This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft File: GUoR_la49HpaFBUDK3f_n7CC4D8.mft (raw, json) Hash identifier: T9KCFJrurpx5jUqpf1unjxsbfcoB38SvauKXF0veqrs= Subject key identifier: 0B:3F:93:A0:FB:D6:E0:0F:62:14:6A:CE:51:F8:96:36:6E:77:DE:75 Authority key identifier: 19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F Certificate issuer: /CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f Certificate serial: 019B2D0BE3EB1880CF7B3395701BFD321121 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft Manifest number: 123E Signing time: Wed 17 Dec 2025 16:01:52 +0000 Manifest this update: Wed 17 Dec 2025 16:01:52 +0000 Manifest next update: Thu 18 Dec 2025 16:01:52 +0000 Files and hashes: 1: GUoR_la49HpaFBUDK3f_n7CC4D8.crl (hash: +rBx27hGfMAI3tIDIDxiIyUPwUt9Q3URRFY8ZoQv1Vw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:e3:eb:18:80:cf:7b:33:95:70:1b:fd:32:11:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f Validity Not Before: Dec 17 16:01:52 2025 GMT Not After : Dec 18 16:01:52 2025 GMT Subject: CN=0b3f93a0fbd6e00f62146ace51f896366e77de75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1d:35:77:f6:d5:30:89:55:e3:a3:d8:1e:bc: 66:6d:21:2b:f1:23:49:d1:8b:dc:9f:4c:f8:b8:a2: d0:c8:a4:95:19:bd:5b:36:0d:50:60:9b:99:a1:1a: f0:c4:47:35:74:61:c3:2b:83:70:ba:d9:a9:e8:70: 1a:8f:1a:51:0c:9c:56:5f:97:b1:e1:47:fb:14:a4: cb:c0:0b:ee:8d:20:e6:d9:21:29:0a:18:a7:bb:74: 25:80:aa:6e:6c:03:a1:b7:98:75:c2:f6:93:17:c5: 78:e6:ed:49:f7:60:3a:36:44:c6:ad:52:de:fd:b2: 62:1b:77:60:d1:cc:d7:71:1a:28:27:06:91:86:9a: 52:70:4e:ee:0a:98:ec:a9:e6:c4:75:10:31:8a:06: d0:1e:bc:ae:67:f6:8d:4e:ea:83:c4:82:e6:43:b7: f2:7d:f1:10:68:f4:d4:80:82:36:f7:b0:ae:11:78: e6:c7:6d:26:80:18:44:0d:82:dc:ae:4b:99:8a:ad: a8:51:33:91:ce:3d:7c:2b:1c:5c:5c:4c:29:26:8a: 8d:16:ce:bc:8b:f1:8b:de:9b:9c:0e:f8:04:cd:1f: 5c:b6:73:d8:0c:52:74:3c:fc:a8:75:33:0b:a5:ee: 36:08:d9:c0:30:2b:0f:ea:98:0d:ff:e5:f2:16:eb: df:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3F:93:A0:FB:D6:E0:0F:62:14:6A:CE:51:F8:96:36:6E:77:DE:75 X509v3 Authority Key Identifier: keyid:19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:0d:73:b9:05:70:e0:5a:5b:06:6a:0c:44:d8:1a:8f:31:53: 5c:0f:53:45:4c:00:a2:dc:e7:9b:21:c7:b7:1a:2b:4e:7b:6b: e2:c1:ab:27:21:f6:51:ba:34:c1:ac:eb:0f:af:cd:10:38:a5: be:9e:cc:b7:82:32:22:59:10:a6:c6:3e:26:3f:6a:bc:31:19: 6d:2f:46:23:f7:b1:d5:d2:9a:3c:07:88:b4:ca:9f:f3:e3:91: ea:05:0a:15:c0:48:95:31:f5:c5:54:21:51:f2:99:97:7e:97: 22:bb:22:24:49:0e:37:c5:b5:72:a5:e4:64:60:30:d2:6b:01: 99:bf:a5:8b:16:08:3b:44:d0:0a:88:f2:e5:65:c9:84:63:82: 19:1c:23:84:20:4a:57:db:6d:2e:05:e2:37:5f:61:af:58:6d: 24:eb:27:a9:b0:f0:45:b4:38:32:47:1d:1a:01:23:a3:3b:4a: a6:4a:1d:18:ee:83:a1:ba:c8:b5:10:99:bb:85:b1:5a:ec:13: fe:7f:08:18:d5:f8:0c:e8:c2:51:21:5c:c1:2a:c1:d2:fe:d5: 96:24:df:16:39:2c:54:79:16:20:69:8c:e6:96:da:10:62:78: 64:ad:8b:ee:e2:76:3b:61:de:8d:95:05:1e:07:3d:a5:db:10: 9a:e7:3e:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC+PrGIDPezOVcBv9MhEhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NGExMWZlNTZiOGY0N2E1YTE0MTUwMzJiNzdmZjlmYjA4 MmUwM2YwHhcNMjUxMjE3MTYwMTUyWhcNMjUxMjE4MTYwMTUyWjAzMTEwLwYDVQQD EygwYjNmOTNhMGZiZDZlMDBmNjIxNDZhY2U1MWY4OTYzNjZlNzdkZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR01d/bVMIlV46PYHrxmbSEr8SNJ 0Yvcn0z4uKLQyKSVGb1bNg1QYJuZoRrwxEc1dGHDK4Nwutmp6HAajxpRDJxWX5ex 4Uf7FKTLwAvujSDm2SEpChinu3QlgKpubAOht5h1wvaTF8V45u1J92A6NkTGrVLe /bJiG3dg0czXcRooJwaRhppScE7uCpjsqebEdRAxigbQHryuZ/aNTuqDxILmQ7fy ffEQaPTUgII297CuEXjmx20mgBhEDYLcrkuZiq2oUTORzj18KxxcXEwpJoqNFs68 i/GL3pucDvgEzR9ctnPYDFJ0PPyodTMLpe42CNnAMCsP6pgN/+XyFuvffwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAs/k6D71uAPYhRqzlH4ljZud951MB8GA1UdIwQY MBaAFBlKEf5WuPR6WhQVAyt3/5+wguA/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VvUl9sYTQ5SHBhRkJVREszZl9uN0NDNEQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hYWFlYzAtMGZiYS00ZWZjLTk4YjYt YzZhMTZkZTQ0MmJmLzEvR1VvUl9sYTQ5SHBhRkJVREszZl9uN0NDNEQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hYWFlYzAtMGZiYS00ZWZjLTk4YjYtYzZhMTZkZTQ0MmJm LzEvR1VvUl9sYTQ5SHBhRkJVREszZl9uN0NDNEQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQ1zuQVw 4FpbBmoMRNgajzFTXA9TRUwAotznmyHHtxorTntr4sGrJyH2Ubo0wazrD6/NEDil vp7Mt4IyIlkQpsY+Jj9qvDEZbS9GI/ex1dKaPAeItMqf8+OR6gUKFcBIlTH1xVQh UfKZl36XIrsiJEkON8W1cqXkZGAw0msBmb+lixYIO0TQCojy5WXJhGOCGRwjhCBK V9ttLgXiN19hr1htJOsnqbDwRbQ4MkcdGgEjoztKpkodGO6DobrItRCZu4WxWuwT /n8IGNX4DOjCUSFcwSrB0v7VliTfFjksVHkWIGmM5pbaEGJ4ZK2L7uJ2O2HejZUF Hgc9pdsQmuc+NA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:01:34 2025 by rpki-client