This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft File: GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft (raw, json) Hash identifier: +GMkD2e5wbTVORXDTBhld1/DsPvl/8Iv3VROpYN3sZY= Subject key identifier: 04:08:EE:C6:C5:23:CE:EF:86:3E:B5:39:6C:47:DD:7F:73:95:C8:CC Authority key identifier: 1A:B7:A2:57:E2:61:78:97:74:99:52:FE:56:DF:19:40:C9:A3:86:59 Certificate issuer: /CN=1ab7a257e2617897749952fe56df1940c9a38659 Certificate serial: 019AF0BF8694454148C1EF230C723E377377 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft Manifest number: 131E Signing time: Fri 05 Dec 2025 23:01:14 +0000 Manifest this update: Fri 05 Dec 2025 23:01:14 +0000 Manifest next update: Sat 06 Dec 2025 23:01:14 +0000 Files and hashes: 1: GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl (hash: GB4mgsflfgfVePsc8D4KdFTlpJToj3ys/ffhSV9AySg=) 2: PfFy3e8LNIXwxdL8OuYhM9z12Ws.roa (hash: 8+uM2+g15li/FppVigQneM82V/zGTOIgt52B/js9MAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:86:94:45:41:48:c1:ef:23:0c:72:3e:37:73:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ab7a257e2617897749952fe56df1940c9a38659 Validity Not Before: Dec 5 23:01:14 2025 GMT Not After : Dec 6 23:01:14 2025 GMT Subject: CN=0408eec6c523ceef863eb5396c47dd7f7395c8cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7a:e5:f8:b1:8f:5d:b2:db:84:a9:fb:f2:5d: b0:eb:fb:94:7f:01:07:43:cb:80:a1:71:32:0a:24: c3:a7:d7:64:56:6d:1a:01:45:07:3b:25:b4:ef:03: 66:a0:6c:de:27:92:62:20:2b:f8:c2:f0:03:38:23: b0:8b:4a:0d:d1:cf:8a:d7:8d:24:be:a9:14:a7:3c: 9a:4c:82:7f:26:95:39:e9:87:34:3e:cd:0b:86:67: c4:79:1a:90:30:f6:ed:bc:a7:a7:67:e8:fc:f0:68: b1:73:20:65:d4:4e:99:9a:23:e6:1f:92:0f:d1:4c: a9:74:07:63:af:2a:78:83:f2:52:55:1b:7a:5e:82: 67:07:f2:14:6d:6c:11:d4:ed:c8:b4:02:44:f8:2a: 89:d7:8d:52:2b:f7:a3:f5:cf:0e:43:35:be:6d:ea: 57:ce:a5:c0:35:17:5b:1c:d7:15:c7:96:71:fe:f0: 91:4e:ff:41:fe:9a:ea:e9:80:7a:aa:5b:ed:67:61: 44:43:c3:70:86:59:ad:bc:05:7d:5f:28:cb:18:4a: 67:e8:08:4b:8c:d1:28:d7:8b:80:0e:7e:6e:78:49: 20:99:b4:9f:28:66:7f:37:65:90:90:50:60:b0:e0: 82:19:0e:97:00:9a:2d:b5:ef:bf:0f:d2:c2:60:fc: 80:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:08:EE:C6:C5:23:CE:EF:86:3E:B5:39:6C:47:DD:7F:73:95:C8:CC X509v3 Authority Key Identifier: keyid:1A:B7:A2:57:E2:61:78:97:74:99:52:FE:56:DF:19:40:C9:A3:86:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f9:24:d5:14:1b:fc:3d:b1:f5:4f:ce:64:6f:3a:48:e6:88: