This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft File: GPJ8DAs13dQruJLBaEWmOwAnocc.mft (raw, json) Hash identifier: IzNqZg57+CZjBG/Nc2ubRbihLYScuQxfiSdnhUxjVE4= Subject key identifier: 2A:7C:6D:18:47:2F:FD:9B:63:2F:8C:01:34:CE:32:4C:2C:A3:AD:A4 Authority key identifier: 18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7 Certificate issuer: /CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7 Certificate serial: 019B465D73E171700D22BEB42D55857886C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft Manifest number: 028C Signing time: Mon 22 Dec 2025 14:01:28 +0000 Manifest this update: Mon 22 Dec 2025 14:01:28 +0000 Manifest next update: Tue 23 Dec 2025 14:01:28 +0000 Files and hashes: 1: 0yoRjSV7Roa_6RLApu60JbNvhn0.roa (hash: zY5w8MSwqL9WHbjRx7fb+VonzMqXyw8rTcBHB5IjZKc=) 2: GPJ8DAs13dQruJLBaEWmOwAnocc.crl (hash: Gq6Jz8ncfoOp7dT9kvvvRKYe+s/dXu1UsGxdJ7dCiZ8=) 3: kZzi5najCOiRoP0WLMWI7hCvztc.asa (hash: b2P8/xQuWtMN9fdhE+2aiLpTbdQceFn+w65LkW+vfwc=) 4: soR2pwiyOc7dgIHXlwP-PMnXsm0.asa (hash: 5F0rJLaw/NXlRPUerx6WnmlN2zMQswFy06aLsh2Eurw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:73:e1:71:70:0d:22:be:b4:2d:55:85:78:86:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7 Validity Not Before: Dec 22 14:01:28 2025 GMT Not After : Dec 23 14:01:28 2025 GMT Subject: CN=2a7c6d18472ffd9b632f8c0134ce324c2ca3ada4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:95:90:3b:8d:00:41:86:d8:10:04:0e:74: c1:b8:3b:bb:30:1c:a0:fc:63:a5:04:d4:1a:49:ec: ca:4b:81:d0:27:78:d6:42:35:e8:d7:bb:c0:d4:58: ea:6b:ca:16:b8:eb:b0:78:98:44:1f:fd:5f:e2:40: 45:61:33:b2:7e:31:0a:e1:20:72:7e:e7:ee:b2:ff: 60:97:6e:92:6e:56:50:f0:8b:59:58:c1:e7:a5:be: 89:25:82:c4:55:a8:22:0f:85:4c:ec:80:3e:b4:76: 1b:5d:57:e1:2d:7d:57:38:77:6d:4e:72:f2:37:d2: dd:98:0c:dd:c5:44:23:b7:c4:40:57:21:db:65:44: ca:f9:14:c3:45:05:e2:3c:74:d0:e0:25:a4:01:03: 48:4c:32:3e:c0:74:94:9a:78:47:51:cf:a2:8b:0e: 18:d6:3d:57:ab:92:b8:76:b5:92:e9:e0:99:fe:c0: 44:cc:8a:ab:d4:4a:52:e0:a8:84:62:cb:5e:76:c3: b2:1c:ee:3f:4a:f5:e2:fc:20:34:03:d8:e9:4c:86: bc:21:1e:bc:f0:fc:99:27:bc:8a:9e:10:ae:ad:a9: 69:08:eb:98:b8:3c:eb:d3:38:9a:e5:6b:9f:d9:7c: 48:62:bd:2a:08:76:bc:29:c0:d7:58:62:24:27:4b: e7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7C:6D:18:47:2F:FD:9B:63:2F:8C:01:34:CE:32:4C:2C:A3:AD:A4 X509v3 Authority Key Identifier: keyid:18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e5:61:3f:03:e3:bc:19:83:d5:46:2e:9b:50:90:27:23:94: