This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json) Hash identifier: YHAI1hH6EeOeEnS8qkkOhvx5z21ymyP6BqXeJ5p15/E= Subject key identifier: 8B:68:03:A5:BE:25:E0:15:EC:93:17:D8:81:F2:78:55:29:F1:57:55 Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92 Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492 Certificate serial: 019B717E54811DE8C5B545525FEE3AE1DCB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft Manifest number: 17B7 Signing time: Tue 30 Dec 2025 23:01:03 +0000 Manifest this update: Tue 30 Dec 2025 23:01:03 +0000 Manifest next update: Wed 31 Dec 2025 23:01:03 +0000 Files and hashes: 1: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: 9EIDcQmV+/TmUg8395EBQd8ufoA4NOo3ziPGDzTiEy8=) 2: bDbEU-n8q6DljyAoCb2HG5IpwAM.roa (hash: eRAv8rRBi2xmtRMeoh59gG1sQ1a+pnNx2m0jnwKDhWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7e:54:81:1d:e8:c5:b5:45:52:5f:ee:3a:e1:dc:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492 Validity Not Before: Dec 30 23:01:03 2025 GMT Not After : Dec 31 23:01:03 2025 GMT Subject: CN=8b6803a5be25e015ec9317d881f2785529f15755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ed:5a:d9:a9:31:df:67:94:6d:fc:72:05:08: 68:f1:03:63:de:3e:27:08:a1:38:4e:6b:c6:67:47: fc:19:df:4e:66:63:18:72:2b:69:3d:36:ff:34:06: ed:df:38:92:e1:cd:58:d7:02:1d:00:3b:f2:b5:03: ff:3a:cd:78:13:28:3c:94:2d:ff:ee:68:a8:91:64: 64:73:45:44:b9:f7:6e:50:af:c3:58:c9:96:2d:65: d0:60:12:cf:4e:a6:93:3f:86:e5:90:d6:d1:c2:55: 40:82:04:9b:fc:ee:e8:b1:0e:59:7f:be:4a:4c:21: 48:4f:16:08:87:0b:3a:95:7a:31:b0:21:3d:ea:f6: 54:30:d3:4b:b1:75:36:d9:24:6a:78:92:9a:2b:25: 30:59:1a:ed:f7:ea:c2:32:6f:a7:20:c4:30:92:58: 1a:9a:ea:55:cc:6c:bf:77:8c:13:fb:bf:8d:5b:07: dc:16:f7:08:d5:b3:33:66:12:07:0b:a9:14:a2:8a: a6:ae:b8:58:bf:e7:61:84:64:0b:18:98:3f:98:fe: 33:e3:5a:27:a5:c6:c8:9a:96:ef:b1:b5:07:ea:82: ec:1b:c3:ef:54:68:4a:17:ac:57:6b:86:00:26:fa: 64:45:e8:80:85:bc:b1:3e:f0:53:2b:27:b2:d3:a3: a2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:68:03:A5:BE:25:E0:15:EC:93:17:D8:81:F2:78:55:29:F1:57:55 X509v3 Authority Key Identifier: keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:d7:31:ab:96:dc:25:83:da:86:80:7c:3f:9c:3f:09:56:78: 65:c4:1c:37:11:47:eb:66:0e:7c:6c:1c:0d:2b:b8:3e:4f:56: 59:a3:0f:af:0d:87:71:4e:d8:6a:a5:30:1a:76:8e:0b:b3:8d: ea:00:fe:88:01:d7:86:9e:e7:e8:5e:6c:ae:e2:8e:55:c7:90: 27:d1:84:e2:32:3b:c6:23:58:43:55:a0:42:d2:75:b1:8d:e0: 10:b3:3c:7d:c8:9e:35:56:8f:80:a8:96:14:7d:d9:59:47:11: 38:c3:2f:1c:80:6d:06:f9:3f:c1:fa:fc:fb:6d:bb:7a:76:1b: e3:2e:48:13:d8:71:57:19:78:cb:ee:c3:02:33:ef:b6:3e:f4: c4:09:a7:63:43:79:d9:80:37:3b:d7:d4:d5:ef:b5:a6:5d:f1: 74:6a:27:6d:36:5e:7b:f9:8d:2c:99:1a:54:c4:ee:11:9c:81: d2:06:46:4b:e9:c4:c7:9f:28:8b:ff:3a:4d:59:68:df:f4:4b: 79:74:ea:8b:33:18:4d:c8:58:d3:cb:56:65:0b:2c:12:79:da: fd:dd:be:45:7c:89:72:c2:d1:0f:4f:2c:b2:11:f0:fa:f4:a3: 4d:eb:8a:00:44:8f:1b:be:db:9b:ab:c8:fa:29:b1:5c:9b:48: eb:af:90:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxflSBHejFtUVSX+464dy2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZmZmZjI4OWYyZGFkMGZjMDg0NTZiMGJhZDU0ZDdiYTQ0 OWE0OTIwHhcNMjUxMjMwMjMwMTAzWhcNMjUxMjMxMjMwMTAzWjAzMTEwLwYDVQQD Eyg4YjY4MDNhNWJlMjVlMDE1ZWM5MzE3ZDg4MWYyNzg1NTI5ZjE1NzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+1a2akx32eUbfxyBQho8QNj3j4n CKE4TmvGZ0f8Gd9OZmMYcitpPTb/NAbt3ziS4c1Y1wIdADvytQP/Os14Eyg8lC3/ 7miokWRkc0VEufduUK/DWMmWLWXQYBLPTqaTP4blkNbRwlVAggSb/O7osQ5Zf75K TCFITxYIhws6lXoxsCE96vZUMNNLsXU22SRqeJKaKyUwWRrt9+rCMm+nIMQwklga mupVzGy/d4wT+7+NWwfcFvcI1bMzZhIHC6kUooqmrrhYv+dhhGQLGJg/mP4z41on pcbImpbvsbUH6oLsG8PvVGhKF6xXa4YAJvpkReiAhbyxPvBTKyey06OieQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItoA6W+JeAV7JMX2IHyeFUp8VdVMB8GA1UdIwQY MBaAFBn//yifLa0PwIRWsLrVTXukSaSSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2ZfX0tKOHRyUV9BaEZhd3V0Vk5lNlJKcEpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jMTFjODctZWZiYi00NWU4LTliMDMt ZDUyNTcxOGFhNDRhLzEvR2ZfX0tKOHRyUV9BaEZhd3V0Vk5lNlJKcEpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jMTFjODctZWZiYi00NWU4LTliMDMtZDUyNTcxOGFhNDRh LzEvR2ZfX0tKOHRyUV9BaEZhd3V0Vk5lNlJKcEpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdcxq5bc JYPahoB8P5w/CVZ4ZcQcNxFH62YOfGwcDSu4Pk9WWaMPrw2HcU7YaqUwGnaOC7ON 6gD+iAHXhp7n6F5sruKOVceQJ9GE4jI7xiNYQ1WgQtJ1sY3gELM8fcieNVaPgKiW FH3ZWUcROMMvHIBtBvk/wfr8+227enYb4y5IE9hxVxl4y+7DAjPvtj70xAmnY0N5 2YA3O9fU1e+1pl3xdGonbTZee/mNLJkaVMTuEZyB0gZGS+nEx58oi/86TVlo3/RL eXTqizMYTchY08tWZQssEnna/d2+RXyJcsLRD08sshHw+vSjTeuKAESPG77bm6vI +imxXJtI66+Quw== -----END CERTIFICATE-----Generated at Wed Dec 31 01:59:13 2025 by rpki-client