This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft File: GROVdcQBKD__U2E3sOg-VBX-GNA.mft (raw, json) Hash identifier: kCJONfLN4wlJ17CVJqj++aSIwZg7CBnqBgVlIcudkU4= Subject key identifier: 27:5B:F3:B5:BD:67:CB:CF:6B:F2:5A:61:BA:D1:3C:CE:29:DD:42:B1 Authority key identifier: 19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0 Certificate issuer: /CN=19139575c401283fff536137b0e83e5415fe18d0 Certificate serial: 019BAD5D2C69B33BB74E238B76B9DCB563B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft Manifest number: 0C3B Signing time: Sun 11 Jan 2026 14:02:03 +0000 Manifest this update: Sun 11 Jan 2026 14:02:03 +0000 Manifest next update: Mon 12 Jan 2026 14:02:03 +0000 Files and hashes: 1: GROVdcQBKD__U2E3sOg-VBX-GNA.crl (hash: jd6Iyf5jyFdTHmIhuEx9wyc4prPJDoO9LqNLhJkUtFI=) 2: ZZeABTpJzzngeuL-OTKi1sObkvk.roa (hash: LZJnobolr7nVT9FIHfxLJ++YArusGtx4j3xW25plKP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:5d:2c:69:b3:3b:b7:4e:23:8b:76:b9:dc:b5:63:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19139575c401283fff536137b0e83e5415fe18d0 Validity Not Before: Jan 11 14:02:03 2026 GMT Not After : Jan 12 14:02:03 2026 GMT Subject: CN=275bf3b5bd67cbcf6bf25a61bad13cce29dd42b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:23:61:62:f4:1a:0d:a8:b4:79:ea:84:ee:8d: dd:07:dd:8e:51:8e:b4:c0:a5:81:a0:c0:15:a6:4e: af:32:f2:fa:ad:4a:08:34:5b:5c:76:1d:08:11:29: 26:96:05:b4:01:e2:48:12:26:59:23:af:f3:60:bc: df:9d:ef:af:6f:da:8d:48:9a:34:b9:ba:3c:4a:7e: 8f:9b:f9:52:93:e4:36:e7:d2:bc:fb:6d:c4:c7:b1: 6a:03:1b:c5:15:b4:47:43:f7:41:f9:bf:8f:8b:58: 62:c8:a4:30:6d:0e:5d:ff:fd:2b:ba:1d:c1:70:a7: f2:d7:02:15:b0:08:25:46:df:d3:97:d6:48:ec:0d: de:97:02:86:31:c4:88:bd:13:f2:a2:f2:71:4b:32: aa:44:52:5d:5a:e7:be:8e:5c:51:25:9a:a7:d0:80: fc:7e:4d:ee:ed:ec:6d:be:6d:78:39:bb:0c:18:d7: e7:0c:3f:35:29:0e:7d:2b:6f:2d:16:82:55:02:c9: 95:95:b0:c8:2e:9a:72:ed:1e:c0:99:25:04:b6:58: 5e:5d:bd:df:41:e0:55:30:00:c1:07:b9:9a:1c:7f: cf:12:44:8e:ae:aa:1f:5d:3d:c6:4f:8b:16:13:51: 4a:88:d7:bf:55:bf:77:9b:97:a3:00:ef:e8:c5:48: 27:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:5B:F3:B5:BD:67:CB:CF:6B:F2:5A:61:BA:D1:3C:CE:29:DD:42:B1 X509v3 Authority Key Identifier: keyid:19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:d0:89:58:d6:8d:9f:a1:70:cb:b8:ab:8f:1b:f5:01:65:b1: f1:41:f2:42:76:16:f3:1b:e0:77:2d:a9:de:c1:26:2a:31:7b: 