This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft File: GrXCK_U7cFx6K7JzunPj8MBZW3s.mft (raw, json) Hash identifier: wDX5CH67NHxt4ISw7TwpAeio12BfWU2wpCNR2P8aA6Q= Subject key identifier: 42:27:82:79:BD:E7:19:EF:B3:72:49:79:83:FB:75:0A:D9:1A:36:8D Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b Certificate serial: 019B717DE3039E2EE9F4B285C00E487047EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft Manifest number: 17AB Signing time: Tue 30 Dec 2025 23:00:33 +0000 Manifest this update: Tue 30 Dec 2025 23:00:33 +0000 Manifest next update: Wed 31 Dec 2025 23:00:33 +0000 Files and hashes: 1: GrXCK_U7cFx6K7JzunPj8MBZW3s.crl (hash: rtU9nbF4oBsuoXsOE6gZ3cWDD2FZhK7ENNYP+7sOVTw=) 2: TAjwEkYL5KO0Dfjzk7M82ORwOSM.roa (hash: pnECVJ4MeoU++jvXvp1eJP9csOhoOVkA1NrmjgLij+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7d:e3:03:9e:2e:e9:f4:b2:85:c0:0e:48:70:47:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b Validity Not Before: Dec 30 23:00:33 2025 GMT Not After : Dec 31 23:00:33 2025 GMT Subject: CN=42278279bde719efb372497983fb750ad91a368d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:10:b9:e6:12:da:d3:3f:cc:3f:23:e6:4c:d4: f4:af:ab:0e:03:7c:ff:65:eb:30:b7:d6:6f:25:b5: 08:f5:ac:3b:b8:ba:fd:9a:4d:5f:ed:aa:e7:71:17: 08:f4:ea:1b:5f:0c:be:52:1e:4e:1f:30:22:e1:31: 0b:7a:06:cc:cc:b2:3d:bb:44:2e:d8:9a:9c:c3:ee: d5:29:88:cb:5e:6a:bc:65:c7:7e:d9:f3:54:c5:73: 83:85:5c:27:c9:bf:d3:0d:8a:9e:60:c0:6c:22:e9: a1:9a:2a:29:c2:e7:f5:af:f2:2e:be:1e:11:21:58: 36:11:18:de:19:1a:80:8f:aa:3f:1e:e2:39:d4:31: ef:d8:f0:80:c0:c5:91:a0:a6:70:de:8d:ea:2a:d5: 17:da:ce:80:fd:77:16:e0:ef:64:28:c4:6c:8e:66: 28:60:c6:e7:00:9a:15:85:33:2e:de:f7:0f:96:67: 30:10:f9:59:b9:2c:29:18:97:f0:ef:a6:ce:1c:a7: 70:70:6f:18:65:ea:3c:4f:59:b1:ee:9e:8e:99:59: e9:38:6f:0e:6e:91:71:cb:b6:07:6f:89:46:51:7f: 5d:31:10:29:20:1b:48:a2:c4:2d:8f:de:67:97:b6: 32:6a:2d:bd:ef:f8:79:4b:cd:ac:94:ed:3d:b0:e7: c2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:27:82:79:BD:E7:19:EF:B3:72:49:79:83:FB:75:0A:D9:1A:36:8D X509v3 Authority Key Identifier: keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:0c:a7:3a:89:61:82:a4:58:7a:cf:34:d6:f1:46:60:21:a8: c2:a8:6b:76:0a:0b:61:08:41:21:cc:79:15:16:f4:db:aa:82: c1:0a:ac:59:a4:f1:71:85:96:5e:da:e0:4c:b7:ae:64:4e:53: