This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft File: GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft (raw, json) Hash identifier: A8J8yg5hPutLVoXYDKJZSjLjjaQUdtfydQypkmDj8Gg= Subject key identifier: 69:DC:97:6D:21:8E:B2:AD:C2:48:73:EB:41:7A:C7:D3:86:99:A8:42 Authority key identifier: 19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01 Certificate issuer: /CN=195a12a0e73482d993260598a25c8f5a5c49d201 Certificate serial: 019B262D73E755F6E7EBB257CB84F273CAF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft Manifest number: 1779 Signing time: Tue 16 Dec 2025 08:01:11 +0000 Manifest this update: Tue 16 Dec 2025 08:01:11 +0000 Manifest next update: Wed 17 Dec 2025 08:01:11 +0000 Files and hashes: 1: GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl (hash: kfz0tntWk7hVD4vAL/1t6Gmd/lgSqhrsIU0zRauwHHk=) 2: UkXF7s7wvZTNugO0xMbM-tho3CU.roa (hash: haf3+lwW0Ofrlk+CxaFcagM4HVa+8i2mqBkmuNQ3QQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:73:e7:55:f6:e7:eb:b2:57:cb:84:f2:73:ca:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=195a12a0e73482d993260598a25c8f5a5c49d201 Validity Not Before: Dec 16 08:01:11 2025 GMT Not After : Dec 17 08:01:11 2025 GMT Subject: CN=69dc976d218eb2adc24873eb417ac7d38699a842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:bb:4b:48:db:c1:5f:b0:35:1b:9f:76:0b: 8b:38:13:28:8d:ca:d4:de:33:0b:b6:9b:c6:44:7f: af:fb:c5:05:50:33:59:ff:75:ad:e5:61:62:49:1a: 5a:5c:1a:91:ef:c5:c6:bb:89:72:06:27:b2:ed:c7: 91:df:90:f6:62:de:e2:91:0a:2e:fa:e8:55:2a:84: a2:9c:71:ae:ba:b4:a6:97:b0:f7:29:52:9f:26:b2: f5:6a:08:09:7f:0e:01:16:cb:cf:3d:85:05:96:ec: ac:e3:1f:49:75:a2:5d:2e:76:e5:9c:f8:32:83:52: c0:15:47:95:8e:4d:52:63:ff:90:10:bb:b3:01:2b: 3d:bb:ce:45:80:f1:f1:8a:30:29:a0:05:a4:8d:79: 4f:8c:ca:38:8c:11:57:04:e8:6f:35:26:f8:84:c1: 21:8a:ea:93:1a:c5:0b:74:d7:e1:1f:9f:ee:61:e5: 52:6b:5d:ff:ad:81:18:7b:5f:54:63:14:d3:f6:c9: 67:a5:e5:22:2c:1c:b9:42:ab:da:3d:b5:46:1d:b4: 4b:9f:b0:5a:ec:59:9d:21:f5:c1:5c:10:e3:b5:59: 5a:be:cb:d7:2d:3e:b2:a9:57:97:6a:3a:4f:51:8b: 32:4c:7c:87:cf:cd:84:54:cb:06:95:a0:bc:92:2c: 36:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DC:97:6D:21:8E:B2:AD:C2:48:73:EB:41:7A:C7:D3:86:99:A8:42 X509v3 Authority Key Identifier: keyid:19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:83:67:68:65:2e:06:d7:f9:b0:38:61:33:d8:4a:73:66:68: 