This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft File: GRGmWD3HmkFVGxeutDFNspMRy-s.mft (raw, json) Hash identifier: hz/btRLMMYrNT5jL0gTgtlFLrQazAgWyZFvdrRD0fBw= Subject key identifier: 91:66:4E:5A:BD:29:50:3D:17:F2:79:4C:65:02:15:4D:EA:A0:03:48 Authority key identifier: 19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB Certificate issuer: /CN=1911a6583dc79a41551b17aeb4314db29311cbeb Certificate serial: 019B2175B364B6053D933CBC24A95B19D7DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft Manifest number: 1690 Signing time: Mon 15 Dec 2025 10:02:00 +0000 Manifest this update: Mon 15 Dec 2025 10:02:00 +0000 Manifest next update: Tue 16 Dec 2025 10:02:00 +0000 Files and hashes: 1: GRGmWD3HmkFVGxeutDFNspMRy-s.crl (hash: vxAYERymfUb46x9/qpqAWcnDhoYvT4gDJSkK0Z+T/xc=) 2: NGlvLAmeCUBqhZ9wnIddvIcLHQE.roa (hash: DjDvlZwqQlOEZrmGSn2/QarvAyBTsIXhSALa8HhYpv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:b3:64:b6:05:3d:93:3c:bc:24:a9:5b:19:d7:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1911a6583dc79a41551b17aeb4314db29311cbeb Validity Not Before: Dec 15 10:02:00 2025 GMT Not After : Dec 16 10:02:00 2025 GMT Subject: CN=91664e5abd29503d17f2794c6502154deaa00348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b1:1a:5f:49:f8:d5:1e:03:c9:96:75:14:1f: d5:84:51:59:1c:74:4c:a3:d5:41:3d:dd:d5:6b:04: 4c:84:ff:56:28:b2:3a:cd:fd:f5:b0:0e:50:01:92: 4e:20:57:e7:62:15:27:74:52:de:2b:70:ae:d8:a1: dc:be:81:37:3e:f9:0c:ce:c1:84:8e:dd:8b:a6:75: 6c:c0:40:8c:dc:aa:8d:e6:3b:6e:cc:25:f0:f9:83: 38:68:fc:be:6b:71:d1:e3:8e:89:9f:da:78:53:99: b4:03:22:ad:f5:e6:c6:fc:1c:aa:eb:b8:2b:cb:1b: 2e:74:3d:54:7b:50:55:58:34:fa:04:8b:78:af:e4: 26:8a:57:91:26:91:81:20:d8:b7:49:86:62:2e:5a: 9b:d8:8e:63:80:7a:45:30:50:a9:41:66:33:24:db: 80:5a:39:ca:a5:7b:3d:a2:29:dd:8f:cc:f6:43:fc: da:a3:c1:c2:8e:54:91:66:f4:c0:f2:85:b9:7a:0d: d7:5e:37:61:04:0b:fb:80:c2:c6:ed:b4:b1:73:d7: 89:d5:d1:de:10:c9:b8:53:07:b7:12:6d:eb:8e:fc: 60:bf:2e:23:85:67:44:12:06:38:4d:d8:82:26:cc: b9:23:eb:92:65:54:e1:53:04:bc:44:84:55:2a:57: f8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:66:4E:5A:BD:29:50:3D:17:F2:79:4C:65:02:15:4D:EA:A0:03:48 X509v3 Authority Key Identifier: keyid:19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e4:71:4b:2b:7b:2e:60:c5:60:3c:1c:85:ab:e6:da:48:e7: 5c:a3:43:3e:1e:64:0c:db:5c:a0:f3:27:07:8a:5b:58:db:12: 