This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft (raw, json) Hash identifier: XgAueDuYCvbvuXFsLOmBVWJTjAMMkKp4me/73L1i+F0= Subject key identifier: C7:73:6C:94:25:C5:7D:C8:30:4A:92:CE:0A:DD:C1:F0:DF:09:7D:2B Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4 Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4 Certificate serial: 019B4023C4523717B91D01E839CB896AD1A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft Manifest number: 01EB Signing time: Sun 21 Dec 2025 09:00:44 +0000 Manifest this update: Sun 21 Dec 2025 09:00:44 +0000 Manifest next update: Mon 22 Dec 2025 09:00:44 +0000 Files and hashes: 1: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl (hash: CZCgO84+Dak+HbfahpT2tJGvs/p7yu/3bMQVnp5S97I=) 2: oV8Ma4hc484xc5SJXQCWtZwI26E.roa (hash: mXD629tUJB3Ogv1XBao+edGNLrPyoPhY8LRLBmBi4hw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:23:c4:52:37:17:b9:1d:01:e8:39:cb:89:6a:d1:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4 Validity Not Before: Dec 21 09:00:44 2025 GMT Not After : Dec 22 09:00:44 2025 GMT Subject: CN=c7736c9425c57dc8304a92ce0addc1f0df097d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:89:96:29:5a:2c:65:a7:ee:61:4f:bc:77:88: b3:0f:04:2c:02:9e:62:ff:7e:89:c3:c5:4c:c4:18: 4c:1c:16:e5:d6:93:90:a5:76:60:a6:b6:c2:bf:ce: e9:82:64:3d:99:5c:35:06:4d:ce:31:70:4e:ec:5f: 09:b3:cc:af:db:b4:59:e7:e8:8d:c7:47:0f:1f:23: 75:6e:a0:39:58:d2:60:46:f5:b8:70:52:37:f8:95: 6b:87:a0:de:e5:16:eb:aa:d7:41:fa:fa:8d:d8:6b: 80:09:b8:94:60:cd:1f:be:20:90:75:85:2c:94:3e: 81:2e:7d:7e:87:ad:4b:60:72:a6:0f:1b:b4:81:86: 5f:2f:0d:9b:1d:6a:20:38:56:8c:5d:c0:80:b0:db: 4a:c5:74:2d:ff:9c:a9:59:a1:c9:c4:84:4e:00:ce: 7c:83:70:21:e9:42:fc:60:6a:ee:f2:09:bf:e7:a2: 0a:93:67:9d:c3:d8:69:c9:77:4e:4b:a8:d9:d4:86: 0f:37:14:3d:d7:cc:8f:ae:4d:d8:b7:30:bc:ab:2c: 7a:f7:ad:08:d4:a7:f9:87:66:af:7d:06:c3:46:c0: 9c:f6:78:2f:10:18:e9:31:49:61:35:b4:94:c4:52: cd:73:78:e8:86:a4:86:0d:a5:ef:ee:39:8b:de:f1: 1d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:73:6C:94:25:C5:7D:C8:30:4A:92:CE:0A:DD:C1:F0:DF:09:7D:2B X509v3 Authority Key Identifier: keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e3:e8:66:3f:15:b5:19:73:ee:a6:96:c6:ee:66:0e:e4:5e: 44:a6:3f:8f:f5:12:44:74:dd:0c:37:d6:21:98:af:04:dc:21: 93:ff:50:64:b4:42:ff:97:6f:22:4e:df:61:ae:d3:0d:4a:c3: