This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft File: GHpwT0heEd7avFYmTl2AwUh-CEI.mft (raw, json) Hash identifier: Z3Dov7CfYL7VAnT/spFy3vszmKm+wkovkNj4oJDL6ZE= Subject key identifier: 3A:B3:13:4C:48:D0:C5:28:F3:E1:53:DC:26:93:57:74:40:B4:AB:EF Authority key identifier: 18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42 Certificate issuer: /CN=187a704f485e11dedabc56264e5d80c1487e0842 Certificate serial: 019B11940E23EC5C362DB99382A7A76CA899 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft Manifest number: 02AC Signing time: Fri 12 Dec 2025 08:01:14 +0000 Manifest this update: Fri 12 Dec 2025 08:01:14 +0000 Manifest next update: Sat 13 Dec 2025 08:01:14 +0000 Files and hashes: 1: GHpwT0heEd7avFYmTl2AwUh-CEI.crl (hash: Zhd/hxBBAeaha5dB+3DYzkgaa4eWV/IZZ3qxvVu9zMY=) 2: vvdAJvoqdhRnHyNRnR9QwCmshOA.roa (hash: yno5bMF5UsFhgiWOHsRLetn5+9bEbKawwZrFBu7TWWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:94:0e:23:ec:5c:36:2d:b9:93:82:a7:a7:6c:a8:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=187a704f485e11dedabc56264e5d80c1487e0842 Validity Not Before: Dec 12 08:01:14 2025 GMT Not After : Dec 13 08:01:14 2025 GMT Subject: CN=3ab3134c48d0c528f3e153dc2693577440b4abef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7a:5b:2b:12:b9:2b:3e:22:a8:50:08:27:45: a7:6a:98:fa:e9:e0:39:4b:2d:1a:67:88:20:ef:a7: c7:c5:3e:47:22:00:67:37:4c:5d:e6:96:a5:24:7f: 73:f3:dd:81:5f:5c:5c:db:d0:08:2c:8b:99:8b:33: c5:05:e6:6a:01:d2:54:43:a3:28:e2:b3:64:a7:a2: 5a:96:0a:3f:53:6b:7f:66:14:25:0e:52:64:63:de: e7:bb:57:5c:ca:60:43:67:02:0d:ba:27:f9:2b:ce: df:e6:eb:42:fe:32:3e:13:fd:fd:d4:27:2f:8b:c4: df:4a:32:2f:4a:17:5a:4e:6e:e6:d3:af:c6:12:9c: 13:00:dc:c1:c8:e7:a5:66:7b:73:86:24:ab:37:b5: 0f:79:a8:75:33:37:4e:3f:d8:36:3d:f3:61:59:b7: 18:e1:c0:13:c1:80:93:93:5c:2a:d9:27:a9:bc:d2: 83:84:3d:ea:a9:81:cb:49:94:aa:62:e4:bb:d2:5f: a8:aa:c8:fc:2a:0d:cd:3c:a6:cd:e9:28:e6:d5:94: ed:14:93:93:70:85:ac:d3:2f:4b:0d:86:2e:10:51: 86:08:03:90:1f:25:99:71:78:d6:f7:10:23:9b:7a: 32:49:1c:d0:7a:af:7f:5f:54:fa:74:72:ae:5c:3c: 2b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B3:13:4C:48:D0:C5:28:F3:E1:53:DC:26:93:57:74:40:B4:AB:EF X509v3 Authority Key Identifier: keyid:18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:91:b2:bd:fb:e6:25:17:08:25:27:40:db:54:d2:39:be:14: 65:9d:5c:f5:bb:42:63:35:e6:f8:db:e7:24:ef:a3:43:07:37: