This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft File: GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft (raw, json) Hash identifier: mu9fF7Hir3xhZHIaXCEgxImQp5QBsS+o7xYP0GQmlxk= Subject key identifier: D0:87:B7:E0:C6:54:66:36:57:FE:BF:40:2E:13:47:03:A7:A7:E2:D8 Authority key identifier: 1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03 Certificate issuer: /CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003 Certificate serial: 019B0C373976CE4D8E2503EC185797D5FEBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft Manifest number: 159C Signing time: Thu 11 Dec 2025 07:01:44 +0000 Manifest this update: Thu 11 Dec 2025 07:01:44 +0000 Manifest next update: Fri 12 Dec 2025 07:01:44 +0000 Files and hashes: 1: GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl (hash: PG1tNYM7P3Aydms8Fk3yXY8lHUZZPfBQWWNVIiaYHCY=) 2: eUeAvm73-2L5UqqKdbnJ3M6g16M.roa (hash: Y9d2L+uaXCF5y4wJiUN6TycT1kpDQNqljoU9Xps8N/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 07:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:37:39:76:ce:4d:8e:25:03:ec:18:57:97:d5:fe:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003 Validity Not Before: Dec 11 07:01:44 2025 GMT Not After : Dec 12 07:01:44 2025 GMT Subject: CN=d087b7e0c654663657febf402e134703a7a7e2d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:38:7b:14:63:db:1e:12:8b:04:88:97:25: 77:a0:19:1f:52:09:78:dd:3f:95:d3:09:6e:63:38: 64:be:d7:37:03:76:3f:2e:7e:51:93:11:7c:6f:02: 92:dd:0e:83:04:44:36:9f:50:d5:3c:d9:45:bf:3c: 5b:bd:22:22:c4:51:d3:ba:55:63:00:13:08:28:bb: 4a:c8:d2:1d:46:c1:15:b6:d7:66:ad:ef:56:59:27: bd:ed:39:2c:6a:47:cf:7f:c8:31:77:9d:8b:86:3a: ca:c8:a6:69:60:0b:3d:27:33:15:f0:f0:94:98:9a: 3c:84:e3:a6:c5:26:e6:f7:dd:6e:82:85:e5:4e:c7: 49:f2:30:b7:69:d9:3c:1d:ba:f5:44:d6:a4:dc:4c: cc:24:4a:b3:a9:dd:e6:cf:9c:78:72:ca:80:db:b4: e8:7b:ef:be:de:5b:a3:d8:b5:f8:90:3f:9c:cb:84: 4a:55:86:36:0e:6a:25:5e:08:97:43:5f:7b:64:1f: 10:fa:8a:e1:aa:f9:9d:0d:07:fa:6c:fd:88:6b:ce: 78:2b:6a:c1:d0:db:73:09:c8:6a:5c:7f:a9:e5:65: c4:f7:37:e2:b8:85:ba:f9:46:98:7b:36:3a:8b:15: c9:cc:d0:d7:f3:4f:f4:50:e4:4e:d2:c6:ce:32:e5: 25:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:87:B7:E0:C6:54:66:36:57:FE:BF:40:2E:13:47:03:A7:A7:E2:D8 X509v3 Authority Key Identifier: keyid:1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:fd:d2:a2:d3:5f:c8:c6:8f:fe:e4:98:01:32:1a:25:19:e0: 