This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft File: GPijrw2MDVHeLd0mWtVNq5e95s4.mft (raw, json) Hash identifier: qPs4AxDB18gjtHCX66em4uaQcWZKvfkR+O2DUNKzMGA= Subject key identifier: C4:54:80:53:D8:CB:B1:23:2A:92:E7:D0:FE:A5:9C:28:78:4D:E2:24 Authority key identifier: 18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE Certificate issuer: /CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce Certificate serial: 019B179596ED300BEBFB15597908421F4BE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft Manifest number: 22 Signing time: Sat 13 Dec 2025 12:00:37 +0000 Manifest this update: Sat 13 Dec 2025 12:00:37 +0000 Manifest next update: Sun 14 Dec 2025 12:00:37 +0000 Files and hashes: 1: GPijrw2MDVHeLd0mWtVNq5e95s4.crl (hash: NiYK8p37Yc+X/vSLl+hOi3bFpVsQGTT1PnTNhiap/r0=) 2: jtoBQwIUDDJGQnPKKMk_RqjJnM8.roa (hash: qs/ndOyS1IApu6dntwwwn/J4lhn/hjfKt5trUC8kNUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:95:96:ed:30:0b:eb:fb:15:59:79:08:42:1f:4b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce Validity Not Before: Dec 13 12:00:37 2025 GMT Not After : Dec 14 12:00:37 2025 GMT Subject: CN=c4548053d8cbb1232a92e7d0fea59c28784de224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:e8:84:b9:37:49:a0:e4:d6:a6:4f:33:a6: 8c:ed:95:49:e9:15:1c:c9:f0:35:67:f3:e9:3d:d8: 05:d5:b1:2b:45:e6:47:40:3a:8f:11:1a:51:0d:ca: c2:f8:6c:70:fb:68:8f:a8:b3:df:02:c8:62:e1:29: 54:28:b4:94:63:94:d9:dc:5f:a4:52:7f:e0:99:22: 6f:f9:73:4d:7b:58:62:fa:12:26:27:54:80:66:18: 97:2c:45:95:c4:62:20:cb:0f:9c:2b:8a:c3:11:8f: 71:3f:1e:de:2a:2d:46:3e:f5:dd:ec:26:de:e4:02: 69:11:55:0e:f3:10:5f:9c:16:db:9f:cd:88:d7:a5: 52:d3:fd:b1:cb:f3:9e:20:86:eb:ef:b6:27:51:b2: 9f:7e:b6:3a:94:38:16:20:c4:99:b7:cb:c3:4c:17: 7f:41:2b:1c:7f:5c:2f:01:ad:1b:94:5e:1b:61:a9: 6f:91:06:a9:54:aa:c1:1e:ef:00:23:ee:c9:bc:fd: 3c:13:73:5b:9f:c4:2f:55:27:58:01:11:2e:00:5e: 57:98:71:8f:d4:26:68:1e:db:b2:a8:ca:a5:93:36: 62:82:39:28:7b:b4:a5:f9:45:8e:25:99:41:77:af: 57:30:88:08:53:f6:a4:83:09:29:a7:5f:12:8c:e9: 64:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:54:80:53:D8:CB:B1:23:2A:92:E7:D0:FE:A5:9C:28:78:4D:E2:24 X509v3 Authority Key Identifier: keyid:18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:df:d4:b2:52:af:04:36:77:96:af:17:76:d4:85:d3:81:67: cd:f3:90:23:1c:6d:42:13:64:41:6b:79:df:ad:34:b8:d9:05: