This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft File: gs1f087z4cqiC7ph-i1RtrlOtU0.mft (raw, json) Hash identifier: kgQZSMBlg6pMKVkyUBGzHXq7/KeOQZcHENnOg9/LBno= Subject key identifier: 76:34:5F:FB:1C:46:D4:BB:6E:E8:EA:02:CC:41:A8:11:C9:6E:E2:DF Authority key identifier: 82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D Certificate issuer: /CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d Certificate serial: 019AF31C343C6676C91ED7F30E3C94AC07C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft Manifest number: 08DE Signing time: Sat 06 Dec 2025 10:01:42 +0000 Manifest this update: Sat 06 Dec 2025 10:01:42 +0000 Manifest next update: Sun 07 Dec 2025 10:01:42 +0000 Files and hashes: 1: 6-Zj3bcyCjNacB1xPlmd-41FIz0.roa (hash: A56X5AQbB29BB1sjg1qgfONBr80piND7T2p/Wos86gU=) 2: gs1f087z4cqiC7ph-i1RtrlOtU0.crl (hash: lkzOOvqrwQCCEpJl+//NHBcfkab6b3wovP8JBPpgU/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:34:3c:66:76:c9:1e:d7:f3:0e:3c:94:ac:07:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d Validity Not Before: Dec 6 10:01:42 2025 GMT Not After : Dec 7 10:01:42 2025 GMT Subject: CN=76345ffb1c46d4bb6ee8ea02cc41a811c96ee2df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:95:6f:f9:84:a5:2e:54:2f:05:06:fd:42: c2:49:13:e0:d5:58:99:62:bf:7b:92:4b:f2:c1:57: 26:2d:dc:3a:af:d2:9a:41:a9:86:e8:d0:0e:aa:64: d5:de:de:c1:ce:36:50:e2:7c:59:f7:c0:9b:d9:c3: 6a:b2:22:44:3a:3c:c7:38:b0:f5:a0:c0:3b:60:f1: 57:95:23:2a:5a:61:ca:c9:f3:30:24:3b:29:bd:b0: 08:d6:ca:2b:dd:d6:47:74:58:68:7c:f2:5a:57:fa: 21:ab:f7:6a:9d:41:26:8a:18:39:24:cc:0c:72:bd: 19:7d:86:c9:75:27:36:a0:c4:00:d2:50:26:37:74: 17:f2:fc:99:44:88:17:51:a5:b6:72:ff:37:1b:ff: 32:5a:bc:69:d5:ea:4e:55:bd:a4:f9:eb:24:b9:24: e4:d2:1d:b0:f8:d7:4e:bf:84:62:4c:96:82:62:50: 50:ca:c2:d6:e6:66:fe:d2:9c:64:27:61:29:d5:41: b0:80:7b:f9:b1:66:04:2c:52:5a:9a:da:c3:b6:73: de:6e:d6:05:c4:c4:96:95:ee:09:65:6b:4c:37:2b: 98:06:ee:8f:cb:f8:42:76:a8:34:76:bf:20:7f:48: 60:ec:a5:d6:63:b9:51:5d:48:16:24:41:cf:ae:5f: ff:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:34:5F:FB:1C:46:D4:BB:6E:E8:EA:02:CC:41:A8:11:C9:6E:E2:DF X509v3 Authority Key Identifier: keyid:82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:23:94:b4:e8:28:43:59:68:2a:75:15:35:3d:8c:d7:4a:29: 85:c5:84:75:c0:63:9f:f1:4c:25:26:db:70:f9:1a:ba:32:90: 