This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft File: GvujiocH_SMcOIfkpSvc3tqyAyM.mft (raw, json) Hash identifier: X6GPbw7LXt37t4Gtj5EJN6KmbUlT/XH2HZHPZEYTtws= Subject key identifier: 8A:23:33:DA:A3:3F:2D:7C:BF:B7:B4:48:5A:E3:31:90:CC:30:AB:8A Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23 Certificate issuer: /CN=1afba38a8707fd231c3887e4a52bdcdedab20323 Certificate serial: 019B3CEC2926906CA26F93F43C19CFA8A269 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft Manifest number: 08E6 Signing time: Sat 20 Dec 2025 18:01:08 +0000 Manifest this update: Sat 20 Dec 2025 18:01:08 +0000 Manifest next update: Sun 21 Dec 2025 18:01:08 +0000 Files and hashes: 1: GvujiocH_SMcOIfkpSvc3tqyAyM.crl (hash: SdLvncowlza9azSCZBrqtEqbPNgyU5OMyiR0Vvf5w30=) 2: MBByOIj39pYIect2LdRi3wnM4oc.roa (hash: tdzNEKUZ3mXK0KXsFeqcPam83cZmJKXuHjjqHDm2aqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:29:26:90:6c:a2:6f:93:f4:3c:19:cf:a8:a2:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323 Validity Not Before: Dec 20 18:01:08 2025 GMT Not After : Dec 21 18:01:08 2025 GMT Subject: CN=8a2333daa33f2d7cbfb7b4485ae33190cc30ab8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:0a:ff:fd:32:f2:35:90:c7:b4:92:5a:d6: d1:31:bf:93:80:d9:1d:c0:55:26:1c:91:0a:0b:83: 03:91:b1:61:57:94:10:ff:ac:88:a9:79:f8:b6:ac: aa:12:d6:eb:fe:f0:1d:30:77:86:92:41:f4:49:6c: 6c:b0:e2:5b:47:9d:c6:b0:62:d0:32:4e:13:a8:6a: 72:93:81:44:46:70:7b:f7:5c:21:7c:d1:f5:76:1b: 70:42:f4:29:34:22:ef:0d:c6:3d:fc:1d:47:53:9a: b5:0f:26:19:d6:25:6f:ea:74:ae:7e:57:d7:d6:ae: 33:9e:a4:3b:3b:f4:14:05:8b:02:e2:89:68:d4:5e: a9:f9:a8:b0:0b:db:b4:1f:72:c9:82:f1:d2:7c:55: c2:6a:f2:2a:fe:9c:9c:23:1c:8c:f1:c5:f8:30:09: 74:07:23:98:7a:57:f9:1f:6a:84:20:4d:ac:09:ca: 44:3e:17:d0:a0:d4:8c:ce:43:88:c7:7a:b8:be:27: e5:96:33:57:6b:f5:15:c9:a6:45:b3:97:33:49:88: 5a:13:a4:a8:65:a1:88:2e:f1:d8:39:d5:49:e7:f7: b2:e5:b5:32:98:4c:24:77:c0:0c:a1:35:ce:9c:2a: 87:3a:df:f9:6e:84:0f:2f:64:6e:32:a4:7b:f4:a0: 41:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:23:33:DA:A3:3F:2D:7C:BF:B7:B4:48:5A:E3:31:90:CC:30:AB:8A X509v3 Authority Key Identifier: keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:91:b7:37:e4:e4:34:8a:9b:2d:fa:a3:3d:5c:7b:73:ae:73: 4b:f4:e6:50:43:81:6f:7e:64:a6:65:10:25:e1:b3:23:12:5d: