This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft File: GVc7IITN9G7hzNKC36O49rfqcmw.mft (raw, json) Hash identifier: j4RuxfCNEDpLe2DzmFVh1/q6oyMg+A3ed6jZqxDRUAY= Subject key identifier: 6D:2B:38:70:30:12:1D:CB:6B:13:57:50:23:F8:F3:37:67:D0:8F:A2 Authority key identifier: 19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C Certificate issuer: /CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c Certificate serial: 019B5C08F1E37A885B864B0F5ED91B204F00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft Manifest number: 14D7 Signing time: Fri 26 Dec 2025 19:00:48 +0000 Manifest this update: Fri 26 Dec 2025 19:00:48 +0000 Manifest next update: Sat 27 Dec 2025 19:00:48 +0000 Files and hashes: 1: GVc7IITN9G7hzNKC36O49rfqcmw.crl (hash: +Bag8hg4X8il5I5/WeieBUvM5Gadeer501OddFFPY5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 19:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:08:f1:e3:7a:88:5b:86:4b:0f:5e:d9:1b:20:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c Validity Not Before: Dec 26 19:00:48 2025 GMT Not After : Dec 27 19:00:48 2025 GMT Subject: CN=6d2b387030121dcb6b13575023f8f33767d08fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c3:d2:d3:83:54:7b:3d:3e:24:fa:70:63:3b: 6c:ba:d0:11:ba:65:85:41:fb:0b:d2:ba:e1:68:4e: 73:0d:0d:4a:5a:9c:de:86:08:83:61:ab:e1:8f:48: f7:36:6b:1d:99:ee:bf:77:56:fc:af:97:03:66:ed: e7:54:5a:b6:7a:7d:31:18:71:39:16:44:3a:0b:9b: 8b:f4:01:e5:ff:ed:15:15:11:1b:cb:d1:56:a6:83: 3d:e1:45:a6:7b:5b:ce:7d:73:ac:a4:73:f1:39:6c: 7f:c8:e6:be:26:6f:04:65:db:db:72:1d:82:2f:c3: ae:40:f9:81:27:b7:d6:0d:4f:45:cc:45:7e:35:4a: d4:d5:64:a2:d1:8a:88:99:3f:de:55:ea:a0:de:82: 5b:6d:51:4d:ee:7d:83:ee:0b:34:9e:7b:81:d0:1d: 7a:54:28:cd:88:5c:e8:92:09:76:34:6c:3f:47:3d: 8f:02:7a:58:76:75:be:93:1c:e5:35:b3:cc:bc:18: 8d:2c:0d:4c:56:f9:74:20:44:41:a5:2d:4d:70:d2: cb:25:35:37:8d:b1:0a:25:63:4a:b2:d4:bc:57:bf: 0b:d9:87:a7:7d:0d:5a:53:8c:b2:73:dd:dc:84:60: b3:94:7f:b9:e1:f1:2b:85:1c:74:33:8e:51:df:23: e2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2B:38:70:30:12:1D:CB:6B:13:57:50:23:F8:F3:37:67:D0:8F:A2 X509v3 Authority Key Identifier: keyid:19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:a8:c0:3d:7e:9b:6f:69:48:86:9c:a3:8d:68:6b:ea:99:34: 23:0f:f0:fa:6d:8b:2e:c5:09:22:aa:cc:13:5b:33:d9:f9:99: 54:d2:c9:52:86:18:36:d4:6e:94:c1:bd:66:23:ef:b9:98:d2: 2f:75:d2:2c:c5:13:6a:2e:06:a9:8f:9d:d1:c9:e3:f9:c6:92: d3:93:11:f8:f8:30:b0:54:40:6d:56:a3:78:5f:38:e4:7d:80: af:80:cc:f6:46:09:f5:84:8e:17:8f:92:11:83:85:eb:3c:7c: dd:7f:78:b2:27:b1:e2:cb:a3:61:05:85:01:7d:e3:ff:a6:bf: b7:21:f2:34:b0:3b:21:37:6b:8a:b0:bf:32:5a:c9:6d:2b:8b: ba:f4:98:95:b4:83:c0:5d:b7:26:c9:c8:3a:b8:0f:93:20:24: 7e:97:f5:22:f7:04:2e:6c:46:44:16:17:3c:02:0e:8f:f1:43: 24:6d:3d:ae:39:ef:80:04:40:bb:b9:96:ed:c1:90:4d:aa:ec: 27:30:1a:60:84:ac:96:84:ec:9a:7e:1d:2f:fa:e1:3b:fd:bc: 8a:54:01:ba:17:07:86:4c:8d:82:f1:b3:b5:97:fe:68:d5:6b: 0d:15:c4:b6:ec:a2:7f:29:98:ef:e6:18:aa:a6:c5:fb:99:9b: eb:f2:d0:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCPHjeohbhksPXtkbIE8AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NTczYjIwODRjZGY0NmVlMWNjZDI4MmRmYTNiOGY2Yjdl YTcyNmMwHhcNMjUxMjI2MTkwMDQ4WhcNMjUxMjI3MTkwMDQ4WjAzMTEwLwYDVQQD Eyg2ZDJiMzg3MDMwMTIxZGNiNmIxMzU3NTAyM2Y4ZjMzNzY3ZDA4ZmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMPS04NUez0+JPpwYztsutARumWF QfsL0rrhaE5zDQ1KWpzehgiDYavhj0j3Nmsdme6/d1b8r5cDZu3nVFq2en0xGHE5 FkQ6C5uL9AHl/+0VFREby9FWpoM94UWme1vOfXOspHPxOWx/yOa+Jm8EZdvbch2C L8OuQPmBJ7fWDU9FzEV+NUrU1WSi0YqImT/eVeqg3oJbbVFN7n2D7gs0nnuB0B16 VCjNiFzokgl2NGw/Rz2PAnpYdnW+kxzlNbPMvBiNLA1MVvl0IERBpS1NcNLLJTU3 jbEKJWNKstS8V78L2YenfQ1aU4yyc93chGCzlH+54fErhRx0M45R3yPitwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0rOHAwEh3LaxNXUCP48zdn0I+iMB8GA1UdIwQY MBaAFBlXOyCEzfRu4czSgt+juPa36nJsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1ZjN0lJVE45Rzdoek5LQzM2TzQ5cmZxY213LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84Yjg1NDItMWNhMS00ZjhkLThlZTct ZTVkMGUxODBkOGU4LzEvR1ZjN0lJVE45Rzdoek5LQzM2TzQ5cmZxY213Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84Yjg1NDItMWNhMS00ZjhkLThlZTctZTVkMGUxODBkOGU4 LzEvR1ZjN0lJVE45Rzdoek5LQzM2TzQ5cmZxY213LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmajAPX6b b2lIhpyjjWhr6pk0Iw/w+m2LLsUJIqrME1sz2fmZVNLJUoYYNtRulMG9ZiPvuZjS L3XSLMUTai4GqY+d0cnj+caS05MR+PgwsFRAbVajeF845H2Ar4DM9kYJ9YSOF4+S EYOF6zx83X94siex4sujYQWFAX3j/6a/tyHyNLA7ITdrirC/MlrJbSuLuvSYlbSD wF23JsnIOrgPkyAkfpf1IvcELmxGRBYXPAIOj/FDJG09rjnvgARAu7mW7cGQTars JzAaYISsloTsmn4dL/rhO/28ilQBuhcHhkyNgvGztZf+aNVrDRXEtuyifymY7+YY qqbF+5mb6/LQxw== -----END CERTIFICATE-----Generated at Sat Dec 27 03:54:37 2025 by rpki-client