This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft File: gswXHj3IRnEeBW4uNiQdrJlKYA0.mft (raw, json) Hash identifier: ZZRtDYU4Lu4gHoilujmBaJ7IDdoruVh8MOPe+6quLtk= Subject key identifier: E8:E9:C1:FB:10:C8:B8:46:3A:24:3E:33:DC:E9:89:71:E6:2F:ED:34 Authority key identifier: 82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D Certificate issuer: /CN=82cc171e3dc846711e056e2e36241dac994a600d Certificate serial: 019B30E840FA273DA8D0EFA62087B2E3C608 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 10:01:25 +0000 Manifest this update: Thu 18 Dec 2025 10:01:25 +0000 Manifest next update: Fri 19 Dec 2025 10:01:25 +0000 Files and hashes: 1: JjOh7wV3uoOnT6pZLsppbv_LAZ8.roa (hash: QPSPPNn3Qn++fdP63nXuDi3yMhHz0vKFIROySBvf1mk=) 2: gswXHj3IRnEeBW4uNiQdrJlKYA0.crl (hash: JTCvK+lvsZnSeEztBaKxw6vvekjECHdmjOHCnt/2+RQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.crl rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:40:fa:27:3d:a8:d0:ef:a6:20:87:b2:e3:c6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82cc171e3dc846711e056e2e36241dac994a600d Validity Not Before: Dec 18 10:01:25 2025 GMT Not After : Dec 19 10:01:25 2025 GMT Subject: CN=e8e9c1fb10c8b8463a243e33dce98971e62fed34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:14:4d:1a:e7:d4:79:e7:b0:56:86:51:e3:d1: 0f:c3:17:0f:84:ac:ab:11:94:67:0f:25:df:9c:b3: fe:f9:a5:41:63:8f:51:81:f2:e7:2b:77:51:8d:41: 6e:f8:42:80:52:a4:59:5c:ca:dd:a3:bf:56:e6:04: 46:7c:ab:8c:b5:b7:ac:71:01:10:a7:d2:cb:00:98: 10:ce:d2:ca:fb:9a:9f:b0:51:a4:d3:a4:23:6d:ce: e7:f5:ee:45:29:bd:d9:fc:56:7b:ab:46:26:b4:12: 3c:43:6c:95:46:89:2c:f5:3f:0e:fe:b3:42:b1:c9: a4:58:c8:6c:2d:cf:f2:cd:dd:94:7b:23:ac:dc:b1: 89:6f:c8:35:2a:e0:49:f3:3e:95:5e:c3:bb:6c:76: 27:77:5b:a3:e7:cd:f4:5f:98:8a:d4:d2:fd:d5:a8: 24:98:ed:ee:e9:22:6c:41:d8:eb:2f:67:26:10:93: 67:1e:3a:8e:df:f7:d5:6e:8d:b9:a4:51:38:38:76: b9:76:08:bf:9e:4d:cb:db:7f:83:a2:fc:89:fa:e0: 19:99:9c:db:f7:72:0f:28:d3:be:ca:17:a0:df:14: 28:cb:dd:2b:aa:d1:32:08:ec:10:f9:60:10:6a:ab: 14:2a:39:62:8b:a8:ff:13:7b:3d:42:12:a5:a3:0c: 7f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E9:C1:FB:10:C8:B8:46:3A:24:3E:33:DC:E9:89:71:E6:2F:ED:34 X509v3 Authority Key Identifier: keyid:82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:3c:b8:5f:69:ad:3c:fd:40:a5:e0:ca:b6:ee:2e:1f:44:4b: af:15:28:9a:ce:11:ad:42:84:69:4d:8d:8b:bf:bb:4b:30:67: 