This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft File: Gsiv14efVVs88EP38zpmDV5htdw.mft (raw, json) Hash identifier: G60OQZj2cT6P0JwxIqILcZ5+Uc1d8lzUqhIoujDeabA= Subject key identifier: 54:88:55:C5:AC:3F:81:FF:9C:AC:3E:7B:65:AB:BC:27:D7:DC:B3:27 Authority key identifier: 1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC Certificate issuer: /CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc Certificate serial: 019B48141903C9111A09354DEFA11BCA9C1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft Manifest number: 0ABA Signing time: Mon 22 Dec 2025 22:00:35 +0000 Manifest this update: Mon 22 Dec 2025 22:00:35 +0000 Manifest next update: Tue 23 Dec 2025 22:00:35 +0000 Files and hashes: 1: Gsiv14efVVs88EP38zpmDV5htdw.crl (hash: q3S/XwIehtCgFZBphe1sUP3z1Wa1AXcEC7ExCvWaWoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:19:03:c9:11:1a:09:35:4d:ef:a1:1b:ca:9c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc Validity Not Before: Dec 22 22:00:35 2025 GMT Not After : Dec 23 22:00:35 2025 GMT Subject: CN=548855c5ac3f81ff9cac3e7b65abbc27d7dcb327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:10:07:b6:6b:13:28:a4:af:10:41:36:06:10: 0c:48:3f:95:f8:7a:ef:eb:32:e8:65:20:5e:30:f6: 18:ec:2f:79:2b:d4:bc:a1:b1:3c:33:ef:7b:5b:f7: 31:29:ba:c9:f4:c0:08:4b:89:51:7e:62:1e:a6:50: 80:db:92:de:89:87:2a:cc:44:f6:4f:e1:f7:fb:9e: b7:98:f5:b5:93:fb:d1:76:62:f9:08:a3:05:b2:41: 24:0a:65:26:2c:80:bf:c7:ec:bf:42:ca:95:68:b2: c0:19:a0:2e:c8:76:e2:2c:5c:d5:0e:00:66:17:21: 35:d0:3d:af:ad:19:de:e9:3b:12:fc:20:39:51:3a: 67:5c:3b:6a:54:f2:1e:27:cf:d2:f7:ef:55:b0:75: 29:cb:d5:47:bf:31:89:37:14:36:86:8e:46:5d:c5: a9:bc:4f:9f:d9:00:81:99:26:b1:c7:37:62:91:45: d2:a7:2d:bd:c2:59:18:41:b9:5e:ee:d3:29:b3:91: 73:cf:0a:2a:6a:bb:56:5e:a1:7c:c7:24:e2:c7:26: 52:d9:cc:89:c8:10:9b:6c:fc:e5:86:f9:91:d3:4b: 0b:78:10:33:4e:43:a3:b4:97:ab:78:74:52:68:42: 79:a4:1b:83:53:50:56:e8:e6:49:ae:69:f3:07:af: a2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:88:55:C5:AC:3F:81:FF:9C:AC:3E:7B:65:AB:BC:27:D7:DC:B3:27 X509v3 Authority Key Identifier: keyid:1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:05:10:07:72:f9:d4:be:8c:0f:95:9c:f1:2f:5b:83:0e:c2: 6b:48:28:26:0b:8a:a7:82:f8:28:55:36:83:e7:66:24:dd:fd: 8f:52:2f:e1:55:f1:3c:b3:bd:f2:a6:dc:ef:4b:6d:c5:36:d3: ea:c4:af:db:b9:be:56:f7:83:e0:80:1f:b5:be:b9:f4:3b:59: 93:14:10:49:65:cb:13:7c:bd:73:37:6c:7a:d5:83:df:d3:ff: 1e:8a:33:f5:3d:d3:c8:2e:b2:12:b7:52:37:0e:c1:db:81:25: 38:fd:5b:83:c9:ab:60:8d:2f:39:b4:32:c4:30:34:6c:b7:64: c8:7d:f6:e9:f9:c7:dd:28:9f:a4:5d:dd:59:be:9b:42:85:bc: 16:ca:d6:37:4d:26:36:e0:5a:7b:47:9f:e8:32:71:c9:ce:22: 63:70:09:29:20:6c:fd:0b:c3:f9:34:e3:1c:09:64:ec:54:36: 24:17:04:2e:dc:e1:8b:df:af:6c:cc:7e:5b:dc:28:b8:58:dd: ee:e3:96:8b:e0:e3:e8:84:6b:2c:b1:03:a9:90:79:b7:0b:49: 00:c0:cf:e1:1c:e1:1a:aa:15:3d:17:80:cf:7e:e5:09:47:a7: 0f:4c:55:8e:30:96:f2:ea:13:1d:45:00:6c:73:80:a9:39:c5: df:e4:5b:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFBkDyREaCTVN76EbypwbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYzhhZmQ3ODc5ZjU1NWIzY2YwNDNmN2YzM2E2NjBkNWU2 MWI1ZGMwHhcNMjUxMjIyMjIwMDM1WhcNMjUxMjIzMjIwMDM1WjAzMTEwLwYDVQQD Eyg1NDg4NTVjNWFjM2Y4MWZmOWNhYzNlN2I2NWFiYmMyN2Q3ZGNiMzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RAHtmsTKKSvEEE2BhAMSD+V+Hrv 6zLoZSBeMPYY7C95K9S8obE8M+97W/cxKbrJ9MAIS4lRfmIeplCA25LeiYcqzET2 T+H3+563mPW1k/vRdmL5CKMFskEkCmUmLIC/x+y/QsqVaLLAGaAuyHbiLFzVDgBm FyE10D2vrRne6TsS/CA5UTpnXDtqVPIeJ8/S9+9VsHUpy9VHvzGJNxQ2ho5GXcWp vE+f2QCBmSaxxzdikUXSpy29wlkYQble7tMps5FzzwoqartWXqF8xyTixyZS2cyJ yBCbbPzlhvmR00sLeBAzTkOjtJereHRSaEJ5pBuDU1BW6OZJrmnzB6+iHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSIVcWsP4H/nKw+e2WrvCfX3LMnMB8GA1UdIwQY MBaAFBrIr9eHn1VbPPBD9/M6Zg1eYbXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NpdjE0ZWZWVnM4OEVQMzh6cG1EVjVodGR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS81NzY1Y2QtY2E5OC00NWNmLWE0Y2Qt Y2IxMjgzNzM1NDg1LzEvR3NpdjE0ZWZWVnM4OEVQMzh6cG1EVjVodGR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS81NzY1Y2QtY2E5OC00NWNmLWE0Y2QtY2IxMjgzNzM1NDg1 LzEvR3NpdjE0ZWZWVnM4OEVQMzh6cG1EVjVodGR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgUQB3L5 1L6MD5Wc8S9bgw7Ca0goJguKp4L4KFU2g+dmJN39j1Iv4VXxPLO98qbc70ttxTbT 6sSv27m+VveD4IAftb659DtZkxQQSWXLE3y9czdsetWD39P/Hooz9T3TyC6yErdS Nw7B24ElOP1bg8mrYI0vObQyxDA0bLdkyH326fnH3SifpF3dWb6bQoW8FsrWN00m NuBae0ef6DJxyc4iY3AJKSBs/QvD+TTjHAlk7FQ2JBcELtzhi9+vbMx+W9wouFjd 7uOWi+Dj6IRrLLEDqZB5twtJAMDP4RzhGqoVPReAz37lCUenD0xVjjCW8uoTHUUA bHOAqTnF3+Rbzg== -----END CERTIFICATE-----Generated at Tue Dec 23 06:46:37 2025 by rpki-client