This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft File: GVD3RTAkOmSxG7IywDjVdOf8TSA.mft (raw, json) Hash identifier: ejeaklUcNnuJOt2545Sd104Ew9NoI21vgIFp7IbkNqQ= Subject key identifier: CC:7F:E5:5F:BA:6D:B3:AD:D8:F2:A5:6B:64:AB:A0:1B:C9:8D:E8:C0 Authority key identifier: 19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20 Certificate issuer: /CN=1950f74530243a64b11bb232c038d574e7fc4d20 Certificate serial: 019B59E3ECDFDC534BC807F6A51ECEC2CCDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft Manifest number: 0A7E Signing time: Fri 26 Dec 2025 09:01:07 +0000 Manifest this update: Fri 26 Dec 2025 09:01:07 +0000 Manifest next update: Sat 27 Dec 2025 09:01:07 +0000 Files and hashes: 1: GVD3RTAkOmSxG7IywDjVdOf8TSA.crl (hash: H8MkVlcj+GGqLr/hsdfR2FAbCOt8Rc9tWnm+5zkuaps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:ec:df:dc:53:4b:c8:07:f6:a5:1e:ce:c2:cc:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1950f74530243a64b11bb232c038d574e7fc4d20 Validity Not Before: Dec 26 09:01:07 2025 GMT Not After : Dec 27 09:01:07 2025 GMT Subject: CN=cc7fe55fba6db3add8f2a56b64aba01bc98de8c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:84:40:13:59:70:8f:fe:e3:59:d1:52:d5:04: 58:0a:53:02:85:08:d5:a0:be:77:36:82:61:71:eb: 5d:07:59:f9:b5:99:3c:2c:dc:c0:0c:45:cb:b0:81: c6:07:b1:0d:a4:fe:d7:d2:00:5a:39:78:3e:8b:c1: 25:69:8d:01:52:af:21:18:5b:a2:76:d4:e2:1a:8f: 99:ab:69:da:9c:98:9f:8f:ed:4c:9e:16:0d:33:b3: dd:29:8a:7f:8f:c7:84:78:03:e5:38:3a:de:72:a8: 89:e3:87:40:bc:07:2f:e8:a8:d0:b9:3a:ca:70:2f: e1:82:e2:ef:05:ea:10:e7:8e:6e:73:92:5d:af:5b: 8e:16:1a:58:70:c9:e2:7c:d2:5e:c5:e5:3c:00:99: 21:a2:93:3e:7a:2c:10:71:98:8f:0a:de:74:ae:ca: f6:1f:35:80:cd:75:1e:68:38:6d:7e:0d:a7:3a:7b: 88:46:84:c9:68:2b:29:34:bb:b1:83:88:da:c9:9a: 7c:a1:82:81:9b:f0:64:83:d6:5a:85:58:ac:0d:91: 4b:22:0b:8f:3f:1a:02:ac:01:e4:95:42:96:00:5f: 70:38:ed:77:f7:bc:9e:bb:0a:bb:9e:dd:64:0e:42: dc:e0:f8:d9:31:4e:63:84:12:35:15:8d:f7:e5:1c: 4f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7F:E5:5F:BA:6D:B3:AD:D8:F2:A5:6B:64:AB:A0:1B:C9:8D:E8:C0 X509v3 Authority Key Identifier: keyid:19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e9:de:fe:db:c1:6e:5a:78:d7:5b:36:01:10:cf:ee:ad:23: de:59:c7:93:99:c6:57:da:e9:9b:c6:42:f5:29:b2:9e:a3:07: dd:03:7d:39:f4:17:e0:c5:dd:d1:5a:8f:7b:c4:be:e4:10:4d: 