This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json) Hash identifier: 9pR32OmQ543isSqnFp0XQnFq22Wim+ohVIxVnV5SpbY= Subject key identifier: CE:16:8C:E6:3A:17:06:57:83:95:CD:63:A9:9C:47:B6:93:91:74:E3 Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18 Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18 Certificate serial: 019B3FB5B33CB176DF84D9A7009CF9C258C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft Manifest number: 0F3A Signing time: Sun 21 Dec 2025 07:00:31 +0000 Manifest this update: Sun 21 Dec 2025 07:00:31 +0000 Manifest next update: Mon 22 Dec 2025 07:00:31 +0000 Files and hashes: 1: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: 3KCB9MkXZ/awIi5m6SS2XtgrS9BGHC8L1DnVZ3ZEKbQ=) 2: UkbqnKEVQc19I4xiaGnllMIeIJM.roa (hash: +7BrsyTUNmPDpU5nT2WX5eEhmb2ft1eu3yDXg9IZfaQ=) 3: yPv21KR4O8eNyOEbMiFjKgHXJPE.roa (hash: nh6n6prnjR0qF3rMky/U2J4R3HUozhFWqJj9OsJoCp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:b3:3c:b1:76:df:84:d9:a7:00:9c:f9:c2:58:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18 Validity Not Before: Dec 21 07:00:31 2025 GMT Not After : Dec 22 07:00:31 2025 GMT Subject: CN=ce168ce63a1706578395cd63a99c47b6939174e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8e:89:ab:d8:e2:9c:db:ba:7c:05:3e:fd:31: 34:1c:74:f8:ea:c1:f8:82:8b:a9:5c:55:3f:92:f3: 5e:da:58:09:a5:f6:38:c6:4f:73:20:8b:e0:42:c9: 77:e0:a0:8d:50:9a:a8:3b:24:60:94:da:8b:6a:6c: 10:d3:d7:49:e1:dd:ad:40:e1:88:6c:b4:34:86:95: dd:5e:51:be:e5:b9:9e:fc:a4:e2:75:79:7b:20:e0: d9:b3:87:1e:91:44:11:ef:bd:bc:6b:28:88:d5:cb: 0c:44:32:bd:fd:45:40:58:ea:ef:30:52:75:ad:2d: 7e:03:60:e7:06:79:c5:34:25:93:59:ef:6a:28:6e: e0:9f:ff:2d:a4:91:d6:a2:bc:88:30:5f:98:6d:6b: dc:84:2e:99:5e:09:69:1a:75:99:75:ab:9b:a7:d2: 70:b4:c8:91:76:06:8b:e6:40:2c:bf:6b:00:7c:5e: 85:54:72:84:fc:be:63:dc:15:cf:c3:eb:12:f0:35: 60:d0:e2:b1:88:5a:91:21:8c:d0:02:f9:d2:57:da: 91:c9:34:28:7d:ec:de:76:50:0b:5c:1c:f2:2c:41: d9:af:15:f0:da:d8:4d:bf:44:69:fd:84:76:91:ab: e3:d4:0a:17:f2:7b:80:8f:85:b4:1b:b0:a5:34:78: a8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:16:8C:E6:3A:17:06:57:83:95:CD:63:A9:9C:47:B6:93:91:74:E3 X509v3 Authority Key Identifier: keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:8c:3f:1c:86:2f:a7:4a:87:74:04:b6:67:10:3d:61:25:f9: 84:94:96:bb:c1:c6:d1:62:56:0c:a0:10:11:dc:cb:ea:a7:c3: