This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft File: GTWdi0RPJzSynpueCQG-CLAPQOM.mft (raw, json) Hash identifier: wUXG0ITZsSwe246NrXJF86n66LNQJIA1gxPoWBl3lHE= Subject key identifier: 10:B1:9B:31:1D:54:09:11:74:AC:12:95:E9:EB:43:06:FB:03:23:64 Authority key identifier: 19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3 Certificate issuer: /CN=19359d8b444f2734b29e9b9e0901be08b00f40e3 Certificate serial: 019B341F9AF7269182B09C10304833AA2E27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft Manifest number: 1302 Signing time: Fri 19 Dec 2025 01:00:44 +0000 Manifest this update: Fri 19 Dec 2025 01:00:44 +0000 Manifest next update: Sat 20 Dec 2025 01:00:44 +0000 Files and hashes: 1: GTWdi0RPJzSynpueCQG-CLAPQOM.crl (hash: jFQG4lMUnbM34gNsoQtiVY21U/ZXCCh81qCc0n/tbhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.crl rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:9a:f7:26:91:82:b0:9c:10:30:48:33:aa:2e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19359d8b444f2734b29e9b9e0901be08b00f40e3 Validity Not Before: Dec 19 01:00:44 2025 GMT Not After : Dec 20 01:00:44 2025 GMT Subject: CN=10b19b311d54091174ac1295e9eb4306fb032364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:eb:b9:21:43:0e:04:af:4d:3d:90:07:d9:9c: b3:0f:5a:78:58:10:af:83:f7:88:aa:25:69:d0:10: fa:a2:2b:34:7b:2d:43:e1:d8:2f:84:35:f4:06:dd: ff:46:fe:e8:7e:49:33:07:3c:3d:4c:aa:b4:52:f1: d6:ed:8d:3b:c1:f1:60:ff:af:58:5d:24:d2:48:9b: 15:b6:a9:a2:20:8c:0c:5f:d5:af:ad:42:dd:d6:b7: ce:84:7c:85:fe:00:c3:c1:73:07:76:66:02:e5:fd: 47:3f:28:01:9b:25:47:c8:49:df:45:91:5e:7a:33: ad:62:8b:33:92:79:45:ec:d1:56:ef:18:0f:91:89: 9d:7d:64:87:2e:17:d3:ed:87:39:86:c8:69:37:1c: de:eb:b9:d2:a0:4e:72:52:fa:17:85:93:81:6a:41: a1:c1:45:ce:3f:d4:c4:b1:1a:3b:0d:2b:fa:ba:ce: 0c:89:c3:d1:ea:1d:4a:ab:31:84:36:31:19:4d:16: 66:c1:cc:4a:62:9d:57:91:18:98:c1:da:10:b4:3d: 2f:d9:be:e3:93:32:af:6f:fc:df:dc:dc:94:e1:a5: 6b:75:b0:05:bf:23:93:77:7c:33:75:d4:ab:be:f4: 67:ca:64:cf:0f:3e:b8:58:d9:4f:41:4f:2b:5b:54: 32:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B1:9B:31:1D:54:09:11:74:AC:12:95:E9:EB:43:06:FB:03:23:64 X509v3 Authority Key Identifier: keyid:19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:fa:7e:26:f1:26:c4:2a:71:a8:53:69:d2:ac:02:58:89:22: 1b:70:e2:aa:23:7b:22:2a:63:8e:1e:6c:2d:77:69:cb:20:5f: 