7e:b2:0e:c0:94:44:ac:ed:77:96:4a:18:ee:6d:93:23:75:97: 6a:b0:0f:ba:1d:37:f1:c7:f0:9c:24:bc:bc:43:35:f8:65:55: 9f:72:2b:4d:fa:c8:32:ff:eb:b2:7e:9c:f8:09:40:7b:1a:12: dd:fa:5a:49:c1:af:59:b5:26:11:c9:cc:0d:5f:27:fa:6b:4b: bb:3a:ac:dd:5e:60:17:96:12:be:d8:c1:f4:9a:81:49:77:8a: 68:7e:92:67:c6:de:e7:88:bb:07:f5:4a:d1:99:dd:e4:b2:af: cb:12:ca:d1:88:8e:55:00:f6:ca:8c:d3:76:44:63:9a:55:22: 22:b4:5d:1e:fe:c2:12:a0:d3:91:12:cc:80:df:65:b1:d0:62: e6:2d:14:a5:4c:41:71:38:ff:b7:60:6d:41:e2:8d:11:0a:e2: 0f:ab:84:d2:af:f9:6b:e8:09:52:9e:10:b6:a6:a7:5c:9d:8f: 34:80:f5:a6:99:b9:5d:e3:1e:f4:98:56:16:df:8a:b2:50:a0: 9e:87:3b:4f:5d:ff:16:69:4e:51:94:58:9d:e8:f2:0f:03:11: 19:6c:83:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDQ8ZnbJHtfzDjyUrAfJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyY2Q1ZmQzY2VmM2UxY2FhMjBiYmE2MWZhMmQ1MWI2Yjk0 ZWI1NGQwHhcNMjUxMjA2MTAwMTQyWhcNMjUxMjA3MTAwMTQyWjAzMTEwLwYDVQQD Eyg3NjM0NWZmYjFjNDZkNGJiNmVlOGVhMDJjYzQxYTgxMWM5NmVlMmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRiVb/mEpS5ULwUG/ULCSRPg1ViZ Yr97kkvywVcmLdw6r9KaQamG6NAOqmTV3t7BzjZQ4nxZ98Cb2cNqsiJEOjzHOLD1 oMA7YPFXlSMqWmHKyfMwJDspvbAI1sor3dZHdFhofPJaV/ohq/dqnUEmihg5JMwM cr0ZfYbJdSc2oMQA0lAmN3QX8vyZRIgXUaW2cv83G/8yWrxp1epOVb2k+eskuSTk 0h2w+NdOv4RiTJaCYlBQysLW5mb+0pxkJ2Ep1UGwgHv5sWYELFJamtrDtnPebtYF xMSWle4JZWtMNyuYBu6Py/hCdqg0dr8gf0hg7KXWY7lRXUgWJEHPrl//dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHY0X/scRtS7bujqAsxBqBHJbuLfMB8GA1UdIwQY MBaAFILNX9PO8+HKogu6YfotUba5TrVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3MxZjA4N3o0Y3FpQzdwaC1pMVJ0cmxPdFUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MzZlNTQtZDhmZC00NWVmLWJlNjAt ZjUyMzA2ZWViNzIyLzEvZ3MxZjA4N3o0Y3FpQzdwaC1pMVJ0cmxPdFUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS81MzZlNTQtZDhmZC00NWVmLWJlNjAtZjUyMzA2ZWViNzIy LzEvZ3MxZjA4N3o0Y3FpQzdwaC1pMVJ0cmxPdFUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyOUtOgo Q1loKnUVNT2M10ophcWEdcBjn/FMJSbbcPkaujKQfrIOwJRErO13lkoY7m2TI3WX arAPuh038cfwnCS8vEM1+GVVn3IrTfrIMv/rsn6c+AlAexoS3fpaScGvWbUmEcnM DV8n+mtLuzqs3V5gF5YSvtjB9JqBSXeKaH6SZ8be54i7B/VK0Znd5LKvyxLK0YiO VQD2yozTdkRjmlUiIrRdHv7CEqDTkRLMgN9lsdBi5i0UpUxBcTj/t2BtQeKNEQri D6uE0q/5a+gJUp4QtqanXJ2PNID1ppm5XeMe9JhWFt+KslCgnoc7T13/FmlOUZRY nejyDwMRGWyDDA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:51:55 2025 by rpki-client