This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft File: GipL_SwMaXZagpnvdJZfhipxSLc.mft (raw, json) Hash identifier: X9p1J4P0r+wUu1xi3/+5XSJO0Z5Gi+mWZTavUAw0GM8= Subject key identifier: 04:B0:EB:CA:39:9D:75:9F:BE:E7:A5:84:7B:97:3F:33:C8:1A:3E:F5 Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7 Certificate issuer: /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7 Certificate serial: 019B3231600243624C418234FDB41776B83D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft Manifest number: 0BF0 Signing time: Thu 18 Dec 2025 16:00:55 +0000 Manifest this update: Thu 18 Dec 2025 16:00:55 +0000 Manifest next update: Fri 19 Dec 2025 16:00:55 +0000 Files and hashes: 1: GipL_SwMaXZagpnvdJZfhipxSLc.crl (hash: X1EumzwYJr3cd56si9aLzIt2aqKjK7NZjbsrqJBhrlI=) 2: rullXasaggDRq85qkchvmXmvfZY.roa (hash: qK7vzmt1ZIQMh/v4JWoZrRMkgNEwMqtDeTGlVHvLyEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:60:02:43:62:4c:41:82:34:fd:b4:17:76:b8:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7 Validity Not Before: Dec 18 16:00:55 2025 GMT Not After : Dec 19 16:00:55 2025 GMT Subject: CN=04b0ebca399d759fbee7a5847b973f33c81a3ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ae:89:9b:be:b3:d3:7e:74:b1:6b:db:01:1b: ec:45:c1:e1:35:07:e1:2d:13:c6:4c:a3:dd:00:97: d3:bd:b9:ca:b3:9b:16:ce:48:57:10:40:d5:38:6e: 84:e1:b0:69:50:a2:e9:1b:80:27:fe:0a:e2:ab:75: 21:a3:52:21:64:aa:9c:a0:a8:45:e5:03:11:31:4d: 25:69:df:ef:7c:3b:1c:76:48:74:6d:59:8e:01:9a: 94:b8:5d:b9:15:bf:5b:8e:15:b7:49:16:1b:38:33: 85:6f:e6:68:45:16:a8:d8:f9:56:b0:2b:b8:e6:da: 70:ac:83:3b:63:96:09:a1:3a:c0:d6:0f:91:d7:1a: 08:18:63:40:ba:dc:e1:b5:08:ef:33:bb:1c:4a:d3: cb:74:50:27:2b:8b:58:b0:f8:57:14:67:c1:62:52: f0:5d:51:65:64:96:32:fa:74:d3:c0:ab:e1:3d:3e: 2e:44:d6:17:d8:b7:3f:d9:e4:ab:c4:7b:c0:60:ab: 5d:c2:a4:be:f6:2b:54:1a:a7:5b:b6:dd:b3:4a:52: 77:99:95:25:2d:84:8d:e5:56:a9:56:62:92:eb:1f: 0e:86:a8:57:70:87:7c:fa:b8:09:9d:4a:bb:a2:d2: 02:e1:04:39:a2:93:ee:39:ef:0e:1f:5a:d3:4e:c2: 0a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B0:EB:CA:39:9D:75:9F:BE:E7:A5:84:7B:97:3F:33:C8:1A:3E:F5 X509v3 Authority Key Identifier: keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:f8:df:93:82:54:f3:b6:a9:db:06:56:99:60:9a:4e:60:09: c1:c4:ca:c3:ce:81:db:4e:49:07:92:ad:55:41:39:0a:d5:5b: 83:63:71:8a:97:95:4f:19:f6:37:51:04:46:c9:a0:85:c3:cc: c5:bc:50:bf:d8:78:6c:ad:5a:73:74:29:4b:37:67:8f:bd:4c: 23:f7:b1:c2:c2:9c:d7:fd:12:b8:00:45:4c:cf:a6:9d:c0:57: 30:4e:50:70:f8:e6:6b:c4:40:c1:69:cc:1c:ac:1f:2f:20:35: a2:f8:22:1b:38:6a:cd:54:db:18:65:ee:c8:c9:8b:91:66:63: c3:88:f4:25:8f:dd:e8:1d:81:ed:31:d2:a5:cc:6f:6d:fa:2d: b4:13:c9:74:39:9f:c3:e7:26:c4:e7:27:93:e7:fd:d6:ed:03: e1:41:26:40:88:da:05:94:65:66:99:27:c9:67:17:8d:ca:8e: 49:ed:5c:ab:88:53:f4:88:8d:15:54:14:3f:90:5b:bd:48:96: 78:83:0f:35:50:0e:21:d6:a2:11:ed:50:4a:f4:2b:ed:e6:fc: 72:5e:18:2d:1e:a8:b0:62:ac:40:c5:8d:87:b7:69:1a:4e:92: 9c:b1:9b:25:b7:d1:ff:67:09:aa:97:ab:8a:c6:d2:a6:85:30: 70:d0:cb:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMWACQ2JMQYI0/bQXdrg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMmE0YmZkMmMwYzY5NzY1YTgyOTllZjc0OTY1Zjg2MmE3 MTQ4YjcwHhcNMjUxMjE4MTYwMDU1WhcNMjUxMjE5MTYwMDU1WjAzMTEwLwYDVQQD EygwNGIwZWJjYTM5OWQ3NTlmYmVlN2E1ODQ3Yjk3M2YzM2M4MWEzZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK6Jm76z0350sWvbARvsRcHhNQfh LRPGTKPdAJfTvbnKs5sWzkhXEEDVOG6E4bBpUKLpG4An/griq3Uho1IhZKqcoKhF 5QMRMU0lad/vfDscdkh0bVmOAZqUuF25Fb9bjhW3SRYbODOFb+ZoRRao2PlWsCu4 5tpwrIM7Y5YJoTrA1g+R1xoIGGNAutzhtQjvM7scStPLdFAnK4tYsPhXFGfBYlLw XVFlZJYy+nTTwKvhPT4uRNYX2Lc/2eSrxHvAYKtdwqS+9itUGqdbtt2zSlJ3mZUl LYSN5VapVmKS6x8OhqhXcId8+rgJnUq7otIC4QQ5opPuOe8OH1rTTsIKywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASw68o5nXWfvuelhHuXPzPIGj71MB8GA1UdIwQY MBaAFBoqS/0sDGl2WoKZ73SWX4YqcUi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUt YmI3MDgwMGMyYTY1LzEvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUtYmI3MDgwMGMyYTY1 LzEvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfjfk4JU 87ap2wZWmWCaTmAJwcTKw86B205JB5KtVUE5CtVbg2NxipeVTxn2N1EERsmghcPM xbxQv9h4bK1ac3QpSzdnj71MI/exwsKc1/0SuABFTM+mncBXME5QcPjma8RAwWnM HKwfLyA1ovgiGzhqzVTbGGXuyMmLkWZjw4j0JY/d6B2B7THSpcxvbfottBPJdDmf w+cmxOcnk+f91u0D4UEmQIjaBZRlZpknyWcXjcqOSe1cq4hT9IiNFVQUP5BbvUiW eIMPNVAOIdaiEe1QSvQr7eb8cl4YLR6osGKsQMWNh7dpGk6SnLGbJbfR/2cJqper isbSpoUwcNDLFA== -----END CERTIFICATE-----Generated at Thu Dec 18 20:34:49 2025 by rpki-client