This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft File: GROVdcQBKD__U2E3sOg-VBX-GNA.mft (raw, json) Hash identifier: RzakXZJJdt0BxJX8kJbfGUCute2qL2TPaRf20tQT4GY= Subject key identifier: C8:B6:70:C1:F2:C8:E3:E5:CA:20:9A:57:F1:C4:31:11:A1:8B:0D:14 Authority key identifier: 19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0 Certificate issuer: /CN=19139575c401283fff536137b0e83e5415fe18d0 Certificate serial: 019AF12EB4E1929A7055EFC999B87B6ECCD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft Manifest number: 0BD9 Signing time: Sat 06 Dec 2025 01:02:41 +0000 Manifest this update: Sat 06 Dec 2025 01:02:41 +0000 Manifest next update: Sun 07 Dec 2025 01:02:41 +0000 Files and hashes: 1: 8OOoLJDz_FI_NX92WvwejRS7DhA.roa (hash: +qvS9QKZwMOlAg8I6Vrzt2whC56wBRZ4LOEjIO7SoII=) 2: GROVdcQBKD__U2E3sOg-VBX-GNA.crl (hash: oeHYKNcIfhiBc49Z9RwUmcye3b09xWFz5tpgTLx/y1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b4:e1:92:9a:70:55:ef:c9:99:b8:7b:6e:cc:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19139575c401283fff536137b0e83e5415fe18d0 Validity Not Before: Dec 6 01:02:41 2025 GMT Not After : Dec 7 01:02:41 2025 GMT Subject: CN=c8b670c1f2c8e3e5ca209a57f1c43111a18b0d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:53:e1:59:78:3a:3e:2b:78:5d:c0:d5:68:df: de:4c:f2:84:75:f8:e2:e9:06:f3:6e:57:be:ed:c5: 01:c3:4c:75:d5:3e:a0:bf:47:3e:d8:ce:ec:f6:b8: dc:c1:64:ea:b8:0d:69:4c:80:2f:0c:9c:10:5a:dd: 55:07:d8:81:bc:44:8b:03:f3:b0:58:e8:7c:55:42: 30:11:77:ef:11:eb:97:79:2c:27:6f:fc:e2:26:de: 29:f7:34:bd:13:4f:eb:6b:ed:43:f1:dc:f1:d6:6c: e2:fd:5d:9e:cc:8d:f8:5e:96:e4:b1:7e:36:7f:b4: b5:6c:41:a2:84:fc:43:3d:73:05:24:7d:d6:1d:7d: 2a:15:70:9d:a4:a3:7e:3d:a4:3e:80:62:e4:12:70: b3:f4:20:77:91:d5:c5:87:98:e1:ba:94:d5:bb:33: 28:6c:ca:7d:d0:3c:ec:40:35:3f:7c:c2:cc:e6:28: 8b:fc:a6:33:0d:f7:e5:19:75:81:1f:75:e7:7b:be: 0f:89:09:51:c5:33:44:42:8a:78:a6:3b:f7:ab:14: fb:e0:53:f4:4c:1a:87:26:e0:ae:2e:8d:65:11:b6: 0f:7a:6b:25:84:4c:eb:88:51:d1:09:75:dd:d1:c3: 27:6c:a5:89:82:4f:32:4c:ee:69:6b:28:c6:c3:76: 54:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B6:70:C1:F2:C8:E3:E5:CA:20:9A:57:F1:C4:31:11:A1:8B:0D:14 X509v3 Authority Key Identifier: keyid:19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:aa:2c:6f:27:51:17:9e:1f:8a:a1:c9:15:76:da:2c:78:26: 9e:ee:f8:d7:0b:e1:b5:d2:e0:7b:ad:6a:a3:35:7b:d9:78:cf: f9:5d:c9:c6:b0:1e:a4:c0:a9:e9:6e:0c:33:cc:3a:56:a9:57: 18:46:09:80:e0:01:ff:60:2d:bb:50:72:60:09:35:13:d5:c4: 23:4b:08:d4:a7:11:6a:54:bc:fd:ae:13:d2:9b:0c:7d:15:9a: af:cc:a2:1f:67:79:09:0d:ae:ff:34:ba:a3:2e:8d:9d:07:66: ef:60:c0:df:44:23:5a:54:6c:ce:d5:02:cf:68:aa:bc:c3:87: fa:6f:f2:bd:6b:f9:ef:2c:a7:f1:b2:3b:02:3b:ab:75:01:77: 3c:05:6d:b4:bf:31:d1:a8:ac:8f:87:42:28:18:69:67:d1:66: a2:37:d6:35:81:0a:fe:fc:36:88:5d:06:88:15:35:6e:21:90: ec:d4:e5:b8:c8:b5:8c:11:af:22:f5:05:6f:65:99:72:b4:bb: e2:17:3d:ae:c7:47:5b:47:49:33:a3:bc:f4:02:76:33:e6:1e: 3c:14:c0:0f:8b:f0:8c:2c:5b:a2:3e:23:fc:f6:59:ae:8a:23: e9:7c:6b:40:05:a6:cc:cb:55:0f:a1:fd:f1:b4:e1:04:4e:2c: 18:f5:d4:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrThkppwVe/Jmbh7bszTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MTM5NTc1YzQwMTI4M2ZmZjUzNjEzN2IwZTgzZTU0MTVm ZTE4ZDAwHhcNMjUxMjA2MDEwMjQxWhcNMjUxMjA3MDEwMjQxWjAzMTEwLwYDVQQD EyhjOGI2NzBjMWYyYzhlM2U1Y2EyMDlhNTdmMWM0MzExMWExOGIwZDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FPhWXg6Pit4XcDVaN/eTPKEdfji 6Qbzble+7cUBw0x11T6gv0c+2M7s9rjcwWTquA1pTIAvDJwQWt1VB9iBvESLA/Ow WOh8VUIwEXfvEeuXeSwnb/ziJt4p9zS9E0/ra+1D8dzx1mzi/V2ezI34XpbksX42 f7S1bEGihPxDPXMFJH3WHX0qFXCdpKN+PaQ+gGLkEnCz9CB3kdXFh5jhupTVuzMo bMp90DzsQDU/fMLM5iiL/KYzDfflGXWBH3Xne74PiQlRxTNEQop4pjv3qxT74FP0 TBqHJuCuLo1lEbYPemslhEzriFHRCXXd0cMnbKWJgk8yTO5payjGw3ZU8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMi2cMHyyOPlyiCaV/HEMRGhiw0UMB8GA1UdIwQY MBaAFBkTlXXEASg//1NhN7DoPlQV/hjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1JPVmRjUUJLRF9fVTJFM3NPZy1WQlgtR05BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zYTA5NGMtZmY4ZS00YjQ0LTgxZjAt OTRjNzYwMWFlZmRhLzEvR1JPVmRjUUJLRF9fVTJFM3NPZy1WQlgtR05BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zYTA5NGMtZmY4ZS00YjQ0LTgxZjAtOTRjNzYwMWFlZmRh LzEvR1JPVmRjUUJLRF9fVTJFM3NPZy1WQlgtR05BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKosbydR F54fiqHJFXbaLHgmnu741wvhtdLge61qozV72XjP+V3JxrAepMCp6W4MM8w6VqlX GEYJgOAB/2Atu1ByYAk1E9XEI0sI1KcRalS8/a4T0psMfRWar8yiH2d5CQ2u/zS6 oy6NnQdm72DA30QjWlRsztUCz2iqvMOH+m/yvWv57yyn8bI7AjurdQF3PAVttL8x 0aisj4dCKBhpZ9FmojfWNYEK/vw2iF0GiBU1biGQ7NTluMi1jBGvIvUFb2WZcrS7 4hc9rsdHW0dJM6O89AJ2M+YePBTAD4vwjCxboj4j/PZZrooj6XxrQAWmzMtVD6H9 8bThBE4sGPXU7A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:31 2025 by rpki-client