This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft File: GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft (raw, json) Hash identifier: 6ieNfsGtJwTEmO6FUnhHrkccyUKxE4wz2sJTCzwZstg= Subject key identifier: 06:71:42:F4:6C:F6:B3:10:E3:05:92:7B:BF:52:46:BD:A9:3A:79:78 Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9 Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9 Certificate serial: 019B085A0FE6FB3C293B0B96E5C9DD5D5519 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft Manifest number: 176E Signing time: Wed 10 Dec 2025 13:01:18 +0000 Manifest this update: Wed 10 Dec 2025 13:01:18 +0000 Manifest next update: Thu 11 Dec 2025 13:01:18 +0000 Files and hashes: 1: GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl (hash: hLQN7e5apREKvA2WNgOzY0GnKHR/ywXlmTMsprDLf9o=) 2: MkwcxhmTqqlO9ybaQjVd3Wzx53k.roa (hash: ssoKV3keqcX11jGOWOD7O8J6pQqN7UFQxS+K2zNC/jk=) 3: s5P9ctGhSzInnfrzFBdgSAflUQE.roa (hash: Nr4M4gbzBHTv7mEYzFH6emb+JxfIUW2vC3EEtI2jw7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5a:0f:e6:fb:3c:29:3b:0b:96:e5:c9:dd:5d:55:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9 Validity Not Before: Dec 10 13:01:18 2025 GMT Not After : Dec 11 13:01:18 2025 GMT Subject: CN=067142f46cf6b310e305927bbf5246bda93a7978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:22:36:85:3a:e5:76:4e:9b:84:01:d9:d7: 94:07:f9:05:df:33:e7:ee:e3:da:1f:95:fb:1c:88: b6:f4:dc:55:4d:b7:46:0f:a3:b6:4b:69:92:08:ae: a4:db:05:8c:49:47:c5:30:e0:db:c1:9b:d0:9a:f5: bb:07:c3:42:c1:f2:f0:fb:b9:ac:c7:ab:22:01:a4: f3:3d:85:90:a8:f8:5d:2b:d8:d9:ff:1f:b8:88:75: 3e:a3:a3:51:30:40:2d:50:c9:0e:3d:b6:49:d8:fa: 5b:c8:f6:ed:51:d4:12:16:99:bd:16:dd:dc:09:2e: 18:da:21:43:3c:89:a0:fb:13:9a:7e:95:a3:d3:9e: 8b:5f:9e:d7:c3:1e:ef:15:33:e8:ec:9b:9f:30:87: 00:e4:92:5c:c9:05:0d:85:6a:5e:7a:20:ed:90:ce: 9f:54:a4:af:2a:e8:2b:b4:fb:e5:11:29:58:1d:13: 8b:d5:ee:c4:cb:cf:b4:36:8b:26:89:d4:2a:8a:1f: 55:73:b4:28:55:e7:f5:6f:be:0d:90:50:06:b8:3d: ba:b1:2c:d7:10:db:db:9c:15:e5:4b:67:7d:f9:73: 53:0a:5a:c7:fe:ea:00:72:cc:be:c0:98:69:ac:87: c1:e5:21:7a:69:d3:ba:72:3b:7b:88:ab:eb:a2:05: b9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:71:42:F4:6C:F6:B3:10:E3:05:92:7B:BF:52:46:BD:A9:3A:79:78 X509v3 Authority Key Identifier: keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:40:ba:d4:d1:56:56:8e:27:c4:e5:c3:ff:ed:2c:40:e6:49: