This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft File: GYIE0cJaARI2vqB0HkxgE500mxA.mft (raw, json) Hash identifier: ZILqFeeTUdSlNwe9SOVyl+AvINxBZKU1w9C9iHudPkE= Subject key identifier: CD:31:F7:3E:7A:C8:86:20:2A:A3:E9:D6:8A:E5:1D:A5:75:4F:A3:B8 Authority key identifier: 19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10 Certificate issuer: /CN=198204d1c25a011236bea0741e4c60139d349b10 Certificate serial: 019B432575914C44777D03A7CF862869A2FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 23:01:26 +0000 Manifest this update: Sun 21 Dec 2025 23:01:26 +0000 Manifest next update: Mon 22 Dec 2025 23:01:26 +0000 Files and hashes: 1: GYIE0cJaARI2vqB0HkxgE500mxA.crl (hash: tZxpqhoBufKqnoIQHrrqD5qfatsY8gGPyW1Ac4lvh1I=) 2: kKreilVZ98mCE6qg5IcJvMPMCcM.roa (hash: nnm83jFx2ukSqxJkqYReRSVveVI2MP9/RX2milhxjy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:75:91:4c:44:77:7d:03:a7:cf:86:28:69:a2:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=198204d1c25a011236bea0741e4c60139d349b10 Validity Not Before: Dec 21 23:01:26 2025 GMT Not After : Dec 22 23:01:26 2025 GMT Subject: CN=cd31f73e7ac886202aa3e9d68ae51da5754fa3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:62:a0:39:cf:c1:09:eb:51:fe:1e:ed:d3:3a: 4d:1e:30:88:3c:97:a8:a8:ce:4d:34:a7:30:6a:b6: f2:34:c5:af:45:ae:81:f8:f6:63:c6:d9:b1:65:84: 5d:ce:f5:b5:84:ee:3a:58:db:71:35:64:d1:f7:22: 11:c8:0b:70:c8:df:dd:11:7e:69:43:d3:a9:64:45: a1:c5:02:3c:2c:0a:49:93:cb:2b:95:29:c4:14:97: 67:10:0c:3e:52:73:12:9c:06:36:24:10:2b:eb:4b: c4:90:4b:46:b8:02:55:91:86:f3:6c:94:0a:d6:a1: ed:78:b2:a2:51:ff:02:8f:23:b4:95:23:34:b8:52: 2e:79:98:2a:b4:b0:16:5b:4b:45:16:ed:ce:a4:98: 0a:e9:7e:5b:c5:77:89:87:7a:4c:7f:52:8a:37:d4: e1:6f:89:08:20:d0:62:08:90:49:b8:e6:06:fb:50: a2:e7:9c:9a:58:05:83:d7:2b:3f:48:cd:29:a8:ea: de:b5:0d:dd:f3:ab:97:ba:1b:cc:10:60:11:1f:77: 22:a1:0c:92:1a:07:8e:56:be:8a:80:28:e7:a1:c1: 92:49:4f:b7:24:4c:3d:99:04:30:9e:34:ca:67:6a: 82:62:96:36:48:b8:58:a9:9b:71:d4:ba:c3:41:f4: 77:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:31:F7:3E:7A:C8:86:20:2A:A3:E9:D6:8A:E5:1D:A5:75:4F:A3:B8 X509v3 Authority Key Identifier: keyid:19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7e:cd:4b:69:a9:e5:79:6a:b7:72:40:8e:e5:f4:b7:1d:a0: 7d:4b:a1:a8:e0:7a:a0:5d:a4:66:b6:3d:2a:53:60:9d:2a:24: ec:68:4e:be:8f:f8:9a:a3:8a:3a:e1:7b:fb:c7:a5:ab:11:27: 15:d5:40:ca:29:2e:c3:ac:63:fb:ae:08:34:3c:f7:e0:73:ac: e1:7e:28:c2:b3:59:9c:87:f7:4e:6f:63:19:07:cd:dd:a4:da: 9d:51:64:70:1c:11:58:11:e9:1b:60:28:5d:c1:99:b9:73:6e: 4d:f6:e6:36:1a:47:95:51:26:97:87:a5:30:4c:04:9b:b9:ca: f5:59:07:21:46:6a:8c:98:d7:9a:63:7f:56:20:3f:91:b0:36: e3:b8:04:f9:84:e2:5a:d7:3a:1b:f5:43:08:4a:dc:57:42:f9: d2:f2:2f:f4:8f:a6:d1:a6:60:c8:a2:dc:9e:60:32:9d:4b:fe: 8b:3a:43:d0:a0:8e:19:94:1f:ef:f3:41:fc:56:ab:fa:85:5a: 7a:be:cd:92:5f:1d:14:ff:af:3a:19:49:26:52:2d:bb:e8:0b: 1b:dd:ab:c4:8c:17:c9:b5:8d:f1:5f:e1:81:55:d0:0b:f1:23: d9:0a:81:b1:4a:78:22:c6:c7:a3:5b:d6:d1:2b:93:32:c2:9d: 5a:af:ec:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJXWRTER3fQOnz4YoaaL8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ODIwNGQxYzI1YTAxMTIzNmJlYTA3NDFlNGM2MDEzOWQz NDliMTAwHhcNMjUxMjIxMjMwMTI2WhcNMjUxMjIyMjMwMTI2WjAzMTEwLwYDVQQD EyhjZDMxZjczZTdhYzg4NjIwMmFhM2U5ZDY4YWU1MWRhNTc1NGZhM2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGKgOc/BCetR/h7t0zpNHjCIPJeo qM5NNKcwarbyNMWvRa6B+PZjxtmxZYRdzvW1hO46WNtxNWTR9yIRyAtwyN/dEX5p Q9OpZEWhxQI8LApJk8srlSnEFJdnEAw+UnMSnAY2JBAr60vEkEtGuAJVkYbzbJQK 1qHteLKiUf8CjyO0lSM0uFIueZgqtLAWW0tFFu3OpJgK6X5bxXeJh3pMf1KKN9Th b4kIINBiCJBJuOYG+1Ci55yaWAWD1ys/SM0pqOretQ3d86uXuhvMEGARH3cioQyS GgeOVr6KgCjnocGSSU+3JEw9mQQwnjTKZ2qCYpY2SLhYqZtx1LrDQfR3wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0x9z56yIYgKqPp1orlHaV1T6O4MB8GA1UdIwQY MBaAFBmCBNHCWgESNr6gdB5MYBOdNJsQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1lJRTBjSmFBUkkydnFCMEhreGdFNTAwbXhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNmYwYTgtOThmMi00OWZiLTg1MDYt NDJhZDNiNGM4ZDBjLzEvR1lJRTBjSmFBUkkydnFCMEhreGdFNTAwbXhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNmYwYTgtOThmMi00OWZiLTg1MDYtNDJhZDNiNGM4ZDBj LzEvR1lJRTBjSmFBUkkydnFCMEhreGdFNTAwbXhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADH7NS2mp 5Xlqt3JAjuX0tx2gfUuhqOB6oF2kZrY9KlNgnSok7GhOvo/4mqOKOuF7+8elqxEn FdVAyikuw6xj+64INDz34HOs4X4owrNZnIf3Tm9jGQfN3aTanVFkcBwRWBHpG2Ao XcGZuXNuTfbmNhpHlVEml4elMEwEm7nK9VkHIUZqjJjXmmN/ViA/kbA247gE+YTi Wtc6G/VDCErcV0L50vIv9I+m0aZgyKLcnmAynUv+izpD0KCOGZQf7/NB/Far+oVa er7Nkl8dFP+vOhlJJlItu+gLG92rxIwXybWN8V/hgVXQC/Ej2QqBsUp4IsbHo1vW 0SuTMsKdWq/shA== -----END CERTIFICATE-----Generated at Mon Dec 22 08:06:30 2025 by rpki-client