This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft File: Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft (raw, json) Hash identifier: zWLQxJa6Uz440FHmOVK8PUJY1PyC2H/NWOC86fwk5Hg= Subject key identifier: CD:C1:21:8D:5E:4D:51:4B:9B:74:B1:13:8B:62:D7:05:D1:E8:06:7C Authority key identifier: 1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43 Certificate issuer: /CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43 Certificate serial: 019B410044C3280AEC43A452BB396B0378DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 13:01:35 +0000 Manifest this update: Sun 21 Dec 2025 13:01:35 +0000 Manifest next update: Mon 22 Dec 2025 13:01:35 +0000 Files and hashes: 1: Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl (hash: 9bmnS3v0am0A6vujpBFoJYQvIccZueSKGz3GFQUvj14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:44:c3:28:0a:ec:43:a4:52:bb:39:6b:03:78:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43 Validity Not Before: Dec 21 13:01:35 2025 GMT Not After : Dec 22 13:01:35 2025 GMT Subject: CN=cdc1218d5e4d514b9b74b1138b62d705d1e8067c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f2:ab:48:99:ac:7c:64:d2:65:63:47:2c:c4: c7:54:49:76:89:78:58:83:ed:89:a3:64:69:84:6e: dd:ba:9b:cd:5b:7a:d5:57:41:f5:6f:30:2c:ea:7d: e1:b0:d4:9d:6d:43:25:0b:fc:c8:02:e0:e5:ef:a1: 42:9e:66:4a:fc:50:fe:32:77:4b:a1:7f:8e:7a:81: 8c:dd:d2:90:49:79:45:0f:ad:94:1a:83:a3:43:ea: 39:f5:9d:4d:1f:17:c1:2f:d3:25:fa:db:b5:4f:2b: 24:19:0f:e6:e1:69:67:d7:b5:74:dc:7d:3d:09:ce: ad:f6:c6:7d:76:c3:ee:22:f6:35:e2:64:87:a8:3e: 22:a3:ef:0d:72:5c:76:d7:cd:b7:39:ee:4c:8e:a7: 71:3d:d6:ed:87:fc:b2:d5:bb:5b:cd:c9:3d:d9:10: d8:e0:4b:0f:07:66:b8:a9:a4:99:6e:22:4b:60:f8: f1:60:ef:e4:a6:ad:82:60:66:3e:04:5d:6e:ce:d8: 1a:5e:f8:ad:ec:ef:1c:af:5c:15:1c:23:bb:ce:ca: 92:88:d6:96:e4:08:78:79:b3:a6:87:65:50:ce:6b: ff:5f:ac:b3:05:97:ce:1d:8f:78:09:cf:48:fb:8b: 9c:f3:cc:1c:9f:d0:e1:22:4c:00:3e:de:19:f8:c5: 6e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C1:21:8D:5E:4D:51:4B:9B:74:B1:13:8B:62:D7:05:D1:E8:06:7C X509v3 Authority Key Identifier: keyid:1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:af:4e:f9:87:ee:30:3b:2b:5b:74:01:74:4b:32:c0:a9:1a: a3:53:00:9b:ea:98:74:d0:1f:ff:ce:3a:49:04:b7:18:ad:44: d9:b2:b7:b3:8d:cb:73:1b:19:07:e5:db:67:94:b3:86:51:1e: 2a:66:73:ba:8b:7d:4e:35:10:42:3f:7e:26:82:4a:1b:c9:c1: 58:3d:2d:33:b4:8b:03:d0:59:0d:78:4c:a7:cd:4e:ec:7e:e0: cf:cd:16:8d:44:fd:c1:e1:e3:c4:b0:fc:3d:c1:b1:de:7c:a5: 12:c0:14:f9:45:6c:fa:ca:78:3b:06:35:42:65:97:53:41:37: e0:30:dd:08:14:f3:76:e9:50:62:16:c6:3a:9f:1f:e6:70:af: 1b:30:8b:90:9a:3e:fa:56:1c:7e:4f:63:70:08:26:59:c1:96: e9:5f:ad:25:19:4c:0d:f1:2b:6c:8b:d7:31:53:af:7b:38:a0: 6c:4f:29:4e:6d:2a:63:ed:56:52:fc:f3:bb:f9:0b:6a:ad:c6: 89:6a:34:fd:54:fa:ae:dc:70:c2:49:a5:80:3c:3d:2e:9e:87: f6:de:65:ef:81:2f:6e:a0:1a:2b:d5:af:d9:f6:1d:80:a4:94: c5:79:b2:b1:48:3f:65:7b:8b:10:1c:fb:34:cb:a5:91:68:46: fd:74:63:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBAETDKArsQ6RSuzlrA3jaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMGY4NGQ2OTczYWFmMmFjNDQ4ZDBkMzJhYzdmMzRkNzQw ODVhNDMwHhcNMjUxMjIxMTMwMTM1WhcNMjUxMjIyMTMwMTM1WjAzMTEwLwYDVQQD EyhjZGMxMjE4ZDVlNGQ1MTRiOWI3NGIxMTM4YjYyZDcwNWQxZTgwNjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vKrSJmsfGTSZWNHLMTHVEl2iXhY g+2Jo2RphG7dupvNW3rVV0H1bzAs6n3hsNSdbUMlC/zIAuDl76FCnmZK/FD+MndL oX+OeoGM3dKQSXlFD62UGoOjQ+o59Z1NHxfBL9Ml+tu1TyskGQ/m4Wln17V03H09 Cc6t9sZ9dsPuIvY14mSHqD4io+8Nclx21823Oe5MjqdxPdbth/yy1btbzck92RDY 4EsPB2a4qaSZbiJLYPjxYO/kpq2CYGY+BF1uztgaXvit7O8cr1wVHCO7zsqSiNaW 5Ah4ebOmh2VQzmv/X6yzBZfOHY94Cc9I+4uc88wcn9DhIkwAPt4Z+MVuvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3BIY1eTVFLm3SxE4ti1wXR6AZ8MB8GA1UdIwQY MBaAFBoPhNaXOq8qxEjQ0yrH8010CFpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9mMGUxZWYtMjFhMS00OWZkLWJhNjkt NTRhNmFkYWNjYjdkLzEvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9mMGUxZWYtMjFhMS00OWZkLWJhNjktNTRhNmFkYWNjYjdk LzEvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAla9O+Yfu MDsrW3QBdEsywKkao1MAm+qYdNAf/846SQS3GK1E2bK3s43LcxsZB+XbZ5SzhlEe KmZzuot9TjUQQj9+JoJKG8nBWD0tM7SLA9BZDXhMp81O7H7gz80WjUT9weHjxLD8 PcGx3nylEsAU+UVs+sp4OwY1QmWXU0E34DDdCBTzdulQYhbGOp8f5nCvGzCLkJo+ +lYcfk9jcAgmWcGW6V+tJRlMDfErbIvXMVOvezigbE8pTm0qY+1WUvzzu/kLaq3G iWo0/VT6rtxwwkmlgDw9Lp6H9t5l74EvbqAaK9Wv2fYdgKSUxXmysUg/ZXuLEBz7 NMulkWhG/XRjmQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:40:26 2025 by rpki-client