23:84:dc:ac:31:60:11:dd:ee:96:a1:2d:d6:d0:fb:56:6e:e8: eb:58:8a:e1:21:f8:d0:18:14:d7:69:31:84:bb:2e:7c:f9:c6: cf:7d:2e:06:83:7a:3f:ce:91:ca:fc:e8:66:ee:f0:45:4e:ee: c8:40:bd:87:0b:c0:b5:eb:4f:df:e0:0f:7a:80:dc:98:bf:89: 84:91:d2:e5:2b:de:d9:4d:8a:d2:27:2b:e8:6d:18:fd:26:ba: e0:2d:48:a5:b8:55:eb:2d:db:6b:48:77:4f:37:2a:bd:2f:6e: 57:10:7c:98:d2:61:cf:35:50:bb:fe:e4:91:a5:c8:42:f2:e1: 44:d7:3e:c0:8c:27:6b:aa:dc:80:bd:90:38:d5:7b:f9:e4:ef: 82:7f:47:35:af:ef:73:26:2b:67:9b:5b:35:a9:3e:19:cd:4e: 48:19:94:b4:db:fd:c3:4c:af:28:6a:b3:fa:f7:89:2d:37:d4: 8b:0e:75:8f:e0:9b:ff:ae:07:11:12:ab:ae:08:f2:c9:b3:5b: 8c:0f:18:b9:fe:28:c2:5f:f4:f3:15:3b:08:d0:1b:0a:34:76: 55:f4:d3:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H5r3JpGCsJwQMEgzqi4nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MzU5ZDhiNDQ0ZjI3MzRiMjllOWI5ZTA5MDFiZTA4YjAw ZjQwZTMwHhcNMjUxMjE5MDEwMDQ0WhcNMjUxMjIwMDEwMDQ0WjAzMTEwLwYDVQQD EygxMGIxOWIzMTFkNTQwOTExNzRhYzEyOTVlOWViNDMwNmZiMDMyMzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOu5IUMOBK9NPZAH2ZyzD1p4WBCv g/eIqiVp0BD6ois0ey1D4dgvhDX0Bt3/Rv7ofkkzBzw9TKq0UvHW7Y07wfFg/69Y XSTSSJsVtqmiIIwMX9WvrULd1rfOhHyF/gDDwXMHdmYC5f1HPygBmyVHyEnfRZFe ejOtYoszknlF7NFW7xgPkYmdfWSHLhfT7Yc5hshpNxze67nSoE5yUvoXhZOBakGh wUXOP9TEsRo7DSv6us4MicPR6h1KqzGENjEZTRZmwcxKYp1XkRiYwdoQtD0v2b7j kzKvb/zf3NyU4aVrdbAFvyOTd3wzddSrvvRnymTPDz64WNlPQU8rW1QyUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCxmzEdVAkRdKwSlenrQwb7AyNkMB8GA1UdIwQY MBaAFBk1nYtETyc0sp6bngkBvgiwD0DjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1RXZGkwUlBKelN5bnB1ZUNRRy1DTEFQUU9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zYTk0NGItYjQyOC00NTQ3LWI3ZmIt MzhmN2M2YWM5YjY2LzEvR1RXZGkwUlBKelN5bnB1ZUNRRy1DTEFQUU9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zYTk0NGItYjQyOC00NTQ3LWI3ZmItMzhmN2M2YWM5YjY2 LzEvR1RXZGkwUlBKelN5bnB1ZUNRRy1DTEFQUU9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/p+JvEm xCpxqFNp0qwCWIkiG3DiqiN7Iipjjh5sLXdpyyBfI4TcrDFgEd3ulqEt1tD7Vm7o 61iK4SH40BgU12kxhLsufPnGz30uBoN6P86RyvzoZu7wRU7uyEC9hwvAtetP3+AP eoDcmL+JhJHS5Sve2U2K0icr6G0Y/Sa64C1IpbhV6y3ba0h3TzcqvS9uVxB8mNJh zzVQu/7kkaXIQvLhRNc+wIwna6rcgL2QONV7+eTvgn9HNa/vcyYrZ5tbNak+Gc1O SBmUtNv9w0yvKGqz+veJLTfUiw51j+Cb/64HERKrrgjyybNbjA8Yuf4owl/08xU7 CNAbCjR2VfTTNg== -----END CERTIFICATE-----Generated at Fri Dec 19 07:50:21 2025 by rpki-client