d6:d8:b5:e3:d4:20:d6:3e:8a:96:8a:9b:12:40:14:1c:f7:22: 6f:ef:88:b9:11:96:8a:3e:93:30:04:d8:1d:21:57:d4:21:a0: ff:5d:56:a0:e2:73:d2:fa:5c:28:dc:11:3f:36:e5:0c:fc:52: b8:61:74:a3:29:c5:38:d1:d2:72:fe:ea:01:0b:0e:8d:fe:7d: d4:78:30:e5:e8:bc:9d:0e:fd:0f:62:18:4f:c4:34:37:fa:1e: e0:1c:e3:50:d7:ec:b7:a3:ee:87:a2:5f:6a:dd:9d:cc:4f:1c: be:10:cd:e4:9f:98:3f:84:df:ae:b9:5c:2b:1f:26:c3:4c:d0: dc:f5:12:02:0c:fb:70:0e:61:d3:9d:89:dd:73:d5:84:f0:a9: 9f:fc:3f:a1:e5:a3:c2:1e:e6:03:c4:45:88:8a:96:e2:a1:f3: c1:89:4d:78:97:77:59:53:a2:22:dc:79:f3:d9:41:8b:9f:5c: 90:f0:0b:24:80:cf:66:fc:be:cd:ee:4e:98:3f:e3:b3:0f:26: 22:7a:5c:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfeMDni7p9LKFwA5IcEfvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYjVjMjJiZjUzYjcwNWM3YTJiYjI3M2JhNzNlM2YwYzA1 OTViN2IwHhcNMjUxMjMwMjMwMDMzWhcNMjUxMjMxMjMwMDMzWjAzMTEwLwYDVQQD Eyg0MjI3ODI3OWJkZTcxOWVmYjM3MjQ5Nzk4M2ZiNzUwYWQ5MWEzNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRC55hLa0z/MPyPmTNT0r6sOA3z/ Zeswt9ZvJbUI9aw7uLr9mk1f7arncRcI9OobXwy+Uh5OHzAi4TELegbMzLI9u0Qu 2Jqcw+7VKYjLXmq8Zcd+2fNUxXODhVwnyb/TDYqeYMBsIumhmiopwuf1r/Iuvh4R IVg2ERjeGRqAj6o/HuI51DHv2PCAwMWRoKZw3o3qKtUX2s6A/XcW4O9kKMRsjmYo YMbnAJoVhTMu3vcPlmcwEPlZuSwpGJfw76bOHKdwcG8YZeo8T1mx7p6OmVnpOG8O bpFxy7YHb4lGUX9dMRApIBtIosQtj95nl7Yyai297/h5S82slO09sOfCkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIngnm95xnvs3JJeYP7dQrZGjaNMB8GA1UdIwQY MBaAFBq1wiv1O3Bceiuyc7pz4/DAWVt7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3JYQ0tfVTdjRng2SzdKenVuUGo4TUJaVzNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi83YzhiZjQtNmFiNi00MTk5LWIzYTct YjRiMWY2Zjk4YTkwLzEvR3JYQ0tfVTdjRng2SzdKenVuUGo4TUJaVzNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi83YzhiZjQtNmFiNi00MTk5LWIzYTctYjRiMWY2Zjk4YTkw LzEvR3JYQ0tfVTdjRng2SzdKenVuUGo4TUJaVzNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgynOolh gqRYes801vFGYCGowqhrdgoLYQhBIcx5FRb026qCwQqsWaTxcYWWXtrgTLeuZE5T 1ti149Qg1j6KloqbEkAUHPcib++IuRGWij6TMATYHSFX1CGg/11WoOJz0vpcKNwR PzblDPxSuGF0oynFONHScv7qAQsOjf591Hgw5ei8nQ79D2IYT8Q0N/oe4BzjUNfs t6Puh6Jfat2dzE8cvhDN5J+YP4TfrrlcKx8mw0zQ3PUSAgz7cA5h052J3XPVhPCp n/w/oeWjwh7mA8RFiIqW4qHzwYlNeJd3WVOiItx589lBi59ckPALJIDPZvy+ze5O mD/jsw8mInpcYA== -----END CERTIFICATE-----Generated at Wed Dec 31 09:21:25 2025 by rpki-client