This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft File: GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft (raw, json) Hash identifier: OKuXcqEP7bga0P5nGm2dzTsj5rAMCc3rBn0zeaCVOWY= Subject key identifier: 85:56:06:CB:A9:81:8D:37:9E:F8:57:36:5F:E5:24:53:2B:BE:0F:ED Authority key identifier: 19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A Certificate issuer: /CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a Certificate serial: 019AF23FB771734D73BB6CEF9CF1E87FC4CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft Manifest number: 057E Signing time: Sat 06 Dec 2025 06:00:53 +0000 Manifest this update: Sat 06 Dec 2025 06:00:53 +0000 Manifest next update: Sun 07 Dec 2025 06:00:53 +0000 Files and hashes: 1: GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl (hash: AKjhbBBg2Pl/cbnK30B5arAmtDyWrOBCAA6PNdTKeCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b7:71:73:4d:73:bb:6c:ef:9c:f1:e8:7f:c4:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a Validity Not Before: Dec 6 06:00:53 2025 GMT Not After : Dec 7 06:00:53 2025 GMT Subject: CN=855606cba9818d379ef857365fe524532bbe0fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e0:bf:92:49:29:bb:6e:61:38:70:56:c7:0b: 56:8d:ec:77:d2:10:93:a4:a2:a4:be:40:3d:6c:c8: 25:6b:82:80:66:31:40:76:e3:f6:21:66:dc:b2:9f: 5b:61:0d:b2:03:32:05:a0:52:bb:74:a6:1c:29:72: 4b:ee:37:d8:79:d7:6a:eb:24:bd:70:02:e9:4f:a7: a7:7e:9f:49:33:83:f4:e1:77:ca:36:1f:00:5c:37: 59:71:68:0b:52:1a:b2:28:bb:85:ca:5f:81:15:57: ab:7d:19:72:89:e7:41:4e:8e:85:50:6a:63:b4:0a: 36:a2:65:2d:42:c9:d5:ff:43:a4:ea:a1:68:b9:b1: 3e:ac:ab:99:a3:3b:b0:00:e6:b4:88:99:81:f9:46: e9:55:89:2f:79:d2:da:ee:61:67:b4:f7:2c:d1:d6: db:b8:7f:20:28:40:4f:70:e5:66:e3:ca:ac:88:b6: fa:54:f0:54:23:6a:e0:57:b9:f9:0a:7c:4a:43:0c: 44:d1:55:24:c3:fb:3c:55:e0:89:d4:d7:62:cc:00: e9:04:b0:f4:eb:d0:f5:1b:12:84:bf:bf:44:c2:91: 8a:b0:e4:c0:8d:a7:c7:b3:63:9a:51:c3:fe:c1:d8: a1:f9:d2:92:17:22:56:f9:10:aa:21:8b:73:03:a2: 55:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:56:06:CB:A9:81:8D:37:9E:F8:57:36:5F:E5:24:53:2B:BE:0F:ED X509v3 Authority Key Identifier: keyid:19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a3:4a:7c:0c:0d:c2:fb:fd:e2:7a:62:0c:8d:8d:a5:ea:4b: 15:41:c5:ed:61:70:38:61:ee:71:4d:f3:9c:4a:d4:50:c5:e9: d3:d6:c4:4b:c7:27:9a:f0:00:8a:0f:8d:de:97:55:c3:60:79: 70:39:65:14:7d:f1:ed:d2:dd:dc:d9:b1:66:cc:e7:57:3f:f3: cc:46:04:83:04:59:1f:d0:9c:34:ed:5f:b4:b1:fb:d8:32:a5: eb:dc:ef:4c:fd:d2:25:51:02:39:0a:18:27:1c:27:c7:65:12: 38:54:21:6b:6d:fa:5f:d2:0e:e6:93:3e:66:86:14:d2:ae:3f: 82:5e:4c:4c:62:3c:4e:8a:ec:af:ab:28:7b:8a:05:4e:2d:1c: e7:9d:e0:db:fc:5b:7f:60:38:b2:cf:87:06:03:91:05:21:64: bb:8d:c5:53:6b:07:77:67:43:f5:ce:54:bf:99:17:42:19:fc: d4:be:52:c9:a6:0d:90:25:d5:a3:aa:a0:e8:75:46:9f:8d:a0: 98:34:d0:d4:fa:bc:9e:61:d8:ec:34:ea:83:ed:1b:49:cd:97: 2d:41:3f:d7:bc:66:9d:38:25:d8:4e:9a:0b:bf:7f:3e:78:00: 27:ea:34:5a:f5:03:1e:6b:12:77:6a:46:1e:06:5a:4f:ed:d4: 30:6b:43:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7dxc01zu2zvnPHof8TKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NWZhODMzMDI1MmEwN2YyNTBlNTFkOGU0NzRiYjM4ZDdk YzNiOWEwHhcNMjUxMjA2MDYwMDUzWhcNMjUxMjA3MDYwMDUzWjAzMTEwLwYDVQQD Eyg4NTU2MDZjYmE5ODE4ZDM3OWVmODU3MzY1ZmU1MjQ1MzJiYmUwZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOC/kkkpu25hOHBWxwtWjex30hCT pKKkvkA9bMgla4KAZjFAduP2IWbcsp9bYQ2yAzIFoFK7dKYcKXJL7jfYeddq6yS9 cALpT6enfp9JM4P04XfKNh8AXDdZcWgLUhqyKLuFyl+BFVerfRlyiedBTo6FUGpj tAo2omUtQsnV/0Ok6qFoubE+rKuZozuwAOa0iJmB+UbpVYkvedLa7mFntPcs0dbb uH8gKEBPcOVm48qsiLb6VPBUI2rgV7n5CnxKQwxE0VUkw/s8VeCJ1NdizADpBLD0 69D1GxKEv79EwpGKsOTAjafHs2OaUcP+wdih+dKSFyJW+RCqIYtzA6JVMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVWBsupgY03nvhXNl/lJFMrvg/tMB8GA1UdIwQY MBaAFBlfqDMCUqB/JQ5R2OR0uzjX3DuaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1Ytb013SlNvSDhsRGxIWTVIUzdPTmZjTzVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9lOWIwZTAtZjRiNi00NmRhLWFmZjgt YmU3MDg3ZGJmNTM2LzEvR1Ytb013SlNvSDhsRGxIWTVIUzdPTmZjTzVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9lOWIwZTAtZjRiNi00NmRhLWFmZjgtYmU3MDg3ZGJmNTM2 LzEvR1Ytb013SlNvSDhsRGxIWTVIUzdPTmZjTzVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKNKfAwN wvv94npiDI2NpepLFUHF7WFwOGHucU3znErUUMXp09bES8cnmvAAig+N3pdVw2B5 cDllFH3x7dLd3NmxZsznVz/zzEYEgwRZH9CcNO1ftLH72DKl69zvTP3SJVECOQoY Jxwnx2USOFQha236X9IO5pM+ZoYU0q4/gl5MTGI8Torsr6soe4oFTi0c553g2/xb f2A4ss+HBgORBSFku43FU2sHd2dD9c5Uv5kXQhn81L5SyaYNkCXVo6qg6HVGn42g mDTQ1Pq8nmHY7DTqg+0bSc2XLUE/17xmnTgl2E6aC79/PngAJ+o0WvUDHmsSd2pG HgZaT+3UMGtDBw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:29:43 2025 by rpki-client