This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft File: GHrmJafreY8V_B5hw-E3AaNW_hY.mft (raw, json) Hash identifier: YGM5h4R8pum+grVem/0ysVCa8dSk5iwQAOhiWEcTDsY= Subject key identifier: DE:96:58:F7:6F:87:A8:30:6E:38:03:11:23:29:75:7A:13:AF:83:58 Authority key identifier: 18:7A:E6:25:A7:EB:79:8F:15:FC:1E:61:C3:E1:37:01:A3:56:FE:16 Certificate issuer: /CN=187ae625a7eb798f15fc1e61c3e13701a356fe16 Certificate serial: 019B597593D9AEBFAD9D5EB5057CED60A9E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft Manifest number: 01B6 Signing time: Fri 26 Dec 2025 07:00:36 +0000 Manifest this update: Fri 26 Dec 2025 07:00:36 +0000 Manifest next update: Sat 27 Dec 2025 07:00:36 +0000 Files and hashes: 1: GHrmJafreY8V_B5hw-E3AaNW_hY.crl (hash: P67Vc4rOnOCRo76ogzk/fD2sS+DKl6A38F2aZAwa/H4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft rsync://rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:93:d9:ae:bf:ad:9d:5e:b5:05:7c:ed:60:a9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=187ae625a7eb798f15fc1e61c3e13701a356fe16 Validity Not Before: Dec 26 07:00:36 2025 GMT Not After : Dec 27 07:00:36 2025 GMT Subject: CN=de9658f76f87a8306e3803112329757a13af8358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5e:dc:c1:49:20:1c:65:05:4b:9a:79:15:24: a8:5b:a9:d7:c7:10:24:01:fa:04:18:12:14:ee:34: a7:6f:66:cd:c4:f5:80:fd:10:8a:8a:31:85:14:64: 59:88:cc:78:09:25:62:90:7e:5b:1e:94:01:98:2b: 33:52:d4:3f:88:fa:89:6b:e8:b4:18:62:a9:b8:00: 0f:46:31:92:e7:bd:68:4d:77:21:8f:21:b1:a5:ec: 82:7c:14:28:25:13:95:53:a5:d5:dd:28:69:f3:d7: a2:51:d7:fd:fb:6d:64:98:3b:5d:6d:1b:67:52:c7: 5d:9f:f1:aa:86:b9:e9:f9:9f:a5:c7:b4:95:f4:d6: d5:74:a3:b6:fb:29:fb:76:3c:8f:58:82:df:6c:84: d2:a8:73:39:ce:a4:82:f1:d1:c1:63:ef:1f:c9:b7: 2f:f1:a5:fb:d8:e6:26:19:4d:1d:03:59:02:88:ab: 35:50:94:5d:5c:b4:eb:1f:c6:7d:5a:9a:4d:57:1f: a2:22:92:b1:a4:3d:1f:bb:d9:fb:83:28:d9:99:80: 19:2f:d6:eb:51:a9:25:53:0b:50:21:1f:1e:43:88: ff:63:49:7f:ba:46:e1:bf:93:0b:aa:12:a3:85:6a: 88:ce:53:a2:70:46:18:eb:64:48:86:5c:46:00:50: 0a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:96:58:F7:6F:87:A8:30:6E:38:03:11:23:29:75:7A:13:AF:83:58 X509v3 Authority Key Identifier: keyid:18:7A:E6:25:A7:EB:79:8F:15:FC:1E:61:C3:E1:37:01:A3:56:FE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:75:fe:55:5d:a3:a2:0a:5b:58:da:b4:db:ae:2f:70:bd:11: