This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft File: GNo6QLEX-yVyzPekwnLS7GklKRw.mft (raw, json) Hash identifier: 5pFc4DoO2Tp9w9lZlgLnMBCapRv39NDUVmPtDySPk/I= Subject key identifier: 42:65:1A:8B:10:19:F3:16:4B:6C:86:9D:C7:99:BA:3C:6A:6D:75:AA Authority key identifier: 18:DA:3A:40:B1:17:FB:25:72:CC:F7:A4:C2:72:D2:EC:69:25:29:1C Certificate issuer: /CN=18da3a40b117fb2572ccf7a4c272d2ec6925291c Certificate serial: 019B47A65FDF74E8CDEC2308FF3789FCC34C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 20:00:44 +0000 Manifest this update: Mon 22 Dec 2025 20:00:44 +0000 Manifest next update: Tue 23 Dec 2025 20:00:44 +0000 Files and hashes: 1: GNo6QLEX-yVyzPekwnLS7GklKRw.crl (hash: QWrjkwxxV6wGYo7CMPsT9ymjGVO78N9eNOKncE8l1eY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.crl rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:5f:df:74:e8:cd:ec:23:08:ff:37:89:fc:c3:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18da3a40b117fb2572ccf7a4c272d2ec6925291c Validity Not Before: Dec 22 20:00:44 2025 GMT Not After : Dec 23 20:00:44 2025 GMT Subject: CN=42651a8b1019f3164b6c869dc799ba3c6a6d75aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8f:c7:a8:70:f5:07:54:05:f9:ad:f7:5f:bf: 0d:d1:ff:0d:f9:69:30:3f:fb:db:2c:07:65:f2:34: 4d:be:2a:a8:30:5c:64:ef:2d:26:4a:54:28:2c:60: 3a:bb:5e:35:9c:2a:70:9d:ac:c3:e6:a8:bf:ce:7b: a0:4a:42:ee:8b:e4:e0:4c:74:97:2b:2c:70:9d:e7: ca:66:66:31:ab:c4:a6:8e:6a:8e:46:e5:40:f8:aa: 75:85:c8:1d:33:e5:b6:5e:81:62:66:a6:c1:70:66: df:3b:14:8b:57:7b:df:97:27:18:c9:19:ff:ca:a4: 06:9c:af:28:35:62:ee:8d:ba:6c:44:a1:bb:69:52: fa:62:0d:27:f6:ca:88:0b:91:bc:f2:1f:0f:11:53: f0:5d:5f:22:a0:c1:2a:a1:1b:bb:65:a1:c6:e7:59: 28:00:fd:e8:76:7d:fd:19:78:47:16:23:1a:f7:8e: 85:c4:a1:b7:36:37:88:00:e2:9c:6d:6b:74:a0:41: b2:ab:73:a2:f6:8b:36:26:eb:7c:d0:63:51:e8:bf: c2:0d:49:6d:2f:27:1a:e8:09:6f:5b:9b:ae:a7:29: 77:00:68:8d:ab:97:cd:0d:9a:14:aa:17:c8:0f:1e: 60:a9:bb:07:91:40:3d:a4:3a:d5:e7:5e:db:a2:83: f8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:65:1A:8B:10:19:F3:16:4B:6C:86:9D:C7:99:BA:3C:6A:6D:75:AA X509v3 Authority Key Identifier: keyid:18:DA:3A:40:B1:17:FB:25:72:CC:F7:A4:C2:72:D2:EC:69:25:29:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:5e:b2:da:7c:8e:0f:55:4c:c5:d7:60:51:7e:0e:4e:c6:64: 44:3f:58:ba:40:c4:22:1b:a5:6b:fb:0b:e9:d8:ec:a1:ef:6f: 