This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft File: gs1f087z4cqiC7ph-i1RtrlOtU0.mft (raw, json) Hash identifier: Op+tvnB3CmQ2Ys4AgxezaOWMyO/tEFurUkSh4OI/EPY= Subject key identifier: 4D:AE:00:26:2E:06:EB:D2:73:51:C0:B3:BA:29:98:FC:58:55:79:80 Authority key identifier: 82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D Certificate issuer: /CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d Certificate serial: 019B424A1B9C7AC3698BF8799CF26C3E3D3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft Manifest number: 0907 Signing time: Sun 21 Dec 2025 19:01:51 +0000 Manifest this update: Sun 21 Dec 2025 19:01:51 +0000 Manifest next update: Mon 22 Dec 2025 19:01:51 +0000 Files and hashes: 1: 6-Zj3bcyCjNacB1xPlmd-41FIz0.roa (hash: A56X5AQbB29BB1sjg1qgfONBr80piND7T2p/Wos86gU=) 2: gs1f087z4cqiC7ph-i1RtrlOtU0.crl (hash: we7PoRdF/o7tMeSInLsz9yAswlL/fyklypgMuve2FiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:1b:9c:7a:c3:69:8b:f8:79:9c:f2:6c:3e:3d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d Validity Not Before: Dec 21 19:01:51 2025 GMT Not After : Dec 22 19:01:51 2025 GMT Subject: CN=4dae00262e06ebd27351c0b3ba2998fc58557980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6a:e3:3f:bc:58:0d:29:ff:a0:b9:02:39:21: 1b:24:75:36:2a:b0:23:22:2c:9c:bd:b7:f2:0c:21: e2:ff:b6:53:dd:c4:a6:2a:ac:2e:5a:ee:13:06:47: 18:ba:88:5e:58:a8:7e:df:b5:f9:2d:25:a3:f4:0a: f9:11:cd:fb:c7:cc:fa:73:d3:ba:be:52:82:d8:17: 7c:5d:53:d8:2b:de:7d:c5:c9:c2:6a:13:95:f3:56: e0:42:f1:8f:87:ad:cb:34:7c:79:59:0d:55:32:e1: d4:95:44:27:78:55:89:cb:11:3c:b6:32:a5:8e:98: de:ee:1d:9f:b1:f4:2a:36:59:f3:e0:79:79:65:88: bf:da:bf:ea:e8:43:2b:c9:6d:11:2b:6e:5e:c2:17: 2c:ba:b3:16:48:09:15:81:ca:4a:5c:98:bf:d5:44: 67:4e:e1:89:6b:cc:ee:83:60:17:ce:55:29:59:57: 75:ef:bd:30:ad:7b:df:36:f2:7a:98:6c:0d:c5:e6: 9a:ab:1c:a0:84:7c:76:31:ed:52:db:22:b3:e3:8b: de:6c:3a:3b:93:90:ba:e9:58:01:99:b5:c9:11:2c: 04:b8:4c:b0:ae:97:da:99:98:55:62:21:96:44:37: 12:ea:59:d8:6e:a3:09:1d:5a:28:ec:20:08:71:e9: d6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AE:00:26:2E:06:EB:D2:73:51:C0:B3:BA:29:98:FC:58:55:79:80 X509v3 Authority Key Identifier: keyid:82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:5e:a4:fb:de:8f:a2:8e:b1:8a:95:77:2a:54:18:25:cc:dc: ec:da:20:8a:05:45:2b:5f:0a:13:51:b7:43:a9:cf:6a:c9:c0: 