This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft File: GmoUZyI70xUQwU8hvTPX12mCnSg.mft (raw, json) Hash identifier: FUbtcUi8M9A48/q952lJgQxKAKI5rYCc7aigTONgLeA= Subject key identifier: AF:4F:01:2D:35:BF:65:02:A9:A7:1A:3C:6C:A2:A9:07:BB:B2:24:D3 Authority key identifier: 1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28 Certificate issuer: /CN=1a6a1467223bd31510c14f21bd33d7d769829d28 Certificate serial: 019B3CEC1961A758B15A06F0CCB5DDA04E5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft Manifest number: 0183 Signing time: Sat 20 Dec 2025 18:01:04 +0000 Manifest this update: Sat 20 Dec 2025 18:01:04 +0000 Manifest next update: Sun 21 Dec 2025 18:01:04 +0000 Files and hashes: 1: GmoUZyI70xUQwU8hvTPX12mCnSg.crl (hash: /yehGfMc49zQBkaKJVyyTzpHlDK/AE6hCxxys5FoVbw=) 2: XD5kSDYeMfY8LIHhbfnJvruSBPc.roa (hash: 7oUWV+LyugwjeCoSmfoHPMTejsb+0njHiDkg9kgwwIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:19:61:a7:58:b1:5a:06:f0:cc:b5:dd:a0:4e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a6a1467223bd31510c14f21bd33d7d769829d28 Validity Not Before: Dec 20 18:01:04 2025 GMT Not After : Dec 21 18:01:04 2025 GMT Subject: CN=af4f012d35bf6502a9a71a3c6ca2a907bbb224d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2c:7f:1c:fe:e1:f0:f9:fa:00:09:0e:f3:3d: 13:cb:92:1c:e2:d5:85:97:91:13:a1:cf:45:08:c0: 91:69:e2:ad:98:b7:75:cd:3f:2d:88:a9:9f:7e:45: 30:f3:a4:11:c5:48:2d:48:91:b9:1c:a0:47:3c:4d: 86:b5:ac:b2:af:88:51:2e:31:74:4f:65:da:5d:66: 46:93:9e:5c:dd:b7:9e:1e:bf:ce:4d:76:b2:53:b1: 0a:a8:d9:54:37:f1:58:ed:e8:53:5b:0f:81:6c:82: 13:2f:f7:09:b5:91:ab:ec:1b:f8:70:0b:88:a2:67: 76:b0:4e:53:6d:4d:20:76:72:5e:05:7a:33:d1:c7: 18:68:81:06:c8:3c:39:e0:d6:0a:2c:35:aa:51:84: c4:be:cf:59:65:e6:39:6f:2b:74:66:ba:41:73:b9: 02:c8:3e:51:cf:fb:d3:8f:0e:32:87:98:14:d3:6e: 10:0f:21:4c:f3:81:11:24:3b:e3:43:f7:e6:27:06: 97:16:89:ed:94:dc:45:9d:5c:d9:df:5b:7f:68:5c: f0:3d:62:11:36:4f:67:3e:6b:80:ca:10:a8:80:92: 02:72:90:32:fb:27:04:00:6f:8e:83:06:9e:db:a7: 48:02:23:93:06:01:7f:84:f3:24:2b:aa:12:df:33: 00:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:4F:01:2D:35:BF:65:02:A9:A7:1A:3C:6C:A2:A9:07:BB:B2:24:D3 X509v3 Authority Key Identifier: keyid:1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:15:b1:9c:5c:73:e0:1f:d8:83:b3:4b:65:52:10:d5:a0:48: b4:65:1e:e5:4e:2b:e6:91:5a:bb:93:d5:cf:ed:24:29:dd:00: 