a0:1c:3f:3a:87:ee:04:bf:94:e8:38:35:2f:13:d2:7c:c9:5c: 5f:2b:2a:4c:d2:34:fd:77:d0:a5:95:76:ff:66:a3:d0:55:6b: 6f:bb:7c:df:e8:87:f7:aa:6d:45:c8:46:77:5e:93:48:cb:20: 0a:be:52:05:e5:db:ba:03:89:fd:e1:2e:e5:3c:2d:21:69:ff: d4:7c:6d:45:5d:24:be:e9:2f:67:6b:f8:77:51:80:69:3e:00: dd:b1:64:4b:bd:3f:47:0d:41:de:de:e2:13:7c:dc:ef:13:23: 6f:1e:33:ba:2a:43:41:c5:65:20:88:9a:db:5c:84:c2:56:52: df:67:71:06:2e:be:19:ed:97:12:47:bb:ab:be:4e:2f:25:5c: 58:b8:59:06:96:b3:3c:46:4d:bc:9f:a5:c5:f2:34:f8:11:e9: f5:ea:39:00:c4:82:49:d2:8b:93:c6:86:48:17:fc:90:12:09: 4b:de:3e:d7:3a:be:b6:e5:10:c3:4d:fb:72:3c:53:68:bf:8b: 16:48:c1:55:85:74:57:19:de:6a:40:db:96:40:c0:20:b2:cd: 8d:a3:cb:25:3d:72:6d:c3:85:39:71:71:9f:b6:1f:6a:ad:cb: 0d:c5:a2:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4aURUFIwe8jDHI+N3N3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYjdhMjU3ZTI2MTc4OTc3NDk5NTJmZTU2ZGYxOTQwYzlh Mzg2NTkwHhcNMjUxMjA1MjMwMTE0WhcNMjUxMjA2MjMwMTE0WjAzMTEwLwYDVQQD EygwNDA4ZWVjNmM1MjNjZWVmODYzZWI1Mzk2YzQ3ZGQ3ZjczOTVjOGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Hrl+LGPXbLbhKn78l2w6/uUfwEH Q8uAoXEyCiTDp9dkVm0aAUUHOyW07wNmoGzeJ5JiICv4wvADOCOwi0oN0c+K140k vqkUpzyaTIJ/JpU56Yc0Ps0LhmfEeRqQMPbtvKenZ+j88GixcyBl1E6ZmiPmH5IP 0UypdAdjryp4g/JSVRt6XoJnB/IUbWwR1O3ItAJE+CqJ141SK/ej9c8OQzW+bepX zqXANRdbHNcVx5Zx/vCRTv9B/prq6YB6qlvtZ2FEQ8NwhlmtvAV9XyjLGEpn6AhL jNEo14uADn5ueEkgmbSfKGZ/N2WQkFBgsOCCGQ6XAJotte+/D9LCYPyAtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQI7sbFI87vhj61OWxH3X9zlcjMMB8GA1UdIwQY MBaAFBq3olfiYXiXdJlS/lbfGUDJo4ZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3JlaVYtSmhlSmQwbVZMLVZ0OFpRTW1qaGxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9jM2RhZjktMzcyMS00NTkxLTg4OTAt MWU3YTUwNTg2NGJhLzEvR3JlaVYtSmhlSmQwbVZMLVZ0OFpRTW1qaGxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9jM2RhZjktMzcyMS00NTkxLTg4OTAtMWU3YTUwNTg2NGJh LzEvR3JlaVYtSmhlSmQwbVZMLVZ0OFpRTW1qaGxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/kk1RQb /D2x9U/OZG86SOaIoBw/OofuBL+U6Dg1LxPSfMlcXysqTNI0/XfQpZV2/2aj0FVr b7t83+iH96ptRchGd16TSMsgCr5SBeXbugOJ/eEu5TwtIWn/1HxtRV0kvukvZ2v4 d1GAaT4A3bFkS70/Rw1B3t7iE3zc7xMjbx4zuipDQcVlIIia21yEwlZS32dxBi6+ Ge2XEke7q75OLyVcWLhZBpazPEZNvJ+lxfI0+BHp9eo5AMSCSdKLk8aGSBf8kBIJ S94+1zq+tuUQw037cjxTaL+LFkjBVYV0VxneakDblkDAILLNjaPLJT1ybcOFOXFx n7Yfaq3LDcWiUw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:28 2025 by rpki-client