This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft File: GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft (raw, json) Hash identifier: biu0rMZgbvs7nQVlPPBFf/sHqNcCxJ9ovCwC8AyCp64= Subject key identifier: F5:9A:B6:65:EA:5B:DB:C1:E3:EA:91:02:2D:1F:2D:90:A3:39:43:8A Authority key identifier: 18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC Certificate issuer: /CN=186590ee4a796301c422e033f944d263d6adeebc Certificate serial: 019B4FCE0EBFEF8B21D831F578C3B18E68D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft Manifest number: 12C1 Signing time: Wed 24 Dec 2025 10:01:02 +0000 Manifest this update: Wed 24 Dec 2025 10:01:02 +0000 Manifest next update: Thu 25 Dec 2025 10:01:02 +0000 Files and hashes: 1: GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl (hash: yRR3QyYhRNkxZ3Uk3OJe5DwF8+WLPOBzPGfathjAKRI=) 2: xbbxTo9rn50nwhGlFUGMbwhSzbo.roa (hash: zFleJFRgd2evTBBfHWP3ENqdzORcbjMKg0D2r2qzukQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:0e:bf:ef:8b:21:d8:31:f5:78:c3:b1:8e:68:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=186590ee4a796301c422e033f944d263d6adeebc Validity Not Before: Dec 24 10:01:02 2025 GMT Not After : Dec 25 10:01:02 2025 GMT Subject: CN=f59ab665ea5bdbc1e3ea91022d1f2d90a339438a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:9c:a7:d9:50:94:5d:1d:83:26:e2:a0:1d: fd:54:82:fe:74:1f:85:bc:04:6d:cd:23:34:c8:4b: eb:ab:bc:bf:93:0a:4d:b0:16:ee:6d:26:6f:8f:be: d0:79:08:4b:70:85:89:63:b5:71:08:7e:a5:e4:59: b2:18:5e:05:48:f2:1c:1f:cc:eb:cd:5a:86:a3:be: 46:58:ce:72:b2:33:cf:06:31:b2:5f:6e:2c:2b:13: 20:39:27:c0:88:59:03:43:52:d5:ee:22:3b:c4:63: 08:cd:a5:2b:6f:8e:8b:c2:81:db:25:1d:97:9a:11: 4d:4d:c2:54:a9:55:a3:2e:c6:da:8f:38:e7:94:f6: 22:c3:cb:fe:9a:de:eb:09:29:82:eb:e3:cd:e3:a5: 36:86:0c:66:11:52:0b:43:7c:f3:2c:65:8f:89:39: 0f:ae:81:f0:9a:7e:1b:cc:86:1e:ed:0e:48:bc:96: fd:d6:05:37:d4:63:8f:e2:20:cd:82:18:a1:a7:d5: ac:50:82:a8:f7:58:ac:5e:12:d6:32:1f:54:da:82: 94:ff:cb:f0:f8:69:2d:24:9f:1c:70:0e:26:19:de: b7:9a:f9:12:a2:bb:2f:ed:e6:cf:47:0b:ce:4f:4a: 54:91:a5:64:b0:71:b5:8f:02:30:ee:aa:c9:56:7c: 7b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9A:B6:65:EA:5B:DB:C1:E3:EA:91:02:2D:1F:2D:90:A3:39:43:8A X509v3 Authority Key Identifier: keyid:18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:0a:13:ea:88:ae:02:ca:88:22:01:f4:78:93:26:77:c8:07: ec:ee:bb:a0:16:70:cc:fa:c7:2a:49:70:21:99:69:8c:44:da: 63:33:33:4d:3e:0b:4c:5f:cd:af:6e:07:84:85:01:43:e6:35: 1a:18:ec:93:65:32:4d:0a:8b:ff:bf:4b:a9:f2:70:0a:c0:ff: 60:c8:d8:fb:54:1a:22:4f:25:c9:eb:3b:4d:39:4f:62:66:65: 88:94:74:e9:e9:d0:d0:ff:f2:3b:4e:b3:79:33:d1:49:ca:70: 8f:d1:67:1f:2b:c9:79:1e:6c:97:78:da:9c:06:64:63:5b:3a: 44:87:be:c4:a2:4b:44:f8:3d:b0:a7:6a:47:9c:8e:73:31:97: 14:aa:ac:8b:c0:e9:a7:1a:24:c9:d4:2c:9c:cd:17:56:04:76: e6:7c:a8:5d:d1:29:5f:55:99:89:bb:c0:3b:7c:64:27:60:3a: 6b:52:db:0c:27:17:6b:9c:06:83:e5:8b:b2:98:6d:b4:4f:32: 41:52:30:97:02:fb:14:89:34:f3:0d:dc:98:98:79:ac:55:ba: 90:72:5b:63:90:ab:75:cd:c3:f0:12:f1:5d:ef:24:64:c4:cb: f2:0b:25:c6:4b:fa:3a:63:fe:56:39:39:51:9c:6c:64:9f:85: c6:e7:5c:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzg6/74sh2DH1eMOxjmjRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NjU5MGVlNGE3OTYzMDFjNDIyZTAzM2Y5NDRkMjYzZDZh ZGVlYmMwHhcNMjUxMjI0MTAwMTAyWhcNMjUxMjI1MTAwMTAyWjAzMTEwLwYDVQQD EyhmNTlhYjY2NWVhNWJkYmMxZTNlYTkxMDIyZDFmMmQ5MGEzMzk0MzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHOcp9lQlF0dgybioB39VIL+dB+F vARtzSM0yEvrq7y/kwpNsBbubSZvj77QeQhLcIWJY7VxCH6l5FmyGF4FSPIcH8zr zVqGo75GWM5ysjPPBjGyX24sKxMgOSfAiFkDQ1LV7iI7xGMIzaUrb46LwoHbJR2X mhFNTcJUqVWjLsbajzjnlPYiw8v+mt7rCSmC6+PN46U2hgxmEVILQ3zzLGWPiTkP roHwmn4bzIYe7Q5IvJb91gU31GOP4iDNghihp9WsUIKo91isXhLWMh9U2oKU/8vw +GktJJ8ccA4mGd63mvkSorsv7ebPRwvOT0pUkaVksHG1jwIw7qrJVnx7IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWatmXqW9vB4+qRAi0fLZCjOUOKMB8GA1UdIwQY MBaAFBhlkO5KeWMBxCLgM/lE0mPWre68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0dXUTdrcDVZd0hFSXVBei1VVFNZOWF0N3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84MGI4Y2YtNTc2ZC00MDQ0LWE2MjQt YWU3MmJmZDNmNzgyLzEvR0dXUTdrcDVZd0hFSXVBei1VVFNZOWF0N3J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS84MGI4Y2YtNTc2ZC00MDQ0LWE2MjQtYWU3MmJmZDNmNzgy LzEvR0dXUTdrcDVZd0hFSXVBei1VVFNZOWF0N3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegoT6oiu AsqIIgH0eJMmd8gH7O67oBZwzPrHKklwIZlpjETaYzMzTT4LTF/Nr24HhIUBQ+Y1 Ghjsk2UyTQqL/79LqfJwCsD/YMjY+1QaIk8lyes7TTlPYmZliJR06enQ0P/yO06z eTPRScpwj9FnHyvJeR5sl3janAZkY1s6RIe+xKJLRPg9sKdqR5yOczGXFKqsi8Dp pxokydQsnM0XVgR25nyoXdEpX1WZibvAO3xkJ2A6a1LbDCcXa5wGg+WLsphttE8y QVIwlwL7FIk08w3cmJh5rFW6kHJbY5Crdc3D8BLxXe8kZMTL8gslxkv6OmP+Vjk5 UZxsZJ+Fxudczw== -----END CERTIFICATE-----Generated at Wed Dec 24 16:39:14 2025 by rpki-client