This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft File: GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json) Hash identifier: 1u8/qtvtNjfowJsr5bu9pb63OeSZ1Khg0KcELQHjTyQ= Subject key identifier: F9:4F:CD:85:D6:8C:41:0D:F9:42:BB:4A:33:96:25:64:2A:4A:84:0B Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6 Certificate issuer: /CN=1a058029c96ce28af8018d57f8fa403126151be6 Certificate serial: 019B446E687F16AA5286A199C846FCDC1D4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft Manifest number: 0920 Signing time: Mon 22 Dec 2025 05:00:44 +0000 Manifest this update: Mon 22 Dec 2025 05:00:44 +0000 Manifest next update: Tue 23 Dec 2025 05:00:44 +0000 Files and hashes: 1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: B/KJlS3kDgMKkyWyU805T7U9qORpXSFWgwy//wX2Hrs=) 2: i3e8wCKSQ41m2OIaVF9MlCgeLgA.roa (hash: 4qgbTrajbEXgLsjqzkg5VgJTQJvi2U7RCx9bgextP3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:68:7f:16:aa:52:86:a1:99:c8:46:fc:dc:1d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6 Validity Not Before: Dec 22 05:00:44 2025 GMT Not After : Dec 23 05:00:44 2025 GMT Subject: CN=f94fcd85d68c410df942bb4a339625642a4a840b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:2c:ed:03:43:73:ab:0e:35:c2:c8:57:f9: 35:e3:95:4b:c6:d7:1e:1c:56:ca:b9:07:40:2b:de: 35:5b:da:96:66:6e:06:9c:66:89:bd:7d:91:c8:b1: 9a:65:d2:b0:05:1f:86:a3:27:67:50:18:6d:c2:40: 47:75:c4:48:ac:07:09:c5:d2:b8:43:f0:ef:51:61: 5d:22:e0:90:60:8f:70:45:51:8c:4b:8a:04:5a:05: 18:b2:81:37:c1:ee:dc:64:a5:ad:dc:33:8b:3f:d7: 76:3d:2a:f3:75:6c:a7:5d:31:64:63:03:bf:97:1b: 96:08:b0:6b:e9:65:59:d7:fd:90:2c:2b:d9:4f:b7: ab:24:2e:cc:53:f0:64:ea:a9:0d:f3:00:13:77:63: f5:f0:49:bc:db:a3:93:1b:e8:c9:a2:bd:f6:db:6a: 5d:90:ff:72:51:4b:a9:ee:ec:57:a1:db:d5:a7:86: aa:cc:83:d2:f4:de:24:e1:e8:ce:d3:97:15:e7:63: 30:55:83:c2:d3:29:12:48:fd:42:cd:3c:f7:f7:8d: a7:96:68:ec:de:54:3e:61:4a:ac:0a:3d:39:87:2d: 38:f3:2f:52:4d:e6:f3:b0:4d:7a:86:4d:ba:69:54: db:eb:ea:73:d5:37:c8:ec:97:f3:e4:05:44:29:a4: 90:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4F:CD:85:D6:8C:41:0D:F9:42:BB:4A:33:96:25:64:2A:4A:84:0B X509v3 Authority Key Identifier: keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:7c:b4:33:ff:57:3a:01:98:e1:df:71:23:b3:76:bc:fb:8e: c6:0c:0a:6c:dc:99:b8:f1:7c:11:99:cc:37:37:8b:a9:ff:e4: 9a:92:40:56:da:dd:64:e4:70:64:93:45:a0:e3:16:6c:66:78: 73:89:20:52:53:55:df:18:12:08:7e:6e:d7:05:90:17:07:00: 17:c6:bf:77:99:a6:65:3d:da:4c:17:cb:a9:7c:34:35:37:87: 73:c4:7c:7a:4b:3a:29:ee:81:32:d0:85:4e:fb:67:40:11:52: 07:7e:8a:46:cc:5a:27:7e:c7:cd:7f:7a:14:fa:b5:e6:cb:3d: db:d3:40:f4:e5:0b:90:a9:87:12:d5:69:ba:e0:57:b1:19:43: a8:14:f3:da:22:e4:64:20:bf:6c:38:39:60:ac:3a:57:33:e1: f4:6d:15:f1:64:1a:5d:9f:8f:7d:cc:0c:51:79:9f:61:46:bc: ad:ee:e4:db:ff:fb:8b:5f:75:34:fd:2c:07:3c:43:2c:c8:d5: a3:9c:57:a7:94:01:2a:ca:2d:68:0c:50:1b:8a:b1:72:42:1b: 8d:59:56:71:f6:4d:4c:15:89:41:eb:b5:12:5b:ed:d1:61:08: d4:ca:5d:d8:a8:00:c8:df:ed:cb:ef:fc:28:63:7f:bd:57:24: 9f:66:37:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbmh/FqpShqGZyEb83B1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMDU4MDI5Yzk2Y2UyOGFmODAxOGQ1N2Y4ZmE0MDMxMjYx NTFiZTYwHhcNMjUxMjIyMDUwMDQ0WhcNMjUxMjIzMDUwMDQ0WjAzMTEwLwYDVQQD EyhmOTRmY2Q4NWQ2OGM0MTBkZjk0MmJiNGEzMzk2MjU2NDJhNGE4NDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuEs7QNDc6sONcLIV/k145VLxtce HFbKuQdAK941W9qWZm4GnGaJvX2RyLGaZdKwBR+GoydnUBhtwkBHdcRIrAcJxdK4 Q/DvUWFdIuCQYI9wRVGMS4oEWgUYsoE3we7cZKWt3DOLP9d2PSrzdWynXTFkYwO/ lxuWCLBr6WVZ1/2QLCvZT7erJC7MU/Bk6qkN8wATd2P18Em826OTG+jJor3222pd kP9yUUup7uxXodvVp4aqzIPS9N4k4ejO05cV52MwVYPC0ykSSP1CzTz3942nlmjs 3lQ+YUqsCj05hy048y9STebzsE16hk26aVTb6+pz1TfI7Jfz5AVEKaSQeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlPzYXWjEEN+UK7SjOWJWQqSoQLMB8GA1UdIwQY MBaAFBoFgCnJbOKK+AGNV/j6QDEmFRvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2dXQUtjbHM0b3I0QVkxWC1QcEFNU1lWRy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wOWUzMjAtYTNiNi00NWNiLTg3YzAt MjI4Mzk3NjY5NjBhLzEvR2dXQUtjbHM0b3I0QVkxWC1QcEFNU1lWRy1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8wOWUzMjAtYTNiNi00NWNiLTg3YzAtMjI4Mzk3NjY5NjBh LzEvR2dXQUtjbHM0b3I0QVkxWC1QcEFNU1lWRy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHy0M/9X OgGY4d9xI7N2vPuOxgwKbNyZuPF8EZnMNzeLqf/kmpJAVtrdZORwZJNFoOMWbGZ4 c4kgUlNV3xgSCH5u1wWQFwcAF8a/d5mmZT3aTBfLqXw0NTeHc8R8eks6Ke6BMtCF TvtnQBFSB36KRsxaJ37HzX96FPq15ss929NA9OULkKmHEtVpuuBXsRlDqBTz2iLk ZCC/bDg5YKw6VzPh9G0V8WQaXZ+PfcwMUXmfYUa8re7k2//7i191NP0sBzxDLMjV o5xXp5QBKsotaAxQG4qxckIbjVlWcfZNTBWJQeu1Elvt0WEI1Mpd2KgAyN/ty+/8 KGN/vVckn2Y3ow== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:46 2025 by rpki-client