This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft File: GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft (raw, json) Hash identifier: 14y2Boa1xET76JmTfDu9xt0SXDh3TUODWk06WL3Yi1o= Subject key identifier: 04:DA:A1:56:09:5E:50:15:98:03:33:44:93:A4:E3:BA:DF:88:54:F5 Authority key identifier: 19:13:CB:48:56:82:1D:14:CD:2E:0B:76:7C:29:31:A2:2C:15:4E:7C Certificate issuer: /CN=1913cb4856821d14cd2e0b767c2931a22c154e7c Certificate serial: 019B18DF1A2FF870011D4F986E324ABA6DE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft Manifest number: 0C0A Signing time: Sat 13 Dec 2025 18:00:32 +0000 Manifest this update: Sat 13 Dec 2025 18:00:32 +0000 Manifest next update: Sun 14 Dec 2025 18:00:32 +0000 Files and hashes: 1: GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl (hash: ubMi1SpP5Tz3X6i8VyB6bQZTP0KjdgcXZmlc1We5i1o=) 2: bbqQj4K9oCtb9vHzZ0O_Q_z4tG0.roa (hash: bjeA27ehP6hHKbOMaqdRjm7JjAyOX+742VV9v2kh3Lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:1a:2f:f8:70:01:1d:4f:98:6e:32:4a:ba:6d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1913cb4856821d14cd2e0b767c2931a22c154e7c Validity Not Before: Dec 13 18:00:32 2025 GMT Not After : Dec 14 18:00:32 2025 GMT Subject: CN=04daa156095e50159803334493a4e3badf8854f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:47:f8:90:e7:0d:9f:bf:53:69:40:86:04:4e: 11:96:55:91:99:b3:e2:9f:d4:ec:28:2f:fb:89:39: e9:69:3f:10:7a:8e:c9:2e:b7:47:b0:c8:d7:40:c8: 2f:5c:8a:5d:0e:13:7a:ed:d8:05:78:9f:ae:d1:8f: c8:37:d4:d8:27:df:5f:7e:4a:a8:0a:93:ad:65:ff: 15:b5:88:66:0d:77:81:08:d2:be:72:a9:10:4e:4b: d1:ac:45:a7:c7:88:4a:20:c7:99:5f:5e:e0:d1:7f: d8:eb:25:6c:46:e0:1d:6b:2a:b3:a2:5e:9d:2c:cb: 9b:bb:05:55:80:4e:9a:5d:c8:d1:48:51:29:f5:f6: 32:6d:ff:61:c3:57:b0:d4:26:0a:54:32:13:3b:49: 4d:cb:f8:d4:50:5b:cd:9c:64:17:15:02:b8:f0:be: 48:69:45:8d:64:7e:ff:7b:6b:01:4a:f3:8a:d1:2f: 7c:49:35:15:df:60:d0:5e:ea:cf:f7:cc:bc:b1:0c: bc:3e:3d:33:e1:e8:59:55:1e:8e:48:10:7e:c1:8b: 07:f9:91:c4:48:48:d2:45:fe:9e:85:7d:97:f3:d3: fe:73:f2:2e:74:fd:6d:20:01:df:e4:69:fa:55:73: f8:78:bd:7b:30:10:c9:86:8c:9d:45:f7:07:84:8b: 61:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DA:A1:56:09:5E:50:15:98:03:33:44:93:A4:E3:BA:DF:88:54:F5 X509v3 Authority Key Identifier: keyid:19:13:CB:48:56:82:1D:14:CD:2E:0B:76:7C:29:31:A2:2C:15:4E:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:55:a0:49:f8:4e:e5:4e:75:47:0a:41:8b:9f:5c:6c:0d:cb: 