c6:28:ae:67:e1:d5:1f:f8:2e:25:80:e0:83:b2:66:5d:9b:a2: ae:eb:15:62:33:8e:f5:93:8f:c5:07:b4:5b:df:ce:19:8c:c6: 41:53:c5:80:10:e5:29:67:78:9b:79:2f:41:d5:ba:50:ae:98: 7c:f0:6d:c0:32:9b:31:4f:7c:52:a0:b7:4b:12:42:da:94:9d: dd:56:3e:ab:6f:0f:26:b0:83:69:87:25:fb:77:16:13:2c:99: 15:00:09:e4:2f:65:83:a2:48:09:df:1c:0d:17:84:9b:15:4c: c7:f3:95:1b:ff:c0:2d:0e:63:fe:d7:dc:52:bf:49:bc:66:23: f9:b6:75:8a:a5:90:1c:56:23:34:4e:02:cd:58:8d:47:bb:b5: ad:2e:41:ab:e8:47:42:f0:ad:94:40:2d:56:99:c6:e2:b5:be: 60:10:fd:c7:27:8c:8d:0f:7e:ae:51:36:42:2e:6f:fd:87:3c: 88:5b:c4:81:4d:80:00:cc:70:d9:b0:1b:6f:56:6b:af:c5:90: 64:3a:28:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAI8RSNxe5HQHoOcuJatGlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YzY4YWQ2ZjE0YmUyMTcyYzdkMGM5NGY0YjRkNGQwMDE5 MzNiYjQwHhcNMjUxMjIxMDkwMDQ0WhcNMjUxMjIyMDkwMDQ0WjAzMTEwLwYDVQQD EyhjNzczNmM5NDI1YzU3ZGM4MzA0YTkyY2UwYWRkYzFmMGRmMDk3ZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4omWKVosZafuYU+8d4izDwQsAp5i /36Jw8VMxBhMHBbl1pOQpXZgprbCv87pgmQ9mVw1Bk3OMXBO7F8Js8yv27RZ5+iN x0cPHyN1bqA5WNJgRvW4cFI3+JVrh6De5RbrqtdB+vqN2GuACbiUYM0fviCQdYUs lD6BLn1+h61LYHKmDxu0gYZfLw2bHWogOFaMXcCAsNtKxXQt/5ypWaHJxIROAM58 g3Ah6UL8YGru8gm/56IKk2edw9hpyXdOS6jZ1IYPNxQ918yPrk3YtzC8qyx6960I 1Kf5h2avfQbDRsCc9ngvEBjpMUlhNbSUxFLNc3johqSGDaXv7jmL3vEd8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdzbJQlxX3IMEqSzgrdwfDfCX0rMB8GA1UdIwQY MBaAFBjGitbxS+IXLH0MlPS01NABkzu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR01hSzF2Rkw0aGNzZlF5VTlMVFUwQUdUTzdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xODhmMDMtMTY4Zi00OTQyLTk1MDUt MTk4MDNiMWZiMWYwLzEvR01hSzF2Rkw0aGNzZlF5VTlMVFUwQUdUTzdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xODhmMDMtMTY4Zi00OTQyLTk1MDUtMTk4MDNiMWZiMWYw LzEvR01hSzF2Rkw0aGNzZlF5VTlMVFUwQUdUTzdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuPoZj8V tRlz7qaWxu5mDuReRKY/j/USRHTdDDfWIZivBNwhk/9QZLRC/5dvIk7fYa7TDUrD xiiuZ+HVH/guJYDgg7JmXZuirusVYjOO9ZOPxQe0W9/OGYzGQVPFgBDlKWd4m3kv QdW6UK6YfPBtwDKbMU98UqC3SxJC2pSd3VY+q28PJrCDaYcl+3cWEyyZFQAJ5C9l g6JICd8cDReEmxVMx/OVG//ALQ5j/tfcUr9JvGYj+bZ1iqWQHFYjNE4CzViNR7u1 rS5Bq+hHQvCtlEAtVpnG4rW+YBD9xyeMjQ9+rlE2Qi5v/Yc8iFvEgU2AAMxw2bAb b1Zrr8WQZDoo9w== -----END CERTIFICATE-----Generated at Sun Dec 21 13:38:59 2025 by rpki-client