This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json) Hash identifier: lk0nKwKKvRs8whlne1qIGUPObmipZSBfSDuj5aAOfPM= Subject key identifier: AC:BB:D7:ED:44:1A:AB:F7:73:34:A2:C1:BC:A1:3E:E9:2E:12:11:65 Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b Certificate serial: 019B4FCE93F7EE3F1E966EAF205AF5EF4E1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft Manifest number: 1795 Signing time: Wed 24 Dec 2025 10:01:36 +0000 Manifest this update: Wed 24 Dec 2025 10:01:36 +0000 Manifest next update: Thu 25 Dec 2025 10:01:36 +0000 Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: XHkmIKFzvpmMPzr4omRpBfDYf4QW5+KEn33hs53XAPQ=) 2: bZLHtasaTPjY31e6RPfAq2RJKnA.roa (hash: ID+iO3817M9kW6iqLKBAKlaZVewlrBg5mSajuX6nX2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:93:f7:ee:3f:1e:96:6e:af:20:5a:f5:ef:4e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b Validity Not Before: Dec 24 10:01:36 2025 GMT Not After : Dec 25 10:01:36 2025 GMT Subject: CN=acbbd7ed441aabf77334a2c1bca13ee92e121165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:48:60:84:e4:7a:3a:30:ef:41:14:6f:03:bb: bc:08:33:a2:60:41:04:9b:a7:56:b2:92:81:c1:5e: d0:d3:1f:ae:0b:99:c0:63:1b:2c:8c:bc:a7:28:f8: 63:07:51:c5:b1:ea:ef:82:61:3f:e6:80:ce:50:68: 75:f9:78:f9:f3:1d:52:3a:70:e6:1b:60:dc:82:c1: ae:e2:36:73:8a:3a:fe:4a:7e:e3:e2:80:ff:c6:6a: 64:8c:05:a4:0e:8e:de:29:55:dd:65:0f:25:af:d5: 78:32:3c:41:08:a2:8f:2b:72:e8:1f:92:17:d8:77: d0:75:ab:a3:e0:09:27:0e:00:c1:32:64:83:03:81: c0:b5:f7:14:80:62:45:e4:2b:fa:39:96:7d:92:de: 15:ff:01:12:c4:5d:cd:24:cc:2b:a5:ac:23:c1:1f: fc:17:26:0f:fa:21:db:bf:1c:83:38:f7:fd:52:1c: 52:fd:20:fa:2d:cb:e4:49:95:cb:ae:b4:24:b3:4a: 1b:f7:b3:79:56:76:77:a1:df:e7:1b:14:b0:e7:db: a3:89:0d:b2:d0:56:b5:84:3d:f9:a8:5d:3c:eb:50: 1b:7c:8a:37:34:dc:fe:82:55:f8:b4:4c:c4:6b:38: 2e:0b:a0:93:1f:1a:87:a3:f7:f9:5f:9a:cf:a2:aa: 08:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BB:D7:ED:44:1A:AB:F7:73:34:A2:C1:BC:A1:3E:E9:2E:12:11:65 X509v3 Authority Key Identifier: keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e0:54:12:f4:c4:d1:d4:f6:89:de:56:8c:97:15:d3:35:94: 80:da:17:48:3b:09:ae:68:e8:50:d4:cd:a2:41:f8:fd:40:5f: df:74:a0:c0:08:6c:64:5e:99:d5:46:10:01:38:17:98:77:99: 78:25:05:c0:08:e5:97:2a:d5:66:fa:c0:87:a6:95:c4:9a:08: c8:c4:31:9a:3d:af:0d:35:bf:75:09:9c:05:23:d8:9c:f8:69: cc:48:36:0e:f1:49:0a:c6:12:5b:0b:66:00:3b:c2:7c:77:db: 1f:8e:97:3e:6f:f4:59:46:cf:aa:ac:78:4a:4c:c8:1d:73:43: b3:a0:c0:23:99:75:b2:3a:b1:cb:38:a4:cd:1f:1b:0c:d7:52: a0:c6:b6:c6:e0:ff:9d:b8:85:91:2b:1a:07:20:8b:ba:91:90: 10:9e:00:7c:91:06:36:97:90:ef:26:a3:e2:fd:90:83:e0:f3: 9f:67:c1:54:25:3e:60:3c:64:c3:ae:3b:2c:ce:de:a1:a9:03: eb:81:b7:d9:9e:82:96:b3:90:1e:ac:71:6a:c2:9c:25:d0:ae: 51:b8:5a:d2:bd:18:42:f0:48:45:c4:24:c6:59:55:ff:1b:76: 76:29:2b:c2:43:d2:fe:9d:01:ce:a2:9e:72:93:61:ce:4d:a9: eb:80:2a:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzpP37j8elm6vIFr1704aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMjliMmE0NWRlMDEzNmZlYWJiZmFlNGJhYTcwMTcyYWE4 NjYxOWIwHhcNMjUxMjI0MTAwMTM2WhcNMjUxMjI1MTAwMTM2WjAzMTEwLwYDVQQD EyhhY2JiZDdlZDQ0MWFhYmY3NzMzNGEyYzFiY2ExM2VlOTJlMTIxMTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEhghOR6OjDvQRRvA7u8CDOiYEEE m6dWspKBwV7Q0x+uC5nAYxssjLynKPhjB1HFservgmE/5oDOUGh1+Xj58x1SOnDm G2DcgsGu4jZzijr+Sn7j4oD/xmpkjAWkDo7eKVXdZQ8lr9V4MjxBCKKPK3LoH5IX 2HfQdauj4AknDgDBMmSDA4HAtfcUgGJF5Cv6OZZ9kt4V/wESxF3NJMwrpawjwR/8 FyYP+iHbvxyDOPf9UhxS/SD6LcvkSZXLrrQks0ob97N5VnZ3od/nGxSw59ujiQ2y 0Fa1hD35qF0861AbfIo3NNz+glX4tEzEazguC6CTHxqHo/f5X5rPoqoIFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKy71+1EGqv3czSiwbyhPukuEhFlMB8GA1UdIwQY MBaAFBopsqRd4BNv6rv65LqnAXKqhmGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNmMxNWEtM2RmZi00NGQ3LWE1Mzgt YTk1MWYyMDBmNjUyLzEvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kNmMxNWEtM2RmZi00NGQ3LWE1MzgtYTk1MWYyMDBmNjUy LzEvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPeBUEvTE 0dT2id5WjJcV0zWUgNoXSDsJrmjoUNTNokH4/UBf33SgwAhsZF6Z1UYQATgXmHeZ eCUFwAjllyrVZvrAh6aVxJoIyMQxmj2vDTW/dQmcBSPYnPhpzEg2DvFJCsYSWwtm ADvCfHfbH46XPm/0WUbPqqx4SkzIHXNDs6DAI5l1sjqxyzikzR8bDNdSoMa2xuD/ nbiFkSsaByCLupGQEJ4AfJEGNpeQ7yaj4v2Qg+Dzn2fBVCU+YDxkw647LM7eoakD 64G32Z6ClrOQHqxxasKcJdCuUbha0r0YQvBIRcQkxllV/xt2dikrwkPS/p0BzqKe cpNhzk2p64AqTg== -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:44 2025 by rpki-client