This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft File: GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft (raw, json) Hash identifier: 25jNGwTuiOymgylCHe1taOJpSUbDNnh35wF0MYVLKhg= Subject key identifier: 9C:25:A7:2C:AB:75:D9:3B:A7:E4:AE:29:49:F4:4C:C4:3F:CF:53:8B Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F Certificate issuer: /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f Certificate serial: 019B6DA1918F294047BFF23F6851EF85B6C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft Manifest number: 1734 Signing time: Tue 30 Dec 2025 05:01:03 +0000 Manifest this update: Tue 30 Dec 2025 05:01:03 +0000 Manifest next update: Wed 31 Dec 2025 05:01:03 +0000 Files and hashes: 1: GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl (hash: fC+LCSbmy2pqVR9EvM2zxeJXRbalJ03GF0LSHqhvBY8=) 2: TOBAVscU9VJTwLsUhLP0tAjAQi4.roa (hash: IKzhkAp3S93tfIC5ceCBznZ4xMgoDfcxElkoH29JQ+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:91:8f:29:40:47:bf:f2:3f:68:51:ef:85:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f Validity Not Before: Dec 30 05:01:03 2025 GMT Not After : Dec 31 05:01:03 2025 GMT Subject: CN=9c25a72cab75d93ba7e4ae2949f44cc43fcf538b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fd:62:68:53:87:90:f8:b5:e9:9a:59:76:74: 29:d9:08:b6:40:ff:be:27:86:9a:e2:f5:50:42:c2: e2:3d:97:7b:74:4f:84:9f:04:48:26:b7:26:fd:3f: 36:c3:08:67:bb:2c:b4:d6:6c:9d:91:41:7c:ee:3e: 58:5e:11:f5:31:20:7c:ac:7f:b5:d5:9d:30:68:ec: f2:bc:59:da:d2:dd:7e:6b:5f:4b:8e:31:dc:9d:9e: 45:f0:c0:fd:71:73:74:79:c9:46:6e:a8:6f:71:55: 50:ad:4b:02:cd:4d:ef:19:32:14:ec:2f:af:b2:1d: ca:61:57:f0:ab:9a:06:a7:ed:f8:59:96:8b:f7:6b: eb:70:5f:b4:80:52:0e:66:53:78:15:ce:ec:de:76: 20:fa:61:3b:de:ea:67:20:ca:73:e9:8c:89:d5:26: a2:b6:b5:d4:6c:e1:b7:cf:9d:68:a4:ae:d3:4a:7d: 29:d9:88:9f:e1:4e:56:3c:cb:f3:28:fd:fd:59:e4: d7:7f:7b:44:97:59:5c:ab:77:74:20:bb:ad:9d:a1: 28:2f:04:79:1e:8e:ac:c0:6f:5b:6d:8b:98:32:af: 1b:0a:8c:59:da:de:28:ac:82:da:5b:89:f4:c4:18: 97:ac:9f:d0:b5:67:5c:6d:a2:7d:90:24:c9:3a:8e: ea:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:25:A7:2C:AB:75:D9:3B:A7:E4:AE:29:49:F4:4C:C4:3F:CF:53:8B X509v3 Authority Key Identifier: keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b2:cc:e6:77:19:37:a6:b5:e3:9b:e6:16:c5:0e:66:76:70: 09:1a:57:57:28:3d:db:18:a3:32:96:52:7c:9e:7b:97:44:77: e0:9d:52:5a:a4:aa:3d:01:02:b6:1c:57:56:d6:ae:b0:07:25: ee:8c:14:b7:90:93:dd:7d:62:39:46:31:43:f3:38:26:f6:eb: 5e:da:1f:56:12:8e:3c:2d:01:1e:c6:14:b1:e3:f3:34:be:3e: 7a:c6:60:f4:4a:92:a4:bb:09:93:72:b4:06:9c:25:ef:e2:24: 50:09:f1:55:9b:c2:58:b0:de:48:d3:13:ce:e6:f1:cc:41:b2: 7c:56:fd:13:73:c6:2c:c5:84:ba:ce:f0:30:dc:f4:90:c6:62: 0d:46:e0:43:df:30:71:1f:a7:75:af:47:12:3f:60:f6:90:d2: 1b:df:b6:9c:fe:0f:c3:ae:e9:ce:86:2c:77:53:94:21:d7:4b: 90:1d:2e:1d:11:77:ad:50:a1:f2:1d:60:98:f0:8e:72:1e:ed: b7:bf:5f:95:03:f8:db:ef:8b:58:c8:74:a4:ba:92:34:3d:0d: 75:70:79:71:2c:ca:98:a8:42:ed:49:d8:ed:f4:4e:fd:f2:e9: 40:a6:5a:99:33:a6:cc:77:e4:13:ee:91:2c:99:4e:a9:d2:f7: 2b:37:51:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoZGPKUBHv/I/aFHvhbbAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNzlhMGFjMzMxMmMxNjUzZjMwMGIwNDUxMGQ5YmYyYzlj MmE1NWYwHhcNMjUxMjMwMDUwMTAzWhcNMjUxMjMxMDUwMTAzWjAzMTEwLwYDVQQD Eyg5YzI1YTcyY2FiNzVkOTNiYTdlNGFlMjk0OWY0NGNjNDNmY2Y1MzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v1iaFOHkPi16ZpZdnQp2Qi2QP++ J4aa4vVQQsLiPZd7dE+EnwRIJrcm/T82wwhnuyy01mydkUF87j5YXhH1MSB8rH+1 1Z0waOzyvFna0t1+a19LjjHcnZ5F8MD9cXN0eclGbqhvcVVQrUsCzU3vGTIU7C+v sh3KYVfwq5oGp+34WZaL92vrcF+0gFIOZlN4Fc7s3nYg+mE73upnIMpz6YyJ1Sai trXUbOG3z51opK7TSn0p2Yif4U5WPMvzKP39WeTXf3tEl1lcq3d0ILutnaEoLwR5 Ho6swG9bbYuYMq8bCoxZ2t4orILaW4n0xBiXrJ/QtWdcbaJ9kCTJOo7qSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwlpyyrddk7p+SuKUn0TMQ/z1OLMB8GA1UdIwQY MBaAFBp5oKwzEsFlPzALBFENm/LJwqVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zMjk5NjgtMjQ3Yy00ZGVhLTk5ZDIt NjAxMDdiNGVhNGViLzEvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zMjk5NjgtMjQ3Yy00ZGVhLTk5ZDItNjAxMDdiNGVhNGVi LzEvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7LM5ncZ N6a145vmFsUOZnZwCRpXVyg92xijMpZSfJ57l0R34J1SWqSqPQECthxXVtausAcl 7owUt5CT3X1iOUYxQ/M4JvbrXtofVhKOPC0BHsYUsePzNL4+esZg9EqSpLsJk3K0 Bpwl7+IkUAnxVZvCWLDeSNMTzubxzEGyfFb9E3PGLMWEus7wMNz0kMZiDUbgQ98w cR+nda9HEj9g9pDSG9+2nP4Pw67pzoYsd1OUIddLkB0uHRF3rVCh8h1gmPCOch7t t79flQP42++LWMh0pLqSND0NdXB5cSzKmKhC7UnY7fRO/fLpQKZamTOmzHfkE+6R LJlOqdL3KzdRjA== -----END CERTIFICATE-----Generated at Tue Dec 30 07:11:30 2025 by rpki-client