f0:97:57:f8:0e:bf:43:ff:13:38:96:28:33:cd:62:19:6c:d8: 6c:5b:ad:c8:c2:d9:fa:7d:e5:db:51:5e:20:a0:17:b8:3c:a4: 09:9a:5d:d0:de:28:e1:0c:9c:f5:3f:0c:d1:8e:18:bb:30:78: f2:d0:9c:e1:57:d8:55:a8:04:eb:cb:8b:7a:e2:b8:9a:61:fb: 2d:1f:ea:32:9d:ff:a4:ce:6d:86:79:da:bc:98:e0:45:8f:c0: 64:c3:c1:67:d4:1a:94:ce:c5:45:f1:df:5e:b1:00:fe:f0:4e: 42:e6:9f:0d:6f:91:2f:41:01:ac:4a:3a:a2:15:c3:f1:b2:ee: 74:ee:6d:f1:6b:fa:d3:4f:e0:6f:f3:34:ca:e9:aa:62:fc:9c: ab:de:c1:c2:58:b0:5a:9b:7c:18:ac:ab:62:d9:92:25:cc:97: df:9a:15:3e:d5:a5:f9:0d:5d:af:6a:9c:f1:1c:29:0b:ed:19: 5b:e5:1e:4d:17:00:a9:6f:d3:72:62:71:b6:32:69:84:d6:0e: 90:85:74:d5:d9:c5:7e:d8:10:c2:ff:2d:8c:bb:29:1a:7d:e3: 81:a0:e3:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tbM8sXbfhNmnAJz5wljIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YWJhZTBlMWYyMTZhMzIxOTczY2NjOWM2NTM3ZWM2MTk3 ZGFiMTgwHhcNMjUxMjIxMDcwMDMxWhcNMjUxMjIyMDcwMDMxWjAzMTEwLwYDVQQD EyhjZTE2OGNlNjNhMTcwNjU3ODM5NWNkNjNhOTljNDdiNjkzOTE3NGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY6Jq9jinNu6fAU+/TE0HHT46sH4 goupXFU/kvNe2lgJpfY4xk9zIIvgQsl34KCNUJqoOyRglNqLamwQ09dJ4d2tQOGI bLQ0hpXdXlG+5bme/KTidXl7IODZs4cekUQR7728ayiI1csMRDK9/UVAWOrvMFJ1 rS1+A2DnBnnFNCWTWe9qKG7gn/8tpJHWoryIMF+YbWvchC6ZXglpGnWZdaubp9Jw tMiRdgaL5kAsv2sAfF6FVHKE/L5j3BXPw+sS8DVg0OKxiFqRIYzQAvnSV9qRyTQo fezedlALXBzyLEHZrxXw2thNv0Rp/YR2kavj1AoX8nuAj4W0G7ClNHiosQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4WjOY6FwZXg5XNY6mcR7aTkXTjMB8GA1UdIwQY MBaAFBirrg4fIWoyGXPMycZTfsYZfasYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0t1dURoOGhhaklaYzh6SnhsTi14aGw5cXhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83MjE3NDUtY2ZlNS00MTYxLWI0MDUt MDY5OTk2YzYzMGYwLzEvR0t1dURoOGhhaklaYzh6SnhsTi14aGw5cXhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy83MjE3NDUtY2ZlNS00MTYxLWI0MDUtMDY5OTk2YzYzMGYw LzEvR0t1dURoOGhhaklaYzh6SnhsTi14aGw5cXhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIw/HIYv p0qHdAS2ZxA9YSX5hJSWu8HG0WJWDKAQEdzL6qfD8JdX+A6/Q/8TOJYoM81iGWzY bFutyMLZ+n3l21FeIKAXuDykCZpd0N4o4Qyc9T8M0Y4YuzB48tCc4VfYVagE68uL euK4mmH7LR/qMp3/pM5thnnavJjgRY/AZMPBZ9QalM7FRfHfXrEA/vBOQuafDW+R L0EBrEo6ohXD8bLudO5t8Wv600/gb/M0yumqYvycq97BwliwWpt8GKyrYtmSJcyX 35oVPtWl+Q1dr2qc8RwpC+0ZW+UeTRcAqW/TcmJxtjJphNYOkIV01dnFftgQwv8t jLspGn3jgaDjwg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:44:49 2025 by rpki-client