This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft File: gswXHj3IRnEeBW4uNiQdrJlKYA0.mft (raw, json) Hash identifier: BlRufrm+a50is8dsv/3CgN3R4xkef1YCxYvTi2g6XuM= Subject key identifier: 4E:00:D0:26:95:24:CC:B8:F6:A1:D7:1C:5D:39:F2:0E:52:B9:7F:98 Authority key identifier: 82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D Certificate issuer: /CN=82cc171e3dc846711e056e2e36241dac994a600d Certificate serial: 019AF31B46DD85198B88C0FF8F37C9B580E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 10:00:42 +0000 Manifest this update: Sat 06 Dec 2025 10:00:42 +0000 Manifest next update: Sun 07 Dec 2025 10:00:42 +0000 Files and hashes: 1: JjOh7wV3uoOnT6pZLsppbv_LAZ8.roa (hash: QPSPPNn3Qn++fdP63nXuDi3yMhHz0vKFIROySBvf1mk=) 2: gswXHj3IRnEeBW4uNiQdrJlKYA0.crl (hash: ixoVPwy/mZfGvbu7QPZe8q1+owSOZaLU+qlTnW1e/Z4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.crl rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:46:dd:85:19:8b:88:c0:ff:8f:37:c9:b5:80:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82cc171e3dc846711e056e2e36241dac994a600d Validity Not Before: Dec 6 10:00:42 2025 GMT Not After : Dec 7 10:00:42 2025 GMT Subject: CN=4e00d0269524ccb8f6a1d71c5d39f20e52b97f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f3:aa:86:68:53:ce:79:4c:72:da:3c:57:b1: b7:e6:16:0b:81:dd:cd:38:92:69:5e:fb:ba:17:4c: 44:e4:b9:ca:67:6f:c3:31:58:9c:46:d4:da:23:6e: 9f:7e:9b:c2:0b:f8:98:c9:a9:49:b3:41:00:c0:59: 88:86:1e:0a:df:a2:b0:ee:59:af:93:2f:d4:5f:f6: 8f:7c:73:3d:96:ef:a4:86:a0:4c:3c:2c:1c:75:25: 94:21:da:bd:28:b8:f7:e7:19:72:2f:d4:c3:b9:ff: a7:b3:e7:99:a2:c8:61:87:56:94:fb:ed:e8:b8:0f: 86:3a:3b:d6:f3:31:cf:d4:69:cf:ef:0c:35:a3:80: 3b:83:a9:b3:ee:f8:f3:bb:28:74:9a:02:ab:40:4a: 49:44:c7:48:59:2c:d1:9b:76:bc:b1:6e:09:9b:3c: 54:2d:3f:da:23:6d:66:da:9b:f9:cd:70:81:ea:40: f2:c8:ad:23:8f:34:03:08:58:e3:87:44:45:d0:29: 6a:ad:9d:f4:2f:b3:e8:11:e9:af:bc:fb:09:92:56: 32:0c:03:52:70:bb:ee:45:8d:87:5e:41:5d:b6:0f: a1:74:a2:63:d0:55:53:d2:26:30:8d:10:b7:9d:cb: 9b:99:03:54:65:4b:28:ff:ee:3c:7a:ae:7b:54:02: 44:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:00:D0:26:95:24:CC:B8:F6:A1:D7:1C:5D:39:F2:0E:52:B9:7F:98 X509v3 Authority Key Identifier: keyid:82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:f1:45:07:b1:df:35:8c:e1:2e:fb:3c:9e:1d:b6:5e:74:30: 93:11:fc:e0:cf:43:e6:cc:5e:64:37:60:09:83:bf:39:5c:00: 