This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft File: GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft (raw, json) Hash identifier: ndm7GLx3DJ7+zCoZdL97ABYukCXEChrNF1P83kjSvgw= Subject key identifier: 50:D5:17:17:07:29:7D:2F:1D:D3:AB:B2:F2:4A:56:CF:CE:96:66:E2 Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F Certificate issuer: /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f Certificate serial: 019AF2095494DF0886EE0F86DB8C4D930B0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 05:01:29 +0000 Manifest this update: Sat 06 Dec 2025 05:01:29 +0000 Manifest next update: Sun 07 Dec 2025 05:01:29 +0000 Files and hashes: 1: GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl (hash: H7oqrOmEWapSqZk0zRY2TK55NCwWe22qSLdcbTCdMAc=) 2: TOBAVscU9VJTwLsUhLP0tAjAQi4.roa (hash: IKzhkAp3S93tfIC5ceCBznZ4xMgoDfcxElkoH29JQ+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:54:94:df:08:86:ee:0f:86:db:8c:4d:93:0b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f Validity Not Before: Dec 6 05:01:29 2025 GMT Not After : Dec 7 05:01:29 2025 GMT Subject: CN=50d5171707297d2f1dd3abb2f24a56cfce9666e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7b:f5:c1:25:af:87:42:41:b3:27:ca:1a:e0: 9a:0d:d2:57:01:30:73:7f:ae:a8:dd:61:17:aa:9f: 91:18:60:33:a6:0c:a2:fd:cd:6b:72:34:a9:29:ce: 5f:75:47:2b:3a:1b:80:bd:ed:b9:32:f8:fd:1d:84: 87:97:25:a0:af:29:b9:12:64:47:31:f8:fd:5b:3d: 58:cb:f8:0e:75:42:85:61:9c:bf:8f:90:8b:9c:28: a9:cd:e6:bc:56:4d:bd:91:49:ff:20:74:89:f4:a3: af:fe:43:83:a2:b8:b0:da:be:91:40:6e:f8:f0:5e: d8:d4:0e:7e:ab:3e:c0:c4:30:94:62:92:47:89:d1: 04:b7:a1:c9:f5:18:e4:bc:54:6d:95:4c:2f:7c:ec: 98:3f:0c:a1:53:e3:7c:7c:81:96:d2:02:23:ed:07: ae:7d:62:d9:79:c6:84:18:89:86:f5:57:e1:63:f2: cd:a4:73:6e:50:15:be:f4:ab:1e:ad:ee:e9:c3:35: af:25:b8:b9:02:5c:47:60:8e:e8:ee:9c:c0:8c:1f: a9:5d:2b:53:46:f4:57:b6:cc:ef:5f:e8:e9:65:d3: 58:78:f5:e7:fd:7e:49:72:27:d1:cc:c1:76:7b:d0: bb:a6:2c:1b:7b:00:86:60:d9:7a:4a:f9:0e:70:d2: 06:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D5:17:17:07:29:7D:2F:1D:D3:AB:B2:F2:4A:56:CF:CE:96:66:E2 X509v3 Authority Key Identifier: keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:8f:ef:70:cf:48:04:85:6f:c4:6a:db:46:83:11:36:e9:d6: 44:1c:cd:8a:08:32:ce:85:7f:05:b2:79:8c:47:ed:87:46:dc: e8:55:26:8e:cd:60:7c:c7:24:4f:47:a0:18:4a:ec:0d:89:b6: fa:ca:64:84:12:0b:24:ef:b2:ca:c0:c8:1c:04:da:d1:a1:bc: b8:3b:dc:56:84:46:00:93:b0:31:71:91:e2:1e:98:0a:63:58: 8a:1c:d6:2c:01:3b:e6:7e:18:f8:ae:ac:db:c8:0f:90:24:39: ff:ed:69:23:00:b8:76:92:f4:cc:ea:2d:79:71:15:1a:b1:2a: d5:fa:9a:78:e4:06:da:9a:46:3b:4c:65:1b:82:10:1d:b3:09: 7e:07:83:02:a6:be:f3:ab:33:56:cd:d1:50:63:a7:49:e0:71: 45:35:b6:69:e1:b4:01:53:ab:3d:6b:6b:2c:57:fb:39:1b:22: 1c:58:46:4d:6e:76:90:23:e6:c5:bf:43:72:00:6a:1e:a8:ea: af:64:65:ec:58:bd:d9:c9:34:84:42:06:4b:9f:ce:1f:9d:79: af:de:79:38:a6:79:c0:91:15:b0:12:97:62:9a:ac:8c:f0:9a: ea:c9:1e:d6:1c:b4:b8:b7:5e:40:bd:ca:05:8c:4d:25:0e:5c: 2b:21:3d:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVSU3wiG7g+G24xNkwsPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNzlhMGFjMzMxMmMxNjUzZjMwMGIwNDUxMGQ5YmYyYzlj MmE1NWYwHhcNMjUxMjA2MDUwMTI5WhcNMjUxMjA3MDUwMTI5WjAzMTEwLwYDVQQD Eyg1MGQ1MTcxNzA3Mjk3ZDJmMWRkM2FiYjJmMjRhNTZjZmNlOTY2NmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHv1wSWvh0JBsyfKGuCaDdJXATBz f66o3WEXqp+RGGAzpgyi/c1rcjSpKc5fdUcrOhuAve25Mvj9HYSHlyWgrym5EmRH Mfj9Wz1Yy/gOdUKFYZy/j5CLnCipzea8Vk29kUn/IHSJ9KOv/kODoriw2r6RQG74 8F7Y1A5+qz7AxDCUYpJHidEEt6HJ9RjkvFRtlUwvfOyYPwyhU+N8fIGW0gIj7Qeu fWLZecaEGImG9VfhY/LNpHNuUBW+9Ksere7pwzWvJbi5AlxHYI7o7pzAjB+pXStT RvRXtszvX+jpZdNYePXn/X5JcifRzMF2e9C7piwbewCGYNl6SvkOcNIGSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDVFxcHKX0vHdOrsvJKVs/OlmbiMB8GA1UdIwQY MBaAFBp5oKwzEsFlPzALBFENm/LJwqVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zMjk5NjgtMjQ3Yy00ZGVhLTk5ZDIt NjAxMDdiNGVhNGViLzEvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zMjk5NjgtMjQ3Yy00ZGVhLTk5ZDItNjAxMDdiNGVhNGVi LzEvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsY/vcM9I BIVvxGrbRoMRNunWRBzNiggyzoV/BbJ5jEfth0bc6FUmjs1gfMckT0egGErsDYm2 +spkhBILJO+yysDIHATa0aG8uDvcVoRGAJOwMXGR4h6YCmNYihzWLAE75n4Y+K6s 28gPkCQ5/+1pIwC4dpL0zOoteXEVGrEq1fqaeOQG2ppGO0xlG4IQHbMJfgeDAqa+ 86szVs3RUGOnSeBxRTW2aeG0AVOrPWtrLFf7ORsiHFhGTW52kCPmxb9DcgBqHqjq r2Rl7Fi92ck0hEIGS5/OH515r955OKZ5wJEVsBKXYpqsjPCa6ske1hy0uLdeQL3K BYxNJQ5cKyE9UA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:32 2025 by rpki-client