c5:50:be:57:04:22:02:d8:ca:2f:cb:1e:de:d0:5f:b7:f5:ad: c6:4a:73:3a:47:ec:e1:d2:49:ce:dc:c4:f8:91:ad:3d:b7:94: f9:df:ca:02:96:9b:08:1d:65:c8:05:11:8b:b6:dd:0a:4c:a9: 24:38:cb:9b:a3:25:44:2a:f8:8e:63:a5:b1:88:92:a3:93:f6: ee:ef:c6:1b:75:10:df:ca:1b:fe:08:9b:ca:6c:53:26:30:bb: e8:ef:b6:86:09:83:9e:cd:77:d5:d0:7e:36:f0:73:23:ec:5f: 91:1e:3b:ab:ad:33:16:c8:77:28:a6:f7:f9:fc:e2:c3:66:b2: 11:03:9c:8e:b4:8c:a5:41:dc:95:7e:5c:22:35:ce:6e:88:1b: e6:db:d0:46:97:6d:89:5c:cd:30:23:3a:8c:8c:f6:4a:9f:29: 69:4f:15:f4:52:e2:00:63:b9:72:21:54:dd:13:74:44:88:21: 49:25:96:1d:f1:32:6f:4d:58:0e:b1:fe:ad:96:f8:60:c2:a2: f5:7e:f7:66:9f:9e:b5:b9:67:27:00:30:d1:03:bf:48:63:45: 4d:4a:94:ac:67:e6:32:ec:b1:d4:31:85:11:48:9f:b7:6f:81: 71:4f:d1:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXXPhcXANIr60LVWFeIbIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZjI3YzBjMGIzNWRkZDQyYmI4OTJjMTY4NDVhNjNiMDAy N2ExYzcwHhcNMjUxMjIyMTQwMTI4WhcNMjUxMjIzMTQwMTI4WjAzMTEwLwYDVQQD EygyYTdjNmQxODQ3MmZmZDliNjMyZjhjMDEzNGNlMzI0YzJjYTNhZGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU2VkDuNAEGG2BAEDnTBuDu7MByg /GOlBNQaSezKS4HQJ3jWQjXo17vA1Fjqa8oWuOuweJhEH/1f4kBFYTOyfjEK4SBy fufusv9gl26SblZQ8ItZWMHnpb6JJYLEVagiD4VM7IA+tHYbXVfhLX1XOHdtTnLy N9LdmAzdxUQjt8RAVyHbZUTK+RTDRQXiPHTQ4CWkAQNITDI+wHSUmnhHUc+iiw4Y 1j1Xq5K4drWS6eCZ/sBEzIqr1EpS4KiEYstedsOyHO4/SvXi/CA0A9jpTIa8IR68 8PyZJ7yKnhCuralpCOuYuDzr0zia5Wuf2XxIYr0qCHa8KcDXWGIkJ0vn0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCp8bRhHL/2bYy+MATTOMkwso62kMB8GA1UdIwQY MBaAFBjyfAwLNd3UK7iSwWhFpjsAJ6HHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1BKOERBczEzZFFydUpMQmFFV21Pd0Fub2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zMmJmZTMtOTAxYy00Njg1LWJlMGEt YWZhYzIwNGQ5OTBmLzEvR1BKOERBczEzZFFydUpMQmFFV21Pd0Fub2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zMmJmZTMtOTAxYy00Njg1LWJlMGEtYWZhYzIwNGQ5OTBm LzEvR1BKOERBczEzZFFydUpMQmFFV21Pd0Fub2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOVhPwPj vBmD1UYum1CQJyOUxVC+VwQiAtjKL8se3tBft/WtxkpzOkfs4dJJztzE+JGtPbeU +d/KApabCB1lyAURi7bdCkypJDjLm6MlRCr4jmOlsYiSo5P27u/GG3UQ38ob/gib ymxTJjC76O+2hgmDns131dB+NvBzI+xfkR47q60zFsh3KKb3+fziw2ayEQOcjrSM pUHclX5cIjXObogb5tvQRpdtiVzNMCM6jIz2Sp8paU8V9FLiAGO5ciFU3RN0RIgh SSWWHfEyb01YDrH+rZb4YMKi9X73Zp+etblnJwAw0QO/SGNFTUqUrGfmMuyx1DGF EUift2+BcU/RUw== -----END CERTIFICATE-----Generated at Mon Dec 22 16:01:33 2025 by rpki-client