This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft File: GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft (raw, json) Hash identifier: If1F7FgHSL+f8DQYHXJK4KLZwV+kOonAumA9D4xq6sU= Subject key identifier: 12:47:05:1C:37:41:0F:C2:3D:23:CC:52:64:EA:88:0C:8D:B3:36:51 Authority key identifier: 1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03 Certificate issuer: /CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003 Certificate serial: 019B4FCEF35DF7BF4F1BC73819C17C9B69AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft Manifest number: 15BF Signing time: Wed 24 Dec 2025 10:02:01 +0000 Manifest this update: Wed 24 Dec 2025 10:02:01 +0000 Manifest next update: Thu 25 Dec 2025 10:02:01 +0000 Files and hashes: 1: GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl (hash: 8iafjcEnVkDrGIU1Zh0LTKf14OSmp8Ek9EN0xbME1/0=) 2: eUeAvm73-2L5UqqKdbnJ3M6g16M.roa (hash: Y9d2L+uaXCF5y4wJiUN6TycT1kpDQNqljoU9Xps8N/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:f3:5d:f7:bf:4f:1b:c7:38:19:c1:7c:9b:69:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003 Validity Not Before: Dec 24 10:02:01 2025 GMT Not After : Dec 25 10:02:01 2025 GMT Subject: CN=1247051c37410fc23d23cc5264ea880c8db33651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:31:b0:03:96:57:33:62:97:bc:06:5a:c3:09: bc:99:b8:b0:a3:0b:be:a1:6f:bf:74:41:1a:1a:9c: 29:1d:2c:19:86:98:81:87:4a:7d:a5:05:ef:db:df: 54:31:a6:ff:b9:20:69:1f:ee:5f:bd:91:57:1b:23: 35:54:04:e6:f1:d1:ab:de:1a:1a:5b:65:d6:09:7c: 4b:6d:b0:82:91:00:9c:99:e8:76:61:57:9f:45:37: 14:2e:35:52:40:4b:d1:db:61:31:44:1d:36:f6:43: 71:b2:8a:27:f6:13:47:c7:fe:2d:40:da:4b:b8:51: c7:90:6e:22:ee:69:be:a2:fd:92:ed:34:0a:ce:c4: b7:44:ed:47:d4:e2:25:63:d1:ad:0d:16:a7:c9:5b: 5e:63:24:2c:6e:30:9e:b3:a2:46:f2:f4:f7:35:08: 0c:52:b9:65:16:13:45:ec:f5:ae:5a:44:25:bc:9a: 30:37:91:db:4b:ac:d3:9a:be:ea:6b:e0:37:74:6d: 15:47:80:37:57:4e:94:a6:58:66:30:7d:ce:ce:44: 62:5e:d6:e5:0d:f6:32:e6:e1:64:a7:11:e3:2c:98: 15:e4:94:92:2c:e0:88:b4:7d:d1:76:d8:83:eb:68: cb:48:4d:a5:fd:87:97:66:96:84:6c:a5:4f:02:e4: 8f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:47:05:1C:37:41:0F:C2:3D:23:CC:52:64:EA:88:0C:8D:B3:36:51 X509v3 Authority Key Identifier: keyid:1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:08:b2:b0:01:78:b3:85:3a:39:d6:53:a7:4a:50:1a:5c:54: aa:26:8a:b8:6e:3d:89:5c:b0:d3:ae:25:2d:4d:f8:98:7c:f9: 75:5a:e7:8b:c5:99:85:4a:d4:f5:20:77:d0:58:6a:69:12:83: fc:99:c0:f6:0a:f4:58:7a:a8:1c:26:63:67:3d:20:c6:38:94: 43:fd:e0:29:37:41:f7:c5:e1:7e:00:34:7b:b6:77:c7:f1:3d: b3:81:12:a9:85:17:67:02:5b:40:2b:4f:73:b2:f9:7f:fa:2a: 74:84:54:51:3b:41:0f:56:1c:0b:cc:2c:7b:4e:74:5e:87:5b: d9:5d:3e:93:0b:bc:ad:2e:bf:a3:9a:d1:ae:fb:ee:c7:55:37: a6:2d:b0:60:2b:37:ef:80:87:13:4f:ff:74:9d:c3:00:94:cb: b3:85:08:c8:9c:b8:81:4c:e0:02:2d:0e:19:ab:bd:1c:13:1d: 07:e0:7b:13:1b:19:4a:ea:37:c7:f4:0c:c6:d8:72:a0:03:84: 09:7d:40:22:5d:fa:56:05:5e:99:5d:79:33:12:c9:c9:25:e5: 81:31:72:0b:af:77:a4:7d:62:c9:16:79:2f:92:f5:ce:bb:95: cd:11:fb:b8:41:70:79:b4:38:8f:e9:72:d4:51:22:8c:94:85: 3b:63:af:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzvNd979PG8c4GcF8m2mqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZTFjN2FhMGIzOTVlMDYxMmVjNDIzZmUwN2ZiMDM4OWFh YTQwMDMwHhcNMjUxMjI0MTAwMjAxWhcNMjUxMjI1MTAwMjAxWjAzMTEwLwYDVQQD EygxMjQ3MDUxYzM3NDEwZmMyM2QyM2NjNTI2NGVhODgwYzhkYjMzNjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzGwA5ZXM2KXvAZawwm8mbiwowu+ oW+/dEEaGpwpHSwZhpiBh0p9pQXv299UMab/uSBpH+5fvZFXGyM1VATm8dGr3hoa W2XWCXxLbbCCkQCcmeh2YVefRTcULjVSQEvR22ExRB029kNxsoon9hNHx/4tQNpL uFHHkG4i7mm+ov2S7TQKzsS3RO1H1OIlY9GtDRanyVteYyQsbjCes6JG8vT3NQgM UrllFhNF7PWuWkQlvJowN5HbS6zTmr7qa+A3dG0VR4A3V06UplhmMH3OzkRiXtbl DfYy5uFkpxHjLJgV5JSSLOCItH3RdtiD62jLSE2l/YeXZpaEbKVPAuSPlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJHBRw3QQ/CPSPMUmTqiAyNszZRMB8GA1UdIwQY MBaAFBrhx6oLOV4GEuxCP+B/sDiaqkADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3VISHFnczVYZ1lTN0VJXzRILXdPSnFxUUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hYmU2MjgtZmNlNy00NDdlLTg1M2Ut OTRmZGM5ZmJkY2FjLzEvR3VISHFnczVYZ1lTN0VJXzRILXdPSnFxUUFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9hYmU2MjgtZmNlNy00NDdlLTg1M2UtOTRmZGM5ZmJkY2Fj LzEvR3VISHFnczVYZ1lTN0VJXzRILXdPSnFxUUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAiysAF4 s4U6OdZTp0pQGlxUqiaKuG49iVyw064lLU34mHz5dVrni8WZhUrU9SB30FhqaRKD /JnA9gr0WHqoHCZjZz0gxjiUQ/3gKTdB98XhfgA0e7Z3x/E9s4ESqYUXZwJbQCtP c7L5f/oqdIRUUTtBD1YcC8wse050Xodb2V0+kwu8rS6/o5rRrvvux1U3pi2wYCs3 74CHE0//dJ3DAJTLs4UIyJy4gUzgAi0OGau9HBMdB+B7ExsZSuo3x/QMxthyoAOE CX1AIl36VgVemV15MxLJySXlgTFyC693pH1iyRZ5L5L1zruVzRH7uEFwebQ4j+ly 1FEijJSFO2Ovgg== -----END CERTIFICATE-----Generated at Wed Dec 24 13:38:42 2025 by rpki-client