This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft File: GhSy7j_ZgZQB2sukPsCsIAspWcA.mft (raw, json) Hash identifier: UoSl+R986NRfgwpa2rFWwMaYNsjjcT+W9+rKCvvaJvc= Subject key identifier: 7D:57:B2:3C:E6:47:DC:B9:E6:3E:5A:45:DD:AC:6C:BB:4F:91:B7:01 Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0 Certificate issuer: /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0 Certificate serial: 019AF23FBE341202A8398B36CBF25A4E1F0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft Manifest number: 083C Signing time: Sat 06 Dec 2025 06:00:54 +0000 Manifest this update: Sat 06 Dec 2025 06:00:54 +0000 Manifest next update: Sun 07 Dec 2025 06:00:54 +0000 Files and hashes: 1: GhSy7j_ZgZQB2sukPsCsIAspWcA.crl (hash: iwqznzziudectHTsU0OK07L/OeUmfBqRyvdRbvszzi4=) 2: YdrEYumUdtVM8J8IIs8UcIvimLU.roa (hash: Q1VxicqBbCeOUqKh1Ex9vJAFuLnRZwsg3d3+Cv9fZao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:be:34:12:02:a8:39:8b:36:cb:f2:5a:4e:1f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0 Validity Not Before: Dec 6 06:00:54 2025 GMT Not After : Dec 7 06:00:54 2025 GMT Subject: CN=7d57b23ce647dcb9e63e5a45ddac6cbb4f91b701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:27:04:ae:6c:07:24:ce:09:c6:f4:9c:c2:ab: f9:bf:c9:1a:70:14:e9:6f:ff:a3:8c:a6:2e:02:cf: eb:a0:5a:d6:bd:b4:e2:e3:2c:a5:78:69:0c:e8:bf: 56:6a:96:6f:32:1b:62:5e:dd:3d:dc:b2:53:52:07: 13:78:f4:01:9b:aa:a6:c2:6c:16:72:e7:94:c1:39: f1:aa:85:2d:1e:35:3c:dc:3d:c1:d9:d5:34:e6:9d: c1:84:24:14:bc:90:b7:9b:41:a3:43:3b:fd:04:e4: ad:38:4a:0a:15:38:54:ea:a0:a6:c3:09:95:53:e3: a5:5e:92:e6:da:e8:41:ee:4f:a4:63:36:09:42:28: b3:dc:00:c1:0f:2d:c0:2e:e8:31:b8:6c:47:b1:65: cf:60:a6:1c:4f:d4:13:6b:c9:e8:27:38:19:3f:7b: 00:9a:18:d1:f3:81:fb:be:79:32:f8:91:f3:6f:50: 9a:59:92:f3:4f:33:41:6d:ca:bb:a0:94:be:52:40: 13:8f:7c:c3:48:61:0b:49:1c:45:a3:8a:94:25:9d: cc:95:2a:13:b8:ee:52:0b:4b:2a:aa:82:18:7d:09: 70:c9:2e:a9:8a:ba:6d:17:bf:d7:e2:02:8c:5a:97: 70:62:8e:0c:6d:1f:f7:bb:a1:73:35:b4:d2:80:50: db:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:57:B2:3C:E6:47:DC:B9:E6:3E:5A:45:DD:AC:6C:BB:4F:91:B7:01 X509v3 Authority Key Identifier: keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e7:87:54:18:70:6d:a0:86:fe:0b:ec:a8:37:ce:66:93:e7: 0f:b6:7c:7f:d9:7b:47:31:e6:5e:4b:f4:f4:48:cf:e6:b8:a2: c9:67:11:b0:03:47:e6:d9:e8:3b:76:76:22:4b:33:d9:dc:e4: 56:13:c6:13:eb:72:30:4e:99:5f:d6:07:6f:f1:cc:9c:8e:b1: 31:44:18:67:c0:03:e9:db:34:fb:23:c4:17:89:7b:7b:ea:f9: 05:4a:1b:19:00:de:01:ae:54:09:39:a5:58:3c:74:e4:fe:2c: c9:f1:28:eb:13:0d:5c:20:85:e4:1d:1c:59:80:44:77:17:1e: eb:02:7d:22:31:ba:27:d2:58:94:0f:0b:94:5b:3e:76:d3:6b: 90:71:c3:60:1b:45:b7:28:1b:3c:cc:bf:22:3a:6b:c0:4f:c1: 7c:08:78:9b:c8:28:06:73:45:55:52:99:e0:68:75:c9:d7:48: 5b:57:e7:f7:ee:71:50:c8:d3:03:ac:70:10:1b:45:92:93:fa: 20:b5:2f:96:47:dc:97:e7:bf:06:21:a5:3a:57:d9:12:29:16: d7:d8:d7:69:15:2c:78:cb:9e:da:55:22:89:1c:6b:af:32:4a: a7:b0:32:df:9c:55:02:62:8b:ad:4a:74:e8:43:66:bd:f4:2d: e5:f8:86:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP740EgKoOYs2y/JaTh8KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMTRiMmVlM2ZkOTgxOTQwMWRhY2JhNDNlYzBhYzIwMGIy OTU5YzAwHhcNMjUxMjA2MDYwMDU0WhcNMjUxMjA3MDYwMDU0WjAzMTEwLwYDVQQD Eyg3ZDU3YjIzY2U2NDdkY2I5ZTYzZTVhNDVkZGFjNmNiYjRmOTFiNzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsycErmwHJM4JxvScwqv5v8kacBTp b/+jjKYuAs/roFrWvbTi4yyleGkM6L9WapZvMhtiXt093LJTUgcTePQBm6qmwmwW cueUwTnxqoUtHjU83D3B2dU05p3BhCQUvJC3m0GjQzv9BOStOEoKFThU6qCmwwmV U+OlXpLm2uhB7k+kYzYJQiiz3ADBDy3ALugxuGxHsWXPYKYcT9QTa8noJzgZP3sA mhjR84H7vnky+JHzb1CaWZLzTzNBbcq7oJS+UkATj3zDSGELSRxFo4qUJZ3MlSoT uO5SC0sqqoIYfQlwyS6pirptF7/X4gKMWpdwYo4MbR/3u6FzNbTSgFDbEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1XsjzmR9y55j5aRd2sbLtPkbcBMB8GA1UdIwQY MBaAFBoUsu4/2YGUAdrLpD7ArCALKVnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDct ZmRhOWNkYzkwZmUzLzEvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDctZmRhOWNkYzkwZmUz LzEvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+eHVBhw baCG/gvsqDfOZpPnD7Z8f9l7RzHmXkv09EjP5riiyWcRsANH5tnoO3Z2Iksz2dzk VhPGE+tyME6ZX9YHb/HMnI6xMUQYZ8AD6ds0+yPEF4l7e+r5BUobGQDeAa5UCTml WDx05P4syfEo6xMNXCCF5B0cWYBEdxce6wJ9IjG6J9JYlA8LlFs+dtNrkHHDYBtF tygbPMy/IjprwE/BfAh4m8goBnNFVVKZ4Gh1yddIW1fn9+5xUMjTA6xwEBtFkpP6 ILUvlkfcl+e/BiGlOlfZEikW19jXaRUseMue2lUiiRxrrzJKp7Ay35xVAmKLrUp0 6ENmvfQt5fiGwg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:24 2025 by rpki-client