68:9f:42:6c:c3:f8:c6:76:9d:6c:c2:0c:62:a1:c3:19:b0:19: 59:a7:68:4b:01:54:cc:90:81:ee:39:2c:69:a7:6e:1a:c0:0e: 21:d9:fe:fe:76:c9:9d:64:14:0b:c0:4c:ea:2b:3c:0d:63:7f: ed:fd:8c:a0:af:4e:50:4e:54:b7:32:29:d5:bf:a8:3f:e7:76: ff:31:55:13:8b:ca:44:70:5d:db:d9:12:a9:02:71:a4:58:a5: 68:8e:d0:3a:3b:9c:cf:e0:5b:5a:94:1e:94:6f:8f:4f:cb:80: 28:8f:8a:c4:43:15:b9:fa:0c:90:71:35:3b:66:9e:80:8e:fe: ef:5d:ec:67:e9:29:47:7b:a9:f3:32:98:25:aa:ba:2f:b5:f1: 8d:2a:3d:ac:18:79:18:2f:cf:d0:29:d7:37:e7:bf:ad:11:8d: 47:ac:e2:02:48:14:0e:53:78:e6:89:98:47:5e:99:f6:72:ef: 2c:78:9c:0b:47:29:a1:ad:47:1f:3b:03:4b:59:d7:65:0c:4c: cf:dd:89:89:0c:6e:a0:d2:96:d6:6b:18:13:be:d7:06:5e:99: 82:3c:1c:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6ED6Jz2o0O+mIIey48YIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyY2MxNzFlM2RjODQ2NzExZTA1NmUyZTM2MjQxZGFjOTk0 YTYwMGQwHhcNMjUxMjE4MTAwMTI1WhcNMjUxMjE5MTAwMTI1WjAzMTEwLwYDVQQD EyhlOGU5YzFmYjEwYzhiODQ2M2EyNDNlMzNkY2U5ODk3MWU2MmZlZDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRRNGufUeeewVoZR49EPwxcPhKyr EZRnDyXfnLP++aVBY49RgfLnK3dRjUFu+EKAUqRZXMrdo79W5gRGfKuMtbescQEQ p9LLAJgQztLK+5qfsFGk06Qjbc7n9e5FKb3Z/FZ7q0YmtBI8Q2yVRoks9T8O/rNC scmkWMhsLc/yzd2UeyOs3LGJb8g1KuBJ8z6VXsO7bHYnd1uj5830X5iK1NL91agk mO3u6SJsQdjrL2cmEJNnHjqO3/fVbo25pFE4OHa5dgi/nk3L23+DovyJ+uAZmZzb 93IPKNO+yheg3xQoy90rqtEyCOwQ+WAQaqsUKjlii6j/E3s9QhKlowx/iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjpwfsQyLhGOiQ+M9zpiXHmL+00MB8GA1UdIwQY MBaAFILMFx49yEZxHgVuLjYkHayZSmANMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3N3WEhqM0lSbkVlQlc0dU5pUWRySmxLWUEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yMjEwYzctOTk1OS00NGY3LWFkYTYt ZWZkM2FlOTg1ZWU0LzEvZ3N3WEhqM0lSbkVlQlc0dU5pUWRySmxLWUEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yMjEwYzctOTk1OS00NGY3LWFkYTYtZWZkM2FlOTg1ZWU0 LzEvZ3N3WEhqM0lSbkVlQlc0dU5pUWRySmxLWUEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDy4X2mt PP1ApeDKtu4uH0RLrxUoms4RrUKEaU2Ni7+7SzBnaJ9CbMP4xnadbMIMYqHDGbAZ WadoSwFUzJCB7jksaaduGsAOIdn+/nbJnWQUC8BM6is8DWN/7f2MoK9OUE5UtzIp 1b+oP+d2/zFVE4vKRHBd29kSqQJxpFilaI7QOjucz+BbWpQelG+PT8uAKI+KxEMV ufoMkHE1O2aegI7+713sZ+kpR3up8zKYJaq6L7XxjSo9rBh5GC/P0CnXN+e/rRGN R6ziAkgUDlN45omYR16Z9nLvLHicC0cpoa1HHzsDS1nXZQxMz92JiQxuoNKW1msY E77XBl6Zgjwcyg== -----END CERTIFICATE-----Generated at Thu Dec 18 15:40:38 2025 by rpki-client