpCq4LlsQW1dZmRQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhOTJlMzdkYzhjZjQ1NjM0YjJjZGJjZjNmMTAwNTRhMWM2 MTE2OTcwHhcNMjUxMjA1MjMwMTE4WhcNMjUxMjA2MjMwMTE4WjAzMTEwLwYDVQQD Eyg0MjFhNmRmZjc0NWU0YWY2NjQzNWZkODk1MWE4MWRiOTQzODRmMzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGLI69yYr4V6b0QQazYzlOUtD60R u1n0X0Xo4LEHDHMdFqtKids6oaaJb9BS6RtPf8QBU9M7+ichbFPv9Myz4cHT8mxZ dG1G6+6alylooYdO3cGF8U0hfpeVRnPqet4rx4ipOdzXNT5CoK72F4ahDUTbbJsI qBpAhH14c06ka59ro6i6tn4wNHXxf8WIqZZX2quPfv31vPvdaLtSVm/U3U8LHf2o NHENTRbZQphuZlAIUZPtP7Tm4dmmhsn/tv6ml4t5TSA0pW2w0CVyusnFaCJLODyg 03ubYi6gubJIuotC7cmj7WV4OwyUX2PA6UG8WxHiPWR0KOZvm2HqnmlQ8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIabf90Xkr2ZDX9iVGoHblDhPMfMB8GA1UdIwQY MBaAFBqS433Iz0VjSyzbzz8QBUocYRaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3BMamZjalBSV05MTE52UFB4QUZTaHhoRnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kOGI2ZWEtNzMwYy00NjM5LTk0ZmEt NDU3MjcyODM3YWE2LzEvR3BMamZjalBSV05MTE52UFB4QUZTaHhoRnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9kOGI2ZWEtNzMwYy00NjM5LTk0ZmEtNDU3MjcyODM3YWE2 LzEvR3BMamZjalBSV05MTE52UFB4QUZTaHhoRnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2YGteDE HUMncxdoJggi9wbPzK1Oi4/jPu8NrP3FwQlIOOyYrsO4xwJI2IUNVLd0OSThZG4m 8etzGoVoauzz2UktrvpgJIj0f9+Cp2goKjNU1OCguAWNcrkqHRtsK7VcDo2oOyna W+d6NuHDq/7MpTyAbn6eRwlB+9W1HJaAz2hR17HVnmxsZi9dEVVWIrzRXDF8MaI3 G4gnqYYKbBdNzrQjbh0VsQlHLQqA7LgG2DquAmLWgYKrMGDUIs+B3Lud/RrW/vSb sZZKzdtmAoqTXFkqFVue+5d+aRqcBdtBpRVMQoOE8zgdlqKoo9iu9d+FJ+QFYdQi feh542o8zeVxPA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:24 2025 by rpki-client