7b:6f:6e:08:46:46:24:b9:ad:5f:a0:78:65:0e:33:93:aa:c5: 08:5d:62:0e:a3:9f:96:0f:d8:db:0c:b4:b9:74:c5:12:91:95: 4b:7e:6c:79:0d:cd:94:30:0a:e6:48:4b:c0:78:4f:cc:e8:ed: 19:a9:1e:af:ce:16:95:d5:b8:af:66:7c:dc:7f:56:79:97:16: 2f:cc:86:dd:12:2d:9f:8c:c0:8c:3b:7f:89:55:85:f7:8c:69: 06:fd:6f:ae:57:97:71:69:b7:d4:5d:84:37:20:7c:71:a0:01: 11:7c:ad:e7:15:ad:27:92:83:c3:d7:0a:50:cf:89:00:76:93: 5b:56:57:72:01:2d:aa:95:02:37:10:c7:f5:3b:02:c4:f4:3a: 6f:a4:e9:1b:af:b1:73:7a:9a:2d:59:a4:a4:3f:f3:eb:dd:23: 9e:4e:ea:c0:ef:96:ef:ed:57:f6:75:06:10:c5:16:05:85:cc: 13:7a:83:49:99:a3:b3:5f:8b:5b:2c:cb:d2:4c:f6:3d:0e:c2: 21:53:e2:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4+zf3FNLyAf2pR7OwszaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NTBmNzQ1MzAyNDNhNjRiMTFiYjIzMmMwMzhkNTc0ZTdm YzRkMjAwHhcNMjUxMjI2MDkwMTA3WhcNMjUxMjI3MDkwMTA3WjAzMTEwLwYDVQQD EyhjYzdmZTU1ZmJhNmRiM2FkZDhmMmE1NmI2NGFiYTAxYmM5OGRlOGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYRAE1lwj/7jWdFS1QRYClMChQjV oL53NoJhcetdB1n5tZk8LNzADEXLsIHGB7ENpP7X0gBaOXg+i8ElaY0BUq8hGFui dtTiGo+Zq2nanJifj+1MnhYNM7PdKYp/j8eEeAPlODrecqiJ44dAvAcv6KjQuTrK cC/hguLvBeoQ545uc5Jdr1uOFhpYcMnifNJexeU8AJkhopM+eiwQcZiPCt50rsr2 HzWAzXUeaDhtfg2nOnuIRoTJaCspNLuxg4jayZp8oYKBm/Bkg9ZahVisDZFLIguP PxoCrAHklUKWAF9wOO1397yeuwq7nt1kDkLc4PjZMU5jhBI1FY335RxP5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMx/5V+6bbOt2PKla2SroBvJjejAMB8GA1UdIwQY MBaAFBlQ90UwJDpksRuyMsA41XTn/E0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1ZEM1JUQWtPbVN4RzdJeXdEalZkT2Y4VFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMjQ2MzUtMjA5Yy00ZTZlLWI4Nzct ZTY4NWE3M2JkN2Q5LzEvR1ZEM1JUQWtPbVN4RzdJeXdEalZkT2Y4VFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jMjQ2MzUtMjA5Yy00ZTZlLWI4NzctZTY4NWE3M2JkN2Q5 LzEvR1ZEM1JUQWtPbVN4RzdJeXdEalZkT2Y4VFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnune/tvB blp411s2ARDP7q0j3lnHk5nGV9rpm8ZC9SmynqMH3QN9OfQX4MXd0VqPe8S+5BBN e29uCEZGJLmtX6B4ZQ4zk6rFCF1iDqOflg/Y2wy0uXTFEpGVS35seQ3NlDAK5khL wHhPzOjtGaker84WldW4r2Z83H9WeZcWL8yG3RItn4zAjDt/iVWF94xpBv1vrleX cWm31F2ENyB8caABEXyt5xWtJ5KDw9cKUM+JAHaTW1ZXcgEtqpUCNxDH9TsCxPQ6 b6TpG6+xc3qaLVmkpD/z690jnk7qwO+W7+1X9nUGEMUWBYXME3qDSZmjs1+LWyzL 0kz2PQ7CIVPi3A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:44 2025 by rpki-client