This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft File: GsvdANJ7iovvyGbK83jxkCdoR2k.mft (raw, json) Hash identifier: jDMvCYuWQpaLIZhnSQT5OsxLpdgxTDCjbGdy/0w4Omc= Subject key identifier: 3F:93:66:4A:2B:F6:26:6B:90:16:C2:16:0C:0D:31:A5:93:31:13:AC Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69 Certificate issuer: /CN=1acbdd00d27b8a8befc866caf378f19027684769 Certificate serial: 019AF46518243F67B0A8160E44C692E29AD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft Manifest number: 0A72 Signing time: Sat 06 Dec 2025 16:00:57 +0000 Manifest this update: Sat 06 Dec 2025 16:00:57 +0000 Manifest next update: Sun 07 Dec 2025 16:00:57 +0000 Files and hashes: 1: GsvdANJ7iovvyGbK83jxkCdoR2k.crl (hash: HSWYPp4N5ss5i4A4tZrvf+2BY12ZpZ2HCltwx8MJjBo=) 2: JLeYM1Nb1WkxGedHLrl3D2YAcD0.roa (hash: kpcTVdbw29GtZxZaBOoPfJn9eSPlvRnFiHJuCzaGNU4=) 3: izbCDxefHi81Ceh8v70jil8PjrA.roa (hash: G81Vq+SeFhUUiPynuXGPGqpCxUEFG0haFucomHcGaT8=) 4: uvZ9FoblIzzQH1DQjOvcBhSKeZU.roa (hash: knG2zE+cphfPly9s92WP/7hjIDgEXmoUhOUrwgfF5vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:18:24:3f:67:b0:a8:16:0e:44:c6:92:e2:9a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769 Validity Not Before: Dec 6 16:00:57 2025 GMT Not After : Dec 7 16:00:57 2025 GMT Subject: CN=3f93664a2bf6266b9016c2160c0d31a5933113ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b0:2f:ef:7b:c4:52:5e:07:1b:29:14:f4:73: 1b:1c:f8:05:70:81:0c:1d:90:01:a2:99:69:8f:c8: 90:d1:ac:eb:16:21:e1:56:4d:29:02:98:e3:e4:5b: 77:4c:e4:1b:76:be:33:b4:d9:7a:6b:9a:e5:76:59: fe:8b:3d:91:07:f9:06:d3:c4:ff:c1:7a:f2:79:2d: 58:3e:72:1b:e6:16:50:d7:21:c5:73:e7:b4:0e:17: 47:ae:bb:68:12:64:4f:a4:d4:6a:b7:f3:75:37:f2: 9b:0f:75:2d:eb:db:b3:b9:ed:95:66:6d:9f:fa:9f: c3:8d:12:b6:aa:64:19:55:66:7b:b1:d1:15:b4:38: 08:c8:16:73:99:44:28:d4:94:d4:d6:a7:ed:59:a5: d3:46:c0:d1:91:1a:d9:4b:c3:a1:7f:6a:e8:19:8e: ed:6b:02:b0:48:3a:f6:3b:38:0c:84:cd:4a:42:38: 9b:9d:fc:43:40:62:7d:54:76:bc:a6:e1:9b:96:a8: 15:d7:67:10:2c:dd:29:a9:62:c1:21:58:f7:37:9a: db:8d:11:f9:74:d0:44:38:ec:2a:c6:b1:e4:ab:83: e6:77:58:85:0a:cd:1c:bf:dd:5f:86:24:49:bc:a7: ce:75:ff:35:0e:8f:b4:61:46:9c:f1:dc:0c:27:44: 41:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:93:66:4A:2B:F6:26:6B:90:16:C2:16:0C:0D:31:A5:93:31:13:AC X509v3 Authority Key