74:48:12:1e:74:2b:1e:3a:3c:4d:21:34:ee:68:3c:8d:ac:76: d5:8b:2b:cd:8c:5e:07:28:f3:3e:22:85:f3:aa:07:14:58:c5: ba:5f:90:5c:49:02:fb:c7:e4:de:aa:37:a4:35:b3:4c:7c:3e: 94:0c:50:bb:ab:5e:3e:38:f6:3e:5a:06:8d:18:60:d6:78:7e: a8:c4:4d:67:e9:8c:a3:f8:61:1f:aa:6d:06:f9:d2:19:79:9e: cc:e5:e1:ed:90:ff:42:b3:c5:b2:55:10:de:33:09:33:4e:d6: 63:8e:62:1c:74:ac:ee:9c:60:3e:78:ce:c1:d1:1b:bd:54:cd: 29:56:9e:63:e3:e6:b6:ed:15:94:9d:62:7e:98:53:5a:3e:68: fe:44:50:b1:a2:d6:37:57:f2:87:35:f2:59:3c:54:f0:bc:4f: 45:69:37:d4:72:01:be:09:91:f3:ee:bc:14:ec:22:88:c8:9a: 90:de:f7:d5:a5:cd:93:94:00:86:28:2a:71:0e:94:69:63:26: 00:b1:67:88:e9:a0:75:81:58:81:0a:a8:f6:b6:ff:2b:fe:a4: 19:97:f6:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCShucesNpi/h5nPJsPj0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyY2Q1ZmQzY2VmM2UxY2FhMjBiYmE2MWZhMmQ1MWI2Yjk0 ZWI1NGQwHhcNMjUxMjIxMTkwMTUxWhcNMjUxMjIyMTkwMTUxWjAzMTEwLwYDVQQD Eyg0ZGFlMDAyNjJlMDZlYmQyNzM1MWMwYjNiYTI5OThmYzU4NTU3OTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWrjP7xYDSn/oLkCOSEbJHU2KrAj IiycvbfyDCHi/7ZT3cSmKqwuWu4TBkcYuoheWKh+37X5LSWj9Ar5Ec37x8z6c9O6 vlKC2Bd8XVPYK959xcnCahOV81bgQvGPh63LNHx5WQ1VMuHUlUQneFWJyxE8tjKl jpje7h2fsfQqNlnz4Hl5ZYi/2r/q6EMryW0RK25ewhcsurMWSAkVgcpKXJi/1URn TuGJa8zug2AXzlUpWVd1770wrXvfNvJ6mGwNxeaaqxyghHx2Me1S2yKz44vebDo7 k5C66VgBmbXJESwEuEywrpfamZhVYiGWRDcS6lnYbqMJHVoo7CAIcenWJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2uACYuBuvSc1HAs7opmPxYVXmAMB8GA1UdIwQY MBaAFILNX9PO8+HKogu6YfotUba5TrVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3MxZjA4N3o0Y3FpQzdwaC1pMVJ0cmxPdFUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MzZlNTQtZDhmZC00NWVmLWJlNjAt ZjUyMzA2ZWViNzIyLzEvZ3MxZjA4N3o0Y3FpQzdwaC1pMVJ0cmxPdFUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS81MzZlNTQtZDhmZC00NWVmLWJlNjAtZjUyMzA2ZWViNzIy LzEvZ3MxZjA4N3o0Y3FpQzdwaC1pMVJ0cmxPdFUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc16k+96P oo6xipV3KlQYJczc7NogigVFK18KE1G3Q6nPasnAdEgSHnQrHjo8TSE07mg8jax2 1YsrzYxeByjzPiKF86oHFFjFul+QXEkC+8fk3qo3pDWzTHw+lAxQu6tePjj2PloG jRhg1nh+qMRNZ+mMo/hhH6ptBvnSGXmezOXh7ZD/QrPFslUQ3jMJM07WY45iHHSs 7pxgPnjOwdEbvVTNKVaeY+Pmtu0VlJ1ifphTWj5o/kRQsaLWN1fyhzXyWTxU8LxP RWk31HIBvgmR8+68FOwiiMiakN731aXNk5QAhigqcQ6UaWMmALFniOmgdYFYgQqo 9rb/K/6kGZf2nw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:57:36 2025 by rpki-client