This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft File: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft (raw, json) Hash identifier: boPkZiXT2JbPjJCyb7DTZSF3tGiuhWt+Tz5sOyI+4dw= Subject key identifier: 04:1B:22:4A:78:01:62:F3:0F:6C:50:3B:08:1C:2E:59:B2:54:51:E4 Authority key identifier: 18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70 Certificate issuer: /CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70 Certificate serial: 019AF31CBFF1DDB9798E0F2439E1BC456A27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft Manifest number: 1432 Signing time: Sat 06 Dec 2025 10:02:18 +0000 Manifest this update: Sat 06 Dec 2025 10:02:18 +0000 Manifest next update: Sun 07 Dec 2025 10:02:18 +0000 Files and hashes: 1: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl (hash: 646CctDJkT3HjOgso2Z3UZwqp0ABekeg0MG1K9P1n08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:bf:f1:dd:b9:79:8e:0f:24:39:e1:bc:45:6a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70 Validity Not Before: Dec 6 10:02:18 2025 GMT Not After : Dec 7 10:02:18 2025 GMT Subject: CN=041b224a780162f30f6c503b081c2e59b25451e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:b4:52:9f:c9:45:00:94:2b:2a:51:56:78: c1:fc:af:b5:02:c4:a9:20:c6:4c:d0:89:1d:71:b5: 6c:43:b5:ef:d6:3d:b7:5d:c4:2c:05:be:55:00:52: 5e:fc:25:61:48:8f:4f:63:3f:96:21:42:e1:bc:e5: 0e:48:f1:7a:4f:63:e0:15:af:78:57:ef:96:3f:79: 1a:b7:48:ab:1f:3a:77:81:2d:e6:9e:23:e8:b5:11: af:4e:9e:14:d6:45:c1:66:9a:a5:d7:cf:ff:04:8b: a9:32:c8:fb:c2:b9:b3:b3:ce:02:06:42:d7:5d:8d: c8:15:de:fe:db:f1:1e:e1:41:90:70:6a:3f:d5:8c: 1a:5a:7a:4c:66:60:a5:a1:2e:15:e9:9b:94:2a:dd: 0a:db:96:3e:e7:79:9f:54:96:97:26:1e:df:8b:67: 5a:18:7e:0f:8a:4d:b9:dc:c2:1a:fe:0f:8d:d5:15: 6b:50:a0:9e:75:aa:6d:10:45:52:cd:bc:ec:a8:7e: da:d6:8c:26:a0:ef:3d:32:58:66:d2:27:76:bd:ae: de:78:04:5a:23:6e:96:03:14:86:8c:92:b6:37:14: e4:96:c6:bb:eb:16:34:b6:ba:37:49:89:ea:8b:03: 12:03:4d:e3:75:82:44:d1:21:13:89:fb:8b:78:55: 68:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1B:22:4A:78:01:62:F3:0F:6C:50:3B:08:1C:2E:59:B2:54:51:E4 X509v3 Authority Key Identifier: keyid:18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:48:f7:b6:a8:ed:8a:f9:f2:c6:bc:af:39:68:2d:70:ae:95: 24:e7:65:91:95:22:38:04:45:79:59:d6:82:7f:65:f0:1d:bb: 6e:0a:6f:f9:e7:19:39:6b:f6:40:1c:2f:69:60:c8:3c:50:b7: 6b:c0:22:24:67:98:6d:42:3f:c9:82:96:ae:ea:96:fd:03:1f: 09:b6:38:89:10:fb:4b:30:75:0b:46:ab:ba:59:a8:23:87:7c: ba:4f:81:02:85:de:37:c6:e8:35:69:49:eb:d5:06:b8:8c:ec: 57:0e:49:f8:83:d7:4e:6b:82:d8:02:d3:f3:c7:24:c2:7f:38: dc:6e:65:1e:a8:04:bc:b1:a1:f5:1c:9d:0b:0f:0c:05:44:0c: c0:db:ab:4d:da:1b:6e:ae:5b:4d:bd:ff:fd:3e:76:29:5c:81: 09:48:7e:79:0e:8e:cc:54:e0:0d:23:4d:a0:7b:07:ba:a3:a4: f7:aa:0f:56:ef:a2:00:b8:9a:68:96:6c:96:6b:7d:03:d2:34: 13:b9:51:85:e3:c9:c8:36:a7:b1:80:08:19:ec:1c:c6:be:f8: 24:fb:f1:00:11:06:c5:6c:38:12:13:05:00:4f:c2:bf:6b:62: a6:8c:56:16:ff:56:a2:a7:f0:dc:d3:bd:2a:9e:e6:dd:8d:7b: ce:88:0c:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHL/x3bl5jg8kOeG8RWonMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZDAwZjY1MmU1ZjZkYjM1NmNiOTNkMjQzYTZjN2FjNmI5 NDVjNzAwHhcNMjUxMjA2MTAwMjE4WhcNMjUxMjA3MTAwMjE4WjAzMTEwLwYDVQQD EygwNDFiMjI0YTc4MDE2MmYzMGY2YzUwM2IwODFjMmU1OWIyNTQ1MWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVi0Up/JRQCUKypRVnjB/K+1AsSp IMZM0IkdcbVsQ7Xv1j23XcQsBb5VAFJe/CVhSI9PYz+WIULhvOUOSPF6T2PgFa94 V++WP3kat0irHzp3gS3mniPotRGvTp4U1kXBZpql18//BIupMsj7wrmzs84CBkLX XY3IFd7+2/Ee4UGQcGo/1YwaWnpMZmCloS4V6ZuUKt0K25Y+53mfVJaXJh7fi2da GH4Pik253MIa/g+N1RVrUKCedaptEEVSzbzsqH7a1owmoO89Mlhm0id2va7eeARa I26WAxSGjJK2NxTklsa76xY0tro3SYnqiwMSA03jdYJE0SETifuLeFVoPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQbIkp4AWLzD2xQOwgcLlmyVFHkMB8GA1UdIwQY MBaAFBjQD2UuX22zVsuT0kOmx6xrlFxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR05BUFpTNWZiYk5XeTVQU1E2YkhyR3VVWEhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi81NmU2ZjAtZTM2Ni00NWNjLTliOGQt NDcxMTM3MmRiYTE2LzEvR05BUFpTNWZiYk5XeTVQU1E2YkhyR3VVWEhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi81NmU2ZjAtZTM2Ni00NWNjLTliOGQtNDcxMTM3MmRiYTE2 LzEvR05BUFpTNWZiYk5XeTVQU1E2YkhyR3VVWEhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUj3tqjt ivnyxryvOWgtcK6VJOdlkZUiOARFeVnWgn9l8B27bgpv+ecZOWv2QBwvaWDIPFC3 a8AiJGeYbUI/yYKWruqW/QMfCbY4iRD7SzB1C0arulmoI4d8uk+BAoXeN8boNWlJ 69UGuIzsVw5J+IPXTmuC2ALT88ckwn843G5lHqgEvLGh9RydCw8MBUQMwNurTdob bq5bTb3//T52KVyBCUh+eQ6OzFTgDSNNoHsHuqOk96oPVu+iALiaaJZslmt9A9I0 E7lRhePJyDansYAIGewcxr74JPvxABEGxWw4EhMFAE/Cv2tipoxWFv9Woqfw3NO9 Kp7m3Y17zogMQA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:36 2025 by rpki-client