This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft File: GGDjbiWx26EXgHXIA8KaBEzs_eE.mft (raw, json) Hash identifier: HvhGMlONsEMwnr1FAMBJSjpeogdKQdOAYCVu7eyoH4k= Subject key identifier: 2A:49:36:1A:2E:D8:30:BA:C0:C4:F7:83:01:FB:9D:98:62:DF:3B:EE Authority key identifier: 18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1 Certificate issuer: /CN=1860e36e25b1dba1178075c803c29a044cecfde1 Certificate serial: 019B37206C728663D4258DB1E4F32C7A47C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft Manifest number: 0AAA Signing time: Fri 19 Dec 2025 15:00:30 +0000 Manifest this update: Fri 19 Dec 2025 15:00:30 +0000 Manifest next update: Sat 20 Dec 2025 15:00:30 +0000 Files and hashes: 1: 1-ZAn3Qtlz0s6H8sKz3KAGMVojlQ.roa (hash: 1vtVvmn1NKghe/1GEiZ2YPPlg6egHJXC9enaE5kl0Rk=) 2: GGDjbiWx26EXgHXIA8KaBEzs_eE.crl (hash: aPbgWmmNPBA36dP0j9XAI3w457yhzLJ9VN5WB3ZMzUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:6c:72:86:63:d4:25:8d:b1:e4:f3:2c:7a:47:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1860e36e25b1dba1178075c803c29a044cecfde1 Validity Not Before: Dec 19 15:00:30 2025 GMT Not After : Dec 20 15:00:30 2025 GMT Subject: CN=2a49361a2ed830bac0c4f78301fb9d9862df3bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:aa:19:7c:e3:c4:0e:29:87:fb:62:ed:dc:58: 70:63:af:c6:c7:77:67:f0:63:b4:03:b0:ed:4f:93: 17:b5:e1:c5:f6:22:79:fa:67:89:0d:0f:06:57:b2: 96:f1:75:85:39:76:d7:c2:1c:ff:f5:76:93:95:5d: 97:a5:c7:c2:02:45:08:a8:e3:8a:bd:f9:fe:cb:23: 43:5b:09:42:4b:a4:f7:84:d9:90:c1:90:c0:41:4e: ad:23:43:ec:cb:2f:2f:8d:bb:f3:8a:6e:7e:fa:b7: dd:fb:49:2a:7b:71:4e:85:e7:27:2e:3e:b6:b6:0e: cf:cc:76:9f:8e:08:28:96:dc:f8:3d:04:0c:95:8e: 93:b8:55:13:2c:9e:22:fc:9f:62:8a:71:5a:55:b1: 4b:bb:e9:2e:96:30:51:2e:fc:05:89:cd:2d:3d:02: 86:70:80:a3:08:01:c0:62:6a:16:db:e7:ba:a0:24: 69:d5:db:20:49:29:15:93:fb:9a:fe:99:fe:46:24: b7:eb:3e:8d:8a:18:d6:ba:d1:bb:05:23:e9:47:5b: ff:44:5d:57:23:61:42:92:79:6c:a3:e5:ec:0b:0b: 9e:78:8a:d0:19:47:50:70:7c:74:dd:9c:97:e7:2e: 5d:da:ca:e9:e1:2d:92:3f:7b:50:14:7c:ba:ae:83: 85:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:49:36:1A:2E:D8:30:BA:C0:C4:F7:83:01:FB:9D:98:62:DF:3B:EE X509v3 Authority Key Identifier: keyid:18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d9:16:17:d9:10:53:01:eb:40:b0:6a:f4:de:8c:09:d3:8e: be:4d:c6:53:b8:40:b3:59:04:46:9c:ab:8e:7d:5a:91:04:f3: