This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft File: GsvdANJ7iovvyGbK83jxkCdoR2k.mft (raw, json) Hash identifier: WZ+sVyk8xjrByDF7Ux98EIDLyphcUviKfpRXtPGrOYg= Subject key identifier: 3F:6E:D6:AD:D0:2D:91:D2:77:5B:D4:66:89:EE:E1:1A:55:9A:31:B1 Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69 Certificate issuer: /CN=1acbdd00d27b8a8befc866caf378f19027684769 Certificate serial: 019B5ABFD82D22B7FC6723396DCA316BF51E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft Manifest number: 0AA7 Signing time: Fri 26 Dec 2025 13:01:20 +0000 Manifest this update: Fri 26 Dec 2025 13:01:20 +0000 Manifest next update: Sat 27 Dec 2025 13:01:20 +0000 Files and hashes: 1: GsvdANJ7iovvyGbK83jxkCdoR2k.crl (hash: UzcvCtFlQwDl4WUMxTMxWfHzduTK7gyqooAnAPXL09c=) 2: JLeYM1Nb1WkxGedHLrl3D2YAcD0.roa (hash: kpcTVdbw29GtZxZaBOoPfJn9eSPlvRnFiHJuCzaGNU4=) 3: izbCDxefHi81Ceh8v70jil8PjrA.roa (hash: G81Vq+SeFhUUiPynuXGPGqpCxUEFG0haFucomHcGaT8=) 4: uvZ9FoblIzzQH1DQjOvcBhSKeZU.roa (hash: knG2zE+cphfPly9s92WP/7hjIDgEXmoUhOUrwgfF5vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:d8:2d:22:b7:fc:67:23:39:6d:ca:31:6b:f5:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769 Validity Not Before: Dec 26 13:01:20 2025 GMT Not After : Dec 27 13:01:20 2025 GMT Subject: CN=3f6ed6add02d91d2775bd46689eee11a559a31b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e0:3d:3f:86:28:f9:13:03:47:73:52:d6:6d: 84:39:1d:4d:b5:7b:5d:58:d6:d3:bf:fa:e7:64:27: 2f:a2:a7:d3:b7:f9:88:1c:e4:49:8a:26:d3:cb:cd: 76:45:72:1e:b3:df:b0:4e:d2:fb:d9:57:b3:a9:04: 6d:a6:48:af:02:9a:dd:4f:24:10:7a:e7:da:01:44: d3:45:5e:b9:04:e3:f1:77:da:73:6e:c9:e9:76:b1: 46:9a:33:22:b1:20:44:12:0b:79:09:4d:95:1e:77: 6b:7c:f0:7e:2a:2d:51:3c:ba:75:50:e9:6b:c4:e4: e9:3d:97:4a:86:f9:fb:4b:6e:be:8b:e8:71:4a:cb: 6a:cc:90:92:07:74:d9:64:c2:48:b7:b6:ae:66:46: c7:30:77:89:f3:81:66:e0:f6:ff:82:58:90:fa:67: 08:c8:fb:87:97:7d:d0:f2:50:f8:a2:64:ee:3a:6c: b5:13:07:81:d2:4c:fa:32:1d:b1:14:a3:c8:a3:01: 0b:31:25:48:3f:35:f6:63:d6:c9:64:88:5d:d3:f3: 7e:3f:9e:69:b8:50:43:65:76:4a:29:26:a9:97:aa: 6b:e0:d7:c1:79:68:7b:52:fd:7a:40:f8:01:ed:9a: c9:f1:cf:89:15:9d:86:4e:e1:fc:74:f5:fd:67:db: 9a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6E:D6:AD:D0:2D:91:D2:77:5B:D4:66:89:EE:E1:1A:55:9A:31:B1 X509v3 Authority Key