ee:07:9c:88:9b:3a:60:4e:9c:4c:b4:ee:be:d9:5b:d6:7a:de: e6:af:34:48:ba:18:f1:cf:16:5c:b0:92:4f:d7:c4:0f:71:51: 36:4c:13:90:01:8f:f7:18:6f:48:b7:24:db:32:a4:4f:24:a5: 1a:ad:0b:4d:1a:75:c5:26:9d:f8:c9:09:53:80:be:35:85:28: 8a:ba:da:fa:73:68:41:13:5d:3d:80:91:69:8f:b5:47:41:e0: 4b:6f:e7:c3:ed:bb:0e:11:ce:25:31:11:8a:98:bc:aa:4e:50: dc:e4:e3:41:9d:9e:7c:16:fb:3f:8d:39:fd:49:63:20:b3:46: 5e:6b:8f:f9:03:13:70:67:37:38:c1:bd:43:18:80:f3:cc:f4: 20:6e:96:d2:78:c5:47:aa:a9:5d:ef:8c:d6:3f:da:93:03:ae: 56:81:ec:3f:84:11:94:51:ef:74:50:d3:a7:05:01:45:8a:0b: 17:87:31:31:4b:31:33:65:da:23:7f:84:cb:67:48:f0:84:34: 8a:83:fd:3c:72:74:c1:d8:15:fb:b7:37:05:6e:c9:39:c0:b2: 13:4c:e3:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRlA4j7Fw2LbmTgqenbKiZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4N2E3MDRmNDg1ZTExZGVkYWJjNTYyNjRlNWQ4MGMxNDg3 ZTA4NDIwHhcNMjUxMjEyMDgwMTE0WhcNMjUxMjEzMDgwMTE0WjAzMTEwLwYDVQQD EygzYWIzMTM0YzQ4ZDBjNTI4ZjNlMTUzZGMyNjkzNTc3NDQwYjRhYmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnpbKxK5Kz4iqFAIJ0Wnapj66eA5 Sy0aZ4gg76fHxT5HIgBnN0xd5palJH9z892BX1xc29AILIuZizPFBeZqAdJUQ6Mo 4rNkp6Jalgo/U2t/ZhQlDlJkY97nu1dcymBDZwINuif5K87f5utC/jI+E/391Ccv i8TfSjIvShdaTm7m06/GEpwTANzByOelZntzhiSrN7UPeah1MzdOP9g2PfNhWbcY 4cATwYCTk1wq2SepvNKDhD3qqYHLSZSqYuS70l+oqsj8Kg3NPKbN6Sjm1ZTtFJOT cIWs0y9LDYYuEFGGCAOQHyWZcXjW9xAjm3oySRzQeq9/X1T6dHKuXDwrFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqzE0xI0MUo8+FT3CaTV3RAtKvvMB8GA1UdIwQY MBaAFBh6cE9IXhHe2rxWJk5dgMFIfghCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0hwd1QwaGVFZDdhdkZZbVRsMkF3VWgtQ0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82OThiZWMtYTBmMC00MmY3LTk5ZmEt Mjg1MTZiYjc1MDVjLzEvR0hwd1QwaGVFZDdhdkZZbVRsMkF3VWgtQ0VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82OThiZWMtYTBmMC00MmY3LTk5ZmEtMjg1MTZiYjc1MDVj LzEvR0hwd1QwaGVFZDdhdkZZbVRsMkF3VWgtQ0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJGyvfvm JRcIJSdA21TSOb4UZZ1c9btCYzXm+NvnJO+jQwc37geciJs6YE6cTLTuvtlb1nre 5q80SLoY8c8WXLCST9fED3FRNkwTkAGP9xhvSLck2zKkTySlGq0LTRp1xSad+MkJ U4C+NYUoirra+nNoQRNdPYCRaY+1R0HgS2/nw+27DhHOJTERipi8qk5Q3OTjQZ2e fBb7P405/UljILNGXmuP+QMTcGc3OMG9QxiA88z0IG6W0njFR6qpXe+M1j/akwOu VoHsP4QRlFHvdFDTpwUBRYoLF4cxMUsxM2XaI3+Ey2dI8IQ0ioP9PHJ0wdgV+7c3 BW7JOcCyE0zjIQ== -----END CERTIFICATE-----Generated at Fri Dec 12 14:19:30 2025 by rpki-client