This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft File: GipL_SwMaXZagpnvdJZfhipxSLc.mft (raw, json) Hash identifier: M6aKVaRjfhaQ74WplZFO6iLe+G9oZz7djVCBMpCJGpk= Subject key identifier: 99:C6:43:5B:44:0A:7D:95:48:77:FC:57:81:6F:40:4C:D0:4E:DD:5A Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7 Certificate issuer: /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7 Certificate serial: 019AF27746122EAA5DA00C888812F37FF7CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft Manifest number: 0BCF Signing time: Sat 06 Dec 2025 07:01:34 +0000 Manifest this update: Sat 06 Dec 2025 07:01:34 +0000 Manifest next update: Sun 07 Dec 2025 07:01:34 +0000 Files and hashes: 1: GipL_SwMaXZagpnvdJZfhipxSLc.crl (hash: 00OrqgFXv51UC8odD/js2dhvwGrXQEhpfUjXrfb8YHI=) 2: rullXasaggDRq85qkchvmXmvfZY.roa (hash: qK7vzmt1ZIQMh/v4JWoZrRMkgNEwMqtDeTGlVHvLyEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:46:12:2e:aa:5d:a0:0c:88:88:12:f3:7f:f7:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7 Validity Not Before: Dec 6 07:01:34 2025 GMT Not After : Dec 7 07:01:34 2025 GMT Subject: CN=99c6435b440a7d954877fc57816f404cd04edd5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:76:33:63:78:26:4b:07:0c:5f:9e:c5:e9:cc: b6:76:dc:f9:89:fe:d5:8b:59:f7:e8:85:3e:aa:4e: 44:03:45:d0:d3:f6:24:36:83:88:b5:39:62:49:47: 15:4f:99:b1:4c:27:a9:f6:c3:29:00:01:90:34:6b: 6e:d4:28:ce:c2:6f:0f:24:1e:4f:56:c9:52:a2:86: ce:eb:76:34:f7:98:b0:81:72:0b:4a:48:dd:1e:a4: b0:82:91:af:e2:b3:38:8b:77:e9:03:87:20:f0:6d: f1:21:bf:da:ce:66:af:cc:d4:7d:93:a1:1c:64:17: eb:99:6b:33:ca:c1:d5:16:b3:47:f0:b4:40:54:14: b2:86:a0:ad:71:22:f4:de:88:4d:09:43:f3:61:78: 80:a3:30:78:55:32:d4:29:75:b0:5c:df:0d:9d:d6: bc:f1:92:ed:b5:81:f0:df:4d:34:f9:69:be:c0:2b: d4:97:5b:d8:16:9d:f4:5a:05:86:2a:65:b2:b1:22: 76:be:6c:2a:85:fe:58:f4:81:a2:d8:97:b1:dc:bd: de:c8:8f:89:39:d9:a0:24:ad:59:8e:ba:7b:44:c2: 60:ab:a8:e6:72:5a:cd:81:ac:0c:fa:9e:27:31:30: f9:ee:65:58:10:b8:eb:aa:1c:db:8c:af:22:a6:a3: 91:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C6:43:5B:44:0A:7D:95:48:77:FC:57:81:6F:40:4C:D0:4E:DD:5A X509v3 Authority Key Identifier: keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:1e:1e:d0:0b:74:5b:ea:37:7c:18:4d:4d:2f:8d:ed:8d:90: 51:65:e1:e6:92:d1:fb:21:53:79:e5:0f:2f:1b:14:26:06:fd: ef:47:c6:cc:4d:db:08:e2:46:fe:1b:b9:15:33:dd:aa:05:bc: d1:94:b1:61:9a:07:7d:9a:72:4b:63:4e:2d:e4:b2:ee:a5:67: 2c:0e:0e:79:db:0e:63:03:41:52:bc:f3:a9:ee:7d:51:61:0c: 9b:24:62:0d:cf:ef:1a:ad:12:bd:8c:bf:04:46:4a:a3:ff:26: 9e:eb:2c:c1:97:68:9a:52:0f:08:80:6d:94:fc:77:6c:98:25: 22:fd:47:a1:cd:1c:25:29:ba:54:c7:fe:12:21:ec:21:0e:97: 82:8b:9c:21:06:81:75:c4:fa:8e:03:af:df:9b:9f:4e:c8:da: a3:87:d9:a9:6a:e3:7a:ed:12:bf:66:6f:6b:3f:00:27:49:fe: 3d:88:f4:1a:1a:77:0b:b4:16:be:a2:d2:d5:2b:64:28:10:29: ae:97:15:10:5b:82:35:a8:0a:17:13:23:97:51:b9:d1:47:0b: f9:85:e7:2d:6b:37:21:b1:69:12:1c:60:e5:2b:37:bd:f0:39: f2:ad:70:84:12:63:63:9b:ab:34:cd:03:0b:82:60:bf:39:53: f8:41:b7:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryd0YSLqpdoAyIiBLzf/fOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMmE0YmZkMmMwYzY5NzY1YTgyOTllZjc0OTY1Zjg2MmE3 MTQ4YjcwHhcNMjUxMjA2MDcwMTM0WhcNMjUxMjA3MDcwMTM0WjAzMTEwLwYDVQQD Eyg5OWM2NDM1YjQ0MGE3ZDk1NDg3N2ZjNTc4MTZmNDA0Y2QwNGVkZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXYzY3gmSwcMX57F6cy2dtz5if7V i1n36IU+qk5EA0XQ0/YkNoOItTliSUcVT5mxTCep9sMpAAGQNGtu1CjOwm8PJB5P VslSoobO63Y095iwgXILSkjdHqSwgpGv4rM4i3fpA4cg8G3xIb/azmavzNR9k6Ec ZBfrmWszysHVFrNH8LRAVBSyhqCtcSL03ohNCUPzYXiAozB4VTLUKXWwXN8Nnda8 8ZLttYHw3000+Wm+wCvUl1vYFp30WgWGKmWysSJ2vmwqhf5Y9IGi2Jex3L3eyI+J OdmgJK1Zjrp7RMJgq6jmclrNgawM+p4nMTD57mVYELjrqhzbjK8ipqORRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnGQ1tECn2VSHf8V4FvQEzQTt1aMB8GA1UdIwQY MBaAFBoqS/0sDGl2WoKZ73SWX4YqcUi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUt YmI3MDgwMGMyYTY1LzEvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUtYmI3MDgwMGMyYTY1 LzEvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaR4e0At0 W+o3fBhNTS+N7Y2QUWXh5pLR+yFTeeUPLxsUJgb970fGzE3bCOJG/hu5FTPdqgW8 0ZSxYZoHfZpyS2NOLeSy7qVnLA4OedsOYwNBUrzzqe59UWEMmyRiDc/vGq0SvYy/ BEZKo/8mnusswZdomlIPCIBtlPx3bJglIv1Hoc0cJSm6VMf+EiHsIQ6XgoucIQaB dcT6jgOv35ufTsjao4fZqWrjeu0Sv2Zvaz8AJ0n+PYj0Ghp3C7QWvqLS1StkKBAp rpcVEFuCNagKFxMjl1G50UcL+YXnLWs3IbFpEhxg5Ss3vfA58q1whBJjY5urNM0D C4JgvzlT+EG3WA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:51 2025 by rpki-client