12:43:ef:39:ca:56:a6:ff:2b:0e:fe:5e:cb:41:8c:c9:28:0c: e6:35:7b:7e:6a:3f:96:7b:d7:09:60:34:db:b6:31:b4:09:02: e1:c8:ea:d2:71:2f:02:4d:2f:05:4a:a2:92:23:26:c8:9a:39: f7:f8:c7:0c:0b:ac:fa:fe:19:23:7b:93:24:40:88:55:f9:6e: 42:a7:52:54:2d:b8:14:13:45:e6:74:c9:1c:0b:71:95:18:98: 5e:b7:eb:0d:3a:97:48:1e:f5:05:1c:7f:54:d2:cc:6f:df:70: 82:d8:48:2e:72:a8:f1:9b:e9:8a:a4:80:55:01:14:d1:b4:ff: c8:04:f1:58:66:b8:98:70:a5:2c:9f:3f:8f:d7:37:1d:c8:5a: e8:76:31:6b:44:cd:c2:7d:71:2e:6e:1e:73:56:f1:8f:5a:5a: fb:35:b5:f5:2c:6f:68:a6:92:0c:37:a7:ba:f7:2c:e3:bf:45: 0c:37:5e:05:18:6d:b3:94:46:66:00:eb:aa:b4:c0:d5:16:a6: 3e:ee:04:2e:6d:4c:b9:6a:b8:a6:82:b9:be:01:83:72:f6:71: df:20:c7:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdbNktgU9kzy8JKlbGdffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MTFhNjU4M2RjNzlhNDE1NTFiMTdhZWI0MzE0ZGIyOTMx MWNiZWIwHhcNMjUxMjE1MTAwMjAwWhcNMjUxMjE2MTAwMjAwWjAzMTEwLwYDVQQD Eyg5MTY2NGU1YWJkMjk1MDNkMTdmMjc5NGM2NTAyMTU0ZGVhYTAwMzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rEaX0n41R4DyZZ1FB/VhFFZHHRM o9VBPd3VawRMhP9WKLI6zf31sA5QAZJOIFfnYhUndFLeK3Cu2KHcvoE3PvkMzsGE jt2LpnVswECM3KqN5jtuzCXw+YM4aPy+a3HR446Jn9p4U5m0AyKt9ebG/Byq67gr yxsudD1Ue1BVWDT6BIt4r+QmileRJpGBINi3SYZiLlqb2I5jgHpFMFCpQWYzJNuA WjnKpXs9oindj8z2Q/zao8HCjlSRZvTA8oW5eg3XXjdhBAv7gMLG7bSxc9eJ1dHe EMm4Uwe3Em3rjvxgvy4jhWdEEgY4TdiCJsy5I+uSZVThUwS8RIRVKlf4hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFmTlq9KVA9F/J5TGUCFU3qoANIMB8GA1UdIwQY MBaAFBkRplg9x5pBVRsXrrQxTbKTEcvrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1JHbVdEM0hta0ZWR3hldXRERk5zcE1SeS1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYjE2ZWItNzdmNS00MDAzLWI5MDMt MWMzNGFmZDlkNTBkLzEvR1JHbVdEM0hta0ZWR3hldXRERk5zcE1SeS1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lYjE2ZWItNzdmNS00MDAzLWI5MDMtMWMzNGFmZDlkNTBk LzEvR1JHbVdEM0hta0ZWR3hldXRERk5zcE1SeS1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAneRxSyt7 LmDFYDwchavm2kjnXKNDPh5kDNtcoPMnB4pbWNsSEkPvOcpWpv8rDv5ey0GMySgM 5jV7fmo/lnvXCWA027YxtAkC4cjq0nEvAk0vBUqikiMmyJo59/jHDAus+v4ZI3uT JECIVfluQqdSVC24FBNF5nTJHAtxlRiYXrfrDTqXSB71BRx/VNLMb99wgthILnKo 8ZvpiqSAVQEU0bT/yATxWGa4mHClLJ8/j9c3Hcha6HYxa0TNwn1xLm4ec1bxj1pa +zW19SxvaKaSDDenuvcs479FDDdeBRhts5RGZgDrqrTA1RamPu4ELm1MuWq4poK5 vgGDcvZx3yDHQg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:56:01 2025 by rpki-client