7c:d6:ea:46:4c:79:cf:de:6f:02:02:9a:57:37:48:5c:65:aa: cc:87:18:e3:6d:88:86:7f:9d:75:93:39:0e:63:c4:34:a2:4f: b6:15:c8:40:3c:81:37:82:f6:68:4e:f0:8e:63:92:28:e6:02: 48:57:69:fb:d2:c0:97:4a:e2:ca:54:71:dd:4d:54:8b:d3:4e: 8e:d8:be:f1:fa:c3:dd:d2:b7:be:10:c2:6f:16:2e:df:3c:48: 30:55:93:aa:dd:82:03:39:12:1b:67:60:51:32:ff:d7:e9:ae: 3f:33:31:60:74:07:1e:8d:dd:07:03:0a:7d:01:a8:be:f6:71: 42:60:92:0d:c5:ab:7e:de:a3:4e:8d:b4:35:c7:2b:9e:eb:3e: b5:35:4d:fa:33:a6:fc:d6:c5:62:d3:f1:5b:ff:22:02:a6:28: f5:1a:be:fd:40:50:8a:2f:0d:44:e9:a6:7d:55:72:b2:f2:e6: 5c:4a:30:ac:c3:85:07:62:a7:8c:b6:4a:ae:be:29:15:07:7d: b2:fa:50:96:5d:c9:ed:f7:76:72:5f:c1:6e:e3:0f:70:7b:2d: 86:9b:ce:92:47:25:26:e9:11:58:f3:1a:1f:7c:3a:d7:f2:8f: 51:72:45:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsMNzl2zk2OJQPsGFeX1f67MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZTFjN2FhMGIzOTVlMDYxMmVjNDIzZmUwN2ZiMDM4OWFh YTQwMDMwHhcNMjUxMjExMDcwMTQ0WhcNMjUxMjEyMDcwMTQ0WjAzMTEwLwYDVQQD EyhkMDg3YjdlMGM2NTQ2NjM2NTdmZWJmNDAyZTEzNDcwM2E3YTdlMmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/M4exRj2x4SiwSIlyV3oBkfUgl4 3T+V0wluYzhkvtc3A3Y/Ln5RkxF8bwKS3Q6DBEQ2n1DVPNlFvzxbvSIixFHTulVj ABMIKLtKyNIdRsEVttdmre9WWSe97TksakfPf8gxd52LhjrKyKZpYAs9JzMV8PCU mJo8hOOmxSbm991ugoXlTsdJ8jC3adk8Hbr1RNak3EzMJEqzqd3mz5x4csqA27To e+++3luj2LX4kD+cy4RKVYY2DmolXgiXQ197ZB8Q+orhqvmdDQf6bP2Ia854K2rB 0NtzCchqXH+p5WXE9zfiuIW6+UaYezY6ixXJzNDX80/0UORO0sbOMuUlpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCHt+DGVGY2V/6/QC4TRwOnp+LYMB8GA1UdIwQY MBaAFBrhx6oLOV4GEuxCP+B/sDiaqkADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3VISHFnczVYZ1lTN0VJXzRILXdPSnFxUUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hYmU2MjgtZmNlNy00NDdlLTg1M2Ut OTRmZGM5ZmJkY2FjLzEvR3VISHFnczVYZ1lTN0VJXzRILXdPSnFxUUFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9hYmU2MjgtZmNlNy00NDdlLTg1M2UtOTRmZGM5ZmJkY2Fj LzEvR3VISHFnczVYZ1lTN0VJXzRILXdPSnFxUUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPf3SotNf yMaP/uSYATIaJRngfNbqRkx5z95vAgKaVzdIXGWqzIcY422Ihn+ddZM5DmPENKJP thXIQDyBN4L2aE7wjmOSKOYCSFdp+9LAl0riylRx3U1Ui9NOjti+8frD3dK3vhDC bxYu3zxIMFWTqt2CAzkSG2dgUTL/1+muPzMxYHQHHo3dBwMKfQGovvZxQmCSDcWr ft6jTo20Nccrnus+tTVN+jOm/NbFYtPxW/8iAqYo9Rq+/UBQii8NROmmfVVysvLm XEowrMOFB2KnjLZKrr4pFQd9svpQll3J7fd2cl/BbuMPcHsthpvOkkclJukRWPMa H3w61/KPUXJFBg== -----END CERTIFICATE-----Generated at Thu Dec 11 16:39:20 2025 by rpki-client