99:0b:a7:d9:63:1f:fb:f3:e0:d1:67:8a:c9:ba:33:a5:a4:7b: 53:59:33:07:0b:c5:47:09:91:b4:ba:70:16:98:38:a3:07:40: d3:ef:cd:d0:72:07:9d:d6:c4:5e:b5:c5:ad:69:0a:40:99:7c: 37:0b:f3:59:69:d7:00:12:29:e1:89:43:9e:87:0a:e6:63:fc: d4:e7:cf:26:83:71:ea:a1:6b:9f:cc:14:6b:6e:ef:7c:a6:c0: 38:dd:6b:ff:52:13:07:98:d9:ee:7e:b7:a0:54:34:b2:69:9a: b1:18:c9:32:b8:7e:05:70:c3:97:a7:21:d5:12:88:c9:3a:2a: 57:c9:da:a7:61:fc:55:69:85:d4:e5:4e:22:6b:74:81:a5:b9: 7e:3c:a9:01:2f:e4:a4:99:10:1c:5e:e1:00:ae:ad:ad:87:7d: ce:e6:b5:38:52:f2:a3:8e:4e:ed:b4:82:5a:d7:e3:65:19:de: da:49:41:9c:b9:00:05:66:94:38:35:3c:b7:63:e4:2d:02:1a: 20:e2:f6:8a:31:df:ef:b7:a4:45:80:5c:84:53:3c:af:d1:21: b3:ec:1a:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87Blhp1ixWgbwzLXdoE5cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNmExNDY3MjIzYmQzMTUxMGMxNGYyMWJkMzNkN2Q3Njk4 MjlkMjgwHhcNMjUxMjIwMTgwMTA0WhcNMjUxMjIxMTgwMTA0WjAzMTEwLwYDVQQD EyhhZjRmMDEyZDM1YmY2NTAyYTlhNzFhM2M2Y2EyYTkwN2JiYjIyNGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwix/HP7h8Pn6AAkO8z0Ty5Ic4tWF l5EToc9FCMCRaeKtmLd1zT8tiKmffkUw86QRxUgtSJG5HKBHPE2Gtayyr4hRLjF0 T2XaXWZGk55c3beeHr/OTXayU7EKqNlUN/FY7ehTWw+BbIITL/cJtZGr7Bv4cAuI omd2sE5TbU0gdnJeBXoz0ccYaIEGyDw54NYKLDWqUYTEvs9ZZeY5byt0ZrpBc7kC yD5Rz/vTjw4yh5gU024QDyFM84ERJDvjQ/fmJwaXFontlNxFnVzZ31t/aFzwPWIR Nk9nPmuAyhCogJICcpAy+ycEAG+Ogwae26dIAiOTBgF/hPMkK6oS3zMARQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9PAS01v2UCqacaPGyiqQe7siTTMB8GA1UdIwQY MBaAFBpqFGciO9MVEMFPIb0z19dpgp0oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR21vVVp5STcweFVRd1U4aHZUUFgxMm1DblNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84N2VhZmMtMTdhNi00OTAzLWI5NTEt NGQyMGRhMGM1MzBlLzEvR21vVVp5STcweFVRd1U4aHZUUFgxMm1DblNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84N2VhZmMtMTdhNi00OTAzLWI5NTEtNGQyMGRhMGM1MzBl LzEvR21vVVp5STcweFVRd1U4aHZUUFgxMm1DblNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRWxnFxz 4B/Yg7NLZVIQ1aBItGUe5U4r5pFau5PVz+0kKd0AmQun2WMf+/Pg0WeKybozpaR7 U1kzBwvFRwmRtLpwFpg4owdA0+/N0HIHndbEXrXFrWkKQJl8NwvzWWnXABIp4YlD nocK5mP81OfPJoNx6qFrn8wUa27vfKbAON1r/1ITB5jZ7n63oFQ0smmasRjJMrh+ BXDDl6ch1RKIyToqV8nap2H8VWmF1OVOImt0gaW5fjypAS/kpJkQHF7hAK6trYd9 zua1OFLyo45O7bSCWtfjZRne2klBnLkABWaUODU8t2PkLQIaIOL2ijHf77ekRYBc hFM8r9Ehs+waFA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:14:34 2025 by rpki-client