This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft File: GvujiocH_SMcOIfkpSvc3tqyAyM.mft (raw, json) Hash identifier: cnbdcXLxYG1oYimQ0WX6BfpnB7ylSeKYF/EquEpBymE= Subject key identifier: DB:C2:92:46:E0:60:C8:72:68:BC:83:2F:50:54:D6:52:1B:B6:50:13 Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23 Certificate issuer: /CN=1afba38a8707fd231c3887e4a52bdcdedab20323 Certificate serial: 019B0E929DDF2E89C99E5741E9609C1BE587 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft Manifest number: 08CE Signing time: Thu 11 Dec 2025 18:00:48 +0000 Manifest this update: Thu 11 Dec 2025 18:00:48 +0000 Manifest next update: Fri 12 Dec 2025 18:00:48 +0000 Files and hashes: 1: GvujiocH_SMcOIfkpSvc3tqyAyM.crl (hash: NX+svFOvllLPWg7RTwpQvatHA4R2xu4e8y/IOce6cRA=) 2: MBByOIj39pYIect2LdRi3wnM4oc.roa (hash: tdzNEKUZ3mXK0KXsFeqcPam83cZmJKXuHjjqHDm2aqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:9d:df:2e:89:c9:9e:57:41:e9:60:9c:1b:e5:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323 Validity Not Before: Dec 11 18:00:48 2025 GMT Not After : Dec 12 18:00:48 2025 GMT Subject: CN=dbc29246e060c87268bc832f5054d6521bb65013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:25:c4:43:94:e5:77:92:92:ac:04:28:e9:d0: b4:2e:4e:9c:44:7a:fc:ad:31:9d:06:36:0d:80:71: a4:e2:8c:66:e1:e7:15:1a:63:67:bf:f7:df:51:2f: 14:da:a5:79:f9:4e:30:8c:d0:34:66:d0:64:2b:c4: 26:10:d5:d4:e6:20:bd:3a:ac:70:b5:59:d2:8a:9d: 52:a0:52:91:fb:9f:a7:ac:ce:02:42:45:c2:10:ba: 0f:a6:9e:54:0c:b5:98:ee:2f:9c:92:ec:4a:dd:90: 1c:fc:a6:3b:2d:48:44:99:9b:7d:93:12:00:36:e8: 2e:a9:58:c7:b5:de:8d:73:8e:67:42:84:71:e9:f5: c6:3d:2a:05:61:c9:89:e5:91:95:11:d6:aa:01:83: dc:cf:4e:41:63:72:62:8e:1b:51:57:8f:8b:00:b8: 0a:b3:0c:6a:cf:35:9a:85:64:b6:f9:6e:09:7a:5b: 7b:8c:d8:60:91:f1:d5:09:52:ac:b0:23:70:c5:8f: 22:d9:67:90:75:09:a5:bb:bd:c0:8b:76:04:f9:1b: 14:61:ef:eb:26:ab:27:ba:48:9c:e5:f2:50:3c:de: 1f:6e:59:02:fe:a6:d1:44:c5:4c:f3:57:49:7a:f2: ad:c4:a0:e1:4c:c5:43:33:4a:10:fc:ad:08:53:3e: 13:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C2:92:46:E0:60:C8:72:68:BC:83:2F:50:54:D6:52:1B:B6:50:13 X509v3 Authority Key Identifier: keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:47:74:e4:66:d0:bf:9f:68:79:b0:b4:df:11:b8:1b:b9:62: 8e:23:d0:ce:6e:42:8a:bd:bd:bc:85:f1:87:cc:b8:6b:e1:09: ae:4b:46:2c:c4:6f:f7:d4:62:c5:4b:3e:bb:66:e0:d4:05:e7: f8:6a:ce:53:44:aa:70:06:3f:fe:d3:72:62:77:a2:3e:06:b1: 80:10:41:90:5f:aa:eb:1c:6a:dc:d3:32:ea:d8:01:2d:da:6b: 63:6b:f4:a7:2d:d2:2a:ee:07:85:4e:44:cc:0b:5b:ac:73:9f: df:89:d2:26:35:49:4e:33:fc:84:60:b5:93:6c:78:82:f6:1b: 0a:be:24:e8:53:93:af:1a:25:04:0d:ae:a6:75:a3:50:bd:95: f6:de:60:2c:06:2f:e2:76:4b:e8:da:f7:ad:20:d4:05:e8:bc: ed:05:b6:7c:2f:1c:7d:c2:d5:fc:d6:a8:b7:df:64:7f:2a:ac: f5:de:4c:49:81:6e:f7:e5:75:c2:08:c4:2f:65:3e:d0:72:ad: 6a:24:94:64:c3:10:dc:38:1d:41:53:d1:e6:03:6a:b3:bf:97: b2:35:2c:be:1b:9c:14:da:49:76:b6:ac:e2:fa:d1:6c:ab:7f: 6a:01:d9:c9:75:6d:42:c4:0c:cd:50:d1:ef:8c:66:e6:27:94: fd:c4:0d:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkp3fLonJnldB6WCcG+WHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZmJhMzhhODcwN2ZkMjMxYzM4ODdlNGE1MmJkY2RlZGFi MjAzMjMwHhcNMjUxMjExMTgwMDQ4WhcNMjUxMjEyMTgwMDQ4WjAzMTEwLwYDVQQD EyhkYmMyOTI0NmUwNjBjODcyNjhiYzgzMmY1MDU0ZDY1MjFiYjY1MDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSXEQ5Tld5KSrAQo6dC0Lk6cRHr8 rTGdBjYNgHGk4oxm4ecVGmNnv/ffUS8U2qV5+U4wjNA0ZtBkK8QmENXU5iC9Oqxw tVnSip1SoFKR+5+nrM4CQkXCELoPpp5UDLWY7i+ckuxK3ZAc/KY7LUhEmZt9kxIA NuguqVjHtd6Nc45nQoRx6fXGPSoFYcmJ5ZGVEdaqAYPcz05BY3JijhtRV4+LALgK swxqzzWahWS2+W4Jelt7jNhgkfHVCVKssCNwxY8i2WeQdQmlu73Ai3YE+RsUYe/r Jqsnukic5fJQPN4fblkC/qbRRMVM81dJevKtxKDhTMVDM0oQ/K0IUz4TSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvCkkbgYMhyaLyDL1BU1lIbtlATMB8GA1UdIwQY MBaAFBr7o4qHB/0jHDiH5KUr3N7asgMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3Z1amlvY0hfU01jT0lma3BTdmMzdHF5QXlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83YTliYTItNmE2YS00YzdjLTg4MmEt MDk5NmFlZDMyZjNiLzEvR3Z1amlvY0hfU01jT0lma3BTdmMzdHF5QXlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83YTliYTItNmE2YS00YzdjLTg4MmEtMDk5NmFlZDMyZjNi LzEvR3Z1amlvY0hfU01jT0lma3BTdmMzdHF5QXlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwEd05GbQ v59oebC03xG4G7lijiPQzm5Cir29vIXxh8y4a+EJrktGLMRv99RixUs+u2bg1AXn +GrOU0SqcAY//tNyYneiPgaxgBBBkF+q6xxq3NMy6tgBLdprY2v0py3SKu4HhU5E zAtbrHOf34nSJjVJTjP8hGC1k2x4gvYbCr4k6FOTrxolBA2upnWjUL2V9t5gLAYv 4nZL6Nr3rSDUBei87QW2fC8cfcLV/Naot99kfyqs9d5MSYFu9+V1wgjEL2U+0HKt aiSUZMMQ3DgdQVPR5gNqs7+XsjUsvhucFNpJdras4vrRbKt/agHZyXVtQsQMzVDR 74xm5ieU/cQNJQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:24:42 2025 by rpki-client