This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft File: GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json) Hash identifier: vXLp5dd+qesD55tNswOc/x4NBXQ7fFHwyNbLillpM/A= Subject key identifier: 50:D1:C2:E2:9B:C1:B1:A8:6B:5B:2F:39:86:1C:A8:CA:23:EA:8C:35 Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61 Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061 Certificate serial: 019B405AC65875026F8230E8A34DE35A71B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft Manifest number: 0C3F Signing time: Sun 21 Dec 2025 10:00:49 +0000 Manifest this update: Sun 21 Dec 2025 10:00:49 +0000 Manifest next update: Mon 22 Dec 2025 10:00:49 +0000 Files and hashes: 1: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (hash: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=) 2: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: /M3AtQwiADXgjUsNgovUBVKZIUrkTFOl9Jxe9CNtxEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:c6:58:75:02:6f:82:30:e8:a3:4d:e3:5a:71:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061 Validity Not Before: Dec 21 10:00:49 2025 GMT Not After : Dec 22 10:00:49 2025 GMT Subject: CN=50d1c2e29bc1b1a86b5b2f39861ca8ca23ea8c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:95:45:1d:37:2a:f5:73:26:30:3d:4d:a3:3f: ac:40:e1:87:d3:63:26:c4:9c:e6:f3:5e:2e:50:d0: ad:e7:9c:03:74:29:43:0f:57:df:98:b4:a7:09:8d: ee:47:cd:28:b6:d9:fb:9d:66:1c:45:e0:3f:e5:65: d9:4b:11:1e:35:2a:ff:2f:4a:0e:7b:6b:e5:31:59: ea:2d:fa:7a:ef:f2:ff:e9:14:67:63:ab:7e:9c:4a: 3a:17:2d:36:a2:bc:02:89:0b:ca:b8:77:27:27:2e: 33:ad:b8:b1:0c:c1:72:46:cd:d8:4e:97:6f:57:0e: 48:c4:bc:87:b8:99:63:1d:6d:88:52:2e:82:12:07: 81:a4:28:33:ad:1b:af:46:a7:83:59:e4:0a:d0:c3: 57:17:32:cf:cf:ec:65:92:6d:22:3b:4a:40:6b:d6: b0:c0:f8:03:ac:ed:3d:85:b4:86:b5:79:2d:60:f1: 73:68:20:23:9e:8f:6c:cb:c6:71:f4:ac:41:12:73: 8a:1b:51:8f:85:36:b6:4e:0c:dc:c6:e1:8f:80:f7: 6d:35:03:5a:12:d5:db:18:e0:72:f0:d9:2e:39:f1: 19:91:3a:76:3b:e0:9c:e6:e7:28:e9:17:76:b4:98: ee:f4:49:1f:64:fd:10:15:94:0f:29:40:2b:11:5b: 86:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D1:C2:E2:9B:C1:B1:A8:6B:5B:2F:39:86:1C:A8:CA:23:EA:8C:35 X509v3 Authority Key Identifier: keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:82:54:98:d3:21:43:92:f4:48:38:12:66:82:61:2b:db:f8: eb:21:39:bd:0c:e2:f2:c2:a4:bf:96:16:ab:aa:92:06:44:b9: 88:68:9c:e1:79:dd:fc:64:05:92:e6:f6:ce:91:81:2b:d1:6d: 13:70:89:df:d8:30:a4:ee:13:88:ff:f4:d3:8d:0b:5a:59:6a: 3f:7e:d1:3c:2b:74:5b:0e:d8:3d:27:4d:ad:19:e6:1f:c7:9d: b4:ed:da:22:d9:a9:0f:18:bf:63:27:d2:80:9a:8e:fa:31:81: b1:87:7d:55:90:40:3f:ed:12:b6:38:f5:51:74:55:8f:e2:d1: c3:c5:b2:8d:d8:7d:02:94:1e:fb:01:8e:c5:48:e5:1d:71:36: ef:c6:33:e5:9d:b2:83:e5:9c:a4:89:18:c1:8d:81:9e:c1:a0: 76:c9:c8:80:fd:97:2b:29:14:17:26:90:dd:17:f2:95:eb:cd: 02:c6:d7:61:6d:c1:cb:68:17:de:e2:94:fb:4d:9d:db:dc:9e: e2:5a:b6:dc:49:5a:a1:66:c9:b9:c4:36:1f:2f:5c:49:39:d2: 15:bf:19:56:f5:a5:6a:8f:4d:64:fc:54:2c:bb:19:92:6f:0b: c5:d7:b0:7f:c2:d2:b2:d2:64:12:79:a2:c9:15:50:df:40:bb: 28:0c:5b:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWsZYdQJvgjDoo03jWnG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YzFhYzY4ODJkZTA4OTMwNjBmODA5MTdkN2I4NThjNWMz MGYwNjEwHhcNMjUxMjIxMTAwMDQ5WhcNMjUxMjIyMTAwMDQ5WjAzMTEwLwYDVQQD Eyg1MGQxYzJlMjliYzFiMWE4NmI1YjJmMzk4NjFjYThjYTIzZWE4YzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZVFHTcq9XMmMD1Noz+sQOGH02Mm xJzm814uUNCt55wDdClDD1ffmLSnCY3uR80ottn7nWYcReA/5WXZSxEeNSr/L0oO e2vlMVnqLfp67/L/6RRnY6t+nEo6Fy02orwCiQvKuHcnJy4zrbixDMFyRs3YTpdv Vw5IxLyHuJljHW2IUi6CEgeBpCgzrRuvRqeDWeQK0MNXFzLPz+xlkm0iO0pAa9aw wPgDrO09hbSGtXktYPFzaCAjno9sy8Zx9KxBEnOKG1GPhTa2TgzcxuGPgPdtNQNa EtXbGOBy8NkuOfEZkTp2O+Cc5uco6Rd2tJju9EkfZP0QFZQPKUArEVuG8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDRwuKbwbGoa1svOYYcqMoj6ow1MB8GA1UdIwQY MBaAFBjBrGiC3giTBg+AkX17hYxcMPBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84NzAxMjMtNzE5ZC00NTA2LWJmODYt ZThkZTA1OTI3OGJkLzEvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS84NzAxMjMtNzE5ZC00NTA2LWJmODYtZThkZTA1OTI3OGJk LzEvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYJUmNMh Q5L0SDgSZoJhK9v46yE5vQzi8sKkv5YWq6qSBkS5iGic4Xnd/GQFkub2zpGBK9Ft E3CJ39gwpO4TiP/0040LWllqP37RPCt0Ww7YPSdNrRnmH8edtO3aItmpDxi/YyfS gJqO+jGBsYd9VZBAP+0Stjj1UXRVj+LRw8Wyjdh9ApQe+wGOxUjlHXE278Yz5Z2y g+WcpIkYwY2BnsGgdsnIgP2XKykUFyaQ3RfylevNAsbXYW3By2gX3uKU+02d29ye 4lq23ElaoWbJucQ2Hy9cSTnSFb8ZVvWlao9NZPxULLsZkm8Lxdewf8LSstJkEnmi yRVQ30C7KAxbqA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:41:29 2025 by rpki-client