This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft File: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft (raw, json) Hash identifier: a/FwAijdqVB3PV8XSy2PyVIUDBDWNABQygNA9F8IK30= Subject key identifier: D7:8A:AA:E9:63:12:92:1D:94:3D:43:E8:6F:F9:7B:74:34:26:AA:07 Authority key identifier: 18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70 Certificate issuer: /CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70 Certificate serial: 019B255247D6E710B6DF15A249D0DDE57E7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft Manifest number: 144C Signing time: Tue 16 Dec 2025 04:01:47 +0000 Manifest this update: Tue 16 Dec 2025 04:01:47 +0000 Manifest next update: Wed 17 Dec 2025 04:01:47 +0000 Files and hashes: 1: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl (hash: 6fxd2YpJfGbNbq9iA5g2w8YAJgFU33DIRtYYAzqdPeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:47:d6:e7:10:b6:df:15:a2:49:d0:dd:e5:7e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70 Validity Not Before: Dec 16 04:01:47 2025 GMT Not After : Dec 17 04:01:47 2025 GMT Subject: CN=d78aaae96312921d943d43e86ff97b743426aa07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fe:1b:c7:71:48:5a:e5:22:6c:89:5f:b5:a3: 1f:96:5d:0c:63:85:c5:5b:7a:2d:5e:39:8c:94:06: 70:de:79:26:5f:8e:3e:5b:b8:14:c3:fe:73:91:53: c1:e6:06:61:9f:d0:4a:a5:61:a9:a6:ed:ab:33:39: 08:2b:18:9d:7e:4a:75:62:8c:d6:24:b5:4f:f4:a8: ba:23:0d:7f:8b:ea:c0:c0:df:af:25:4f:2e:95:4c: f3:e7:a1:96:b5:4e:ec:47:76:19:e3:66:4f:4e:d8: ba:03:5e:32:f3:35:ee:c6:63:61:ef:26:cd:68:1f: 05:07:8d:3b:8f:26:40:ed:af:4c:01:c3:8a:f8:e8: c4:55:7a:d9:6c:45:fb:37:ce:df:fa:dd:a0:a4:91: 2a:1a:d0:08:f5:6b:c7:95:5e:82:4e:3f:a0:e0:cf: bb:15:1d:7d:4c:10:9f:45:fe:04:44:6f:37:69:35: cd:e9:24:50:40:f8:5a:6d:10:1c:85:1f:14:1b:6a: 0f:2b:46:70:3c:29:60:03:6a:cc:21:e5:c8:5b:8e: 3f:8f:20:5d:fb:80:8a:0b:c7:b2:c1:ae:98:95:d4: 41:0f:9d:d7:f2:99:d9:cc:de:5e:b4:eb:e6:fc:6e: 78:20:ec:45:18:4d:2f:e6:43:62:d7:b7:ff:4f:04: a1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8A:AA:E9:63:12:92:1D:94:3D:43:E8:6F:F9:7B:74:34:26:AA:07 X509v3 Authority Key Identifier: keyid:18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c3:56:94:6c:17:a2:3d:75:3c:7b:75:18:b5:83:37:24:d2: 59:02:99:fb:86:65:35:f8:0f:ee:84:19:2c:ab:d5:8e:c1:8f: 70:01:04:e6:b2:a7:d6:34:e2:56:75:8f:ba:80:05:43:6f:42: e3:9c:cd:a9:44:ea:a6:22:d0:0a:15:58:e6:ab:00:07:e4:99: 7b:ad:73:c3:b1:ba:f1:d4:82:6f:55:da:72:68:77:67:2b:bc: 1b:0d:c6:80:81:aa:4f:e4:e3:eb:e4:bf:b0:f8:99:ec:cb:0f: 8a:72:75:9a:8c:60:0b:17:70:b8:13:79:ec:24:51:63:11:b2: d8:88:e1:ee:88:8a:5b:3f:8a:98:f6:fb:c1:a2:31:ba:71:e4: 80:cf:cb:80:05:8b:c8:2c:5e:6a:f0:85:1d:db:0d:e5:2a:be: f8:2d:92:76:9e:9a:94:11:d3:f6:e6:63:99:c5:7a:ab:10:69: e7:1c:16:ef:68:d1:13:33:7e:aa:7a:e4:10:c3:23:bc:c1:82: 6e:63:76:c4:cd:a8:a0:e8:01:4d:6b:00:d9:97:59:5c:39:ca: 8c:77:39:1e:3f:f1:37:db:c2:62:0b:09:f4:02:53:28:e9:4f: 2e:3d:7a:f7:7d:2f:5f:46:59:27:b5:f1:09:c9:a5:c4:e6:ca: 4f:a5:37:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUkfW5xC23xWiSdDd5X57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZDAwZjY1MmU1ZjZkYjM1NmNiOTNkMjQzYTZjN2FjNmI5 NDVjNzAwHhcNMjUxMjE2MDQwMTQ3WhcNMjUxMjE3MDQwMTQ3WjAzMTEwLwYDVQQD EyhkNzhhYWFlOTYzMTI5MjFkOTQzZDQzZTg2ZmY5N2I3NDM0MjZhYTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/4bx3FIWuUibIlftaMfll0MY4XF W3otXjmMlAZw3nkmX44+W7gUw/5zkVPB5gZhn9BKpWGppu2rMzkIKxidfkp1YozW JLVP9Ki6Iw1/i+rAwN+vJU8ulUzz56GWtU7sR3YZ42ZPTti6A14y8zXuxmNh7ybN aB8FB407jyZA7a9MAcOK+OjEVXrZbEX7N87f+t2gpJEqGtAI9WvHlV6CTj+g4M+7 FR19TBCfRf4ERG83aTXN6SRQQPhabRAchR8UG2oPK0ZwPClgA2rMIeXIW44/jyBd +4CKC8eywa6YldRBD53X8pnZzN5etOvm/G54IOxFGE0v5kNi17f/TwShlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeKquljEpIdlD1D6G/5e3Q0JqoHMB8GA1UdIwQY MBaAFBjQD2UuX22zVsuT0kOmx6xrlFxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR05BUFpTNWZiYk5XeTVQU1E2YkhyR3VVWEhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi81NmU2ZjAtZTM2Ni00NWNjLTliOGQt NDcxMTM3MmRiYTE2LzEvR05BUFpTNWZiYk5XeTVQU1E2YkhyR3VVWEhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi81NmU2ZjAtZTM2Ni00NWNjLTliOGQtNDcxMTM3MmRiYTE2 LzEvR05BUFpTNWZiYk5XeTVQU1E2YkhyR3VVWEhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMNWlGwX oj11PHt1GLWDNyTSWQKZ+4ZlNfgP7oQZLKvVjsGPcAEE5rKn1jTiVnWPuoAFQ29C 45zNqUTqpiLQChVY5qsAB+SZe61zw7G68dSCb1Xacmh3Zyu8Gw3GgIGqT+Tj6+S/ sPiZ7MsPinJ1moxgCxdwuBN57CRRYxGy2Ijh7oiKWz+KmPb7waIxunHkgM/LgAWL yCxeavCFHdsN5Sq++C2Sdp6alBHT9uZjmcV6qxBp5xwW72jREzN+qnrkEMMjvMGC bmN2xM2ooOgBTWsA2ZdZXDnKjHc5Hj/xN9vCYgsJ9AJTKOlPLj16930vX0ZZJ7Xx CcmlxObKT6U3ng== -----END CERTIFICATE-----Generated at Tue Dec 16 07:08:26 2025 by rpki-client