This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft File: Gsiv14efVVs88EP38zpmDV5htdw.mft (raw, json) Hash identifier: jXKXIyTGCvlBSJprKv/eiQB7b65hiDgg8ast/uNLC7c= Subject key identifier: B4:D3:C2:A2:6E:21:65:D6:61:B0:75:06:7D:5C:06:36:C1:B2:82:18 Authority key identifier: 1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC Certificate issuer: /CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc Certificate serial: 019B405BDB77D5519A6F3DAC6C1286770CED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft Manifest number: 0AB6 Signing time: Sun 21 Dec 2025 10:02:00 +0000 Manifest this update: Sun 21 Dec 2025 10:02:00 +0000 Manifest next update: Mon 22 Dec 2025 10:02:00 +0000 Files and hashes: 1: Gsiv14efVVs88EP38zpmDV5htdw.crl (hash: eW1yP/wdrN0IGH5MHIzRn2JnP6RFcdvpdglPNxz417Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:db:77:d5:51:9a:6f:3d:ac:6c:12:86:77:0c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc Validity Not Before: Dec 21 10:02:00 2025 GMT Not After : Dec 22 10:02:00 2025 GMT Subject: CN=b4d3c2a26e2165d661b075067d5c0636c1b28218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:69:29:4f:8d:17:80:6c:b1:fe:6f:3d:ba:e6: 16:b0:6f:1c:e1:5a:3a:d3:41:f0:04:dd:ae:23:86: 6f:4d:53:e1:11:92:60:75:de:b9:5f:67:33:d2:0d: 38:01:ea:67:f8:07:9b:b7:2a:a9:9d:71:96:8d:69: 6e:64:00:ea:d4:12:53:77:6f:ce:7d:c0:98:5e:65: 5d:3f:d1:30:c3:b7:2d:89:37:8a:33:fa:9f:d8:5c: d5:a6:ed:b1:ae:e5:87:2b:d7:fb:38:88:e1:aa:91: 55:ab:eb:4c:ed:e8:aa:5f:17:28:82:59:1d:62:cc: d0:1f:1a:1d:27:10:02:d5:b9:72:db:4b:b2:a8:fb: db:5f:ab:5c:e4:ca:70:90:0a:7f:9c:f3:39:94:02: c9:29:54:49:f5:52:87:b1:9d:70:cc:8f:79:79:e7: 1f:92:f2:3c:4a:db:56:00:51:60:9b:4d:c2:92:69: d0:30:f5:44:89:c7:ad:d8:cd:3a:2e:06:1c:5a:85: f7:1d:30:a6:55:8a:50:62:d7:e3:c3:d8:ba:1b:f1: f2:fb:cf:b2:06:69:ef:1f:d8:d8:1c:dc:8c:29:fe: 3f:31:fc:e7:63:34:d6:a9:73:45:81:54:91:db:4e: 2e:c5:9f:dc:01:fd:00:15:2f:2c:85:18:21:ef:87: 8d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D3:C2:A2:6E:21:65:D6:61:B0:75:06:7D:5C:06:36:C1:B2:82:18 X509v3 Authority Key Identifier: keyid:1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e6:00:14:b3:d8:8c:fe:cc:79:24:73:a1:c0:b8:58:01:28: b3:43:a1:d0:7c:6d:f4:66:41:53:73:f2:6d:a5:31:37:dd:ba: 4a:f6:64:e3:df:f3:a1:c4:ac:d6:26:93:65:0e:f3:13:f8:d0: 83:79:d2:82:6b:3b:95:1c:d9:2b:5d:0d:98:6e:08:2a:0d:b3: 48:cc:7c:8f:c5:96:27:01:42:ce:ae:d5:76:a2:4c:17:9c:3a: 68:04:b0:36:3c:85:73:e2:81:22:e7:1e:fe:0d:8b:1a:c8:c0: f0:48:c7:72:23:9f:dc:66:17:74:d3:06:4d:d4:90:29:82:62: 01:97:e1:ba:3b:21:82:12:13:d2:83:cf:14:a3:34:e8:8a:f2: 20:45:79:28:1c:f1:16:54:2b:1c:ae:cb:5f:2b:03:e6:46:95: b8:0c:86:24:d2:8f:d7:7f:ed:4a:d5:a4:9e:10:ce:66:a3:45: 1e:d7:92:d9:07:d5:f9:2e:0f:90:51:2e:a1:b4:45:68:17:00: b4:6d:0c:18:4d:fa:8b:09:70:36:43:ab:e7:5e:af:6d:b7:54: eb:2c:d1:ed:00:97:0e:76:3a:53:4f:fe:e2:37:23:a0:ec:bc: 64:5f:e6:f7:ac:47:ad:41:1e:2e:5e:a1:92:2d:96:bc:3c:0f: 6e:68:b6:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW9t31VGabz2sbBKGdwztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYzhhZmQ3ODc5ZjU1NWIzY2YwNDNmN2YzM2E2NjBkNWU2 MWI1ZGMwHhcNMjUxMjIxMTAwMjAwWhcNMjUxMjIyMTAwMjAwWjAzMTEwLwYDVQQD EyhiNGQzYzJhMjZlMjE2NWQ2NjFiMDc1MDY3ZDVjMDYzNmMxYjI4MjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2kpT40XgGyx/m89uuYWsG8c4Vo6 00HwBN2uI4ZvTVPhEZJgdd65X2cz0g04Aepn+AebtyqpnXGWjWluZADq1BJTd2/O fcCYXmVdP9Eww7ctiTeKM/qf2FzVpu2xruWHK9f7OIjhqpFVq+tM7eiqXxcoglkd YszQHxodJxAC1bly20uyqPvbX6tc5MpwkAp/nPM5lALJKVRJ9VKHsZ1wzI95eecf kvI8SttWAFFgm03CkmnQMPVEicet2M06LgYcWoX3HTCmVYpQYtfjw9i6G/Hy+8+y BmnvH9jYHNyMKf4/MfznYzTWqXNFgVSR204uxZ/cAf0AFS8shRgh74eNhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTTwqJuIWXWYbB1Bn1cBjbBsoIYMB8GA1UdIwQY MBaAFBrIr9eHn1VbPPBD9/M6Zg1eYbXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NpdjE0ZWZWVnM4OEVQMzh6cG1EVjVodGR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS81NzY1Y2QtY2E5OC00NWNmLWE0Y2Qt Y2IxMjgzNzM1NDg1LzEvR3NpdjE0ZWZWVnM4OEVQMzh6cG1EVjVodGR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS81NzY1Y2QtY2E5OC00NWNmLWE0Y2QtY2IxMjgzNzM1NDg1 LzEvR3NpdjE0ZWZWVnM4OEVQMzh6cG1EVjVodGR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuYAFLPY jP7MeSRzocC4WAEos0Oh0Hxt9GZBU3PybaUxN926SvZk49/zocSs1iaTZQ7zE/jQ g3nSgms7lRzZK10NmG4IKg2zSMx8j8WWJwFCzq7VdqJMF5w6aASwNjyFc+KBIuce /g2LGsjA8EjHciOf3GYXdNMGTdSQKYJiAZfhujshghIT0oPPFKM06IryIEV5KBzx FlQrHK7LXysD5kaVuAyGJNKP13/tStWknhDOZqNFHteS2QfV+S4PkFEuobRFaBcA tG0MGE36iwlwNkOr516vbbdU6yzR7QCXDnY6U0/+4jcjoOy8ZF/m96xHrUEeLl6h ki2WvDwPbmi2oQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:17:35 2025 by rpki-client