This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft File: GSx4GHPqSt3idTiBHLaqfhvATxs.mft (raw, json) Hash identifier: H6d3kftlALpkaxc448iggA/eA6aQyzPm4II7iAV/9Qk= Subject key identifier: 29:8C:FE:8C:45:98:F6:69:20:B7:80:3B:48:3D:7F:97:2F:C1:1F:A7 Authority key identifier: 19:2C:78:18:73:EA:4A:DD:E2:75:38:81:1C:B6:AA:7E:1B:C0:4F:1B Certificate issuer: /CN=192c781873ea4adde27538811cb6aa7e1bc04f1b Certificate serial: 019B5976C8E1257866DF05D6EF4A0069DAE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSx4GHPqSt3idTiBHLaqfhvATxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft Manifest number: 56 Signing time: Fri 26 Dec 2025 07:01:55 +0000 Manifest this update: Fri 26 Dec 2025 07:01:55 +0000 Manifest next update: Sat 27 Dec 2025 07:01:55 +0000 Files and hashes: 1: GSx4GHPqSt3idTiBHLaqfhvATxs.crl (hash: eMZKRnC//QECN+kV32jYlambMOVFn8lBfNnEgZ+UYmw=) 2: Qt4Ezt33_0kXVdg-RJT20djh1XM.roa (hash: 3NPofej1c/zsdMN6gt/TX4ck3dTH6hmGSHfSKX9E1FQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft rsync://rpki.ripe.net/repository/DEFAULT/GSx4GHPqSt3idTiBHLaqfhvATxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:c8:e1:25:78:66:df:05:d6:ef:4a:00:69:da:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=192c781873ea4adde27538811cb6aa7e1bc04f1b Validity Not Before: Dec 26 07:01:55 2025 GMT Not After : Dec 27 07:01:55 2025 GMT Subject: CN=298cfe8c4598f66920b7803b483d7f972fc11fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:37:4a:11:dc:93:cf:24:be:98:57:5a:e9:d2: d9:33:72:8b:95:7b:7b:c7:b3:ea:ab:76:00:14:47: 8f:7f:2f:a3:d6:8f:36:c8:17:7a:e3:7b:83:96:eb: 47:0e:4a:b9:32:fe:7c:36:b3:5c:00:e1:96:da:f5: 6a:96:66:b6:85:bd:c5:44:a7:7b:4a:d7:9b:3d:e0: 57:11:5d:0e:d3:37:b0:3f:87:06:33:65:4d:f4:57: 9a:e5:0f:cb:91:a2:96:f2:34:9b:e5:86:bd:da:0f: 18:50:3c:99:7e:f4:21:a1:c6:e7:a3:4b:91:0d:58: fa:e5:12:c0:e2:0e:3f:ea:f3:4e:5c:7d:44:87:4d: b1:ff:de:22:da:66:12:b7:ab:2b:b9:17:dd:db:88: b3:0b:41:9e:73:43:98:12:d7:09:e0:71:38:85:b1: 3b:f2:fe:65:57:9c:6b:60:7b:6e:cd:80:e2:60:45: 96:0b:6d:de:be:c5:2e:fe:df:bc:0f:c5:ea:d6:f8: 65:91:96:86:e8:71:7e:43:11:d1:1f:be:87:ab:22: 23:d6:92:a4:4d:aa:f5:9f:6f:23:97:ff:8e:d4:41: e9:89:28:4f:14:aa:10:f3:82:ba:80:3b:76:93:cc: 14:b3:42:62:6a:0b:7c:0c:b9:05:7d:74:d0:51:e6: 7b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8C:FE:8C:45:98:F6:69:20:B7:80:3B:48:3D:7F:97:2F:C1:1F:A7 X509v3 Authority Key Identifier: