This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft File: GPijrw2MDVHeLd0mWtVNq5e95s4.mft (raw, json) Hash identifier: 4Q08PC5PZjDCbCrD5TNG80tR+wAy0sBT14deRSo+6k8= Subject key identifier: 6B:CB:ED:C9:92:6C:14:01:B7:49:07:6F:2A:A4:5E:FE:06:B2:BF:97 Authority key identifier: 18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE Certificate issuer: /CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce Certificate serial: 019B3A586A733A00F8634557ABF606DDDB77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft Manifest number: 34 Signing time: Sat 20 Dec 2025 06:00:31 +0000 Manifest this update: Sat 20 Dec 2025 06:00:31 +0000 Manifest next update: Sun 21 Dec 2025 06:00:31 +0000 Files and hashes: 1: GPijrw2MDVHeLd0mWtVNq5e95s4.crl (hash: 9hRei8F+lgslh/hCdDJ4DpDA9kJH3QmQ97PDKOHqZdc=) 2: jtoBQwIUDDJGQnPKKMk_RqjJnM8.roa (hash: qs/ndOyS1IApu6dntwwwn/J4lhn/hjfKt5trUC8kNUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:6a:73:3a:00:f8:63:45:57:ab:f6:06:dd:db:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce Validity Not Before: Dec 20 06:00:31 2025 GMT Not After : Dec 21 06:00:31 2025 GMT Subject: CN=6bcbedc9926c1401b749076f2aa45efe06b2bf97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:36:a6:a6:4d:89:d2:46:8c:e1:1d:ad:b5:2f: c3:9f:71:e2:fd:01:31:52:cb:33:87:48:d9:e7:91: 34:a8:e3:67:56:49:b5:cc:a9:88:50:8f:82:33:ba: 21:86:5c:0a:bb:32:3e:cf:a1:5b:85:b2:06:a7:90: a7:9a:a9:41:fa:43:c1:55:c7:14:aa:41:78:00:6f: 1b:f5:76:07:91:ec:60:2e:8d:7c:b2:75:36:55:94: 93:4c:2b:25:7d:54:bf:aa:ab:ff:a2:2c:1a:dd:c1: af:cd:a1:ce:17:cb:b2:10:d1:42:5e:b4:59:10:64: 92:85:2d:20:fe:51:04:53:83:80:0c:72:19:fc:6f: a9:72:63:83:2b:1f:06:a7:c1:ec:e5:32:20:90:42: a4:0c:fc:c6:85:92:f3:62:90:67:b8:29:ca:1e:f0: 10:1d:03:83:34:d6:88:47:ad:e3:84:39:4f:c5:88: 45:ea:e8:1a:b5:57:19:a5:2d:d6:c3:df:97:46:3e: cb:01:2e:71:58:bc:bf:97:81:41:9e:04:3f:62:af: 6a:d4:76:05:a8:a7:44:af:28:3d:58:6c:b6:3c:c4: 41:a2:1e:4b:57:16:5b:7a:db:77:48:e4:26:40:e4: 7d:10:90:c5:10:34:f5:96:74:a6:a2:64:05:5b:7e: 0b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CB:ED:C9:92:6C:14:01:B7:49:07:6F:2A:A4:5E:FE:06:B2:BF:97 X509v3 Authority Key Identifier: keyid:18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:95:b3:11:5d:85:5c:ca:e6:d2:6c:f6:40:b4:5c:4d:24:b2: 43:c4:f8:cf:01:42:9b:0a:53:69:ca:76:d9:d5:f4:e4:61:9c: 