c4:a2:c1:61:8b:63:38:71:85:7e:dd:d5:2a:37:2c:67:5a:e7: 59:26:9e:fd:ac:f5:8d:d8:32:54:19:e3:fd:6e:d3:da:cc:40: 86:d7:43:29:ab:56:7b:15:79:4e:b6:db:3c:6d:fc:b7:a7:ad: a2:96:4c:6d:70:f4:1c:95:76:c5:89:45:e2:3f:d7:9d:cc:82: 80:be:88:59:aa:01:a9:32:bd:e3:5e:c7:2f:21:0b:88:c2:66: b4:36:74:3f:58:c9:a0:b3:be:d6:7f:a7:be:0a:5e:71:19:b4: 29:61:ea:22:0e:cd:2e:08:b0:17:e1:9f:5d:f3:c5:79:ea:87: dc:c3:2c:af:7f:a8:20:5d:5d:b0:22:47:59:fc:da:7e:a7:d6: 8a:3c:c3:9d:82:0d:a2:e5:d2:a8:12:4a:61:d1:0b:56:58:3c: 9e:78:4d:23:ff:77:79:07:6d:b5:af:0c:4c:76:6a:e6:5a:d2: 33:d5:ea:b7:d0:a7:70:70:42:d6:9f:1f:9d:b8:60:82:21:5b: 78:a2:69:90:44:6a:1e:d3:70:9b:0d:d0:f0:31:e3:0e:d7:40: 48:5d:22:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IGxyhmPUJY2x5PMsekfDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NjBlMzZlMjViMWRiYTExNzgwNzVjODAzYzI5YTA0NGNl Y2ZkZTEwHhcNMjUxMjE5MTUwMDMwWhcNMjUxMjIwMTUwMDMwWjAzMTEwLwYDVQQD EygyYTQ5MzYxYTJlZDgzMGJhYzBjNGY3ODMwMWZiOWQ5ODYyZGYzYmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaoZfOPEDimH+2Lt3FhwY6/Gx3dn 8GO0A7DtT5MXteHF9iJ5+meJDQ8GV7KW8XWFOXbXwhz/9XaTlV2XpcfCAkUIqOOK vfn+yyNDWwlCS6T3hNmQwZDAQU6tI0Psyy8vjbvzim5++rfd+0kqe3FOhecnLj62 tg7PzHafjggoltz4PQQMlY6TuFUTLJ4i/J9iinFaVbFLu+kuljBRLvwFic0tPQKG cICjCAHAYmoW2+e6oCRp1dsgSSkVk/ua/pn+RiS36z6NihjWutG7BSPpR1v/RF1X I2FCknlso+XsCwueeIrQGUdQcHx03ZyX5y5d2srp4S2SP3tQFHy6roOF4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpJNhou2DC6wMT3gwH7nZhi3zvuMB8GA1UdIwQY MBaAFBhg424lsduhF4B1yAPCmgRM7P3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0dEamJpV3gyNkVYZ0hYSUE4S2FCRXpzX2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wNTY2YmUtZjgzMi00ZTc0LTg5NjYt ZjI2YWRmZjQwY2MxLzEvR0dEamJpV3gyNkVYZ0hYSUE4S2FCRXpzX2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8wNTY2YmUtZjgzMi00ZTc0LTg5NjYtZjI2YWRmZjQwY2Mx LzEvR0dEamJpV3gyNkVYZ0hYSUE4S2FCRXpzX2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNkWF9kQ UwHrQLBq9N6MCdOOvk3GU7hAs1kERpyrjn1akQTzxKLBYYtjOHGFft3VKjcsZ1rn WSae/az1jdgyVBnj/W7T2sxAhtdDKatWexV5TrbbPG38t6etopZMbXD0HJV2xYlF 4j/XncyCgL6IWaoBqTK9417HLyELiMJmtDZ0P1jJoLO+1n+nvgpecRm0KWHqIg7N LgiwF+GfXfPFeeqH3MMsr3+oIF1dsCJHWfzafqfWijzDnYINouXSqBJKYdELVlg8 nnhNI/93eQdtta8MTHZq5lrSM9Xqt9CncHBC1p8fnbhggiFbeKJpkERqHtNwmw3Q 8DHjDtdASF0iQQ== -----END CERTIFICATE-----Generated at Fri Dec 19 20:29:04 2025 by rpki-client