This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft File: gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json) Hash identifier: Cj4DUr7j9a9kcGJ88h5ero5/VcnYitw9BPkRAo0Dteo= Subject key identifier: D7:62:42:0F:6B:94:03:03:B1:F7:DF:82:E2:08:CD:A9:DB:63:DD:FD Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95 Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595 Certificate serial: 019B405C4AFCCABA5BC55688F3EC9BBE5337 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft Manifest number: 13AE Signing time: Sun 21 Dec 2025 10:02:28 +0000 Manifest this update: Sun 21 Dec 2025 10:02:28 +0000 Manifest next update: Mon 22 Dec 2025 10:02:28 +0000 Files and hashes: 1: bYTh9rqmyoD0Z9Or16ek84SzWn4.roa (hash: 4klJmHJXl6kfKkt89+CuaKwDfZrFu99Y5sLGCeYnZ1E=) 2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: dIghLskvxWvj7xTszrtxKNqnFhsQ4RTiSDMnabEgxMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:4a:fc:ca:ba:5b:c5:56:88:f3:ec:9b:be:53:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595 Validity Not Before: Dec 21 10:02:28 2025 GMT Not After : Dec 22 10:02:28 2025 GMT Subject: CN=d762420f6b940303b1f7df82e208cda9db63ddfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d8:08:41:5c:f9:13:41:a5:22:c6:f8:2e:06: 39:a3:1b:03:16:0c:c5:83:76:b3:17:98:79:85:ce: 4d:f0:9f:79:94:1f:47:39:b3:27:46:87:1b:87:88: 1c:8d:73:50:fe:30:4e:02:4a:62:25:72:7a:cc:f9: 77:17:d3:aa:bf:1e:dc:4e:b7:38:31:79:f7:fe:a1: 19:ca:b9:ad:90:49:61:a8:9e:d2:92:84:80:bd:40: bb:a7:50:cb:ac:ad:9c:1d:e4:21:a3:8b:4d:fe:17: 18:b2:88:83:92:71:f0:df:c1:b6:ea:8d:58:4a:b9: 3f:c8:75:2f:d2:96:5f:ca:74:40:38:d5:3d:cc:2b: e7:8a:02:97:e5:e5:5e:93:c5:56:d2:66:26:01:69: 6b:65:4c:ad:35:12:a1:73:9c:fc:67:e6:52:49:2b: e4:a8:82:65:dc:3b:2a:5f:f0:b3:99:97:82:33:bf: f8:25:aa:28:f1:c2:52:e9:0d:98:77:bf:61:f8:d5: 73:2c:b5:cb:4a:72:80:83:a6:6c:c2:9f:c6:b0:db: e6:5b:86:f1:58:d2:a2:80:a3:5b:22:d0:09:cf:22: d8:26:eb:20:be:06:08:d0:ab:cc:fe:ed:39:35:2c: db:94:30:b5:91:ae:f7:5e:01:77:cf:bc:7b:e7:a1: 15:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:62:42:0F:6B:94:03:03:B1:F7:DF:82:E2:08:CD:A9:DB:63:DD:FD X509v3 Authority Key Identifier: keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d3:69:1f:5b:8b:8f:c8:db:d4:d9:14:0c:4f:b7:35:48:4f: 3b:4e:94:c2:77:f9:63:ed:38:f0:fb:2e:9f:19:db:2e:a9:31: 81:7c:86:5b:97:53:29:5e:8e:33:3a:8f:6d:69:b3:e9:a9:91: 66:21:43:0e:31:f3:ad:7e:37:b9:9c:8e:ee:a3:2c:57:9d:92: e2:62:ca:57:25:f9:87:26:82:72:48:c7:e0:27:ba:10:54:93: ea:33:fe:96:8b:f7:57:06:6d:b1:82:85:e1:b5:f6:b3:30:ec: e8:2e:6b:7f:96:14:f6:2b:6e:17:84:6b:82:36:4e:b3:52:48: 75:a4:ee:f3:b6:07:11:26:ba:8e:e0:de:9c:db:20:18:7e:70: 18:4b:58:9f:b6:09:5f:62:20:3a:df:01:7c:fb:62:d7:ef:6d: a4:dd:f7:29:fc:a1:dd:49:94:58:30:22:38:a0:41:31:de:e1: 62:1a:32:92:1b:d2:f0:79:56:8e:ab:01:ac:8a:2c:9d:29:ba: 9e:99:03:a6:85:f3:a3:2a:f0:09:ac:c9:13:08:90:2c:f7:c5: 3c:9c:ae:e7:1e:7e:6a:45:ae:34:80:4e:0c:66:8e:97:81:61: 0a:a2:fc:32:b3:da:da:c5:0b:65:a4:a6:e4:6e:0a:d0:7f:77: 1c:da:3e:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXEr8yrpbxVaI8+ybvlM3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYzc4NjI3Nzk0ZTg3ZmY5NzE4ZGIxYjBkZjdlZWUyZWRi MzM1OTUwHhcNMjUxMjIxMTAwMjI4WhcNMjUxMjIyMTAwMjI4WjAzMTEwLwYDVQQD EyhkNzYyNDIwZjZiOTQwMzAzYjFmN2RmODJlMjA4Y2RhOWRiNjNkZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNgIQVz5E0GlIsb4LgY5oxsDFgzF g3azF5h5hc5N8J95lB9HObMnRocbh4gcjXNQ/jBOAkpiJXJ6zPl3F9Oqvx7cTrc4 MXn3/qEZyrmtkElhqJ7SkoSAvUC7p1DLrK2cHeQho4tN/hcYsoiDknHw38G26o1Y Srk/yHUv0pZfynRAONU9zCvnigKX5eVek8VW0mYmAWlrZUytNRKhc5z8Z+ZSSSvk qIJl3DsqX/CzmZeCM7/4Jaoo8cJS6Q2Yd79h+NVzLLXLSnKAg6Zswp/GsNvmW4bx WNKigKNbItAJzyLYJusgvgYI0KvM/u05NSzblDC1ka73XgF3z7x756EVlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdiQg9rlAMDsfffguIIzanbY939MB8GA1UdIwQY MBaAFILHhid5Tof/lxjbGw337uLtszWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMt NjI2ZmMwNDAzYWM5LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMtNjI2ZmMwNDAzYWM5 LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdNpH1uL j8jb1NkUDE+3NUhPO06Uwnf5Y+048PsunxnbLqkxgXyGW5dTKV6OMzqPbWmz6amR ZiFDDjHzrX43uZyO7qMsV52S4mLKVyX5hyaCckjH4Ce6EFST6jP+lov3VwZtsYKF 4bX2szDs6C5rf5YU9ituF4RrgjZOs1JIdaTu87YHESa6juDenNsgGH5wGEtYn7YJ X2IgOt8BfPti1+9tpN33Kfyh3UmUWDAiOKBBMd7hYhoykhvS8HlWjqsBrIosnSm6 npkDpoXzoyrwCazJEwiQLPfFPJyu5x5+akWuNIBODGaOl4FhCqL8MrPa2sULZaSm 5G4K0H93HNo+1A== -----END CERTIFICATE-----Generated at Sun Dec 21 15:41:39 2025 by rpki-client