93:5a:1e:c5:41:60:0f:11:67:92:fa:03:0c:21:0b:c3:98:d9: 74:c3:96:22:89:11:02:51:6e:29:e1:1c:1c:ed:88:1e:40:af: 2d:78:a1:34:09:9e:4e:29:0d:c3:12:56:02:4b:fb:77:e1:f8: 48:ef:67:f9:8f:3c:ff:13:58:1a:f5:e8:04:94:7c:7f:63:10: b4:7c:9a:5c:97:de:0d:03:8f:0e:f7:6d:2e:81:b1:35:4a:54: 40:03:dd:34:01:3b:dd:94:54:8b:19:f9:b3:e1:ca:a2:f5:0d: 2c:eb:17:b4:cd:38:c7:68:e2:06:95:25:e8:22:99:eb:0d:8d: 61:c7:9b:95:4f:ec:21:96:bf:e5:5d:44:f1:d8:ae:b8:07:62: d0:c3:57:5f:ea:1f:e4:a7:ab:0b:33:34:3e:d5:7d:23:20:74: db:8e:bc:53:4f:c4:b9:d0:33:bc:6d:d9:22:5b:e6:6b:9d:68: 11:73:c2:20:31:07:a1:38:ef:2d:6a:f1:d0:6f:b1:72:1d:57: f0:5d:d6:90:b4:c9:7d:82:41:18:d1:30:a6:00:a6:e2:40:bc: 5c:23:11:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutXSxpszu3TiOLdrnctWOzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MTM5NTc1YzQwMTI4M2ZmZjUzNjEzN2IwZTgzZTU0MTVm ZTE4ZDAwHhcNMjYwMTExMTQwMjAzWhcNMjYwMTEyMTQwMjAzWjAzMTEwLwYDVQQD EygyNzViZjNiNWJkNjdjYmNmNmJmMjVhNjFiYWQxM2NjZTI5ZGQ0MmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCNhYvQaDai0eeqE7o3dB92OUY60 wKWBoMAVpk6vMvL6rUoINFtcdh0IESkmlgW0AeJIEiZZI6/zYLzfne+vb9qNSJo0 ubo8Sn6Pm/lSk+Q259K8+23Ex7FqAxvFFbRHQ/dB+b+Pi1hiyKQwbQ5d//0ruh3B cKfy1wIVsAglRt/Tl9ZI7A3elwKGMcSIvRPyovJxSzKqRFJdWue+jlxRJZqn0ID8 fk3u7extvm14ObsMGNfnDD81KQ59K28tFoJVAsmVlbDILppy7R7AmSUEtlheXb3f QeBVMADBB7maHH/PEkSOrqofXT3GT4sWE1FKiNe/Vb93m5ejAO/oxUgn5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdb87W9Z8vPa/JaYbrRPM4p3UKxMB8GA1UdIwQY MBaAFBkTlXXEASg//1NhN7DoPlQV/hjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1JPVmRjUUJLRF9fVTJFM3NPZy1WQlgtR05BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zYTA5NGMtZmY4ZS00YjQ0LTgxZjAt OTRjNzYwMWFlZmRhLzEvR1JPVmRjUUJLRF9fVTJFM3NPZy1WQlgtR05BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zYTA5NGMtZmY4ZS00YjQ0LTgxZjAtOTRjNzYwMWFlZmRh LzEvR1JPVmRjUUJLRF9fVTJFM3NPZy1WQlgtR05BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9CJWNaN n6Fwy7irjxv1AWWx8UHyQnYW8xvgdy2p3sEmKjF7k1oexUFgDxFnkvoDDCELw5jZ dMOWIokRAlFuKeEcHO2IHkCvLXihNAmeTikNwxJWAkv7d+H4SO9n+Y88/xNYGvXo BJR8f2MQtHyaXJfeDQOPDvdtLoGxNUpUQAPdNAE73ZRUixn5s+HKovUNLOsXtM04 x2jiBpUl6CKZ6w2NYceblU/sIZa/5V1E8diuuAdi0MNXX+of5KerCzM0PtV9IyB0 2468U0/EudAzvG3ZIlvma51oEXPCIDEHoTjvLWrx0G+xch1X8F3WkLTJfYJBGNEw pgCm4kC8XCMR4w== -----END CERTIFICATE-----Generated at Mon Jan 12 00:39:37 2026 by rpki-client