This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft File: GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft (raw, json) Hash identifier: wpQar+ZBXaHRqnHdeReK3Rg8R31hXC/1LJTL5BI0w7A= Subject key identifier: FF:6E:EE:A5:10:D9:F1:A2:B6:9C:65:97:72:74:80:CD:82:70:AE:A0 Authority key identifier: 1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48 Certificate issuer: /CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748 Certificate serial: 019B25525460AF3BD28CF78936CA6DC8B1BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft Manifest number: 0ADC Signing time: Tue 16 Dec 2025 04:01:51 +0000 Manifest this update: Tue 16 Dec 2025 04:01:51 +0000 Manifest next update: Wed 17 Dec 2025 04:01:51 +0000 Files and hashes: 1: GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl (hash: YEEnOP1Qwhw8eJDIahnx32Xm/G9q/sIAf9Xp0iwTT68=) 2: sQzNar_4JseiL9UNqmWgBSd_A68.roa (hash: 6EjRuBumMEH87fOFnzWurdMoQt/hXzQEoZOF6qbEThc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:54:60:af:3b:d2:8c:f7:89:36:ca:6d:c8:b1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748 Validity Not Before: Dec 16 04:01:51 2025 GMT Not After : Dec 17 04:01:51 2025 GMT Subject: CN=ff6eeea510d9f1a2b69c6597727480cd8270aea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7b:e4:18:d0:ed:aa:65:6c:bd:23:e4:96:d9: a4:30:5e:9f:e1:89:a7:5f:df:19:3e:9b:31:b6:c3: 2f:10:97:aa:89:d6:71:33:aa:6f:47:a8:bc:2f:62: 7f:db:58:03:45:6c:70:6f:d9:dc:cd:b4:c2:8b:5d: 45:0c:44:58:7b:bf:50:ae:62:0c:b1:c5:0f:75:00: 0d:a6:6d:f6:d9:d7:3b:ca:aa:8b:8c:8a:be:20:24: dc:df:fe:20:61:c2:e9:92:1c:45:b6:3a:47:bd:b3: 9a:96:c4:bc:87:8e:57:b4:44:98:ac:db:3d:86:38: a8:c1:b0:75:3b:09:93:ea:8d:64:27:57:3e:9b:f1: 3e:39:8a:83:43:df:f5:3d:36:c9:0f:81:2f:f8:da: 59:45:54:be:6d:c1:47:e6:08:36:b3:76:ab:4a:6e: 02:e3:5f:8f:53:90:66:e9:08:ac:66:23:f4:8c:df: 27:2d:dd:67:bd:29:09:9b:fd:27:6a:93:ac:ca:e3: 37:26:be:63:3e:85:b1:aa:e0:47:65:13:31:af:4d: 52:16:d7:dd:23:27:6b:45:bf:26:8f:a7:1f:c0:5e: 4c:54:a9:9f:bb:80:26:19:c4:cc:ac:bf:f5:00:75: a4:a4:0b:6d:a2:00:c8:f2:73:b8:2c:ea:50:c9:9c: f0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6E:EE:A5:10:D9:F1:A2:B6:9C:65:97:72:74:80:CD:82:70:AE:A0 X509v3 Authority Key Identifier: keyid:1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:45:d9:2e:a9:c2:18:15:50:eb:51:0a:de:f4:c8:6c:6a:44: f8:b6:b5:56:fb:e8:99:c5:cb:1c:d1:e7:94:2c:eb:98:ba:2f: 3e:28:dc:e1:4c:f1:2d:e0:23:d3:5a:b2:5d:ca:3c:db:d7:35: c9:ad:98:3b:fa:2f:29:7a:bf:9b:8d:ab:8c:71:01:96:05:d0: 4f:ac:21:de:47:2f:89:2a:5a:10:ef:a5:6d:7e:82:f3:e8:90: 0b:b0:9b:bd:b6:d1:54:92:e9:91:d9:d3:cc:7c:f3:3a:c0:32: 76:da:72:b0:3d:ca:2e:7c:5d:bb:b0:b5:3e:77:f6:e1:70:60: c9:d2:2d:e7:7d:b4:c4:26:6e:bd:e3:c8:85:87:76:16:eb:1b: 89:58:16:51:75:7d:73:da:a1:1b:cc:88:13:98:d5:88:65:f3: ab:5f:8c:89:d6:b6:5d:45:20:f7:33:b2:70:63:67:1b:66:62: 26:69:68:5c:98:b7:83:4f:00:18:bd:7f:10:3e:44:8a:9a:7e: b0:32:a9:f1:1d:a4:ed:da:64:a2:b5:7b:9b:39:64:0e:b1:57: 3a:26:c7:e5:c2:7a:9f:8d:49:66:e8:65:6e:a4:97:7a:2e:ec: 0c:9b:c0:61:ed:99:67:fd:f1:92:6f:d4:a2:2f:00:8f:86:c3: b2:43:76:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUlRgrzvSjPeJNsptyLG9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYzI0NTZjNzBmOGFhYTUzYmQ4OTQwZmUyM2YxM2NmYTI3 MGU3NDgwHhcNMjUxMjE2MDQwMTUxWhcNMjUxMjE3MDQwMTUxWjAzMTEwLwYDVQQD EyhmZjZlZWVhNTEwZDlmMWEyYjY5YzY1OTc3Mjc0ODBjZDgyNzBhZWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XvkGNDtqmVsvSPkltmkMF6f4Ymn X98ZPpsxtsMvEJeqidZxM6pvR6i8L2J/21gDRWxwb9nczbTCi11FDERYe79QrmIM scUPdQANpm322dc7yqqLjIq+ICTc3/4gYcLpkhxFtjpHvbOalsS8h45XtESYrNs9 hjiowbB1OwmT6o1kJ1c+m/E+OYqDQ9/1PTbJD4Ev+NpZRVS+bcFH5gg2s3arSm4C 41+PU5Bm6QisZiP0jN8nLd1nvSkJm/0napOsyuM3Jr5jPoWxquBHZRMxr01SFtfd IydrRb8mj6cfwF5MVKmfu4AmGcTMrL/1AHWkpAttogDI8nO4LOpQyZzw9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9u7qUQ2fGitpxll3J0gM2CcK6gMB8GA1UdIwQY MBaAFBrCRWxw+KqlO9iUD+I/E8+icOdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mZjViODMtOWMyMC00ZDk3LTk3Yzct NWExZDU1ODQzNzhkLzEvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mZjViODMtOWMyMC00ZDk3LTk3YzctNWExZDU1ODQzNzhk LzEvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUXZLqnC GBVQ61EK3vTIbGpE+La1VvvomcXLHNHnlCzrmLovPijc4UzxLeAj01qyXco829c1 ya2YO/ovKXq/m42rjHEBlgXQT6wh3kcviSpaEO+lbX6C8+iQC7CbvbbRVJLpkdnT zHzzOsAydtpysD3KLnxdu7C1Pnf24XBgydIt5320xCZuvePIhYd2FusbiVgWUXV9 c9qhG8yIE5jViGXzq1+Mida2XUUg9zOycGNnG2ZiJmloXJi3g08AGL1/ED5Eipp+ sDKp8R2k7dpkorV7mzlkDrFXOibH5cJ6n41JZuhlbqSXei7sDJvAYe2ZZ/3xkm/U oi8Aj4bDskN24A== -----END CERTIFICATE-----Generated at Tue Dec 16 06:39:44 2025 by rpki-client