c8:d4:5e:fe:d4:5b:fd:d9:d3:4a:f1:82:68:ad:b2:5f:8d:2f: 75:a4:7c:c0:3a:23:17:0a:f3:b3:8b:8d:1f:71:f9:61:fd:b7: e9:c4:a9:3d:bb:74:cd:f5:6f:eb:cb:72:e8:93:76:95:b1:1c: 7a:c9:1c:5b:5f:fa:e6:63:4b:c2:f7:85:24:30:ab:0a:44:e8: 51:4d:19:6d:f2:40:79:d3:4c:c4:0f:69:96:a8:98:13:f2:65: 4b:86:08:6d:60:31:73:5d:2c:ef:ff:bb:2b:5c:c6:54:aa:ba: d4:35:3b:f5:2d:7e:50:29:c8:6d:14:4d:55:28:e4:fe:be:f3: 7e:f4:e2:82:dc:3a:b4:6d:b3:9f:eb:b3:34:bb:ce:9c:1c:f2: 0e:cf:1f:be:2d:5a:14:e5:a3:bf:4f:66:72:32:9d:fc:29:2d: 6d:4f:35:8e:a9:3a:f6:f4:f3:4d:e4:52:20:71:2c:5e:f1:f6: 02:71:26:72:1e:e8:45:38:f6:2b:a1:8a:20:e2:5a:38:7e:8d: 66:5d:d8:d6:57:a1:b7:8d:30:c9:31:37:3c:0e:67:b0:f7:0b: 84:40:a4:19:c6:c4:94:67:86:e9:e4:a3:c9:20:f2:6c:34:58: a5:b5:f4:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIWg/m+zwpOwuW5cndXVUZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I4YTcwZjkwOWFlM2UxZmMxZGJkNmJkYzQyNWUwOGVl YzgxYjkwHhcNMjUxMjEwMTMwMTE4WhcNMjUxMjExMTMwMTE4WjAzMTEwLwYDVQQD EygwNjcxNDJmNDZjZjZiMzEwZTMwNTkyN2JiZjUyNDZiZGE5M2E3OTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIEiNoU65XZOm4QB2deUB/kF3zPn 7uPaH5X7HIi29NxVTbdGD6O2S2mSCK6k2wWMSUfFMODbwZvQmvW7B8NCwfLw+7ms x6siAaTzPYWQqPhdK9jZ/x+4iHU+o6NRMEAtUMkOPbZJ2PpbyPbtUdQSFpm9Ft3c CS4Y2iFDPImg+xOafpWj056LX57Xwx7vFTPo7JufMIcA5JJcyQUNhWpeeiDtkM6f VKSvKugrtPvlESlYHROL1e7Ey8+0NosmidQqih9Vc7QoVef1b74NkFAGuD26sSzX ENvbnBXlS2d9+XNTClrH/uoAcsy+wJhprIfB5SF6adO6cjt7iKvrogW5DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZxQvRs9rMQ4wWSe79SRr2pOnl4MB8GA1UdIwQY MBaAFBrLinD5Ca4+H8Hb1r3EJeCO7IG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N1S2NQa0pyajRmd2R2V3ZjUWw0STdzZ2JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iOTQ1NmUtNGU1Mi00ZGU1LWJiZDYt NjBkZTIyNGNmYTRiLzEvR3N1S2NQa0pyajRmd2R2V3ZjUWw0STdzZ2JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9iOTQ1NmUtNGU1Mi00ZGU1LWJiZDYtNjBkZTIyNGNmYTRi LzEvR3N1S2NQa0pyajRmd2R2V3ZjUWw0STdzZ2JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0C61NFW Vo4nxOXD/+0sQOZJyNRe/tRb/dnTSvGCaK2yX40vdaR8wDojFwrzs4uNH3H5Yf23 6cSpPbt0zfVv68ty6JN2lbEceskcW1/65mNLwveFJDCrCkToUU0ZbfJAedNMxA9p lqiYE/JlS4YIbWAxc10s7/+7K1zGVKq61DU79S1+UCnIbRRNVSjk/r7zfvTigtw6 tG2zn+uzNLvOnBzyDs8fvi1aFOWjv09mcjKd/CktbU81jqk69vTzTeRSIHEsXvH2 AnEmch7oRTj2K6GKIOJaOH6NZl3Y1leht40wyTE3PA5nsPcLhECkGcbElGeG6eSj ySDybDRYpbX0DQ== -----END CERTIFICATE-----Generated at Wed Dec 10 18:07:03 2025 by rpki-client