Identifier: keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f4:a0:ec:0b:53:0a:0c:89:63:de:01:bf:1f:42:65:bd:14: 00:fb:39:ac:eb:88:2a:58:2e:a8:07:ce:71:26:80:c5:13:8e: 76:ad:ff:9b:7c:7f:90:4e:c5:64:41:7c:92:5e:16:6f:5d:30: c3:ff:85:f1:e5:f2:d8:fc:62:59:3f:d7:43:4c:1d:2e:79:1b: 1c:25:0d:65:fb:ae:2c:d0:a6:d4:f4:dc:d9:de:03:01:20:43: c9:6a:33:1f:e0:77:3a:6b:d8:47:ab:44:36:23:fc:93:ea:14: 25:3e:c1:e0:5d:2f:f2:ed:07:3f:16:3a:97:f9:fb:5a:88:30: 58:38:06:90:00:ec:6d:76:be:d6:a7:0f:e3:3c:68:f8:12:59: 89:f5:31:99:75:96:21:68:8e:80:d1:72:0d:8b:e1:3a:4b:e0: 7e:f0:e1:c9:05:de:a8:84:0c:07:2d:96:03:3c:9c:2a:1a:a6: ad:e1:1a:5f:cf:20:fa:19:fd:bb:d4:58:dd:68:ca:58:a2:10: 31:cf:4e:88:3a:28:89:70:04:44:2b:8b:15:14:46:40:14:06: 10:cd:52:50:9f:cd:cb:c5:9d:d3:84:50:71:a7:3d:cf:4c:8d: 74:53:fe:f6:e1:bd:5e:4b:53:22:6b:16:e1:9c:72:59:ba:d8: 9e:23:83:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav9gtIrf8ZyM5bcoxa/UeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2JkZDAwZDI3YjhhOGJlZmM4NjZjYWYzNzhmMTkwMjc2 ODQ3NjkwHhcNMjUxMjI2MTMwMTIwWhcNMjUxMjI3MTMwMTIwWjAzMTEwLwYDVQQD EygzZjZlZDZhZGQwMmQ5MWQyNzc1YmQ0NjY4OWVlZTExYTU1OWEzMWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuA9P4Yo+RMDR3NS1m2EOR1NtXtd WNbTv/rnZCcvoqfTt/mIHORJiibTy812RXIes9+wTtL72VezqQRtpkivAprdTyQQ eufaAUTTRV65BOPxd9pzbsnpdrFGmjMisSBEEgt5CU2VHndrfPB+Ki1RPLp1UOlr xOTpPZdKhvn7S26+i+hxSstqzJCSB3TZZMJIt7auZkbHMHeJ84Fm4Pb/gliQ+mcI yPuHl33Q8lD4omTuOmy1EweB0kz6Mh2xFKPIowELMSVIPzX2Y9bJZIhd0/N+P55p uFBDZXZKKSapl6pr4NfBeWh7Uv16QPgB7ZrJ8c+JFZ2GTuH8dPX9Z9uaFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9u1q3QLZHSd1vUZonu4RpVmjGxMB8GA1UdIwQY MBaAFBrL3QDSe4qL78hmyvN48ZAnaEdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQt OWY5NTM2YmIyYzM3LzEvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQtOWY5NTM2YmIyYzM3 LzEvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/Sg7AtT CgyJY94Bvx9CZb0UAPs5rOuIKlguqAfOcSaAxROOdq3/m3x/kE7FZEF8kl4Wb10w w/+F8eXy2PxiWT/XQ0wdLnkbHCUNZfuuLNCm1PTc2d4DASBDyWozH+B3OmvYR6tE NiP8k+oUJT7B4F0v8u0HPxY6l/n7WogwWDgGkADsbXa+1qcP4zxo+BJZifUxmXWW IWiOgNFyDYvhOkvgfvDhyQXeqIQMBy2WAzycKhqmreEaX88g+hn9u9RY3WjKWKIQ Mc9OiDooiXAERCuLFRRGQBQGEM1SUJ/Ny8Wd04RQcac9z0yNdFP+9uG9XktTImsW 4ZxyWbrYniODKg== -----END CERTIFICATE-----Generated at Fri Dec 26 21:22:54 2025 by rpki-client