05:57:6b:1a:66:dd:b7:1e:45:6d:f4:d2:35:5e:38:70:ee:94: e2:5c:66:5d:d5:84:66:4b:a2:1c:df:63:0a:b1:9f:fc:fe:3c: 1c:e1:47:42:e5:7d:31:a1:35:e9:00:1a:f3:58:4c:7d:45:b4: b2:63:34:85:2f:cc:ef:c1:b5:57:06:69:ac:fd:dd:92:3f:a0: 06:3d:00:f5:c6:53:3b:55:55:0d:ca:23:14:1f:f3:f0:50:40: 1e:20:e4:7f:6b:6e:d4:cb:24:07:1a:9c:9d:4c:d7:f5:04:79: 35:2b:08:d5:bc:60:f2:b5:3e:a3:4a:e0:16:cd:18:ec:2f:b1: 6c:97:b6:28:5e:72:8c:d4:b8:0c:6c:48:11:fe:f5:de:70:01: 94:f5:30:ce:21:05:10:30:6d:95:c8:d8:ba:2a:4d:e8:fc:b9: 63:ee:92:8b:b9:f7:18:ff:7d:3a:89:15:52:cc:62:ed:ed:96: f1:4a:ec:9b:b1:bd:fe:b1:f6:0a:36:13:ed:c3:c4:5f:8c:49: 78:0a:c6:9b:fe:a3:68:9c:05:65:72:85:b9:86:78:b5:3b:41: 49:38:b8:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0bdhRmLiMD/jzfJtYDiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyY2MxNzFlM2RjODQ2NzExZTA1NmUyZTM2MjQxZGFjOTk0 YTYwMGQwHhcNMjUxMjA2MTAwMDQyWhcNMjUxMjA3MTAwMDQyWjAzMTEwLwYDVQQD Eyg0ZTAwZDAyNjk1MjRjY2I4ZjZhMWQ3MWM1ZDM5ZjIwZTUyYjk3Zjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvOqhmhTznlMcto8V7G35hYLgd3N OJJpXvu6F0xE5LnKZ2/DMVicRtTaI26ffpvCC/iYyalJs0EAwFmIhh4K36Kw7lmv ky/UX/aPfHM9lu+khqBMPCwcdSWUIdq9KLj35xlyL9TDuf+ns+eZoshhh1aU++3o uA+GOjvW8zHP1GnP7ww1o4A7g6mz7vjzuyh0mgKrQEpJRMdIWSzRm3a8sW4JmzxU LT/aI21m2pv5zXCB6kDyyK0jjzQDCFjjh0RF0ClqrZ30L7PoEemvvPsJklYyDANS cLvuRY2HXkFdtg+hdKJj0FVT0iYwjRC3ncubmQNUZUso/+48eq57VAJERwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4A0CaVJMy49qHXHF058g5SuX+YMB8GA1UdIwQY MBaAFILMFx49yEZxHgVuLjYkHayZSmANMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3N3WEhqM0lSbkVlQlc0dU5pUWRySmxLWUEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yMjEwYzctOTk1OS00NGY3LWFkYTYt ZWZkM2FlOTg1ZWU0LzEvZ3N3WEhqM0lSbkVlQlc0dU5pUWRySmxLWUEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yMjEwYzctOTk1OS00NGY3LWFkYTYtZWZkM2FlOTg1ZWU0 LzEvZ3N3WEhqM0lSbkVlQlc0dU5pUWRySmxLWUEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfFFB7Hf NYzhLvs8nh22XnQwkxH84M9D5sxeZDdgCYO/OVwABVdrGmbdtx5FbfTSNV44cO6U 4lxmXdWEZkuiHN9jCrGf/P48HOFHQuV9MaE16QAa81hMfUW0smM0hS/M78G1VwZp rP3dkj+gBj0A9cZTO1VVDcojFB/z8FBAHiDkf2tu1MskBxqcnUzX9QR5NSsI1bxg 8rU+o0rgFs0Y7C+xbJe2KF5yjNS4DGxIEf713nABlPUwziEFEDBtlcjYuipN6Py5 Y+6Si7n3GP99OokVUsxi7e2W8Ursm7G9/rH2CjYT7cPEX4xJeArGm/6jaJwFZXKF uYZ4tTtBSTi47w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:41 2025 by rpki-client