This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft File: GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json) Hash identifier: YbrFO4EDUwf+r58NTAmflxcJqsVcZt/xLUM7njZqCsA= Subject key identifier: E3:64:87:1D:66:03:16:29:CE:26:5E:6C:35:2D:D6:60:26:3C:CA:55 Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61 Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061 Certificate serial: 019B6CC7036E2C3FB15B75F0A278E0DDE74E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft Manifest number: 0C56 Signing time: Tue 30 Dec 2025 01:02:20 +0000 Manifest this update: Tue 30 Dec 2025 01:02:20 +0000 Manifest next update: Wed 31 Dec 2025 01:02:20 +0000 Files and hashes: 1: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (hash: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=) 2: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: u+rswRRM1LhY/9UUDZLq98b8mQZpx8p8EW5gy+dPjw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c7:03:6e:2c:3f:b1:5b:75:f0:a2:78:e0:dd:e7:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061 Validity Not Before: Dec 30 01:02:20 2025 GMT Not After : Dec 31 01:02:20 2025 GMT Subject: CN=e364871d66031629ce265e6c352dd660263cca55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b5:11:aa:48:61:21:0a:41:fc:37:75:15:2c: 72:5d:3a:0b:fb:1d:9a:1d:3b:a3:14:70:26:0a:37: 8d:ef:6e:b7:4c:48:8f:4b:4f:19:14:71:91:60:3d: ae:9b:d1:fa:ed:a3:f9:c8:8b:d4:f4:26:1e:60:9c: 02:a0:04:4d:f4:87:36:8f:33:3d:c8:61:74:28:9f: 1e:0e:3c:3d:1e:7f:f1:fa:36:41:04:1f:77:c7:26: 1c:d0:8c:ee:60:ae:08:8f:d3:af:ae:5b:87:f2:fb: 69:63:f5:ad:6e:44:80:a4:46:76:9e:6d:ad:f0:7b: c2:9c:cd:83:7d:4d:1c:cc:58:8e:46:a3:17:7b:40: 28:87:43:91:71:a7:53:0a:c9:ee:92:bb:17:f7:e2: e4:e7:6a:7d:34:1d:ad:6e:be:92:f6:8f:0c:70:fd: 3e:8e:b1:84:1a:b9:23:24:f4:61:69:c7:56:0d:aa: bf:86:48:92:4a:10:6e:62:ea:08:44:20:cc:5b:48: 19:6d:ee:ca:fe:e5:98:2a:f5:ec:bb:eb:71:ae:8e: 5b:cc:49:60:25:a5:ec:91:13:ae:a7:59:41:bf:77: 79:67:7b:f1:4d:ac:cb:6d:01:7d:95:5f:24:fa:5d: 1b:66:3a:15:a9:e3:07:1b:89:dd:41:df:f6:22:e2: 71:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:64:87:1D:66:03:16:29:CE:26:5E:6C:35:2D:D6:60:26:3C:CA:55 X509v3 Authority Key Identifier: keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:2f:7c:08:df:43:70:ca:e0:57:95:9f:cd:e3:20:5a:15:79: 95:39:b6:ae:11:4b:e6:78:0e:99:a4:6f:c9:39:41:31:04:1e: 2b:df:ba:af:0c:9e:4b:f2:1a:fe:ec:81:70:87:50:64:2c:09: 5a:ab:4d:8c:f6:30:f5:d8:1e:cc:02:45:b1:19:6c:6b:26:f6: fc:c0:6b:4e:ef:d9:c6:1f:14:57:e0:15:f9:57:4b:eb:58:e8: 87:97:d0:60:32:82:61:c1:e8:8e:11:e4:c5:40:1f:b2:62:3d: e5:8d:ca:5a:f2:e4:c2:dd:da:39:52:87:0b:32:83:34:cc:f5: a4:9e:7c:27:7d:07:3e:a6:24:0c:bd:d4:60:c1:91:93:83:2c: 7d:74:12:d7:0c:15:1c:ce:49:7b:0c:e1:38:9e:f3:47:62:6b: d8:2e:0c:ab:b7:4c:46:d9:13:e4:44:4c:53:f3:69:55:5d:04: 97:8e:2f:eb:61:3e:a7:ed:a6:ad:f7:fa:77:24:fa:9e:59:80: 1c:73:c6:49:a7:4e:52:02:29:5d:b9:42:4e:88:4a:b7:b0:9d: 6f:79:8c:99:26:a3:ae:76:45:e3:56:89:66:05:e8:1f:bb:bf: ec:63:1c:d9:08:85:10:5b:8e:14:ac:74:0e:64:81:cd:bf:ed: c4:be:f9:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxwNuLD+xW3Xwonjg3edOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YzFhYzY4ODJkZTA4OTMwNjBmODA5MTdkN2I4NThjNWMz MGYwNjEwHhcNMjUxMjMwMDEwMjIwWhcNMjUxMjMxMDEwMjIwWjAzMTEwLwYDVQQD EyhlMzY0ODcxZDY2MDMxNjI5Y2UyNjVlNmMzNTJkZDY2MDI2M2NjYTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7URqkhhIQpB/Dd1FSxyXToL+x2a HTujFHAmCjeN7263TEiPS08ZFHGRYD2um9H67aP5yIvU9CYeYJwCoARN9Ic2jzM9 yGF0KJ8eDjw9Hn/x+jZBBB93xyYc0IzuYK4Ij9OvrluH8vtpY/WtbkSApEZ2nm2t 8HvCnM2DfU0czFiORqMXe0Aoh0ORcadTCsnukrsX9+Lk52p9NB2tbr6S9o8McP0+ jrGEGrkjJPRhacdWDaq/hkiSShBuYuoIRCDMW0gZbe7K/uWYKvXsu+txro5bzElg JaXskROup1lBv3d5Z3vxTazLbQF9lV8k+l0bZjoVqeMHG4ndQd/2IuJxawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONkhx1mAxYpziZebDUt1mAmPMpVMB8GA1UdIwQY MBaAFBjBrGiC3giTBg+AkX17hYxcMPBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84NzAxMjMtNzE5ZC00NTA2LWJmODYt ZThkZTA1OTI3OGJkLzEvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS84NzAxMjMtNzE5ZC00NTA2LWJmODYtZThkZTA1OTI3OGJk LzEvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkC98CN9D cMrgV5WfzeMgWhV5lTm2rhFL5ngOmaRvyTlBMQQeK9+6rwyeS/Ia/uyBcIdQZCwJ WqtNjPYw9dgezAJFsRlsayb2/MBrTu/Zxh8UV+AV+VdL61joh5fQYDKCYcHojhHk xUAfsmI95Y3KWvLkwt3aOVKHCzKDNMz1pJ58J30HPqYkDL3UYMGRk4MsfXQS1wwV HM5JewzhOJ7zR2Jr2C4Mq7dMRtkT5ERMU/NpVV0El44v62E+p+2mrff6dyT6nlmA HHPGSadOUgIpXblCTohKt7Cdb3mMmSajrnZF41aJZgXoH7u/7GMc2QiFEFuOFKx0 DmSBzb/txL75LA== -----END CERTIFICATE-----Generated at Tue Dec 30 08:51:20 2025 by rpki-client