This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft File: GR0Irp2FEZYMPHuEweKmZiHiReE.mft (raw, json) Hash identifier: acm64tCb7NktMPgj3DY4tJ0rZQWzZq7EBrkSr3rcYFs= Subject key identifier: CF:91:09:02:96:09:00:80:6B:8E:C3:CC:DF:AB:A3:F1:3D:E8:8E:E9 Authority key identifier: 19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1 Certificate issuer: /CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1 Certificate serial: 019AF208AC23666EE72434B2A9F318B780EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 05:00:45 +0000 Manifest this update: Sat 06 Dec 2025 05:00:45 +0000 Manifest next update: Sun 07 Dec 2025 05:00:45 +0000 Files and hashes: 1: GR0Irp2FEZYMPHuEweKmZiHiReE.crl (hash: 6z40myO1HpwWNHA8E5+hx8PGUkgIu28u0q+2RsFYQ1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ac:23:66:6e:e7:24:34:b2:a9:f3:18:b7:80:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1 Validity Not Before: Dec 6 05:00:45 2025 GMT Not After : Dec 7 05:00:45 2025 GMT Subject: CN=cf910902960900806b8ec3ccdfaba3f13de88ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:03:d0:e9:cc:9c:1d:18:71:97:4c:e0:c3:87: a0:b3:99:4b:ad:af:cc:a9:60:5c:65:76:18:cd:ee: e8:50:e2:ed:ab:98:17:54:83:3b:50:02:e2:1e:1a: b6:4e:eb:b0:d8:f1:c2:ca:54:8e:79:4d:19:39:ed: 0d:ae:71:34:cf:72:6c:e4:ca:8e:52:55:37:4d:8e: 75:ae:4a:f5:df:23:54:0c:8b:f9:3d:10:11:56:e3: d9:2d:5f:bf:67:9b:76:2c:0b:42:ed:fd:b4:93:a8: 2c:e0:dd:fc:12:fb:e4:0c:78:22:94:5e:e8:ea:c6: 0d:91:de:87:d0:cb:44:9d:7e:d3:3d:28:ff:3a:33: 35:82:fc:92:1f:8c:12:fc:f5:49:12:ec:7d:d2:e2: 42:a8:8b:be:0b:fc:45:41:7f:e9:b1:a6:e7:6b:11: 3c:64:46:56:66:1e:a2:e1:5d:c9:ee:22:8e:d6:e6: 3d:f1:e8:c8:69:f9:36:50:57:ff:11:48:e8:35:06: 04:18:38:0f:32:37:7f:7b:36:66:e0:86:f4:01:98: bf:1b:9e:c1:52:b4:48:55:81:fc:3e:2a:63:16:b4: 0d:8d:6f:c2:fa:b5:36:63:1c:10:fc:a8:2a:cb:9d: 13:59:81:19:8a:9c:00:cb:c8:d7:24:4b:ca:74:3a: a6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:91:09:02:96:09:00:80:6B:8E:C3:CC:DF:AB:A3:F1:3D:E8:8E:E9 X509v3 Authority Key Identifier: keyid:19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:79:81:e2:d5:0d:51:55:af:08:d2:aa:23:10:3c:ac:07:e6: bc:1c:21:42:d1:53:58:59:18:f0:87:e0:c4:b3:e1:1b:fd:58: 1e:f2:c8:09:45:b3:59:d9:05:0e:2a:9f:40:4a:39:9e:4a:35: 16:48:46:5c:32:e4:1d:ed:98:b8:b1:f6:31:14:01:66:16:ec: 17:bc:96:67:e0:10:a6:91:2d:d5:c2:e8:a6:a3:ab:52:03:8a: 1f:7a:e4:f2:f2:66:51:49:a8:c2:2e:74:b5:a3:84:d1:9e:40: bf:6f:58:69:d2:ef:fc:22:9e:af:64:c3:d1:08:a0:b1:6c:80: cb:10:9c:98:07:13:3a:8e:6d:9a:73:07:9f:8c:30:fe:e5:e4: 4f:08:a1:ab:36:48:7f:55:41:2b:ad:17:a2:ba:dd:44:0d:25: 28:39:89:bf:a5:ed:f8:b4:74:46:43:2d:05:68:57:50:e0:d6: c7:59:61:a8:15:97:5f:7c:09:42:5d:f6:91:15:42:a1:22:54: 74:90:9c:dc:fd:1c:57:95:5c:9f:1b:81:f7:ea:66:77:b7:12: d8:cb:0e:a6:06:21:b1:bf:26:f3:f0:d0:83:f3:6b:be:b3:cf: 90:ef:1b:1f:5a:43:9c:63:1e:e5:79:01:1d:50:c7:51:7b:42: 44:fb:c4:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKwjZm7nJDSyqfMYt4DsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MWQwOGFlOWQ4NTExOTYwYzNjN2I4NGMxZTJhNjY2MjFl MjQ1ZTEwHhcNMjUxMjA2MDUwMDQ1WhcNMjUxMjA3MDUwMDQ1WjAzMTEwLwYDVQQD EyhjZjkxMDkwMjk2MDkwMDgwNmI4ZWMzY2NkZmFiYTNmMTNkZTg4ZWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2APQ6cycHRhxl0zgw4egs5lLra/M qWBcZXYYze7oUOLtq5gXVIM7UALiHhq2Tuuw2PHCylSOeU0ZOe0NrnE0z3Js5MqO UlU3TY51rkr13yNUDIv5PRARVuPZLV+/Z5t2LAtC7f20k6gs4N38EvvkDHgilF7o 6sYNkd6H0MtEnX7TPSj/OjM1gvySH4wS/PVJEux90uJCqIu+C/xFQX/psabnaxE8 ZEZWZh6i4V3J7iKO1uY98ejIafk2UFf/EUjoNQYEGDgPMjd/ezZm4Ib0AZi/G57B UrRIVYH8PipjFrQNjW/C+rU2YxwQ/Kgqy50TWYEZipwAy8jXJEvKdDqmAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+RCQKWCQCAa47DzN+ro/E96I7pMB8GA1UdIwQY MBaAFBkdCK6dhRGWDDx7hMHipmYh4kXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1IwSXJwMkZFWllNUEh1RXdlS21aaUhpUmVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kZDM3NTUtNjQxMS00MDY0LWE0NmUt OWI1Njk1ZTNjOTAxLzEvR1IwSXJwMkZFWllNUEh1RXdlS21aaUhpUmVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9kZDM3NTUtNjQxMS00MDY0LWE0NmUtOWI1Njk1ZTNjOTAx LzEvR1IwSXJwMkZFWllNUEh1RXdlS21aaUhpUmVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3mB4tUN UVWvCNKqIxA8rAfmvBwhQtFTWFkY8IfgxLPhG/1YHvLICUWzWdkFDiqfQEo5nko1 FkhGXDLkHe2YuLH2MRQBZhbsF7yWZ+AQppEt1cLopqOrUgOKH3rk8vJmUUmowi50 taOE0Z5Av29YadLv/CKer2TD0QigsWyAyxCcmAcTOo5tmnMHn4ww/uXkTwihqzZI f1VBK60XorrdRA0lKDmJv6Xt+LR0RkMtBWhXUODWx1lhqBWXX3wJQl32kRVCoSJU dJCc3P0cV5VcnxuB9+pmd7cS2MsOpgYhsb8m8/DQg/NrvrPPkO8bH1pDnGMe5XkB HVDHUXtCRPvEFA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:56 2025 by rpki-client