59:ed:c4:26:23:60:9a:3d:b3:b1:05:07:c2:d6:dc:82:04:c2: 63:8b:6b:80:70:84:66:2f:f4:43:f6:07:38:cc:75:87:51:95: ab:40:42:5b:e2:0b:1c:85:71:d7:f3:f5:5b:a2:9e:6a:74:c3: 1a:67:6c:c4:78:e5:a7:df:a5:df:27:2e:70:74:f2:c3:fd:74: 27:bd:fa:7e:41:dd:06:e7:cb:d7:07:b8:c2:7d:24:04:33:95: f9:32:4a:d2:29:68:e3:6a:99:c3:f7:95:fa:d9:46:d7:66:7c: 69:2d:2e:df:50:f9:1f:b7:b1:68:2a:4a:07:ae:20:16:78:68: 91:b6:64:02:2f:1b:e6:01:4e:7a:74:67:7b:ab:3f:36:bb:ba: 8d:6d:fb:79:fe:1a:ae:78:08:4c:62:75:4f:37:2f:74:63:ac: 56:33:b9:5f:53:e6:60:ff:87:71:a0:21:23:b7:70:73:0f:49: 68:af:c9:5c:c8:da:13:52:2c:33:92:49:9f:6b:1b:b1:6e:ba: 28:51:47:91:ee:ad:9f:5b:b6:b8:e6:8d:be:e7:a7:20:59:67: cc:f6:b8:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpl/fdOjN7CMI/zeJ/MNMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZGEzYTQwYjExN2ZiMjU3MmNjZjdhNGMyNzJkMmVjNjky NTI5MWMwHhcNMjUxMjIyMjAwMDQ0WhcNMjUxMjIzMjAwMDQ0WjAzMTEwLwYDVQQD Eyg0MjY1MWE4YjEwMTlmMzE2NGI2Yzg2OWRjNzk5YmEzYzZhNmQ3NWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74/HqHD1B1QF+a33X78N0f8N+Wkw P/vbLAdl8jRNviqoMFxk7y0mSlQoLGA6u141nCpwnazD5qi/znugSkLui+TgTHSX KyxwnefKZmYxq8SmjmqORuVA+Kp1hcgdM+W2XoFiZqbBcGbfOxSLV3vflycYyRn/ yqQGnK8oNWLujbpsRKG7aVL6Yg0n9sqIC5G88h8PEVPwXV8ioMEqoRu7ZaHG51ko AP3odn39GXhHFiMa946FxKG3NjeIAOKcbWt0oEGyq3Oi9os2Jut80GNR6L/CDUlt Lyca6AlvW5uupyl3AGiNq5fNDZoUqhfIDx5gqbsHkUA9pDrV517booP4ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJlGosQGfMWS2yGnceZujxqbXWqMB8GA1UdIwQY MBaAFBjaOkCxF/slcsz3pMJy0uxpJSkcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR05vNlFMRVgteVZ5elBla3duTFM3R2tsS1J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yODk3OWItMGEzNC00YTVjLWEyZmUt Njk4ZDkxMmI3MzQ2LzEvR05vNlFMRVgteVZ5elBla3duTFM3R2tsS1J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8yODk3OWItMGEzNC00YTVjLWEyZmUtNjk4ZDkxMmI3MzQ2 LzEvR05vNlFMRVgteVZ5elBla3duTFM3R2tsS1J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPF6y2nyO D1VMxddgUX4OTsZkRD9YukDEIhula/sL6djsoe9vWe3EJiNgmj2zsQUHwtbcggTC Y4trgHCEZi/0Q/YHOMx1h1GVq0BCW+ILHIVx1/P1W6KeanTDGmdsxHjlp9+l3ycu cHTyw/10J736fkHdBufL1we4wn0kBDOV+TJK0ilo42qZw/eV+tlG12Z8aS0u31D5 H7exaCpKB64gFnhokbZkAi8b5gFOenRne6s/Nru6jW37ef4arngITGJ1TzcvdGOs VjO5X1PmYP+HcaAhI7dwcw9JaK/JXMjaE1IsM5JJn2sbsW66KFFHke6tn1u2uOaN vuenIFlnzPa4Og== -----END CERTIFICATE-----Generated at Tue Dec 23 03:46:11 2025 by rpki-client