This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft File: GUoR_la49HpaFBUDK3f_n7CC4D8.mft (raw, json) Hash identifier: mkLlSsHPMYULKVqO0+S2fmBNyxo6dmOZvyUVZMXDXM4= Subject key identifier: D3:6E:6A:1C:FF:97:10:F2:48:42:80:3C:4C:98:75:2F:4A:DC:F3:A1 Authority key identifier: 19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F Certificate issuer: /CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f Certificate serial: 019B32D7B51ED2BFBFC0C610E3A36418AE82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft Manifest number: 1241 Signing time: Thu 18 Dec 2025 19:02:35 +0000 Manifest this update: Thu 18 Dec 2025 19:02:35 +0000 Manifest next update: Fri 19 Dec 2025 19:02:35 +0000 Files and hashes: 1: GUoR_la49HpaFBUDK3f_n7CC4D8.crl (hash: D/+2VN0fqU1vT4BQs/t+MmLKjLw8ZjeDEss7MvEOtOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:b5:1e:d2:bf:bf:c0:c6:10:e3:a3:64:18:ae:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f Validity Not Before: Dec 18 19:02:35 2025 GMT Not After : Dec 19 19:02:35 2025 GMT Subject: CN=d36e6a1cff9710f24842803c4c98752f4adcf3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:27:cc:52:4a:67:fa:d0:4e:a6:64:d1:d9: 8a:1b:61:e5:8a:db:f9:e9:38:f2:b9:e7:08:5b:f2: 49:0a:bf:f6:3c:25:fc:f0:5e:2a:02:62:35:2b:e0: c4:d3:cd:59:ce:80:6b:4e:8e:23:4a:3b:a6:42:9c: 38:fc:8d:36:5e:79:2d:10:64:c5:04:3b:6e:fc:69: e6:a4:c6:3b:64:e2:9a:a5:ba:63:ac:52:ef:f2:68: 21:2c:75:5c:78:41:d0:79:9a:12:e8:c4:3b:20:fc: b1:90:77:89:75:88:a8:60:28:a9:4b:58:cf:d3:ab: c8:c3:01:9d:45:61:30:59:dd:5f:2d:4b:ea:ab:c0: 86:ef:4e:c3:4e:73:33:49:58:83:fd:57:f3:09:c3: 13:cd:a4:21:99:e7:cd:60:d6:bf:b8:78:2c:df:55: 93:c9:b6:a8:e1:9f:db:0a:13:63:c9:e3:7d:4a:74: e5:47:37:66:1c:e0:83:8c:13:77:93:e9:f4:10:61: 32:4a:01:84:fc:a1:56:1a:ef:b5:4e:d6:95:b0:9f: c9:52:a4:ca:20:91:a4:08:fd:fd:a4:71:25:fc:44: 53:a5:a8:51:1f:90:85:b1:55:4b:b6:21:91:f8:56: fb:5f:3e:cf:c8:a1:55:16:b9:9c:76:26:43:f5:71: 38:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6E:6A:1C:FF:97:10:F2:48:42:80:3C:4C:98:75:2F:4A:DC:F3:A1 X509v3 Authority Key Identifier: keyid:19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:c2:10:58:c2:24:7e:ae:81:d0:71:9f:e1:64:d4:5e:8b:cd: 7f:c9:20:c3:9f:36:48:2d:d5:7b:dc:cf:85:7d:54:2e:b4:d4: 85:2b:d9:58:b9:9e:b9:71:36:c7:bb:74:ae:fc:4b:d7:6d:26: 47:e9:33:1c:01:a0:3d:17:30:6e:e7:ec:9b:e8:95:a8:6d:3a: 5f:65:3f:e0:16:f7:8f:9e:13:9c:17:8d:7f:50:4c:cb:a6:63: 69:07:59:17:be:f0:ed:94:5b:8e:a5:13:40:b9:6a:84:57:b3: 2a:3e:22:b2:2b:1c:0e:ab:24:0c:32:53:83:10:5c:46:70:58: d3:78:0c:87:78:34:09:87:71:24:b4:0e:dd:ad:e0:4b:fd:ec: 36:48:85:82:97:ff:5e:6d:07:cd:04:47:27:f5:9d:7a:82:f1: 9e:68:e1:a4:9e:1c:8f:2c:3e:85:38:db:8e:f7:09:42:48:07: 02:e7:25:ea:22:02:a5:26:1a:3a:0a:4a:7a:42:49:55:96:19: 81:c6:2e:dd:f5:95:ed:33:83:9e:ae:28:e2:5e:7e:90:a1:b8: 8b:dc:44:fb:b0:3e:48:00:fb:ac:2e:12:41:a3:04:61:f2:6c: cb:ef:5d:dd:dc:22:7c:a3:22:de:05:df:e4:d8:2a:25:dc:83: 55:2c:9a:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy17Ue0r+/wMYQ46NkGK6CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NGExMWZlNTZiOGY0N2E1YTE0MTUwMzJiNzdmZjlmYjA4 MmUwM2YwHhcNMjUxMjE4MTkwMjM1WhcNMjUxMjE5MTkwMjM1WjAzMTEwLwYDVQQD EyhkMzZlNmExY2ZmOTcxMGYyNDg0MjgwM2M0Yzk4NzUyZjRhZGNmM2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvAnzFJKZ/rQTqZk0dmKG2Hlitv5 6TjyuecIW/JJCr/2PCX88F4qAmI1K+DE081ZzoBrTo4jSjumQpw4/I02XnktEGTF BDtu/GnmpMY7ZOKapbpjrFLv8mghLHVceEHQeZoS6MQ7IPyxkHeJdYioYCipS1jP 06vIwwGdRWEwWd1fLUvqq8CG707DTnMzSViD/VfzCcMTzaQhmefNYNa/uHgs31WT ybao4Z/bChNjyeN9SnTlRzdmHOCDjBN3k+n0EGEySgGE/KFWGu+1TtaVsJ/JUqTK IJGkCP39pHEl/ERTpahRH5CFsVVLtiGR+Fb7Xz7PyKFVFrmcdiZD9XE4PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNuahz/lxDySEKAPEyYdS9K3POhMB8GA1UdIwQY MBaAFBlKEf5WuPR6WhQVAyt3/5+wguA/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VvUl9sYTQ5SHBhRkJVREszZl9uN0NDNEQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hYWFlYzAtMGZiYS00ZWZjLTk4YjYt YzZhMTZkZTQ0MmJmLzEvR1VvUl9sYTQ5SHBhRkJVREszZl9uN0NDNEQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hYWFlYzAtMGZiYS00ZWZjLTk4YjYtYzZhMTZkZTQ0MmJm LzEvR1VvUl9sYTQ5SHBhRkJVREszZl9uN0NDNEQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArsIQWMIk fq6B0HGf4WTUXovNf8kgw582SC3Ve9zPhX1ULrTUhSvZWLmeuXE2x7t0rvxL120m R+kzHAGgPRcwbufsm+iVqG06X2U/4Bb3j54TnBeNf1BMy6ZjaQdZF77w7ZRbjqUT QLlqhFezKj4isiscDqskDDJTgxBcRnBY03gMh3g0CYdxJLQO3a3gS/3sNkiFgpf/ Xm0HzQRHJ/WdeoLxnmjhpJ4cjyw+hTjbjvcJQkgHAucl6iICpSYaOgpKekJJVZYZ gcYu3fWV7TODnq4o4l5+kKG4i9xE+7A+SAD7rC4SQaMEYfJsy+9d3dwifKMi3gXf 5NgqJdyDVSya3g== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:53 2025 by rpki-client