This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft File: GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft (raw, json) Hash identifier: WgxdwMZVtQ2oMCpHJuAa334q0qV47DeH3hhFU6b95/w= Subject key identifier: 7D:89:07:78:89:23:BF:F8:62:98:53:A1:84:F3:F8:12:46:C2:79:74 Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F Certificate issuer: /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f Certificate serial: 019B3D5A0392216537926A92DA786D8F2956 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 20:01:07 +0000 Manifest this update: Sat 20 Dec 2025 20:01:07 +0000 Manifest next update: Sun 21 Dec 2025 20:01:07 +0000 Files and hashes: 1: GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl (hash: 0FYyLXoBLNUxSY/b3gd7AtaGCgzFhueqYyTW/ZG+Y4w=) 2: TOBAVscU9VJTwLsUhLP0tAjAQi4.roa (hash: IKzhkAp3S93tfIC5ceCBznZ4xMgoDfcxElkoH29JQ+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:03:92:21:65:37:92:6a:92:da:78:6d:8f:29:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f Validity Not Before: Dec 20 20:01:07 2025 GMT Not After : Dec 21 20:01:07 2025 GMT Subject: CN=7d8907788923bff8629853a184f3f81246c27974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1a:27:be:f0:51:bc:30:8e:cc:2e:7c:8c:c7: db:ae:79:7c:a7:8a:d0:ee:82:78:3f:ed:bc:39:65: 5d:86:0b:84:f5:ea:f8:84:73:91:da:60:f7:b2:23: 5d:3f:f9:29:e2:cb:13:34:1d:fe:6b:79:eb:ff:db: 65:34:87:e5:d9:9e:1f:14:c8:19:b8:63:4f:43:16: 1f:99:37:9c:4c:1a:1f:6c:f5:01:e1:2e:94:ed:84: 7b:c7:68:da:11:2d:0e:c7:e4:6b:13:ee:ed:fc:e0: c3:0b:7f:52:fd:3f:b6:13:6d:11:ed:ab:a8:79:e0: 52:ba:95:88:96:32:69:e1:8f:83:76:92:cf:50:a7: 9e:c4:e1:d9:ab:b4:92:82:8c:41:c3:4e:97:bd:a5: 9a:44:33:b8:bc:1e:e5:6d:ec:8c:bb:57:d1:4c:4c: 1e:c8:28:fe:85:2b:df:17:4e:f2:f1:65:ce:5e:3d: 66:c0:23:21:d7:d9:6e:0f:d5:c4:b0:4f:d5:a8:6c: 09:df:2a:12:f9:79:7e:23:9f:dd:91:dc:c4:25:b3: 14:5a:d3:35:e0:e0:14:2d:89:f4:02:4e:5b:ad:8d: 41:37:6c:c4:06:3a:94:e3:af:8f:1f:b4:e0:97:1e: 84:54:30:05:13:38:20:da:9c:ff:e2:22:4b:49:cc: bd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:89:07:78:89:23:BF:F8:62:98:53:A1:84:F3:F8:12:46:C2:79:74 X509v3 Authority Key Identifier: keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:8c:df:c7:9a:d2:2a:89:b3:b1:2e:b9:0a:1f:fa:36:f0:65: 10:a9:30:b1:a0:10:8c:01:03:28:d7:6d:b0:0c:63:a4:cc:fc: 50:88:22:00:ee:b2:bb:91:fb:55:c0:c7:7e:2d:46:7f:dc:11: 03:6e:4c:c0:d0:d6:a1:c5:31:a8:c0:fa:d0:07:7e:fd:12:a5: d5:a9:84:95:86:7c:0d:60:b1:90:44:c4:e2:1b:93:2c:1f:5d: e3:e1:67:4b:cc:9e:51:ba:a3:66:ee:f8:b0:d4:c1:73:35:62: c7:5b:ab:c8:05:9c:ce:cf:7f:6b:79:c0:68:93:0c:0f:d8:f3: 2c:93:5c:45:18:a3:23:43:0b:c3:f9:b8:fd:cd:bc:80:e4:b9: 9f:ac:54:6d:e4:70:9a:77:36:4e:42:2c:f6:ec:de:13:9b:1b: 7c:79:47:ec:cd:a9:b6:09:e9:e9:53:52:76:2a:43:cd:4c:12: 18:83:a3:f9:7e:7e:b9:25:78:39:35:6f:f4:04:b9:a1:a9:93: 7e:a2:07:ad:c6:22:21:2e:67:7d:b5:3d:3f:26:c1:83:5f:da: ad:70:a6:98:7b:8b:b8:3f:cd:14:4f:c0:ea:a1:fd:3b:17:f7: 82:62:08:a9:f1:48:2c:cd:24:0e:17:50:24:f8:55:d8:89:57: 85:07:c2:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WgOSIWU3kmqS2nhtjylWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNzlhMGFjMzMxMmMxNjUzZjMwMGIwNDUxMGQ5YmYyYzlj MmE1NWYwHhcNMjUxMjIwMjAwMTA3WhcNMjUxMjIxMjAwMTA3WjAzMTEwLwYDVQQD Eyg3ZDg5MDc3ODg5MjNiZmY4NjI5ODUzYTE4NGYzZjgxMjQ2YzI3OTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xonvvBRvDCOzC58jMfbrnl8p4rQ 7oJ4P+28OWVdhguE9er4hHOR2mD3siNdP/kp4ssTNB3+a3nr/9tlNIfl2Z4fFMgZ uGNPQxYfmTecTBofbPUB4S6U7YR7x2jaES0Ox+RrE+7t/ODDC39S/T+2E20R7auo eeBSupWIljJp4Y+DdpLPUKeexOHZq7SSgoxBw06XvaWaRDO4vB7lbeyMu1fRTEwe yCj+hSvfF07y8WXOXj1mwCMh19luD9XEsE/VqGwJ3yoS+Xl+I5/dkdzEJbMUWtM1 4OAULYn0Ak5brY1BN2zEBjqU46+PH7Tglx6EVDAFEzgg2pz/4iJLScy99QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2JB3iJI7/4YphToYTz+BJGwnl0MB8GA1UdIwQY MBaAFBp5oKwzEsFlPzALBFENm/LJwqVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zMjk5NjgtMjQ3Yy00ZGVhLTk5ZDIt NjAxMDdiNGVhNGViLzEvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zMjk5NjgtMjQ3Yy00ZGVhLTk5ZDItNjAxMDdiNGVhNGVi LzEvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABozfx5rS KomzsS65Ch/6NvBlEKkwsaAQjAEDKNdtsAxjpMz8UIgiAO6yu5H7VcDHfi1Gf9wR A25MwNDWocUxqMD60Ad+/RKl1amElYZ8DWCxkETE4huTLB9d4+FnS8yeUbqjZu74 sNTBczVix1uryAWczs9/a3nAaJMMD9jzLJNcRRijI0MLw/m4/c28gOS5n6xUbeRw mnc2TkIs9uzeE5sbfHlH7M2ptgnp6VNSdipDzUwSGIOj+X5+uSV4OTVv9AS5oamT fqIHrcYiIS5nfbU9PybBg1/arXCmmHuLuD/NFE/A6qH9Oxf3gmIIqfFILM0kDhdQ JPhV2IlXhQfCzQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:21:37 2025 by rpki-client