d5:14:6e:b0:af:03:b3:82:80:c9:fc:08:4a:25:b3:dd:0d:1c: ce:02:6a:ce:7a:b8:0b:37:67:88:5a:61:b9:ca:16:34:d2:3d: 6c:a7:32:f1:40:40:3a:ef:25:c4:03:2f:f8:cf:45:5a:cc:59: ef:57:e8:ec:1a:2b:ff:c1:23:8b:e9:84:34:29:0e:15:c6:b2: f9:4b:b1:17:7b:21:c4:5b:32:a4:24:2b:a5:12:0a:97:70:99: 28:f2:e9:d0:81:38:08:54:1c:e1:bf:2f:a3:94:e4:e0:d2:81: 99:0d:3a:c2:80:1a:66:6d:9d:84:7a:ee:c6:c8:c3:10:94:f3: 14:fd:f9:21:f4:47:1d:96:d0:f4:c1:36:24:6a:22:b1:40:06: a2:e0:b2:79:ba:ee:6e:4b:3a:a3:46:21:02:8c:0f:88:c3:0c: 56:b9:d8:6b:d8:33:5f:37:61:62:52:35:b0:7e:34:1c:7c:95: 08:9b:88:f3:00:ea:c7:d9:83:f6:ff:df:66:e4:7c:7f:a5:f7: f0:ee:03:5f:12:d7:3e:ad:71:8d:f9:89:ea:a5:e6:a0:bb:95: 1d:c2:15:8c:89:2c:c6:69:c5:8b:bf:fe:2c:25:d6:0f:fb:b3: 0e:eb:41:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdZPZrr+tnV61BXztYKngMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4N2FlNjI1YTdlYjc5OGYxNWZjMWU2MWMzZTEzNzAxYTM1 NmZlMTYwHhcNMjUxMjI2MDcwMDM2WhcNMjUxMjI3MDcwMDM2WjAzMTEwLwYDVQQD EyhkZTk2NThmNzZmODdhODMwNmUzODAzMTEyMzI5NzU3YTEzYWY4MzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5F7cwUkgHGUFS5p5FSSoW6nXxxAk AfoEGBIU7jSnb2bNxPWA/RCKijGFFGRZiMx4CSVikH5bHpQBmCszUtQ/iPqJa+i0 GGKpuAAPRjGS571oTXchjyGxpeyCfBQoJROVU6XV3Shp89eiUdf9+21kmDtdbRtn Usddn/Gqhrnp+Z+lx7SV9NbVdKO2+yn7djyPWILfbITSqHM5zqSC8dHBY+8fybcv 8aX72OYmGU0dA1kCiKs1UJRdXLTrH8Z9WppNVx+iIpKxpD0fu9n7gyjZmYAZL9br UaklUwtQIR8eQ4j/Y0l/ukbhv5MLqhKjhWqIzlOicEYY62RIhlxGAFAKOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6WWPdvh6gwbjgDESMpdXoTr4NYMB8GA1UdIwQY MBaAFBh65iWn63mPFfweYcPhNwGjVv4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0hybUphZnJlWThWX0I1aHctRTNBYU5XX2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85YTVhZjItNWRhZi00MDBiLWI5MWEt NWMwMGNiZTc2ZjM0LzEvR0hybUphZnJlWThWX0I1aHctRTNBYU5XX2hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85YTVhZjItNWRhZi00MDBiLWI5MWEtNWMwMGNiZTc2ZjM0 LzEvR0hybUphZnJlWThWX0I1aHctRTNBYU5XX2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3X+VV2j ogpbWNq0264vcL0R1RRusK8Ds4KAyfwISiWz3Q0czgJqznq4CzdniFphucoWNNI9 bKcy8UBAOu8lxAMv+M9FWsxZ71fo7Bor/8Eji+mENCkOFcay+UuxF3shxFsypCQr pRIKl3CZKPLp0IE4CFQc4b8vo5Tk4NKBmQ06woAaZm2dhHruxsjDEJTzFP35IfRH HZbQ9ME2JGoisUAGouCyebrubks6o0YhAowPiMMMVrnYa9gzXzdhYlI1sH40HHyV CJuI8wDqx9mD9v/fZuR8f6X38O4DXxLXPq1xjfmJ6qXmoLuVHcIVjIksxmnFi7/+ LCXWD/uzDutBKQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:22 2025 by rpki-client