This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft File: GipL_SwMaXZagpnvdJZfhipxSLc.mft (raw, json) Hash identifier: 4yXRGS2/r40fXJnJG1/QKvi74Swn7C+aqHtSpGteVao= Subject key identifier: 1C:A2:23:76:7F:8E:0F:B0:D9:7E:8E:C8:8A:1F:65:1A:28:9D:CF:B3 Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7 Certificate issuer: /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7 Certificate serial: 019B34200F30F99FB9B0E434FDF2BB8641FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft Manifest number: 0BF1 Signing time: Fri 19 Dec 2025 01:01:14 +0000 Manifest this update: Fri 19 Dec 2025 01:01:14 +0000 Manifest next update: Sat 20 Dec 2025 01:01:14 +0000 Files and hashes: 1: GipL_SwMaXZagpnvdJZfhipxSLc.crl (hash: Ac/gkYNEWx9QUJoB/koWk5Nm5eoxeBuRbpqqFoQWsf4=) 2: rullXasaggDRq85qkchvmXmvfZY.roa (hash: qK7vzmt1ZIQMh/v4JWoZrRMkgNEwMqtDeTGlVHvLyEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:0f:30:f9:9f:b9:b0:e4:34:fd:f2:bb:86:41:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7 Validity Not Before: Dec 19 01:01:14 2025 GMT Not After : Dec 20 01:01:14 2025 GMT Subject: CN=1ca223767f8e0fb0d97e8ec88a1f651a289dcfb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:05:5f:9f:c2:d1:30:37:7f:ee:8b:76:eb:10: 56:0b:53:ef:5a:8e:bb:9c:73:a0:7a:99:5e:43:0a: ef:2c:6a:17:d3:0e:cd:46:b9:75:45:7d:a7:83:66: c5:1e:fd:87:08:7f:5a:80:f8:1f:81:40:09:85:80: 09:3f:59:a5:4a:93:c9:65:cc:00:42:fa:0d:d2:5d: 13:ac:9f:7e:33:f2:89:da:ac:c5:a5:7f:62:34:75: 21:04:59:1e:c2:46:05:68:c6:91:08:80:e0:c1:6d: 4a:0c:68:a7:88:17:ab:82:45:56:44:46:c6:36:d8: 1b:85:c2:03:8b:c2:5a:1d:2d:54:8b:3c:ef:49:77: c4:8e:ad:54:41:a3:5c:72:fb:23:32:59:f5:b1:1a: 3b:37:c9:cd:c0:80:41:65:14:7c:0a:d5:d5:c2:1e: 82:8c:f3:6e:c7:7a:a3:c4:95:46:91:5c:42:42:ae: cf:c9:58:96:d0:c2:b8:32:be:4d:0c:2e:96:d3:a4: be:d7:6b:7f:8f:c3:1c:4c:75:58:48:47:c5:28:1c: 32:e6:27:89:5b:f7:c0:ce:43:bd:8a:fb:4b:78:3b: 66:1d:3f:06:05:3b:33:61:1f:25:96:b9:bb:e7:1e: b0:34:0c:f3:c2:dd:52:b9:8a:e4:69:6e:9c:1e:32: 4b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A2:23:76:7F:8E:0F:B0:D9:7E:8E:C8:8A:1F:65:1A:28:9D:CF:B3 X509v3 Authority Key Identifier: keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:48:a6:f6:df:ab:4a:9e:57:e8:89:4b:31:af:8d:8c:27:91: 90:57:59:58:d7:fa:cc:a9:24:4c:49:7d:e1:6b:11:d5:33:d4: 12:c7:84:f3:3b:30:37:d1:15:7d:a1:88:9c:fe:22:1c:69:e5: 85:7f:98:e7:3f:e2:a9:fb:2b:31:31:f5:cc:36:bc:44:1f:97: 88:33:b6:05:be:ac:c4:05:71:83:03:a0:ec:88:d3:f9:8e:1a: cc:e4:9a:43:f9:39:2f:cd:22:e9:dc:ac:94:cc:fd:f6:81:c1: 90:78:8b:e1:51:74:2c:15:e7:e6:26:93:b6:19:38:86:1b:e6: b3:8b:10:38:cb:36:5d:02:dc:74:78:c6:4e:fe:5f:62:8e:81: 42:b9:17:a7:01:48:a9:1c:58:85:8c:1f:28:d2:57:2c:96:87: 80:ab:0a:f9:b5:9d:95:d2:f8:4f:86:4f:5b:4a:91:11:df:45: 1e:8d:b4:de:0d:c1:83:b4:1e:7f:e4:70:05:78:a2:10:f9:90: ad:eb:d8:76:a9:fa:f2:b9:05:b9:af:a9:09:d0:0c:65:0e:8d: 5a:46:40:ea:39:04:09:bd:8d:11:f7:30:04:2c:83:ad:13:3d: 4f:c6:a3:fc:e1:80:00:20:3a:1d:10:8d:bf:72:21:f8:df:62: 5d:16:b8:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IA8w+Z+5sOQ0/fK7hkH6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMmE0YmZkMmMwYzY5NzY1YTgyOTllZjc0OTY1Zjg2MmE3 MTQ4YjcwHhcNMjUxMjE5MDEwMTE0WhcNMjUxMjIwMDEwMTE0WjAzMTEwLwYDVQQD EygxY2EyMjM3NjdmOGUwZmIwZDk3ZThlYzg4YTFmNjUxYTI4OWRjZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AVfn8LRMDd/7ot26xBWC1PvWo67 nHOgepleQwrvLGoX0w7NRrl1RX2ng2bFHv2HCH9agPgfgUAJhYAJP1mlSpPJZcwA QvoN0l0TrJ9+M/KJ2qzFpX9iNHUhBFkewkYFaMaRCIDgwW1KDGiniBergkVWREbG NtgbhcIDi8JaHS1UizzvSXfEjq1UQaNccvsjMln1sRo7N8nNwIBBZRR8CtXVwh6C jPNux3qjxJVGkVxCQq7PyViW0MK4Mr5NDC6W06S+12t/j8McTHVYSEfFKBwy5ieJ W/fAzkO9ivtLeDtmHT8GBTszYR8llrm75x6wNAzzwt1SuYrkaW6cHjJLbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByiI3Z/jg+w2X6OyIofZRoonc+zMB8GA1UdIwQY MBaAFBoqS/0sDGl2WoKZ73SWX4YqcUi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUt YmI3MDgwMGMyYTY1LzEvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUtYmI3MDgwMGMyYTY1 LzEvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEim9t+r Sp5X6IlLMa+NjCeRkFdZWNf6zKkkTEl94WsR1TPUEseE8zswN9EVfaGInP4iHGnl hX+Y5z/iqfsrMTH1zDa8RB+XiDO2Bb6sxAVxgwOg7IjT+Y4azOSaQ/k5L80i6dys lMz99oHBkHiL4VF0LBXn5iaTthk4hhvms4sQOMs2XQLcdHjGTv5fYo6BQrkXpwFI qRxYhYwfKNJXLJaHgKsK+bWdldL4T4ZPW0qREd9FHo203g3Bg7Qef+RwBXiiEPmQ revYdqn68rkFua+pCdAMZQ6NWkZA6jkECb2NEfcwBCyDrRM9T8aj/OGAACA6HRCN v3Ih+N9iXRa47A== -----END CERTIFICATE-----Generated at Fri Dec 19 06:38:14 2025 by rpki-client