This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json) Hash identifier: 15KRGBt3fQDA380/j2aZBowyX8/28HUrjrUQbMeGobY= Subject key identifier: 1C:BD:A0:58:EC:61:1F:F0:42:60:70:7B:9A:0E:BA:B6:5F:BD:AD:18 Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b Certificate serial: 019B25515843DE6D357CE58C3B227851BE25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft Manifest number: 177F Signing time: Tue 16 Dec 2025 04:00:46 +0000 Manifest this update: Tue 16 Dec 2025 04:00:46 +0000 Manifest next update: Wed 17 Dec 2025 04:00:46 +0000 Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: Cvi4h/dIr8ljQQJPjeAzls1Mx1i5nm66IzQxuckiefs=) 2: bZLHtasaTPjY31e6RPfAq2RJKnA.roa (hash: ID+iO3817M9kW6iqLKBAKlaZVewlrBg5mSajuX6nX2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:58:43:de:6d:35:7c:e5:8c:3b:22:78:51:be:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b Validity Not Before: Dec 16 04:00:46 2025 GMT Not After : Dec 17 04:00:46 2025 GMT Subject: CN=1cbda058ec611ff04260707b9a0ebab65fbdad18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2e:45:3c:34:64:a8:af:2e:f4:00:0d:82:1d: f1:89:c6:17:0c:d3:8e:cf:a7:d1:29:8a:85:f5:58: f1:d9:90:8a:1c:ae:be:aa:15:6b:20:4d:34:e7:0f: 63:13:86:b2:66:57:2b:f1:fc:ac:be:71:a3:20:4a: 0c:fb:ba:fa:41:e3:6e:4a:b6:37:b6:20:64:d1:d9: b0:b7:e8:c6:92:65:86:e1:87:09:27:97:53:3a:b9: 61:c8:91:d2:65:67:fb:90:9c:c6:df:43:fa:a4:73: ba:45:55:ac:27:14:31:9d:d5:30:b1:9f:ec:3b:c4: 80:51:ba:a0:3a:bc:d1:d9:d0:bf:7c:d1:16:d5:81: 26:df:7b:60:22:d6:98:b1:de:96:41:30:4b:70:2e: b2:b6:6c:14:7b:76:f6:b0:a1:f5:1a:ec:e1:df:19: b5:23:1e:20:64:56:63:a7:1b:98:b7:4b:05:9e:a0: 66:12:a9:88:9b:ff:47:9c:6f:59:3e:3d:d2:48:bb: b5:31:31:0b:76:a6:22:bd:9f:f3:d9:83:21:ab:e9: 93:32:54:a8:ba:35:80:6b:61:79:cf:d8:93:ef:35: 83:5e:7b:4d:a1:9c:b5:e5:4e:f9:d2:0d:1e:bd:f0: c5:b6:f5:d4:27:d2:f3:e5:dd:6e:3e:0d:f8:18:fd: 6e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BD:A0:58:EC:61:1F:F0:42:60:70:7B:9A:0E:BA:B6:5F:BD:AD:18 X509v3 Authority Key Identifier: keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:03:86:0d:cc:0d:c6:35:a3:ec:c9:4f:b1:aa:39:cb:72:b3: 13:e2:99:be:1f:f1:93:50:08:91:4f:b6:72:29:a6:94:60:49: 9b:b6:d9:32:58:3a:ac:7f:35:93:68:6b:fb:3d:3f:8f:01:a0: 0b:53:f0:8d:f7:1f:e6:29:af:cd:66:40:0c:08:8d:c0:5b:84: 75:4d:59:4a:1d:cf:3d:09:3c:f1:0d:ba:66:e5:af:77:b6:e0: 24:d6:67:47:d9:7d:02:35:dd:24:ed:c1:eb:af:c7:66:fe:dc: da:3f:db:d9:01:da:7a:51:57:40:90:f2:cd:30:ee:e9:b1:77: a8:43:cc:07:88:02:ce:9a:25:f2:23:32:dc:5a:ff:6f:a1:dd: 90:c7:dd:a9:d3:b5:6f:ef:78:ad:2e:46:00:26:a7:05:17:71: 60:0f:1a:71:03:c9:41:dd:9b:e7:72:21:72:30:c6:73:80:ad: 1a:7b:d1:a8:08:17:bd:e6:57:5a:52:2d:77:a3:a6:cb:5a:02: 9e:69:67:93:72:b1:d3:6c:20:11:8d:ef:01:9f:a0:36:55:fc: 81:24:cb:4a:40:8b:b2:6d:af:c0:32:55:5f:57:9f:80:b4:a7: 3a:c1:11:0c:39:3b:11:e5:f2:d6:b1:cd:5d:9b:d4:0c:f4:ad: 8d:e8:f1:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUVhD3m01fOWMOyJ4Ub4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMjliMmE0NWRlMDEzNmZlYWJiZmFlNGJhYTcwMTcyYWE4 NjYxOWIwHhcNMjUxMjE2MDQwMDQ2WhcNMjUxMjE3MDQwMDQ2WjAzMTEwLwYDVQQD EygxY2JkYTA1OGVjNjExZmYwNDI2MDcwN2I5YTBlYmFiNjVmYmRhZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy5FPDRkqK8u9AANgh3xicYXDNOO z6fRKYqF9Vjx2ZCKHK6+qhVrIE005w9jE4ayZlcr8fysvnGjIEoM+7r6QeNuSrY3 tiBk0dmwt+jGkmWG4YcJJ5dTOrlhyJHSZWf7kJzG30P6pHO6RVWsJxQxndUwsZ/s O8SAUbqgOrzR2dC/fNEW1YEm33tgItaYsd6WQTBLcC6ytmwUe3b2sKH1Guzh3xm1 Ix4gZFZjpxuYt0sFnqBmEqmIm/9HnG9ZPj3SSLu1MTELdqYivZ/z2YMhq+mTMlSo ujWAa2F5z9iT7zWDXntNoZy15U750g0evfDFtvXUJ9Lz5d1uPg34GP1uVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBy9oFjsYR/wQmBwe5oOurZfva0YMB8GA1UdIwQY MBaAFBopsqRd4BNv6rv65LqnAXKqhmGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNmMxNWEtM2RmZi00NGQ3LWE1Mzgt YTk1MWYyMDBmNjUyLzEvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kNmMxNWEtM2RmZi00NGQ3LWE1MzgtYTk1MWYyMDBmNjUy LzEvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQOGDcwN xjWj7MlPsao5y3KzE+KZvh/xk1AIkU+2cimmlGBJm7bZMlg6rH81k2hr+z0/jwGg C1Pwjfcf5imvzWZADAiNwFuEdU1ZSh3PPQk88Q26ZuWvd7bgJNZnR9l9AjXdJO3B 66/HZv7c2j/b2QHaelFXQJDyzTDu6bF3qEPMB4gCzpol8iMy3Fr/b6HdkMfdqdO1 b+94rS5GACanBRdxYA8acQPJQd2b53IhcjDGc4CtGnvRqAgXveZXWlItd6Omy1oC nmlnk3Kx02wgEY3vAZ+gNlX8gSTLSkCLsm2vwDJVX1efgLSnOsERDDk7EeXy1rHN XZvUDPStjejxcw== -----END CERTIFICATE-----Generated at Tue Dec 16 13:30:51 2025 by rpki-client