This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft File: GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json) Hash identifier: 7/YC9IZguZEUG7H2Ti6R0pNcxbJ7TZe1659g2kRS1Us= Subject key identifier: C1:C3:FD:CB:6C:C8:53:A8:D4:9B:EF:AC:4A:7D:56:1D:90:55:4D:AB Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61 Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061 Certificate serial: 019B51BD123833DAC620E28E6DF963B7D693 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft Manifest number: 0C48 Signing time: Wed 24 Dec 2025 19:01:43 +0000 Manifest this update: Wed 24 Dec 2025 19:01:43 +0000 Manifest next update: Thu 25 Dec 2025 19:01:43 +0000 Files and hashes: 1: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (hash: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=) 2: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: xToPpZ8Brg5I2ToXughh2BFVRg6z9RN1cJFJ1dBw8UQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:12:38:33:da:c6:20:e2:8e:6d:f9:63:b7:d6:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061 Validity Not Before: Dec 24 19:01:43 2025 GMT Not After : Dec 25 19:01:43 2025 GMT Subject: CN=c1c3fdcb6cc853a8d49befac4a7d561d90554dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a9:a8:63:62:19:3a:97:00:a1:89:4a:1d:83: e0:61:e6:32:83:b8:8f:7f:74:f7:88:ca:6a:7d:0f: d5:79:c9:d1:75:b7:4e:83:6b:8a:53:13:db:74:ec: d2:22:6e:d6:9b:e7:ff:25:94:91:44:ed:65:5a:e5: 08:6e:f1:cd:60:ae:43:05:f6:67:54:2c:9c:2e:2f: 25:7d:55:0b:f3:7c:a4:22:16:6f:1d:50:6c:43:78: 96:9b:43:50:37:15:b8:10:98:46:c1:07:19:7c:4b: d3:53:4e:d1:8e:1a:5f:ae:e7:f6:20:7e:bf:48:51: 59:56:82:65:08:d4:a8:10:9e:a9:0a:7a:12:c6:6a: c1:5e:98:10:fc:49:cc:e6:93:0d:a7:14:b2:d0:e8: 99:ee:4f:19:f1:ea:b6:11:a1:28:47:ee:5e:09:e8: d1:6c:0a:9c:67:d0:11:25:e8:5a:24:ab:07:29:7f: 3f:a1:a4:f1:a4:54:85:1f:b2:53:81:ce:e3:bb:4c: fe:62:24:39:ff:5b:89:67:4e:54:57:31:cc:f4:6f: 1d:0b:33:e3:2b:3f:89:72:65:e6:85:9b:f7:6b:b4: 57:74:77:66:4b:04:48:5a:22:35:06:a6:f4:ca:f2: 8b:fb:4e:eb:70:d0:64:30:ed:03:e0:2a:b3:58:05: cb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C3:FD:CB:6C:C8:53:A8:D4:9B:EF:AC:4A:7D:56:1D:90:55:4D:AB X509v3 Authority Key Identifier: keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e3:ea:86:c1:22:c0:e8:b4:ab:2d:2f:ac:2f:b6:ab:1f:1d: da:47:63:ae:ba:00:34:b0:d1:02:29:3b:5f:0f:f3:4e:d9:60: 37:e6:a1:d0:3f:fa:28:be:78:55:e2:84:db:64:65:de:00:f1: 50:42:3c:00:aa:c9:95:d3:18:d2:5f:13:dc:8e:09:f4:8a:e6: 4b:ec:bb:f1:4c:3f:01:de:af:b3:78:b3:15:03:27:e5:c3:01: d6:f1:a9:0e:8c:9f:dc:63:85:95:a1:e1:2f:f7:f9:52:1e:12: 0f:a6:d5:84:64:41:da:0f:04:d0:aa:45:8d:05:04:b6:f2:59: a9:b2:f2:f2:a7:62:d4:4d:2c:9f:03:20:bb:02:89:6c:92:34: a0:8b:1e:ea:c9:5f:31:c6:19:c8:44:e6:d4:52:9d:2b:fb:fc: 69:45:33:8b:3e:88:b1:74:e6:f4:5c:28:ca:1e:71:29:93:a2: 1f:05:f5:0a:f9:fe:36:16:1c:c7:fa:e2:49:96:23:62:03:55: 76:8a:62:ce:7e:ee:37:e6:0c:fd:cf:52:d8:76:6b:ab:af:01: 53:c9:ff:66:77:4e:2d:58:42:d4:8d:cd:90:a1:87:f7:c5:df: 4b:28:99:7c:b2:64:17:35:48:2c:cd:9b:7e:81:49:9c:ef:db: 43:82:4e:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvRI4M9rGIOKObfljt9aTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YzFhYzY4ODJkZTA4OTMwNjBmODA5MTdkN2I4NThjNWMz MGYwNjEwHhcNMjUxMjI0MTkwMTQzWhcNMjUxMjI1MTkwMTQzWjAzMTEwLwYDVQQD EyhjMWMzZmRjYjZjYzg1M2E4ZDQ5YmVmYWM0YTdkNTYxZDkwNTU0ZGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6moY2IZOpcAoYlKHYPgYeYyg7iP f3T3iMpqfQ/VecnRdbdOg2uKUxPbdOzSIm7Wm+f/JZSRRO1lWuUIbvHNYK5DBfZn VCycLi8lfVUL83ykIhZvHVBsQ3iWm0NQNxW4EJhGwQcZfEvTU07Rjhpfruf2IH6/ SFFZVoJlCNSoEJ6pCnoSxmrBXpgQ/EnM5pMNpxSy0OiZ7k8Z8eq2EaEoR+5eCejR bAqcZ9ARJehaJKsHKX8/oaTxpFSFH7JTgc7ju0z+YiQ5/1uJZ05UVzHM9G8dCzPj Kz+JcmXmhZv3a7RXdHdmSwRIWiI1Bqb0yvKL+07rcNBkMO0D4CqzWAXLqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHD/ctsyFOo1JvvrEp9Vh2QVU2rMB8GA1UdIwQY MBaAFBjBrGiC3giTBg+AkX17hYxcMPBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84NzAxMjMtNzE5ZC00NTA2LWJmODYt ZThkZTA1OTI3OGJkLzEvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS84NzAxMjMtNzE5ZC00NTA2LWJmODYtZThkZTA1OTI3OGJk LzEvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+PqhsEi wOi0qy0vrC+2qx8d2kdjrroANLDRAik7Xw/zTtlgN+ah0D/6KL54VeKE22Rl3gDx UEI8AKrJldMY0l8T3I4J9IrmS+y78Uw/Ad6vs3izFQMn5cMB1vGpDoyf3GOFlaHh L/f5Uh4SD6bVhGRB2g8E0KpFjQUEtvJZqbLy8qdi1E0snwMguwKJbJI0oIse6slf McYZyETm1FKdK/v8aUUziz6IsXTm9Fwoyh5xKZOiHwX1Cvn+NhYcx/riSZYjYgNV dopizn7uN+YM/c9S2HZrq68BU8n/ZndOLVhC1I3NkKGH98XfSyiZfLJkFzVILM2b foFJnO/bQ4JOUg== -----END CERTIFICATE-----Generated at Wed Dec 24 21:47:39 2025 by rpki-client