This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft File: GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json) Hash identifier: iPwXon/kNXh3TFOi9WQEAvZqvGR4HEGAdDMOlUSoYbI= Subject key identifier: 8A:11:29:75:07:EB:06:E0:D3:AA:9A:A8:59:49:23:D4:15:40:C8:F3 Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa Certificate serial: 019B1F87CA2D520FF7831659C3690D1ED3D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft Manifest number: 091F Signing time: Mon 15 Dec 2025 01:02:31 +0000 Manifest this update: Mon 15 Dec 2025 01:02:31 +0000 Manifest next update: Tue 16 Dec 2025 01:02:31 +0000 Files and hashes: 1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: QKCC5bCD90vguEMQfxsVnd/OdfBRGPDAU1TOxmFzauQ=) 2: ch1KpBgRu3ljafWy2V7pY_YI2M4.roa (hash: ms8ZB4OSeZ322kYbRZpkd1MuHt48+zlVIWdiu6MuxZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:ca:2d:52:0f:f7:83:16:59:c3:69:0d:1e:d3:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa Validity Not Before: Dec 15 01:02:31 2025 GMT Not After : Dec 16 01:02:31 2025 GMT Subject: CN=8a11297507eb06e0d3aa9aa8594923d41540c8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8c:78:12:d3:53:f9:57:c3:eb:1e:78:3d:9c: 97:34:68:02:67:af:88:d6:61:cd:97:3e:ec:3e:2a: 94:60:71:06:e8:c3:56:b1:74:6a:43:76:76:81:8a: d0:a7:77:20:5d:07:42:5b:8c:56:f2:d9:c4:d8:ca: ac:e5:2d:20:e3:e4:bf:16:ba:8d:a9:0d:6e:3d:66: 70:23:c7:2b:69:2d:d1:5f:d2:1a:7e:ac:d5:4d:b6: a1:da:7b:be:8a:3c:27:35:3f:95:bd:de:a7:27:ca: 57:5e:df:af:f3:f6:18:9e:75:ad:a2:cb:b0:2f:ba: c8:22:df:38:cc:1d:c6:07:53:ad:e5:14:12:b0:6e: 08:d3:64:ef:13:2b:69:e4:bb:2b:b4:db:65:d0:47: 23:a3:c4:49:e4:9f:bb:2c:80:19:84:39:92:6e:7d: 2e:b0:a9:35:e8:cd:8c:d7:5e:82:7f:f6:cd:f3:1f: 3c:38:ca:b6:6b:2c:39:fa:ed:9e:bb:25:ae:7f:f7: 40:23:9e:14:42:fb:1b:45:79:27:1c:b6:1f:17:e7: b4:dc:40:64:e7:1e:d1:3b:83:25:c4:29:5a:d1:24: c2:26:fb:3f:2c:35:6e:3e:51:72:56:a8:9c:5f:bb: 84:3a:bd:29:98:b2:9f:c4:cb:36:af:9d:df:6c:d6: 68:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:11:29:75:07:EB:06:E0:D3:AA:9A:A8:59:49:23:D4:15:40:C8:F3 X509v3 Authority Key Identifier: keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:81:51:a8:5e:8a:ff:73:f0:88:98:22:f7:d0:f9:63:d4:07: 6e:3e:1a:ec:80:12:fc:bf:9c:ca:c3:08:de:f6:59:e1:d3:2f: 17:d0:46:17:88:6b:9e:ae:a1:9b:eb:c8:00:88:80:ce:cd:89: 2f:6b:9e:3c:8f:e1:50:52:12:a0:79:ea:56:59:0a:38:f5:5c: 68:5c:51:81:ce:ad:49:d2:70:a9:74:35:79:18:49:c2:55:9f: 0b:51:2c:18:42:92:15:96:19:a7:3c:75:32:70:76:b7:f5:4c: 01:37:9a:c0:65:93:c0:e9:3f:c1:d1:af:b9:42:f6:ae:80:73: 59:1c:de:fb:c0:0e:39:c7:76:04:49:82:3b:76:84:7e:96:a3: 7c:06:b7:4f:62:ca:5f:ce:0d:3b:8b:68:9b:73:a5:59:f9:7a: d6:1f:1c:42:4c:ec:6c:63:29:6f:96:98:57:42:cc:1a:01:f9: 82:a8:3c:4e:ec:2a:f6:aa:da:bf:1c:6e:23:77:7d:1c:fb:ff: 7f:9a:c9:a8:b7:53:7b:fe:77:5e:68:7f:d0:f5:ca:a4:27:e9: bf:77:ae:d1:08:14:ed:7a:37:40:21:f8:db:ef:f1:fd:33:e0: 7a:e4:0a:bf:e7:0f:84:f9:c4:f1:34:4b:0b:6f:f1:a7:fb:ee: 9a:36:da:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfh8otUg/3gxZZw2kNHtPZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZGMyMzUyMTE3NjAyMzIyZDc0MWM1MTM2OGNhOGI4ZGQx YTNlYWEwHhcNMjUxMjE1MDEwMjMxWhcNMjUxMjE2MDEwMjMxWjAzMTEwLwYDVQQD Eyg4YTExMjk3NTA3ZWIwNmUwZDNhYTlhYTg1OTQ5MjNkNDE1NDBjOGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIx4EtNT+VfD6x54PZyXNGgCZ6+I 1mHNlz7sPiqUYHEG6MNWsXRqQ3Z2gYrQp3cgXQdCW4xW8tnE2Mqs5S0g4+S/FrqN qQ1uPWZwI8craS3RX9IafqzVTbah2nu+ijwnNT+Vvd6nJ8pXXt+v8/YYnnWtosuw L7rIIt84zB3GB1Ot5RQSsG4I02TvEytp5LsrtNtl0Ecjo8RJ5J+7LIAZhDmSbn0u sKk16M2M116Cf/bN8x88OMq2ayw5+u2euyWuf/dAI54UQvsbRXknHLYfF+e03EBk 5x7RO4MlxCla0STCJvs/LDVuPlFyVqicX7uEOr0pmLKfxMs2r53fbNZoLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoRKXUH6wbg06qaqFlJI9QVQMjzMB8GA1UdIwQY MBaAFBjcI1IRdgIyLXQcUTaMqLjdGj6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMTQzY2QtYTgxNC00ZDQ4LWE4N2Mt ZDdjMGU5MzkzZWEwLzEvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8wMTQzY2QtYTgxNC00ZDQ4LWE4N2MtZDdjMGU5MzkzZWEw LzEvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioFRqF6K /3PwiJgi99D5Y9QHbj4a7IAS/L+cysMI3vZZ4dMvF9BGF4hrnq6hm+vIAIiAzs2J L2uePI/hUFISoHnqVlkKOPVcaFxRgc6tSdJwqXQ1eRhJwlWfC1EsGEKSFZYZpzx1 MnB2t/VMATeawGWTwOk/wdGvuUL2roBzWRze+8AOOcd2BEmCO3aEfpajfAa3T2LK X84NO4tom3OlWfl61h8cQkzsbGMpb5aYV0LMGgH5gqg8Tuwq9qravxxuI3d9HPv/ f5rJqLdTe/53Xmh/0PXKpCfpv3eu0QgU7Xo3QCH42+/x/TPgeuQKv+cPhPnE8TRL C2/xp/vumjbaxQ== -----END CERTIFICATE-----Generated at Mon Dec 15 04:57:07 2025 by rpki-client