This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft File: GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft (raw, json) Hash identifier: WDxZYXBj97Gb7NeecCLD2CKfZHWHyC8RZXTxPk9hHsw= Subject key identifier: 97:3E:EC:EE:91:28:33:87:C1:63:34:07:75:58:3D:C3:87:52:0C:EC Authority key identifier: 18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC Certificate issuer: /CN=186590ee4a796301c422e033f944d263d6adeebc Certificate serial: 019B2EF949A11C67CAE6A6750609B4D92E94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft Manifest number: 12B0 Signing time: Thu 18 Dec 2025 01:00:47 +0000 Manifest this update: Thu 18 Dec 2025 01:00:47 +0000 Manifest next update: Fri 19 Dec 2025 01:00:47 +0000 Files and hashes: 1: GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl (hash: WBddOo2KV+/6n39DVzMGUL/WCEebl3IO6GK2qBdSU6Q=) 2: xbbxTo9rn50nwhGlFUGMbwhSzbo.roa (hash: zFleJFRgd2evTBBfHWP3ENqdzORcbjMKg0D2r2qzukQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:49:a1:1c:67:ca:e6:a6:75:06:09:b4:d9:2e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=186590ee4a796301c422e033f944d263d6adeebc Validity Not Before: Dec 18 01:00:47 2025 GMT Not After : Dec 19 01:00:47 2025 GMT Subject: CN=973eecee91283387c163340775583dc387520cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4b:d1:a3:8c:2d:65:2a:5a:86:32:87:65:d7: 16:fb:ed:2a:a9:10:ff:91:84:22:85:d6:ba:72:fb: 8f:b2:4c:6b:f9:ce:a7:79:70:c1:26:52:cd:32:c7: 73:ce:32:37:6f:73:3d:6a:cb:ca:43:e5:d6:16:e8: 52:5a:ad:0b:77:c7:c0:5e:8b:dd:47:36:84:ba:3a: cd:76:02:e2:3a:96:41:d0:7b:04:85:c3:a1:67:37: 30:2e:77:4c:00:37:64:14:02:a5:0a:05:7c:fb:67: bb:5c:e9:f5:a9:9c:32:cd:c2:97:e4:e8:bb:40:cf: dc:73:55:0d:e3:ef:72:f8:0e:1c:cc:8d:24:3b:51: 95:67:69:89:01:69:23:80:c0:b4:88:17:41:f7:74: d8:c2:68:7b:10:c7:1f:37:5a:8b:2b:ca:99:69:5d: 61:36:43:45:1a:30:2a:78:8b:ff:34:d4:e6:a8:50: 06:e9:cd:2b:db:88:96:dd:3a:b9:fe:1d:1d:17:92: ab:69:c0:eb:bb:8f:a6:ec:c0:3f:ce:00:5a:c1:bb: 88:0e:fe:dc:ad:d2:c7:12:3c:00:f8:3b:ea:f0:81: 04:52:ef:1a:b7:65:d2:5e:b3:db:1b:c4:dd:21:c8: 79:d0:e8:9e:71:3c:d2:02:46:0c:19:54:2a:88:46: e1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3E:EC:EE:91:28:33:87:C1:63:34:07:75:58:3D:C3:87:52:0C:EC X509v3 Authority Key Identifier: keyid:18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:e6:9a:68:27:30:87:fe:cf:4d:62:aa:28:1d:d8:54:08:c6: 