ea:df:75:3e:c1:62:8a:13:08:b0:86:3b:3d:e4:1d:1e:cc:40: 30:ca:da:ce:81:81:4a:e0:f0:4a:f5:54:06:a0:21:07:99:99: 97:cb:d2:a5:7e:9d:3c:c0:d9:f8:8f:e1:19:e6:29:03:79:39: 19:00:b1:55:ac:d4:37:18:f0:ce:02:48:4b:b3:50:5c:48:b4: 5a:36:2f:37:ca:d8:ae:68:0e:b0:84:57:a9:81:5d:d5:95:88: e5:e8:46:64:0e:6a:5d:93:45:d5:7c:22:b9:a6:6a:fc:66:a1: ee:44:ba:6b:ec:b8:0f:75:ce:3a:d5:43:6e:16:bf:fe:0d:3d: 3c:99:98:6c:3e:7f:aa:c9:ac:44:8b:b8:c3:d8:62:df:73:ee: df:10:08:f9:99:d8:ba:ad:f6:57:3d:70:63:d4:e9:74:44:34: 12:71:80:ea:47:89:88:ba:1a:1e:8f:67:be:cb:17:2c:d1:7b: f2:f8:25:83:67:97:ac:a1:78:7b:68:66:6f:74:fe:96:fc:60: 27:52:0e:33:93:2d:fe:3e:7f:83:ff:57:e0:b7:48:cf:96:7d: 6a:8d:db:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87CkmkGyib5P0PBnPqKJpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZmJhMzhhODcwN2ZkMjMxYzM4ODdlNGE1MmJkY2RlZGFi MjAzMjMwHhcNMjUxMjIwMTgwMTA4WhcNMjUxMjIxMTgwMTA4WjAzMTEwLwYDVQQD Eyg4YTIzMzNkYWEzM2YyZDdjYmZiN2I0NDg1YWUzMzE5MGNjMzBhYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5YK//0y8jWQx7SSWtbRMb+TgNkd wFUmHJEKC4MDkbFhV5QQ/6yIqXn4tqyqEtbr/vAdMHeGkkH0SWxssOJbR53GsGLQ Mk4TqGpyk4FERnB791whfNH1dhtwQvQpNCLvDcY9/B1HU5q1DyYZ1iVv6nSuflfX 1q4znqQ7O/QUBYsC4olo1F6p+aiwC9u0H3LJgvHSfFXCavIq/pycIxyM8cX4MAl0 ByOYelf5H2qEIE2sCcpEPhfQoNSMzkOIx3q4viflljNXa/UVyaZFs5czSYhaE6So ZaGILvHYOdVJ5/ey5bUymEwkd8AMoTXOnCqHOt/5boQPL2RuMqR79KBBrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIojM9qjPy18v7e0SFrjMZDMMKuKMB8GA1UdIwQY MBaAFBr7o4qHB/0jHDiH5KUr3N7asgMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3Z1amlvY0hfU01jT0lma3BTdmMzdHF5QXlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83YTliYTItNmE2YS00YzdjLTg4MmEt MDk5NmFlZDMyZjNiLzEvR3Z1amlvY0hfU01jT0lma3BTdmMzdHF5QXlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83YTliYTItNmE2YS00YzdjLTg4MmEtMDk5NmFlZDMyZjNi LzEvR3Z1amlvY0hfU01jT0lma3BTdmMzdHF5QXlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJG3N+Tk NIqbLfqjPVx7c65zS/TmUEOBb35kpmUQJeGzIxJd6t91PsFiihMIsIY7PeQdHsxA MMrazoGBSuDwSvVUBqAhB5mZl8vSpX6dPMDZ+I/hGeYpA3k5GQCxVazUNxjwzgJI S7NQXEi0WjYvN8rYrmgOsIRXqYFd1ZWI5ehGZA5qXZNF1XwiuaZq/Gah7kS6a+y4 D3XOOtVDbha//g09PJmYbD5/qsmsRIu4w9hi33Pu3xAI+ZnYuq32Vz1wY9TpdEQ0 EnGA6keJiLoaHo9nvssXLNF78vglg2eXrKF4e2hmb3T+lvxgJ1IOM5Mt/j5/g/9X 4LdIz5Z9ao3bWA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:51:04 2025 by rpki-client