bd:a4:6e:6a:94:45:f5:98:39:ee:d3:89:52:57:a6:2d:5e:29: c8:f1:67:7e:d1:18:12:ac:d6:fc:7c:4b:b7:d0:7e:70:3b:b2: 3e:fb:13:38:24:53:f8:44:a8:37:97:e0:88:5f:4c:c1:b5:fe: a7:b9:8a:9f:34:56:e7:88:41:48:b4:e2:25:39:2b:f6:bb:35: fe:b1:24:ec:b2:31:48:e5:ed:1a:a7:3e:09:a3:71:4d:74:0e: 7a:67:a4:cc:5b:66:36:3f:82:20:ba:d0:1d:6f:01:11:71:42: f4:20:8c:4f:c3:38:9b:4a:89:a3:1b:8b:d6:13:da:ab:f2:2c: 6c:c3:4c:6c:4b:3e:f2:de:5b:73:21:3e:1d:53:65:c5:6f:5f: ee:d9:fd:85:fc:b4:0f:61:8b:64:14:c2:12:e8:76:f9:b6:83: 76:cd:98:e8:1d:e7:31:18:7d:c5:b4:b6:20:74:60:b9:18:e9: d4:0a:6e:82:a8:ac:a2:47:ae:7c:f3:96:a9:72:a8:0c:e8:3f: 1d:4e:ff:71:99:26:92:d3:1a:05:9f:fe:1b:fe:e1:c9:06:f0: e5:27:9a:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXlZbtMAvr+xVZeQhCH0vmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZjhhM2FmMGQ4YzBkNTFkZTJkZGQyNjVhZDU0ZGFiOTdi ZGU2Y2UwHhcNMjUxMjEzMTIwMDM3WhcNMjUxMjE0MTIwMDM3WjAzMTEwLwYDVQQD EyhjNDU0ODA1M2Q4Y2JiMTIzMmE5MmU3ZDBmZWE1OWMyODc4NGRlMjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSnohLk3SaDk1qZPM6aM7ZVJ6RUc yfA1Z/PpPdgF1bErReZHQDqPERpRDcrC+Gxw+2iPqLPfAshi4SlUKLSUY5TZ3F+k Un/gmSJv+XNNe1hi+hImJ1SAZhiXLEWVxGIgyw+cK4rDEY9xPx7eKi1GPvXd7Cbe 5AJpEVUO8xBfnBbbn82I16VS0/2xy/OeIIbr77YnUbKffrY6lDgWIMSZt8vDTBd/ QSscf1wvAa0blF4bYalvkQapVKrBHu8AI+7JvP08E3Nbn8QvVSdYAREuAF5XmHGP 1CZoHtuyqMqlkzZigjkoe7Sl+UWOJZlBd69XMIgIU/akgwkpp18SjOlkawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRUgFPYy7EjKpLn0P6lnCh4TeIkMB8GA1UdIwQY MBaAFBj4o68NjA1R3i3dJlrVTauXvebOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1BpanJ3Mk1EVkhlTGQwbVd0Vk5xNWU5NXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9lNTMzMTMtZDU4Ny00OTJjLWFkMTgt NDc2MzdlYjFlYzQ5LzEvR1BpanJ3Mk1EVkhlTGQwbVd0Vk5xNWU5NXM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9lNTMzMTMtZDU4Ny00OTJjLWFkMTgtNDc2MzdlYjFlYzQ5 LzEvR1BpanJ3Mk1EVkhlTGQwbVd0Vk5xNWU5NXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOt/UslKv BDZ3lq8XdtSF04FnzfOQIxxtQhNkQWt53600uNkFvaRuapRF9Zg57tOJUlemLV4p yPFnftEYEqzW/HxLt9B+cDuyPvsTOCRT+ESoN5fgiF9MwbX+p7mKnzRW54hBSLTi JTkr9rs1/rEk7LIxSOXtGqc+CaNxTXQOemekzFtmNj+CILrQHW8BEXFC9CCMT8M4 m0qJoxuL1hPaq/IsbMNMbEs+8t5bcyE+HVNlxW9f7tn9hfy0D2GLZBTCEuh2+baD ds2Y6B3nMRh9xbS2IHRguRjp1ApugqisokeufPOWqXKoDOg/HU7/cZkmktMaBZ/+ G/7hyQbw5SeatA== -----END CERTIFICATE-----Generated at Sat Dec 13 15:00:44 2025 by rpki-client