This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft File: GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft (raw, json) Hash identifier: MZhdHZzrq9dqItfpD2+wNgOGqUh/Y3Qlu6eGxY+nB6Q= Subject key identifier: A4:C1:8A:72:6F:B3:D4:87:2D:59:77:89:2E:A7:66:22:65:17:C6:A9 Authority key identifier: 18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49 Certificate issuer: /CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49 Certificate serial: 019AF5AF3C1F18219A71CDD7A07CE1E68A10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 22:01:33 +0000 Manifest this update: Sat 06 Dec 2025 22:01:33 +0000 Manifest next update: Sun 07 Dec 2025 22:01:33 +0000 Files and hashes: 1: 2nLsQqPE5llC17hwQkkSOMH6bAs.roa (hash: bh0+wwwfSzTifnsB5Zplv4YF5NGG3Z0ysixgx0plOO8=) 2: GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl (hash: 95r4BgISO0OvsFBDP/YROA3oGkhcPgY3Hasw0a62Yqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:3c:1f:18:21:9a:71:cd:d7:a0:7c:e1:e6:8a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49 Validity Not Before: Dec 6 22:01:33 2025 GMT Not After : Dec 7 22:01:33 2025 GMT Subject: CN=a4c18a726fb3d4872d5977892ea766226517c6a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b9:69:61:d6:71:23:37:20:de:3a:de:9d:dd: 3a:80:b5:6c:a0:1c:40:4a:40:0c:c9:9d:99:4f:65: c3:1e:40:a9:35:53:0f:e9:85:e7:7c:8f:c5:ec:c3: 1e:43:3e:eb:21:bc:d7:06:ee:c7:5a:82:99:3d:9d: 82:ed:ac:f3:09:6f:65:75:7d:98:f9:6d:32:b2:e3: 11:9b:c8:13:9d:93:09:fa:68:56:ed:5e:1b:fd:a5: 8e:60:7c:8e:5d:34:99:ad:29:bc:f6:9a:d2:92:10: b5:1b:db:96:f5:c4:e1:19:44:70:ef:a4:2b:98:4d: c8:f6:a0:51:af:03:f0:53:e6:30:24:78:71:c7:f0: 79:4d:ed:00:7e:c0:4f:17:5d:66:41:3a:8e:55:39: 1a:49:ef:17:8d:09:61:9b:5f:aa:33:0d:fa:2e:24: 26:d3:85:98:83:c9:22:ef:d5:f2:91:55:88:06:26: 15:52:e0:59:a4:9f:ee:ce:c6:f5:a9:71:70:05:01: b5:af:44:ac:ec:d1:e0:b7:55:c5:51:98:98:4f:69: a8:b5:e6:95:1f:9d:a9:73:43:80:6f:4b:a8:d0:ab: e1:4a:ae:25:2b:9e:1e:ab:54:54:1e:fe:41:74:32: 41:10:6f:72:fd:ab:fc:22:9f:54:17:08:b3:12:01: bf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C1:8A:72:6F:B3:D4:87:2D:59:77:89:2E:A7:66:22:65:17:C6:A9 X509v3 Authority Key Identifier: keyid:18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:78:16:9b:a3:a4:4a:52:e2:0a:75:1f:b4:e2:ef:ba:57:49: f9:69:6e:a6:93:d6:0d:2a:74:bc:40:14:2d:62:71:32:33:7b: e1:04:ef:2c:2e:9a:cf:a2:c5:f5:e2:84:87:ee:61:44:7f:60: c9:fc:fa:af:5c:3d:c5:62:b7:2a:7d:43:b5:ed:25:40:e1:7f: 01:4a:fb:01:3c:10:32:9b:67:a2:59:ae:e9:d8:12:3a:bb:97: d2:71:2e:5c:12:0f:05:5b:f9:e9:a4:20:3a:13:5c:a7:bb:32: c8:86:d3:ce:bb:31:1e:52:a3:87:77:14:4f:79:d8:93:41:d4: eb:07:6b:26:cd:08:24:cc:39:6c:36:7e:44:1d:fc:87:39:b4: c7:37:0e:76:63:ac:22:b2:ae:2b:74:aa:ac:54:23:c0:a1:5f: b4:ab:10:5e:67:41:95:0c:b1:49:b8:b9:16:9c:db:be:34:7d: f9:50:89:e4:99:35:57:9a:f4:30:8b:35:1f:c0:04:f9:cd:00: 92:ec:7f:05:8a:61:2d:5b:3d:1d:17:ae:8f:5e:cb:d3:41:13: b0:01:e9:89:60:a2:99:50:7e:1e:a5:40:1b:c9:0e:a7:2a:08: ac:84:4b:65:88:3e:c4:b2:5c:4f:87:e2:81:40:f4:76:fd:0e: 66:52:c1:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rzwfGCGacc3XoHzh5ooQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4M2FlOGY4ODg3YTEzMDliYTU0YmM0ZDI3NjFiNGIzMGVh MjhlNDkwHhcNMjUxMjA2MjIwMTMzWhcNMjUxMjA3MjIwMTMzWjAzMTEwLwYDVQQD EyhhNGMxOGE3MjZmYjNkNDg3MmQ1OTc3ODkyZWE3NjYyMjY1MTdjNmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47lpYdZxIzcg3jrend06gLVsoBxA SkAMyZ2ZT2XDHkCpNVMP6YXnfI/F7MMeQz7rIbzXBu7HWoKZPZ2C7azzCW9ldX2Y +W0ysuMRm8gTnZMJ+mhW7V4b/aWOYHyOXTSZrSm89prSkhC1G9uW9cThGURw76Qr mE3I9qBRrwPwU+YwJHhxx/B5Te0AfsBPF11mQTqOVTkaSe8XjQlhm1+qMw36LiQm 04WYg8ki79XykVWIBiYVUuBZpJ/uzsb1qXFwBQG1r0Ss7NHgt1XFUZiYT2moteaV H52pc0OAb0uo0KvhSq4lK54eq1RUHv5BdDJBEG9y/av8Ip9UFwizEgG/NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTBinJvs9SHLVl3iS6nZiJlF8apMB8GA1UdIwQY MBaAFBg66PiIehMJulS8TSdhtLMOoo5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0Ryby1JaDZFd202Vkx4TkoyRzBzdzZpamtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lZGQ5ODQtOWIzZS00Nzg2LWIxY2Yt NjBmNmZhODgxODQ1LzEvR0Ryby1JaDZFd202Vkx4TkoyRzBzdzZpamtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9lZGQ5ODQtOWIzZS00Nzg2LWIxY2YtNjBmNmZhODgxODQ1 LzEvR0Ryby1JaDZFd202Vkx4TkoyRzBzdzZpamtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3gWm6Ok SlLiCnUftOLvuldJ+WluppPWDSp0vEAULWJxMjN74QTvLC6az6LF9eKEh+5hRH9g yfz6r1w9xWK3Kn1Dte0lQOF/AUr7ATwQMptnolmu6dgSOruX0nEuXBIPBVv56aQg OhNcp7syyIbTzrsxHlKjh3cUT3nYk0HU6wdrJs0IJMw5bDZ+RB38hzm0xzcOdmOs IrKuK3SqrFQjwKFftKsQXmdBlQyxSbi5FpzbvjR9+VCJ5Jk1V5r0MIs1H8AE+c0A kux/BYphLVs9HReuj17L00ETsAHpiWCimVB+HqVAG8kOpyoIrIRLZYg+xLJcT4fi gUD0dv0OZlLB0g== -----END CERTIFICATE-----Generated at Sun Dec 7 05:31:17 2025 by rpki-client