0b:4d:9d:df:d0:c1:e7:74:f1:f0:ef:ef:5e:d2:85:78:03:01: 65:06:b8:8f:12:95:eb:8a:00:71:aa:4f:dc:06:06:df:fa:02: a0:59:be:20:52:6a:22:01:a9:87:24:4d:b1:8f:78:a8:9b:29: 00:0c:fa:20:47:94:e5:62:ab:61:35:6f:2b:d7:aa:40:68:bc: 26:4d:03:fe:b6:d3:35:38:54:0c:14:12:75:ad:0d:ed:09:82: 2b:4b:5c:c4:b5:89:d4:2c:d4:85:30:bf:21:68:f8:22:f6:c3: ec:7e:48:3a:8b:8b:b3:1a:f5:f9:4b:9a:e7:7a:1f:07:f2:09: e2:49:d1:5d:f8:ef:e1:65:33:b4:e7:a7:f5:80:7b:37:3e:d4: 49:2a:d0:4b:c8:fb:8f:a4:28:54:97:3c:93:24:0e:4e:d0:22: 39:14:0b:ba:cb:20:d1:56:48:04:24:7a:a3:6c:21:14:a1:4d: 80:cf:8b:7c:86:ca:7f:93:29:03:25:da:71:4f:5d:0a:c0:51: 46:2b:a8:ba:59:f5:33:14:1c:a5:91:76:7a:fa:19:45:c4:e3: 35:82:ba:45:19:22:41:e6:c2:96:d0:f5:6b:e9:b4:60:a2:8f: c7:84:19:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY3xov+HABHU+YbjJKum3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MTNjYjQ4NTY4MjFkMTRjZDJlMGI3NjdjMjkzMWEyMmMx NTRlN2MwHhcNMjUxMjEzMTgwMDMyWhcNMjUxMjE0MTgwMDMyWjAzMTEwLwYDVQQD EygwNGRhYTE1NjA5NWU1MDE1OTgwMzMzNDQ5M2E0ZTNiYWRmODg1NGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUf4kOcNn79TaUCGBE4RllWRmbPi n9TsKC/7iTnpaT8Qeo7JLrdHsMjXQMgvXIpdDhN67dgFeJ+u0Y/IN9TYJ99ffkqo CpOtZf8VtYhmDXeBCNK+cqkQTkvRrEWnx4hKIMeZX17g0X/Y6yVsRuAdayqzol6d LMubuwVVgE6aXcjRSFEp9fYybf9hw1ew1CYKVDITO0lNy/jUUFvNnGQXFQK48L5I aUWNZH7/e2sBSvOK0S98STUV32DQXurP98y8sQy8Pj0z4ehZVR6OSBB+wYsH+ZHE SEjSRf6ehX2X89P+c/IudP1tIAHf5Gn6VXP4eL17MBDJhoydRfcHhIthhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATaoVYJXlAVmAMzRJOk47rfiFT1MB8GA1UdIwQY MBaAFBkTy0hWgh0UzS4LdnwpMaIsFU58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1JQTFNGYUNIUlROTGd0MmZDa3hvaXdWVG53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xOTc3ZGUtMWRmNC00MDRjLTlkYTkt MDc3OWRmMWRkNjRkLzEvR1JQTFNGYUNIUlROTGd0MmZDa3hvaXdWVG53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8xOTc3ZGUtMWRmNC00MDRjLTlkYTktMDc3OWRmMWRkNjRk LzEvR1JQTFNGYUNIUlROTGd0MmZDa3hvaXdWVG53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFWgSfhO 5U51RwpBi59cbA3LC02d39DB53Tx8O/vXtKFeAMBZQa4jxKV64oAcapP3AYG3/oC oFm+IFJqIgGphyRNsY94qJspAAz6IEeU5WKrYTVvK9eqQGi8Jk0D/rbTNThUDBQS da0N7QmCK0tcxLWJ1CzUhTC/IWj4IvbD7H5IOouLsxr1+Uua53ofB/IJ4knRXfjv 4WUztOen9YB7Nz7USSrQS8j7j6QoVJc8kyQOTtAiORQLussg0VZIBCR6o2whFKFN gM+LfIbKf5MpAyXacU9dCsBRRiuouln1MxQcpZF2evoZRcTjNYK6RRkiQebCltD1 a+m0YKKPx4QZ2Q== -----END CERTIFICATE-----Generated at Sun Dec 14 01:52:53 2025 by rpki-client