This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft File: 1-GSAgviI1Al6xM26hGYLkw91A18.mft (raw, json) Hash identifier: L66dU2BbaRaKQTKKAMMtY7o0W8JGKnWmcBfI+0Ir+vo= Subject key identifier: AC:F5:4C:74:05:29:19:61:7A:62:9A:B8:E7:BA:26:FA:D2:7E:7B:D0 Authority key identifier: F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F Certificate issuer: /CN=f8648082f888d4097ac4cdba84660b930f75035f Certificate serial: 019AF1D24BC1C6DF549A6CA57E371826C98B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft Manifest number: 17 Signing time: Sat 06 Dec 2025 04:01:22 +0000 Manifest this update: Sat 06 Dec 2025 04:01:22 +0000 Manifest next update: Sun 07 Dec 2025 04:01:22 +0000 Files and hashes: 1: 1-GSAgviI1Al6xM26hGYLkw91A18.crl (hash: D1TE+YGhvLrSRE9//0pB35MUPHwvN7TgbU7JCMZPgiM=) 2: Y2VJeHf8rSYFPkGAH0xVhAWSCxQ.roa (hash: 3d5t3srO9iC/BdcE17sy3EhUqKaNXX1Bje+/wHHOx3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4b:c1:c6:df:54:9a:6c:a5:7e:37:18:26:c9:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8648082f888d4097ac4cdba84660b930f75035f Validity Not Before: Dec 6 04:01:22 2025 GMT Not After : Dec 7 04:01:22 2025 GMT Subject: CN=acf54c74052919617a629ab8e7ba26fad27e7bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c4:66:7e:0d:32:14:e8:84:23:38:5a:3c:24: 56:23:ee:d9:5f:50:ab:f9:7e:bb:80:b0:50:ca:d4: 22:00:63:3b:61:41:54:d9:96:32:cc:b7:ac:74:5d: ab:e7:da:0d:a6:60:a2:31:b5:5b:d4:d8:36:60:0d: f6:79:22:48:c8:cb:1b:d0:cc:46:35:b4:12:2b:43: 7e:ab:f9:86:3f:de:0e:26:0e:d8:66:a8:f5:76:91: 0f:38:30:c6:f3:3e:49:b2:f6:13:2b:01:3b:61:14: 4c:3a:21:3f:46:87:dc:a5:be:fb:a1:40:eb:46:c7: bf:9e:a8:15:7e:0a:e7:d7:0e:34:9e:bf:ab:59:ee: 21:0a:90:a5:4d:5a:62:d8:e0:28:be:d8:e0:ac:a7: 66:09:fb:17:87:ad:63:59:61:69:78:b4:fc:e3:7d: 2f:ac:66:bd:32:e8:8f:85:71:7d:19:c2:48:76:13: 22:ac:77:e0:e6:d5:48:36:fc:6d:6f:60:30:c7:dd: f4:b1:ee:b6:28:00:77:14:62:9e:60:28:ae:66:96: 03:f7:7e:e4:c9:95:9b:4d:fd:f0:0e:97:d8:be:bf: d3:60:9a:31:4b:d9:21:3f:e8:60:30:32:d7:f8:a0: 2d:1d:9b:3c:7e:94:dc:9b:91:98:ce:20:b7:bb:c6: 51:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F5:4C:74:05:29:19:61:7A:62:9A:B8:E7:BA:26:FA:D2:7E:7B:D0 X509v3 Authority Key Identifier: keyid:F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:fa:1b:d1:dc:7c:dd:1b:09:4a:f0:e5:a1:6a:42:55:8c:40: c0:fc:4d:e0:f1:47:a8:61:b3:54:5e:75:7a:a8:66:58:e0:29: f9:74:03:4e:fb:79:82:08:23:1e:f8:4e:6f:cd:99:54:da:9b: b8:6b:67:ee:22:81:57:fd:93:5c:20:60:e5:ca:4f:9c:6e:fb: 9a:63:ce:5a:42:1c:04:6c:3f:1e:ea:3a:f9:3e:a4:b9:7f:1a: 9f:89:5e:7b:48:81:0f:19:33:64:7a:d8:46:38:af:11:61:4a: 94:ab:aa:88:7e:84:09:16:a4:59:3b:ff:d4:f0:ea:0b:5a:9c: c2:e7:9d:bf:34:16:7a:bf:a7:58:0d:ba:bc:c3:bd:bf:11:8b: 70:03:12:57:02:4d:6f:5d:c5:d5:98:02:fe:a3:ff:02:2b:a1: b3:73:de:dc:6a:8b:47:f5:2b:e3:a9:e3:a0:6f:02:bb:bb:79: 96:85:1d:f0:15:6c:f4:4b:bc:5b:39:fd:4d:cf:37:c2:24:38: 41:89:7c:70:67:ad:18:26:66:f5:0e:0d:15:6a:71:fa:75:e3: a7:a2:91:e1:8e:e3:fe:23:52:8b:3e:c6:ea:68:f1:9d:0e:11: 4e:20:ee:66:7b:91:93:db:0f:5b:0b:4f:50:2d:1b:79:ee:bf: 5f:46:12:2d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrx0kvBxt9UmmylfjcYJsmLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjQ4MDgyZjg4OGQ0MDk3YWM0Y2RiYTg0NjYwYjkzMGY3 NTAzNWYwHhcNMjUxMjA2MDQwMTIyWhcNMjUxMjA3MDQwMTIyWjAzMTEwLwYDVQQD EyhhY2Y1NGM3NDA1MjkxOTYxN2E2MjlhYjhlN2JhMjZmYWQyN2U3YmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsRmfg0yFOiEIzhaPCRWI+7ZX1Cr +X67gLBQytQiAGM7YUFU2ZYyzLesdF2r59oNpmCiMbVb1Ng2YA32eSJIyMsb0MxG NbQSK0N+q/mGP94OJg7YZqj1dpEPODDG8z5JsvYTKwE7YRRMOiE/Rofcpb77oUDr Rse/nqgVfgrn1w40nr+rWe4hCpClTVpi2OAovtjgrKdmCfsXh61jWWFpeLT8430v rGa9MuiPhXF9GcJIdhMirHfg5tVINvxtb2Awx930se62KAB3FGKeYCiuZpYD937k yZWbTf3wDpfYvr/TYJoxS9khP+hgMDLX+KAtHZs8fpTcm5GYziC3u8ZRgwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKz1THQFKRlhemKauOe6JvrSfnvQMB8GA1UdIwQY MBaAFPhkgIL4iNQJesTNuoRmC5MPdQNfMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HU0FndmlJMUFsNnhNMjZoR1lMa3c5MUExOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvYjY2MTJiLTk1M2UtNGM2Yy1hYWQw LTNhZjlhNGIwYTg3My8xLzEtR1NBZ3ZpSTFBbDZ4TTI2aEdZTGt3OTFBMTgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmL2I2NjEyYi05NTNlLTRjNmMtYWFkMC0zYWY5YTRiMGE4 NzMvMS8xLUdTQWd2aUkxQWw2eE0yNmhHWUxrdzkxQTE4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/ob 0dx83RsJSvDloWpCVYxAwPxN4PFHqGGzVF51eqhmWOAp+XQDTvt5gggjHvhOb82Z VNqbuGtn7iKBV/2TXCBg5cpPnG77mmPOWkIcBGw/Huo6+T6kuX8an4lee0iBDxkz ZHrYRjivEWFKlKuqiH6ECRakWTv/1PDqC1qcwuedvzQWer+nWA26vMO9vxGLcAMS VwJNb13F1ZgC/qP/Aiuhs3Pe3GqLR/Ur46njoG8Cu7t5loUd8BVs9Eu8Wzn9Tc83 wiQ4QYl8cGetGCZm9Q4NFWpx+nXjp6KR4Y7j/iNSiz7G6mjxnQ4RTiDuZnuRk9sP WwtPUC0bee6/X0YSLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:04 2025 by rpki-client