This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft File: GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft (raw, json) Hash identifier: rzACvJ4OLAfBCeptLVEN4SXdMjZxVkmcEEo99dVsFIw= Subject key identifier: 82:BA:BC:6D:75:99:87:CD:49:4F:97:A0:89:C0:D5:02:15:7F:ED:42 Authority key identifier: 18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8 Certificate issuer: /CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8 Certificate serial: 019B20D04FA72FE15D26E4164FE10CFAED8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft Manifest number: 0AFE Signing time: Mon 15 Dec 2025 07:01:21 +0000 Manifest this update: Mon 15 Dec 2025 07:01:21 +0000 Manifest next update: Tue 16 Dec 2025 07:01:21 +0000 Files and hashes: 1: GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl (hash: +/I+lugl0sZwP6a/rJ7zVfO4cQlOnzE0qjyGbU1ro1I=) 2: ZnGF6W1D3X-NrkNFr6eImmQhdy8.roa (hash: Bt9KY5B97syBzqVEmQ0mMOoNBbtJyQudj313FGbVLOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d0:4f:a7:2f:e1:5d:26:e4:16:4f:e1:0c:fa:ed:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8 Validity Not Before: Dec 15 07:01:21 2025 GMT Not After : Dec 16 07:01:21 2025 GMT Subject: CN=82babc6d759987cd494f97a089c0d502157fed42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e9:c4:a5:4e:27:a5:41:88:66:f4:51:68:b3: 55:91:67:87:42:bc:4d:df:84:62:c9:35:ee:77:f4: a1:ea:44:cc:49:f0:bc:ae:3a:26:8b:76:77:3c:b4: 2b:5c:a9:64:4c:a6:5e:58:ad:b7:e3:94:8a:8f:e6: b0:83:5d:d1:7a:d3:63:b7:88:10:be:70:62:e1:da: 47:9c:4a:36:17:9d:e9:9f:42:69:ac:0c:78:44:9e: d6:be:c7:b8:90:65:7a:06:36:88:44:66:6c:45:99: b3:6a:ee:bc:60:5e:4b:da:fa:3d:fb:f3:dd:88:ea: 50:6d:a3:ea:9e:33:99:9c:3a:2a:d6:95:11:51:84: 47:42:6f:3e:60:fb:10:34:ec:50:fa:18:9c:70:bf: 21:03:98:0d:ca:2a:1a:0e:58:3f:8e:d8:41:ea:ff: c6:f9:7b:ba:b3:1c:14:90:85:d5:72:01:2f:45:16: 31:bd:16:c4:b8:38:b3:0e:25:eb:f6:b1:03:7d:6b: 70:7e:f7:53:62:26:1c:4d:9d:ac:15:a9:6e:8a:28: f3:f8:70:59:f4:06:33:41:46:8b:c5:a5:bc:72:63: 08:6a:ca:ad:ee:82:04:52:0d:3b:44:08:68:1e:d5: c1:d4:8a:df:1d:1c:b8:04:08:8d:fc:35:b9:e7:2b: 8b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BA:BC:6D:75:99:87:CD:49:4F:97:A0:89:C0:D5:02:15:7F:ED:42 X509v3 Authority Key Identifier: keyid:18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:57:b1:34:33:1f:81:f6:ef:e6:fc:8c:77:fc:7e:bb:39:81: 43:c7:12:cc:47:eb:57:ca:fb:f3:10:f6:d4:37:8d:dd:a8:de: e9:5f:1d:dc:e3:59:80:f4:b5:ae:38:c8:f3:45:6a:fd:d5:b0: fd:ce:01:7d:6a:58:04:6e:57:fd:e3:60:8c:08:2c:f6:9b:fa: 33:4b:a6:1e:79:b5:d7:49:aa:fa:e4:de:45:c4:74:f6:d2:03: ed:c2:d0:30:96:5c:4b:62:2d:47:dc:c3:a8:61:60:48:eb:10: ce:77:9d:15:8e:65:bf:96:64:4e:b7:b3:85:64:90:9c:af:1b: 34:3b:0f:41:87:91:12:3e:92:28:40:77:2f:25:35:e5:f3:1e: 1a:c2:79:f0:05:ec:4f:c8:7d:31:fa:b0:e3:1c:29:6f:47:1f: 0b:ed:39:5a:df:f5:01:17:25:96:f2:4b:14:dd:66:4f:1a:39: 73:76:50:18:44:f6:a1:a6:2e:ae:8d:bd:9a:6c:e5:64:87:83: 2f:95:c6:c9:98:d2:7b:e8:4f:6e:75:78:fa:26:31:fc:4c:aa: e8:13:60:8f:ee:c4:22:bf:ed:8a:7b:25:46:e3:d6:ab:6a:19: 20:49:4b:f5:ce:f7:31:c9:f3:14:73:7a:6b:46:12:40:17:51: 4c:93:46:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsg0E+nL+FdJuQWT+EM+u2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YWY2YTA2MDUwZTRjYTI2YjJmZGQxM2E3YzBhZDE0NmNk MjZkYzgwHhcNMjUxMjE1MDcwMTIxWhcNMjUxMjE2MDcwMTIxWjAzMTEwLwYDVQQD Eyg4MmJhYmM2ZDc1OTk4N2NkNDk0Zjk3YTA4OWMwZDUwMjE1N2ZlZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlenEpU4npUGIZvRRaLNVkWeHQrxN 34RiyTXud/Sh6kTMSfC8rjomi3Z3PLQrXKlkTKZeWK2345SKj+awg13RetNjt4gQ vnBi4dpHnEo2F53pn0JprAx4RJ7Wvse4kGV6BjaIRGZsRZmzau68YF5L2vo9+/Pd iOpQbaPqnjOZnDoq1pURUYRHQm8+YPsQNOxQ+hiccL8hA5gNyioaDlg/jthB6v/G +Xu6sxwUkIXVcgEvRRYxvRbEuDizDiXr9rEDfWtwfvdTYiYcTZ2sFaluiijz+HBZ 9AYzQUaLxaW8cmMIasqt7oIEUg07RAhoHtXB1IrfHRy4BAiN/DW55yuLHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIK6vG11mYfNSU+XoInA1QIVf+1CMB8GA1UdIwQY MBaAFBivagYFDkyiay/dE6fArRRs0m3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0s5cUJnVU9US0pyTDkwVHA4Q3RGR3pTYmNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xOTkxZmUtYWRmNy00MzUyLWFiODMt MDM5NmU4N2Y1MjAyLzEvR0s5cUJnVU9US0pyTDkwVHA4Q3RGR3pTYmNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8xOTkxZmUtYWRmNy00MzUyLWFiODMtMDM5NmU4N2Y1MjAy LzEvR0s5cUJnVU9US0pyTDkwVHA4Q3RGR3pTYmNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFexNDMf gfbv5vyMd/x+uzmBQ8cSzEfrV8r78xD21DeN3aje6V8d3ONZgPS1rjjI80Vq/dWw /c4BfWpYBG5X/eNgjAgs9pv6M0umHnm110mq+uTeRcR09tID7cLQMJZcS2ItR9zD qGFgSOsQznedFY5lv5ZkTrezhWSQnK8bNDsPQYeREj6SKEB3LyU15fMeGsJ58AXs T8h9Mfqw4xwpb0cfC+05Wt/1ARcllvJLFN1mTxo5c3ZQGET2oaYuro29mmzlZIeD L5XGyZjSe+hPbnV4+iYx/Eyq6BNgj+7EIr/tinslRuPWq2oZIElL9c73McnzFHN6 a0YSQBdRTJNGiQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:04:58 2025 by rpki-client