90:0d:56:7f:9b:e5:95:a8:7a:b9:e1:19:9e:36:27:df:7b:94: f7:31:46:ba:ad:ea:ad:c1:7b:2e:0e:65:d8:a1:16:6d:44:a8: 41:c2:4b:b6:fa:5d:7b:d2:aa:e5:60:55:95:d7:fb:c4:dc:0a: 6d:00:20:9c:1b:e3:f4:8d:65:23:e5:06:4b:a1:49:e7:b5:44: c5:f2:29:6b:7f:b2:37:04:33:af:8d:da:bb:c6:34:da:0a:f2: 51:e1:0a:a5:15:b1:72:a3:85:f3:8a:d5:86:09:20:59:7d:a4: a6:da:1e:87:4d:17:16:d5:e2:ec:dd:f7:a3:df:0e:f5:33:fb: d0:56:01:ed:f4:00:29:28:c5:1d:a1:93:43:f0:13:27:34:87: b0:58:4c:8a:a7:f8:e9:3d:dd:ed:05:bc:89:fd:7c:90:fa:f8: c0:4e:7b:58:af:21:63:bb:47:ea:08:3f:fb:5a:67:f5:55:f8: a2:31:32:5e:09:32:97:dd:9c:9c:fd:fe:8f:4e:da:26:f9:bd: 10:54:82:b0:12:a4:e5:a0:57:68:ab:ef:86:4b:4c:c0:0f:60: 9a:5e:59:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WGpzOgD4Y0VXq/YG3dt3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZjhhM2FmMGQ4YzBkNTFkZTJkZGQyNjVhZDU0ZGFiOTdi ZGU2Y2UwHhcNMjUxMjIwMDYwMDMxWhcNMjUxMjIxMDYwMDMxWjAzMTEwLwYDVQQD Eyg2YmNiZWRjOTkyNmMxNDAxYjc0OTA3NmYyYWE0NWVmZTA2YjJiZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujampk2J0kaM4R2ttS/Dn3Hi/QEx Usszh0jZ55E0qONnVkm1zKmIUI+CM7ohhlwKuzI+z6FbhbIGp5CnmqlB+kPBVccU qkF4AG8b9XYHkexgLo18snU2VZSTTCslfVS/qqv/oiwa3cGvzaHOF8uyENFCXrRZ EGSShS0g/lEEU4OADHIZ/G+pcmODKx8Gp8Hs5TIgkEKkDPzGhZLzYpBnuCnKHvAQ HQODNNaIR63jhDlPxYhF6ugatVcZpS3Ww9+XRj7LAS5xWLy/l4FBngQ/Yq9q1HYF qKdEryg9WGy2PMRBoh5LVxZbett3SOQmQOR9EJDFEDT1lnSmomQFW34LFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvL7cmSbBQBt0kHbyqkXv4Gsr+XMB8GA1UdIwQY MBaAFBj4o68NjA1R3i3dJlrVTauXvebOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1BpanJ3Mk1EVkhlTGQwbVd0Vk5xNWU5NXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9lNTMzMTMtZDU4Ny00OTJjLWFkMTgt NDc2MzdlYjFlYzQ5LzEvR1BpanJ3Mk1EVkhlTGQwbVd0Vk5xNWU5NXM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9lNTMzMTMtZDU4Ny00OTJjLWFkMTgtNDc2MzdlYjFlYzQ5 LzEvR1BpanJ3Mk1EVkhlTGQwbVd0Vk5xNWU5NXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJWzEV2F XMrm0mz2QLRcTSSyQ8T4zwFCmwpTacp22dX05GGckA1Wf5vllah6ueEZnjYn33uU 9zFGuq3qrcF7Lg5l2KEWbUSoQcJLtvpde9Kq5WBVldf7xNwKbQAgnBvj9I1lI+UG S6FJ57VExfIpa3+yNwQzr43au8Y02gryUeEKpRWxcqOF84rVhgkgWX2kptoeh00X FtXi7N33o98O9TP70FYB7fQAKSjFHaGTQ/ATJzSHsFhMiqf46T3d7QW8if18kPr4 wE57WK8hY7tH6gg/+1pn9VX4ojEyXgkyl92cnP3+j07aJvm9EFSCsBKk5aBXaKvv hktMwA9gml5ZVg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:05 2025 by rpki-client