Identifier: keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ef:5d:9c:39:4b:08:22:77:41:18:22:37:6b:fb:b6:7d:a6: fd:07:da:4c:72:ff:95:42:d2:34:01:58:85:5c:e4:61:3a:44: fc:ab:bd:30:1a:d5:91:3f:17:bc:03:31:d7:62:9a:ee:f2:0d: c2:97:d6:ea:2d:a6:3d:0b:be:59:45:5d:69:61:ca:e7:3f:28: 64:2e:0b:74:52:7e:a3:6f:66:91:6d:29:97:6d:ec:b7:97:18: 3c:3d:c4:f5:d4:e3:51:5e:bf:64:17:89:e1:51:f2:4a:2b:97: aa:8c:ee:1f:1d:a2:78:78:49:39:da:6b:fc:9d:40:cb:8f:89: b0:b6:48:a0:d3:23:3a:5e:8f:70:4a:73:77:53:2e:fc:01:7a: 9e:ca:18:ce:df:80:ee:88:eb:fe:50:64:90:84:9d:ff:7a:14: 76:1d:ba:84:7f:7e:8e:64:c4:7d:d1:f1:07:04:9f:13:74:2d: 02:95:d3:ae:c8:26:24:36:90:f5:ec:4e:4a:ad:c6:55:ce:f4: 5f:5c:45:fd:a3:b7:04:9d:34:10:47:30:7d:4d:fb:92:2e:66: 73:fd:b5:79:0f:de:5a:23:c3:5b:ce:32:fd:c7:0c:56:76:6f: 25:81:ee:20:a4:5a:9e:72:0e:b7:8b:b5:28:29:a4:f6:47:ea: 44:d3:e1:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZRgkP2ewqBYORMaS4prQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2JkZDAwZDI3YjhhOGJlZmM4NjZjYWYzNzhmMTkwMjc2 ODQ3NjkwHhcNMjUxMjA2MTYwMDU3WhcNMjUxMjA3MTYwMDU3WjAzMTEwLwYDVQQD EygzZjkzNjY0YTJiZjYyNjZiOTAxNmMyMTYwYzBkMzFhNTkzMzExM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LAv73vEUl4HGykU9HMbHPgFcIEM HZABoplpj8iQ0azrFiHhVk0pApjj5Ft3TOQbdr4ztNl6a5rldln+iz2RB/kG08T/ wXryeS1YPnIb5hZQ1yHFc+e0DhdHrrtoEmRPpNRqt/N1N/KbD3Ut69uzue2VZm2f +p/DjRK2qmQZVWZ7sdEVtDgIyBZzmUQo1JTU1qftWaXTRsDRkRrZS8Ohf2roGY7t awKwSDr2OzgMhM1KQjibnfxDQGJ9VHa8puGblqgV12cQLN0pqWLBIVj3N5rbjRH5 dNBEOOwqxrHkq4Pmd1iFCs0cv91fhiRJvKfOdf81Do+0YUac8dwMJ0RBqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+TZkor9iZrkBbCFgwNMaWTMROsMB8GA1UdIwQY MBaAFBrL3QDSe4qL78hmyvN48ZAnaEdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQt OWY5NTM2YmIyYzM3LzEvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQtOWY5NTM2YmIyYzM3 LzEvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACu9dnDlL CCJ3QRgiN2v7tn2m/QfaTHL/lULSNAFYhVzkYTpE/Ku9MBrVkT8XvAMx12Ka7vIN wpfW6i2mPQu+WUVdaWHK5z8oZC4LdFJ+o29mkW0pl23st5cYPD3E9dTjUV6/ZBeJ 4VHySiuXqozuHx2ieHhJOdpr/J1Ay4+JsLZIoNMjOl6PcEpzd1Mu/AF6nsoYzt+A 7ojr/lBkkISd/3oUdh26hH9+jmTEfdHxBwSfE3QtApXTrsgmJDaQ9exOSq3GVc70 X1xF/aO3BJ00EEcwfU37ki5mc/21eQ/eWiPDW84y/ccMVnZvJYHuIKRannIOt4u1 KCmk9kfqRNPhAw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:47 2025 by rpki-client