This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json) Hash identifier: Oin/YY9NbJoR8eMaO/fmWcXk1gf3NxhYJ923ldhsx2E= Subject key identifier: BF:92:BB:CE:A6:2B:A4:AC:96:0B:51:DF:C2:7D:E1:DF:2D:41:6D:6A Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6 Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6 Certificate serial: 019AF5E5D973C3178AED4B34AC8BB2E957CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 23:01:12 +0000 Manifest this update: Sat 06 Dec 2025 23:01:12 +0000 Manifest next update: Sun 07 Dec 2025 23:01:12 +0000 Files and hashes: 1: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: S1b7bobELV1V4682YfK5YxfmZV63kGbOXNpLxcFHIII=) 2: hRViLioOhxazkHfvXEUqCQoWtcM.roa (hash: UwsVl6zDnCr1HkAOnBnopdZVrNViwXPi8g+Nx+h0Crk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:d9:73:c3:17:8a:ed:4b:34:ac:8b:b2:e9:57:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6 Validity Not Before: Dec 6 23:01:12 2025 GMT Not After : Dec 7 23:01:12 2025 GMT Subject: CN=bf92bbcea62ba4ac960b51dfc27de1df2d416d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a2:85:f1:1e:31:ec:16:58:55:fc:75:5c:22: 6c:77:2e:de:7d:2b:52:f7:ed:51:6d:90:74:a1:c1: 8a:51:98:0a:26:9d:bd:2c:df:14:d8:f7:ba:e5:76: 5a:6d:b9:ad:88:3a:89:63:20:49:84:93:f2:61:7f: ed:f3:fc:e9:39:18:66:ae:09:88:29:84:e2:7a:78: 55:dc:44:00:72:74:26:57:39:05:79:55:b7:1d:30: e5:dc:28:14:f3:8f:5d:7c:c5:3a:be:6b:dc:e8:7b: 4c:76:7d:8e:5c:1d:56:90:1d:b5:f6:ef:60:40:7f: 73:9b:8d:a0:ba:a3:e0:01:bd:7e:3c:9e:51:df:bd: 59:33:68:38:48:a4:5a:60:a8:20:6e:92:6b:9d:7e: 12:f4:7f:7c:c5:00:1e:62:71:64:da:31:8f:8b:b5: 85:de:02:24:64:d6:02:12:7f:e5:76:ca:07:63:c4: a7:71:c3:8a:e9:2d:1b:2b:af:a8:7e:38:5a:f6:3a: de:e3:86:55:6f:06:c6:05:1a:7a:99:0e:38:c1:22: 7b:7d:77:28:52:65:e7:74:f1:ad:49:b6:fb:82:a7: 5b:2f:7e:41:84:65:d7:5f:17:01:30:90:d8:a8:40: ae:85:05:92:be:d5:fb:08:77:b7:fe:01:26:32:1b: c9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:92:BB:CE:A6:2B:A4:AC:96:0B:51:DF:C2:7D:E1:DF:2D:41:6D:6A X509v3 Authority Key Identifier: keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ef:e1:f3:99:55:5e:14:dd:06:9b:53:b6:b7:85:77:5b:6a: 01:10:62:74:18:f9:6c:3c:29:e8:32:e7:2d:21:5a:dc:1f:0a: e2:30:62:96:b9:e9:66:1f:ac:47:41:fd:eb:3f:9f:5d:18:79: ce:de:6e:d6:01:86:a3:9b:ab:56:7e:c0:7a:16:bb:c5:fc:e3: 29:b5:4b:88:07:60:ea:52:ce:40:1d:09:56:84:40:68:23:d0: 70:88:66:95:48:86:e8:fc:f9:a8:cb:36:3d:b4:23:da:8f:20: 64:f4:b7:e1:d6:32:d0:82:c4:3f:3a:0c:62:f6:97:c3:97:34: 11:58:6d:ac:16:09:b9:77:b3:5c:83:35:ec:6e:58:06:6d:d9: f9:4d:6f:da:b4:94:b9:73:70:4c:54:dd:3d:f6:40:b2:29:70: c5:3e:d9:3e:21:b1:c4:8c:39:52:34:0a:10:0c:d9:ae:a4:86: 1b:0f:d5:db:7f:d7:86:7e:c5:ff:b5:44:a5:14:06:07:7b:66: a3:b8:6e:08:fc:06:38:e4:61:54:52:91:ae:aa:be:e5:8a:f0: 40:19:55:30:ae:38:f3:49:d8:3a:c9:b7:ff:13:62:c0:3e:72: 77:b5:e2:91:34:c6:49:25:d1:87:58:01:da:9f:0a:2e:2c:bf: 78:27:59:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15dlzwxeK7Us0rIuy6VfNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYjcwZTM0ODhkYzgzMWQ0NWE3NTc0NGUyZjhiYmEyNjdm ZDMxZDYwHhcNMjUxMjA2MjMwMTEyWhcNMjUxMjA3MjMwMTEyWjAzMTEwLwYDVQQD EyhiZjkyYmJjZWE2MmJhNGFjOTYwYjUxZGZjMjdkZTFkZjJkNDE2ZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6KF8R4x7BZYVfx1XCJsdy7efStS 9+1RbZB0ocGKUZgKJp29LN8U2Pe65XZabbmtiDqJYyBJhJPyYX/t8/zpORhmrgmI KYTienhV3EQAcnQmVzkFeVW3HTDl3CgU849dfMU6vmvc6HtMdn2OXB1WkB219u9g QH9zm42guqPgAb1+PJ5R371ZM2g4SKRaYKggbpJrnX4S9H98xQAeYnFk2jGPi7WF 3gIkZNYCEn/ldsoHY8SnccOK6S0bK6+ofjha9jre44ZVbwbGBRp6mQ44wSJ7fXco UmXndPGtSbb7gqdbL35BhGXXXxcBMJDYqECuhQWSvtX7CHe3/gEmMhvJgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+Su86mK6SslgtR38J94d8tQW1qMB8GA1UdIwQY MBaAFBq3DjSI3IMdRadXROL4u6Jn/THWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMt MDk3MzNjYjAyNjllLzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMtMDk3MzNjYjAyNjll LzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEO/h85lV XhTdBptTtreFd1tqARBidBj5bDwp6DLnLSFa3B8K4jBilrnpZh+sR0H96z+fXRh5 zt5u1gGGo5urVn7Aeha7xfzjKbVLiAdg6lLOQB0JVoRAaCPQcIhmlUiG6Pz5qMs2 PbQj2o8gZPS34dYy0ILEPzoMYvaXw5c0EVhtrBYJuXezXIM17G5YBm3Z+U1v2rSU uXNwTFTdPfZAsilwxT7ZPiGxxIw5UjQKEAzZrqSGGw/V23/Xhn7F/7VEpRQGB3tm o7huCPwGOORhVFKRrqq+5YrwQBlVMK4480nYOsm3/xNiwD5yd7XikTTGSSXRh1gB 2p8KLiy/eCdZyw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:37:34 2025 by rpki-client