This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json) Hash identifier: iH/RxfxvADMYhFKslDVuqv329ffXycO/cI7mulvZnSc= Subject key identifier: 0F:72:C3:4F:4A:3A:F6:2C:50:62:03:A0:10:95:33:A3:F0:DA:87:8E Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22 Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522 Certificate serial: 019B3456A067F69D01D11E6D4FAFFCD39066 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft Manifest number: 035B Signing time: Fri 19 Dec 2025 02:00:50 +0000 Manifest this update: Fri 19 Dec 2025 02:00:50 +0000 Manifest next update: Sat 20 Dec 2025 02:00:50 +0000 Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: Iq3MBTfGpyYUpPEO8C2b2Nn4w3w+pxFFdz4UUEGCLNY=) 2: RyTD8ysj6_4VmnUX2OFrVA27p2U.roa (hash: dgeC3fAtFGdk1IystX/d2Lto62C1ZW8Kifsbnvy1J74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:a0:67:f6:9d:01:d1:1e:6d:4f:af:fc:d3:90:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522 Validity Not Before: Dec 19 02:00:50 2025 GMT Not After : Dec 20 02:00:50 2025 GMT Subject: CN=0f72c34f4a3af62c506203a0109533a3f0da878e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:e9:d3:a4:f8:d6:65:ce:03:15:ed:52:09: 58:f2:0c:08:af:2b:65:77:e6:3f:a0:eb:af:62:1c: 9a:a3:49:94:70:bc:8d:da:a4:71:5f:61:6d:5a:47: 66:f4:b8:cb:13:8d:fe:45:a5:0a:70:ac:4c:9b:b9: 96:12:f0:b8:3e:a8:9c:2a:43:88:94:bd:97:c4:77: 24:c6:d9:a4:33:c4:57:69:0e:56:70:10:b9:e9:1b: ed:c3:50:bd:51:df:27:06:33:52:16:2e:67:b1:28: cf:18:ce:84:e2:85:13:a8:c0:3e:b3:04:24:f9:fa: 20:a2:a7:fc:f7:d0:6c:7e:82:1e:40:08:63:eb:e3: 72:4b:d3:17:a3:c9:b4:7b:96:46:98:d5:bf:69:41: 63:0b:bc:90:8b:14:59:91:53:51:10:24:8f:ee:0e: fb:6c:9d:c3:09:06:1d:ee:27:ab:27:81:24:88:86: b0:db:51:3b:01:6e:92:47:ae:30:52:76:b4:ec:36: 39:82:76:cc:be:35:85:92:a3:c5:b6:53:20:20:34: aa:ef:2a:24:01:04:6c:df:62:b2:f1:1d:5a:0f:03: 6a:e5:5a:39:84:3f:08:78:6c:62:a9:40:b4:36:2c: 23:0f:0b:cf:cb:01:e7:f6:c5:78:c9:19:96:71:60: 7c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:72:C3:4F:4A:3A:F6:2C:50:62:03:A0:10:95:33:A3:F0:DA:87:8E X509v3 Authority Key Identifier: keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d6:cd:b8:ca:93:02:21:a6:4d:51:6d:5e:dd:15:6d:4d:9c: e8:04:3e:3f:fd:9a:be:28:18:9a:11:fd:5e:18:3a:46:d4:73: c3:b9:d0:dc:43:84:0a:19:97:3a:96:2a:26:7c:77:e8:3b:11: 68:56:b9:28:6e:2a:b3:6d:c8:62:d5:e0:0d:ec:2c:d4:57:65: ad:81:c6:c5:81:6f:93:8a:f7:c2:60:f1:65:04:04:17:dc:41: 58:a3:cb:83:2a:0e:60:64:5b:4a:9a:37:16:af:4d:d6:a2:b6: 0c:8a:3f:52:c5:c6:cd:ef:f8:3b:12:5e:c2:33:6a:db:c4:6f: 16:d1:2b:6c:5c:0d:d1:b4:03:c7:ca:2c:84:66:9c:ca:14:d5: 53:43:6d:b1:4e:4d:df:99:ba:46:5d:61:31:04:f4:90:6f:e5: f7:f5:e5:94:27:da:7d:b1:02:64:25:47:c3:25:a3:c0:66:17: 51:a0:ab:17:05:f8:2d:e1:f0:ca:8f:14:30:9d:65:d9:d4:e5: eb:84:9c:7a:fc:0e:18:5b:bf:3d:c2:11:76:43:59:34:2f:1f: 1f:41:83:51:2e:c7:20:b8:34:e2:1c:42:a3:b2:e1:ac:31:68: 32:c8:dc:be:a0:99:03:d6:63:07:c4:7b:ea:9c:8e:d2:7f:f5: 63:2f:d2:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VqBn9p0B0R5tT6/805BmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNzRmMjc3MDJhNjJjNmI2MjdjNWVhNzBiOTZmZDI5ODIz NjQ1MjIwHhcNMjUxMjE5MDIwMDUwWhcNMjUxMjIwMDIwMDUwWjAzMTEwLwYDVQQD EygwZjcyYzM0ZjRhM2FmNjJjNTA2MjAzYTAxMDk1MzNhM2YwZGE4NzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBLp06T41mXOAxXtUglY8gwIrytl d+Y/oOuvYhyao0mUcLyN2qRxX2FtWkdm9LjLE43+RaUKcKxMm7mWEvC4PqicKkOI lL2XxHckxtmkM8RXaQ5WcBC56Rvtw1C9Ud8nBjNSFi5nsSjPGM6E4oUTqMA+swQk +fogoqf899BsfoIeQAhj6+NyS9MXo8m0e5ZGmNW/aUFjC7yQixRZkVNRECSP7g77 bJ3DCQYd7ierJ4EkiIaw21E7AW6SR64wUna07DY5gnbMvjWFkqPFtlMgIDSq7yok AQRs32Ky8R1aDwNq5Vo5hD8IeGxiqUC0NiwjDwvPywHn9sV4yRmWcWB8vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9yw09KOvYsUGIDoBCVM6Pw2oeOMB8GA1UdIwQY MBaAFBp08ncCpixrYnxepwuW/SmCNkUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUt MTQ1MGVmYmQ5ZTM1LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUtMTQ1MGVmYmQ5ZTM1 LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9bNuMqT AiGmTVFtXt0VbU2c6AQ+P/2avigYmhH9Xhg6RtRzw7nQ3EOEChmXOpYqJnx36DsR aFa5KG4qs23IYtXgDews1FdlrYHGxYFvk4r3wmDxZQQEF9xBWKPLgyoOYGRbSpo3 Fq9N1qK2DIo/UsXGze/4OxJewjNq28RvFtErbFwN0bQDx8oshGacyhTVU0NtsU5N 35m6Rl1hMQT0kG/l9/XllCfafbECZCVHwyWjwGYXUaCrFwX4LeHwyo8UMJ1l2dTl 64ScevwOGFu/PcIRdkNZNC8fH0GDUS7HILg04hxCo7LhrDFoMsjcvqCZA9ZjB8R7 6pyO0n/1Yy/SvA== -----END CERTIFICATE-----Generated at Fri Dec 19 09:19:05 2025 by rpki-client