This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft File: GVD3RTAkOmSxG7IywDjVdOf8TSA.mft (raw, json) Hash identifier: vkyGrTfQMlcmjDpDK7XGC7CX455GiLepd2o92gIG+nY= Subject key identifier: 5C:E4:4D:14:A8:EB:B1:A9:AF:CD:B6:8D:2C:94:EF:00:64:CD:85:3C Authority key identifier: 19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20 Certificate issuer: /CN=1950f74530243a64b11bb232c038d574e7fc4d20 Certificate serial: 019B44A5797024E8AEBF7AF2228D96A766D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft Manifest number: 0A73 Signing time: Mon 22 Dec 2025 06:00:53 +0000 Manifest this update: Mon 22 Dec 2025 06:00:53 +0000 Manifest next update: Tue 23 Dec 2025 06:00:53 +0000 Files and hashes: 1: GVD3RTAkOmSxG7IywDjVdOf8TSA.crl (hash: CK8ffvwv4jZPQx4ZMkGIGhENweKF6+6SbtqValC1/Ik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:79:70:24:e8:ae:bf:7a:f2:22:8d:96:a7:66:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1950f74530243a64b11bb232c038d574e7fc4d20 Validity Not Before: Dec 22 06:00:53 2025 GMT Not After : Dec 23 06:00:53 2025 GMT Subject: CN=5ce44d14a8ebb1a9afcdb68d2c94ef0064cd853c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1c:7a:e1:a1:05:69:1f:5f:eb:a4:37:65:0a: bc:8e:6f:23:9e:ac:92:bc:21:09:80:6f:ea:b5:72: 43:d7:bd:6a:a8:7b:71:e3:d5:c3:5e:09:34:ff:e7: eb:ba:60:bc:a1:0d:a2:ae:58:e9:19:86:8a:87:13: 2a:a2:5a:46:2f:56:21:36:06:3d:f3:48:c9:7d:b2: 04:f8:aa:e8:4e:31:b7:9a:68:4d:51:27:11:40:95: 60:76:52:f2:0a:44:b3:a5:ad:14:e7:53:98:23:6e: b5:8e:3a:6e:38:33:be:5b:13:19:33:05:5e:5f:15: ce:3c:50:b3:8a:92:f7:34:f2:a5:77:a0:85:87:ce: 99:d5:8a:08:4e:81:e2:50:ef:82:1b:57:22:21:4d: 2a:61:1e:04:34:c3:93:e1:3f:f8:49:58:2c:0a:67: a6:5e:46:68:f8:ce:d7:29:c6:50:5c:56:5a:70:4c: 76:3b:0b:0f:0d:5d:aa:10:1f:69:ae:dd:34:29:ff: 3c:ba:75:a0:f5:87:cc:6d:2b:3c:e3:04:d9:b7:28: 30:cc:e3:f0:d9:22:4d:bc:55:24:33:36:90:ba:75: 96:8d:e7:a6:58:c0:59:63:79:8c:24:df:17:b6:88: 54:f6:b3:db:16:77:d7:35:37:9c:35:3a:d9:65:fe: df:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E4:4D:14:A8:EB:B1:A9:AF:CD:B6:8D:2C:94:EF:00:64:CD:85:3C X509v3 Authority Key Identifier: keyid:19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:9e:d2:c3:3e:15:a2:c2:9c:7c:08:6d:56:8a:93:3b:73:f9: 0f:84:e9:d5:5b:86:99:80:5d:31:00:62:39:5a:3b:56:eb:53: e9:e5:7a:bc:9f:4c:d6:5f:48:de:cd:f3:dc:1e:68:dd:38:d5: ca:f7:32:72:d5:b7:0e:ae:aa:c6:7a:aa:82:02:9e:17:b5:09: 7b:d7:aa:16:8f:89:dc:03:43:0e:e5:e8:00:b2:95:f5:02:ab: fb:fc:f6:76:38:ca:57:c3:b9:55:47:5c:ff:66:28:8b:9f:0e: 86:ac:ad:c2:39:e1:3e:99:62:cb:41:3f:6c:b7:f7:e2:80:e5: 82:61:9f:f2:a9:08:4f:23:94:6e:b4:55:32:86:b6:2b:81:6d: d5:77:52:87:51:3a:82:e2:20:f7:fa:e9:86:6b:61:a1:30:f2: 21:bc:58:cb:1a:27:21:07:72:e8:f0:c1:35:b2:2b:ea:b9:d9: 79:70:d9:9b:d5:32:26:1d:e5:b5:f8:74:79:f1:59:d5:52:50: fc:3e:a0:3c:02:c3:ae:2b:0d:a2:49:18:84:f0:7e:5d:f5:00: 32:67:fe:97:5a:dc:5f:8b:5d:03:5e:49:fb:58:c5:3b:81:ad: 63:43:77:34:10:04:48:07:43:d0:69:d6:80:0d:ee:97:25:d1: e0:2c:e0:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpXlwJOiuv3ryIo2Wp2bWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NTBmNzQ1MzAyNDNhNjRiMTFiYjIzMmMwMzhkNTc0ZTdm YzRkMjAwHhcNMjUxMjIyMDYwMDUzWhcNMjUxMjIzMDYwMDUzWjAzMTEwLwYDVQQD Eyg1Y2U0NGQxNGE4ZWJiMWE5YWZjZGI2OGQyYzk0ZWYwMDY0Y2Q4NTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBx64aEFaR9f66Q3ZQq8jm8jnqyS vCEJgG/qtXJD171qqHtx49XDXgk0/+frumC8oQ2irljpGYaKhxMqolpGL1YhNgY9 80jJfbIE+KroTjG3mmhNUScRQJVgdlLyCkSzpa0U51OYI261jjpuODO+WxMZMwVe XxXOPFCzipL3NPKld6CFh86Z1YoIToHiUO+CG1ciIU0qYR4ENMOT4T/4SVgsCmem XkZo+M7XKcZQXFZacEx2OwsPDV2qEB9prt00Kf88unWg9YfMbSs84wTZtygwzOPw 2SJNvFUkMzaQunWWjeemWMBZY3mMJN8XtohU9rPbFnfXNTecNTrZZf7fbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzkTRSo67Gpr822jSyU7wBkzYU8MB8GA1UdIwQY MBaAFBlQ90UwJDpksRuyMsA41XTn/E0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1ZEM1JUQWtPbVN4RzdJeXdEalZkT2Y4VFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMjQ2MzUtMjA5Yy00ZTZlLWI4Nzct ZTY4NWE3M2JkN2Q5LzEvR1ZEM1JUQWtPbVN4RzdJeXdEalZkT2Y4VFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jMjQ2MzUtMjA5Yy00ZTZlLWI4NzctZTY4NWE3M2JkN2Q5 LzEvR1ZEM1JUQWtPbVN4RzdJeXdEalZkT2Y4VFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp57Swz4V osKcfAhtVoqTO3P5D4Tp1VuGmYBdMQBiOVo7VutT6eV6vJ9M1l9I3s3z3B5o3TjV yvcyctW3Dq6qxnqqggKeF7UJe9eqFo+J3ANDDuXoALKV9QKr+/z2djjKV8O5VUdc /2Yoi58OhqytwjnhPpliy0E/bLf34oDlgmGf8qkITyOUbrRVMoa2K4Ft1XdSh1E6 guIg9/rphmthoTDyIbxYyxonIQdy6PDBNbIr6rnZeXDZm9UyJh3ltfh0efFZ1VJQ /D6gPALDrisNokkYhPB+XfUAMmf+l1rcX4tdA15J+1jFO4GtY0N3NBAESAdD0GnW gA3ulyXR4CzgJg== -----END CERTIFICATE-----Generated at Mon Dec 22 07:54:21 2025 by rpki-client