This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft File: GipL_SwMaXZagpnvdJZfhipxSLc.mft (raw, json) Hash identifier: DNTa5ovMDTnzkrm1bhbuDqR/ML7P3POKf04Mt09yxYM= Subject key identifier: 7C:1F:50:C5:37:38:99:43:7A:BD:88:E0:3A:85:C3:45:8D:CD:98:06 Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7 Certificate issuer: /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7 Certificate serial: 019B4581824939F3C7D9E63FD8A0389439AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft Manifest number: 0BFA Signing time: Mon 22 Dec 2025 10:01:13 +0000 Manifest this update: Mon 22 Dec 2025 10:01:13 +0000 Manifest next update: Tue 23 Dec 2025 10:01:13 +0000 Files and hashes: 1: GipL_SwMaXZagpnvdJZfhipxSLc.crl (hash: 2kOjf56JTYmFwFyqjulg8a22d/FXkVPb4M/WLgFrChk=) 2: rullXasaggDRq85qkchvmXmvfZY.roa (hash: qK7vzmt1ZIQMh/v4JWoZrRMkgNEwMqtDeTGlVHvLyEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:82:49:39:f3:c7:d9:e6:3f:d8:a0:38:94:39:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7 Validity Not Before: Dec 22 10:01:13 2025 GMT Not After : Dec 23 10:01:13 2025 GMT Subject: CN=7c1f50c5373899437abd88e03a85c3458dcd9806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:31:47:23:3e:aa:9f:60:1f:b2:2f:98:29:8b: aa:69:40:ba:3a:e1:4a:20:cc:ad:8f:74:2f:ef:ec: 9f:3f:45:28:18:6a:79:c3:2c:68:c7:e7:e9:cc:f3: 76:e3:2d:65:74:ff:f1:e3:91:52:b3:ec:cc:38:f0: f3:25:8c:bc:75:f9:e8:40:1b:2b:3f:0c:5f:cd:fc: 15:f8:2f:bd:d4:7d:0c:40:b5:3d:a5:22:e2:a8:6d: 4f:9f:82:f6:88:62:96:f3:16:0c:1b:84:d6:90:36: 02:5b:2a:55:c1:ee:1f:fb:68:b9:be:6f:18:a5:39: 6f:f5:05:d9:d1:4c:2c:5a:87:a1:2b:9b:cd:08:ed: c5:80:78:46:a3:ba:f5:3e:3e:6a:20:28:b6:ff:4c: 25:87:e2:57:34:03:09:0f:b3:8c:2a:07:df:6a:cc: 94:25:90:00:67:bf:24:8b:98:de:5a:c1:b2:e0:34: 5c:e6:eb:3b:f3:c2:4d:a8:14:55:82:a9:19:13:72: 95:43:5c:b4:6a:ee:ef:b5:ee:0d:47:3e:b0:3a:70: e3:ea:f8:92:2d:1d:1c:0f:59:18:5e:db:a1:ee:c4: a2:fc:66:65:79:05:a3:53:1b:93:0f:22:7f:4f:0f: 8b:6f:a9:9e:1d:66:75:46:55:ed:19:b4:49:a6:81: 9d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1F:50:C5:37:38:99:43:7A:BD:88:E0:3A:85:C3:45:8D:CD:98:06 X509v3 Authority Key Identifier: keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:5d:e8:35:86:53:da:a0:55:5a:59:a3:3c:a5:59:96:d4:0f: 99:60:ed:cd:58:d6:ae:9f:69:62:32:44:24:e8:94:35:94:eb: dc:4f:bc:ce:1e:d1:fd:05:9b:32:3e:9c:0d:d7:65:93:b1:02: 6c:f9:dc:c9:55:d1:95:94:69:fa:b4:b5:9a:52:22:9a:a1:2d: 94:53:de:e6:99:fc:7d:7b:1a:67:6c:81:10:05:fd:9b:1a:fc: 7c:07:21:e7:9b:d2:31:b0:b6:ba:09:42:db:68:ce:6f:0e:55: 72:f1:ed:cd:2a:40:ae:c1:51:5c:61:8a:c3:d2:28:12:2f:81: 9f:21:a6:b8:62:d4:20:53:88:51:de:4a:c3:e6:27:b0:0b:3b: c4:53:e8:05:75:01:c4:5b:a9:62:53:52:74:91:4f:62:e3:9c: ee:2e:e7:78:2e:2e:f0:5b:fe:1b:e1:06:2f:a2:82:fe:3b:f9: dd:6e:e2:5a:90:4b:cd:57:9c:39:a2:6b:0d:82:ff:ec:2a:22: 27:d0:6f:fd:65:41:33:9f:2e:e4:f3:d8:ab:64:b8:ed:27:3f: 1a:5c:43:7b:fa:8b:c7:20:c6:fd:f2:47:c3:79:34:88:18:ff: 81:95:05:2c:31:ea:c4:e2:7c:44:e7:e5:cd:41:50:8a:bb:6d: a5:d6:fa:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgYJJOfPH2eY/2KA4lDmtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMmE0YmZkMmMwYzY5NzY1YTgyOTllZjc0OTY1Zjg2MmE3 MTQ4YjcwHhcNMjUxMjIyMTAwMTEzWhcNMjUxMjIzMTAwMTEzWjAzMTEwLwYDVQQD Eyg3YzFmNTBjNTM3Mzg5OTQzN2FiZDg4ZTAzYTg1YzM0NThkY2Q5ODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzFHIz6qn2Afsi+YKYuqaUC6OuFK IMytj3Qv7+yfP0UoGGp5wyxox+fpzPN24y1ldP/x45FSs+zMOPDzJYy8dfnoQBsr PwxfzfwV+C+91H0MQLU9pSLiqG1Pn4L2iGKW8xYMG4TWkDYCWypVwe4f+2i5vm8Y pTlv9QXZ0UwsWoehK5vNCO3FgHhGo7r1Pj5qICi2/0wlh+JXNAMJD7OMKgffasyU JZAAZ78ki5jeWsGy4DRc5us788JNqBRVgqkZE3KVQ1y0au7vte4NRz6wOnDj6viS LR0cD1kYXtuh7sSi/GZleQWjUxuTDyJ/Tw+Lb6meHWZ1RlXtGbRJpoGdOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwfUMU3OJlDer2I4DqFw0WNzZgGMB8GA1UdIwQY MBaAFBoqS/0sDGl2WoKZ73SWX4YqcUi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUt YmI3MDgwMGMyYTY1LzEvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUtYmI3MDgwMGMyYTY1 LzEvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACF3oNYZT 2qBVWlmjPKVZltQPmWDtzVjWrp9pYjJEJOiUNZTr3E+8zh7R/QWbMj6cDddlk7EC bPncyVXRlZRp+rS1mlIimqEtlFPe5pn8fXsaZ2yBEAX9mxr8fAch55vSMbC2uglC 22jObw5VcvHtzSpArsFRXGGKw9IoEi+BnyGmuGLUIFOIUd5Kw+YnsAs7xFPoBXUB xFupYlNSdJFPYuOc7i7neC4u8Fv+G+EGL6KC/jv53W7iWpBLzVecOaJrDYL/7Coi J9Bv/WVBM58u5PPYq2S47Sc/GlxDe/qLxyDG/fJHw3k0iBj/gZUFLDHqxOJ8ROfl zUFQirttpdb6eA== -----END CERTIFICATE-----Generated at Mon Dec 22 15:42:14 2025 by rpki-client