37:53:44:14:b7:a5:be:32:95:11:6f:2f:dc:a1:8e:5c:40:68: c3:c6:e7:85:a4:24:7c:f5:e0:68:85:fb:b7:6e:e9:db:73:73: 3d:57:e9:03:c0:ed:ff:f7:fe:82:6b:f1:ad:93:7e:1d:e4:62: a2:16:a6:73:ba:85:b0:89:81:72:33:8a:0f:55:b7:28:c3:60: 98:1e:7b:13:fc:4c:5d:db:2d:57:88:5f:ac:76:77:07:d9:ed: 27:d5:a7:9d:76:14:d0:ff:b4:26:9a:57:08:38:26:76:31:8e: ef:0d:11:b4:0f:1f:18:55:b5:68:7a:c7:14:a5:9c:64:bc:09: 56:6e:62:e7:d5:b1:b8:fe:8b:86:9c:0b:49:80:42:fa:3d:e8: 52:f0:06:32:0a:0b:1c:92:f0:ed:07:30:51:ff:96:63:cd:4c: 5a:e9:8c:7b:b7:a4:a6:eb:07:11:78:74:99:a5:f2:fe:86:ac: 5f:52:3b:50:b4:8a:4f:ed:c9:79:4f:24:31:5d:9a:7a:35:77: d8:01:c9:fc:c2:35:93:55:df:18:0c:e2:2b:29:99:a1:aa:f9: a1:c8:64:99:2f:34:19:b2:25:50:c2:82:6d:32:04:a7:2d:ea: 76:7d:f7:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+UmhHGfK5qZ1Bgm02S6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NjU5MGVlNGE3OTYzMDFjNDIyZTAzM2Y5NDRkMjYzZDZh ZGVlYmMwHhcNMjUxMjE4MDEwMDQ3WhcNMjUxMjE5MDEwMDQ3WjAzMTEwLwYDVQQD Eyg5NzNlZWNlZTkxMjgzMzg3YzE2MzM0MDc3NTU4M2RjMzg3NTIwY2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEvRo4wtZSpahjKHZdcW++0qqRD/ kYQihda6cvuPskxr+c6neXDBJlLNMsdzzjI3b3M9asvKQ+XWFuhSWq0Ld8fAXovd RzaEujrNdgLiOpZB0HsEhcOhZzcwLndMADdkFAKlCgV8+2e7XOn1qZwyzcKX5Oi7 QM/cc1UN4+9y+A4czI0kO1GVZ2mJAWkjgMC0iBdB93TYwmh7EMcfN1qLK8qZaV1h NkNFGjAqeIv/NNTmqFAG6c0r24iW3Tq5/h0dF5KracDru4+m7MA/zgBawbuIDv7c rdLHEjwA+Dvq8IEEUu8at2XSXrPbG8TdIch50OiecTzSAkYMGVQqiEbh0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJc+7O6RKDOHwWM0B3VYPcOHUgzsMB8GA1UdIwQY MBaAFBhlkO5KeWMBxCLgM/lE0mPWre68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0dXUTdrcDVZd0hFSXVBei1VVFNZOWF0N3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84MGI4Y2YtNTc2ZC00MDQ0LWE2MjQt YWU3MmJmZDNmNzgyLzEvR0dXUTdrcDVZd0hFSXVBei1VVFNZOWF0N3J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS84MGI4Y2YtNTc2ZC00MDQ0LWE2MjQtYWU3MmJmZDNmNzgy LzEvR0dXUTdrcDVZd0hFSXVBei1VVFNZOWF0N3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOaaaCcw h/7PTWKqKB3YVAjGN1NEFLelvjKVEW8v3KGOXEBow8bnhaQkfPXgaIX7t27p23Nz PVfpA8Dt//f+gmvxrZN+HeRiohamc7qFsImBcjOKD1W3KMNgmB57E/xMXdstV4hf rHZ3B9ntJ9WnnXYU0P+0JppXCDgmdjGO7w0RtA8fGFW1aHrHFKWcZLwJVm5i59Wx uP6LhpwLSYBC+j3oUvAGMgoLHJLw7QcwUf+WY81MWumMe7ekpusHEXh0maXy/oas X1I7ULSKT+3JeU8kMV2aejV32AHJ/MI1k1XfGAziKymZoar5ochkmS80GbIlUMKC bTIEpy3qdn33HA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:30:34 2025 by rpki-client