92:ad:ca:83:3b:96:db:95:b9:93:ba:38:ff:78:ed:f0:b6:23: 43:12:7d:6a:b1:44:f4:03:48:c6:80:8c:4c:f6:cc:a1:67:b9: b2:59:b2:76:f2:71:6f:c8:06:b2:b3:ab:5c:db:93:87:d0:b5: 3c:77:ca:eb:84:88:5c:a1:62:56:f4:47:a5:e2:c6:3c:25:06: 0c:51:a0:22:50:ca:9d:84:05:a0:43:8f:b8:d2:4d:bf:04:41: 1d:5a:d0:c8:14:9b:97:6e:d8:29:a8:af:2f:3d:ab:c5:46:02: 9b:17:53:2f:4d:51:3a:f4:eb:3f:ed:30:9b:9d:95:e2:87:53: 1d:6b:f2:22:57:23:81:0b:55:17:84:3c:92:85:a1:5e:90:23: 90:c0:55:b4:b8:09:60:39:db:e5:f9:fb:1a:95:28:42:fc:98: 6b:16:fb:08:14:f4:ee:20:3e:4d:05:12:d1:aa:9c:34:cc:53: aa:98:d2:26:9e:2a:3a:a1:a5:e9:eb:c8:e9:ab:39:e1:05:e4: 03:ce:43:17:6e:16:79:2a:d1:55:61:33:dd:f5:71:bf:27:5a: f8:de:a2:84:86:31:97:10:6c:4e:3a:3a:9b:42:f6:0d:5c:5e: ea:54:76:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLXPnVfbn67JXy4Tyc8r2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NWExMmEwZTczNDgyZDk5MzI2MDU5OGEyNWM4ZjVhNWM0 OWQyMDEwHhcNMjUxMjE2MDgwMTExWhcNMjUxMjE3MDgwMTExWjAzMTEwLwYDVQQD Eyg2OWRjOTc2ZDIxOGViMmFkYzI0ODczZWI0MTdhYzdkMzg2OTlhODQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwte7S0jbwV+wNRufdguLOBMojcrU 3jMLtpvGRH+v+8UFUDNZ/3Wt5WFiSRpaXBqR78XGu4lyBiey7ceR35D2Yt7ikQou +uhVKoSinHGuurSml7D3KVKfJrL1aggJfw4BFsvPPYUFluys4x9JdaJdLnblnPgy g1LAFUeVjk1SY/+QELuzASs9u85FgPHxijApoAWkjXlPjMo4jBFXBOhvNSb4hMEh iuqTGsULdNfhH5/uYeVSa13/rYEYe19UYxTT9slnpeUiLBy5QqvaPbVGHbRLn7Ba 7FmdIfXBXBDjtVlavsvXLT6yqVeXajpPUYsyTHyHz82EVMsGlaC8kiw2DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGncl20hjrKtwkhz60F6x9OGmahCMB8GA1UdIwQY MBaAFBlaEqDnNILZkyYFmKJcj1pcSdIBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1ZvU29PYzBndG1USmdXWW9seVBXbHhKMGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8wYzE0ZjQtOWE0Ny00YTVhLWEzN2Qt ZjM1NTVkZGYyODBhLzEvR1ZvU29PYzBndG1USmdXWW9seVBXbHhKMGdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8wYzE0ZjQtOWE0Ny00YTVhLWEzN2QtZjM1NTVkZGYyODBh LzEvR1ZvU29PYzBndG1USmdXWW9seVBXbHhKMGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWINnaGUu Btf5sDhhM9hKc2Zokq3KgzuW25W5k7o4/3jt8LYjQxJ9arFE9ANIxoCMTPbMoWe5 slmydvJxb8gGsrOrXNuTh9C1PHfK64SIXKFiVvRHpeLGPCUGDFGgIlDKnYQFoEOP uNJNvwRBHVrQyBSbl27YKaivLz2rxUYCmxdTL01ROvTrP+0wm52V4odTHWvyIlcj gQtVF4Q8koWhXpAjkMBVtLgJYDnb5fn7GpUoQvyYaxb7CBT07iA+TQUS0aqcNMxT qpjSJp4qOqGl6evI6as54QXkA85DF24WeSrRVWEz3fVxvyda+N6ihIYxlxBsTjo6 m0L2DVxe6lR2ug== -----END CERTIFICATE-----Generated at Tue Dec 16 14:24:01 2025 by rpki-client