keyid:19:2C:78:18:73:EA:4A:DD:E2:75:38:81:1C:B6:AA:7E:1B:C0:4F:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSx4GHPqSt3idTiBHLaqfhvATxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e5:32:4b:52:bc:a0:75:b5:12:30:40:d4:69:85:65:6e:dc: c7:df:74:3c:a2:2d:a4:37:1c:e7:1e:8b:75:08:2d:1e:17:63: 52:95:60:38:95:a4:c8:5b:fd:08:aa:74:80:d6:15:c9:ed:c6: ff:91:4e:a1:8e:9a:bc:53:bc:f7:19:18:9c:c6:ad:ad:25:4c: 78:6f:e1:1c:64:90:01:03:7a:0d:76:d6:c9:68:6c:c4:fe:6e: 1a:cd:0a:98:98:24:03:20:34:98:72:02:1e:5b:f9:71:a6:0b: df:c7:d6:d4:06:5e:21:d5:29:7d:35:09:09:df:2e:14:b1:3c: 73:fe:e8:da:79:59:b3:f9:0a:a1:04:63:88:f7:a4:95:09:19: b3:c4:61:ac:67:69:9d:34:e2:fc:80:c7:d0:de:c9:fa:2f:ae: 82:3b:5f:1c:4a:86:bc:9e:27:6d:c6:cc:d3:77:a5:a9:13:3c: cb:b1:6a:01:fc:f8:57:77:25:53:7c:b4:2a:47:23:e7:f2:af: 42:08:94:f3:73:6b:7d:f3:ec:10:f1:a7:af:d5:a0:5a:01:0f: a0:4e:db:ab:73:ff:1f:55:3a:43:eb:ee:83:f9:23:a7:30:e7: 85:89:95:58:f2:ae:b4:24:4a:f9:2b:ff:5b:d4:11:26:45:96: 6e:18:cb:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdsjhJXhm3wXW70oAadrjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MmM3ODE4NzNlYTRhZGRlMjc1Mzg4MTFjYjZhYTdlMWJj MDRmMWIwHhcNMjUxMjI2MDcwMTU1WhcNMjUxMjI3MDcwMTU1WjAzMTEwLwYDVQQD EygyOThjZmU4YzQ1OThmNjY5MjBiNzgwM2I0ODNkN2Y5NzJmYzExZmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozdKEdyTzyS+mFda6dLZM3KLlXt7 x7Pqq3YAFEePfy+j1o82yBd643uDlutHDkq5Mv58NrNcAOGW2vVqlma2hb3FRKd7 StebPeBXEV0O0zewP4cGM2VN9Fea5Q/LkaKW8jSb5Ya92g8YUDyZfvQhocbno0uR DVj65RLA4g4/6vNOXH1Eh02x/94i2mYSt6sruRfd24izC0Gec0OYEtcJ4HE4hbE7 8v5lV5xrYHtuzYDiYEWWC23evsUu/t+8D8Xq1vhlkZaG6HF+QxHRH76HqyIj1pKk Tar1n28jl/+O1EHpiShPFKoQ84K6gDt2k8wUs0Jiagt8DLkFfXTQUeZ7EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmM/oxFmPZpILeAO0g9f5cvwR+nMB8GA1UdIwQY MBaAFBkseBhz6krd4nU4gRy2qn4bwE8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1N4NEdIUHFTdDNpZFRpQkhMYXFmaHZBVHhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lZjA0NzctZGNhNy00NjM0LTgwMTIt OTMzNGQ1NDhkMTkzLzEvR1N4NEdIUHFTdDNpZFRpQkhMYXFmaHZBVHhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lZjA0NzctZGNhNy00NjM0LTgwMTItOTMzNGQ1NDhkMTkz LzEvR1N4NEdIUHFTdDNpZFRpQkhMYXFmaHZBVHhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheUyS1K8 oHW1EjBA1GmFZW7cx990PKItpDcc5x6LdQgtHhdjUpVgOJWkyFv9CKp0gNYVye3G /5FOoY6avFO89xkYnMatrSVMeG/hHGSQAQN6DXbWyWhsxP5uGs0KmJgkAyA0mHIC Hlv5caYL38fW1AZeIdUpfTUJCd8uFLE8c/7o2nlZs/kKoQRjiPeklQkZs8RhrGdp nTTi/IDH0N7J+i+ugjtfHEqGvJ4nbcbM03elqRM8y7FqAfz4V3clU3y0Kkcj5/Kv QgiU83NrffPsEPGnr9WgWgEPoE7bq3P/H1U6Q+vug/kjpzDnhYmVWPKutCRK+Sv/ W9QRJkWWbhjLgw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:38 2025 by rpki-client