This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft File: gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json) Hash identifier: QgYEH4g3XKYAPrqH4fRlNzXFokFTtCQVdAjy1B8Nz6Y= Subject key identifier: 71:B8:22:FE:B8:54:BA:EB:55:05:2B:C4:9D:5C:62:89:13:54:12:98 Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95 Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595 Certificate serial: 019B0E25C923D253B24A83D3312936D8905B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft Manifest number: 1394 Signing time: Thu 11 Dec 2025 16:01:55 +0000 Manifest this update: Thu 11 Dec 2025 16:01:55 +0000 Manifest next update: Fri 12 Dec 2025 16:01:55 +0000 Files and hashes: 1: bYTh9rqmyoD0Z9Or16ek84SzWn4.roa (hash: 4klJmHJXl6kfKkt89+CuaKwDfZrFu99Y5sLGCeYnZ1E=) 2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: lnmzFyX/C8t860/OwkYZ9hoPhBI+v6qy6mwS2KCI6C8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:c9:23:d2:53:b2:4a:83:d3:31:29:36:d8:90:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595 Validity Not Before: Dec 11 16:01:55 2025 GMT Not After : Dec 12 16:01:55 2025 GMT Subject: CN=71b822feb854baeb55052bc49d5c628913541298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:91:68:fd:85:28:1c:3f:17:34:d4:5c:b1:ba: e7:42:f6:6c:08:eb:8c:d8:6f:bc:08:dc:a5:9a:d3: 5c:8c:8a:b2:35:eb:0e:47:03:d8:0f:16:40:34:da: 22:ad:d0:77:81:61:a5:94:f8:18:d1:23:20:2c:bb: ce:08:cc:9b:b6:41:a5:92:5b:9c:bb:1f:c5:68:58: 3e:9d:76:ea:b7:48:b9:9b:33:fe:80:81:11:c6:1d: f4:bc:d3:3d:62:57:65:dd:ac:c0:73:09:74:40:c1: 5b:ea:e5:47:2a:77:aa:32:40:d3:52:bf:b7:cf:26: 3b:e9:65:ab:6e:98:e8:6d:e9:3a:ea:ec:dd:c3:bc: b0:25:28:44:78:a2:ea:e4:4b:03:94:e3:41:3e:08: 84:cc:5f:3e:6a:8f:a4:00:83:8b:a8:d9:e6:9d:d5: b1:31:51:88:99:26:4b:dc:68:b6:a0:3d:4a:d6:74: 08:71:94:00:3f:f3:95:ec:db:5b:7f:3b:30:fd:ef: 47:ca:a9:c1:70:1d:a5:79:f4:b3:d2:cb:92:60:dc: 4b:ea:c9:08:2f:0e:1c:be:d1:52:c3:13:81:b5:a5: ec:2b:c1:5a:8c:28:45:37:eb:32:ee:16:fd:10:de: 3f:ed:cf:2c:a8:56:96:96:e4:da:dd:e3:4e:e2:d7: a7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B8:22:FE:B8:54:BA:EB:55:05:2B:C4:9D:5C:62:89:13:54:12:98 X509v3 Authority Key Identifier: keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:41:b1:c8:78:26:1c:5b:ff:ad:41:81:91:b4:f9:e9:b2:67: 25:5a:5a:1b:21:9e:f0:3d:8a:f4:55:b4:ab:15:f5:0c:8e:cf: af:7b:71:fc:16:6b:02:34:08:58:c9:72:8b:b6:4a:ce:53:32: be:96:26:48:1d:d8:e4:4e:7e:28:81:40:24:c3:4c:f5:13:07: 50:54:58:62:0c:fb:f9:f2:80:33:80:d0:de:7e:41:7b:72:e9: bd:fd:17:d7:3f:3f:c0:a7:de:5b:10:4e:ab:0d:fa:f5:b8:b2: 2d:f7:a1:e9:8e:bf:a8:c8:5b:87:58:9d:de:37:38:71:d6:ef: b9:d0:6c:a6:95:3b:49:30:c3:d3:94:41:84:b4:fb:8c:10:f5: a1:e8:a2:10:ea:2d:39:9f:f2:31:c3:11:e1:e1:f7:ca:f8:a6: 51:ec:de:4c:2d:b3:08:23:d6:a4:dd:d8:dc:f9:57:79:e8:de: 73:55:69:2e:4a:b5:87:b3:e2:07:b5:b4:83:14:41:19:23:64: 01:20:4f:c1:23:ae:17:38:aa:0b:5e:91:86:59:fc:dd:58:3c: b5:0f:f8:23:23:d7:fe:07:82:fb:dc:c2:9b:2f:2c:9d:e7:de: 93:e3:76:f5:fa:89:1a:9c:ac:f1:e4:18:21:e3:a3:5a:db:81: 2d:09:c6:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJckj0lOySoPTMSk22JBbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYzc4NjI3Nzk0ZTg3ZmY5NzE4ZGIxYjBkZjdlZWUyZWRi MzM1OTUwHhcNMjUxMjExMTYwMTU1WhcNMjUxMjEyMTYwMTU1WjAzMTEwLwYDVQQD Eyg3MWI4MjJmZWI4NTRiYWViNTUwNTJiYzQ5ZDVjNjI4OTEzNTQxMjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupFo/YUoHD8XNNRcsbrnQvZsCOuM 2G+8CNylmtNcjIqyNesORwPYDxZANNoirdB3gWGllPgY0SMgLLvOCMybtkGlkluc ux/FaFg+nXbqt0i5mzP+gIERxh30vNM9Yldl3azAcwl0QMFb6uVHKneqMkDTUr+3 zyY76WWrbpjobek66uzdw7ywJShEeKLq5EsDlONBPgiEzF8+ao+kAIOLqNnmndWx MVGImSZL3Gi2oD1K1nQIcZQAP/OV7Ntbfzsw/e9HyqnBcB2lefSz0suSYNxL6skI Lw4cvtFSwxOBtaXsK8FajChFN+sy7hb9EN4/7c8sqFaWluTa3eNO4tenQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHG4Iv64VLrrVQUrxJ1cYokTVBKYMB8GA1UdIwQY MBaAFILHhid5Tof/lxjbGw337uLtszWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMt NjI2ZmMwNDAzYWM5LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMtNjI2ZmMwNDAzYWM5 LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckGxyHgm HFv/rUGBkbT56bJnJVpaGyGe8D2K9FW0qxX1DI7Pr3tx/BZrAjQIWMlyi7ZKzlMy vpYmSB3Y5E5+KIFAJMNM9RMHUFRYYgz7+fKAM4DQ3n5Be3Lpvf0X1z8/wKfeWxBO qw369biyLfeh6Y6/qMhbh1id3jc4cdbvudBsppU7STDD05RBhLT7jBD1oeiiEOot OZ/yMcMR4eH3yvimUezeTC2zCCPWpN3Y3PlXeejec1VpLkq1h7PiB7W0gxRBGSNk ASBPwSOuFziqC16Rhln83Vg8tQ/4IyPX/geC+9zCmy8snefek+N29fqJGpys8eQY IeOjWtuBLQnGrw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:38:04 2025 by rpki-client