This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft File: GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft (raw, json) Hash identifier: VlRrL4RATSY+EG0mOaNb7gIiqg07h6b7B6odzDuu67c= Subject key identifier: 70:CB:3E:CF:08:A4:F4:8B:0D:A5:88:D1:C5:56:55:06:00:2A:2A:44 Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94 Certificate issuer: /CN=1924008415ca185b8eddedc2dcdd8d09441a7794 Certificate serial: 019AF12E335A74983D01B14B3C1766636E90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft Manifest number: 1580 Signing time: Sat 06 Dec 2025 01:02:08 +0000 Manifest this update: Sat 06 Dec 2025 01:02:08 +0000 Manifest next update: Sun 07 Dec 2025 01:02:08 +0000 Files and hashes: 1: GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl (hash: VH78NFbi/pJEuDorDPN+Dzeli88YjWvkp8yBtMNm2ps=) 2: bioMAYKF1qqrZbXGWoBChN2Rwsg.roa (hash: XBbDJ/525v0nDOlO1cf/FOJnRgOSNpcxMVq1T633zZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:33:5a:74:98:3d:01:b1:4b:3c:17:66:63:6e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794 Validity Not Before: Dec 6 01:02:08 2025 GMT Not After : Dec 7 01:02:08 2025 GMT Subject: CN=70cb3ecf08a4f48b0da588d1c5565506002a2a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:be:9c:db:68:7c:9d:ff:18:f8:9a:b1:4a:98: 60:8a:87:a6:6f:6a:8d:1e:ca:a4:8d:7c:d4:0b:01: ed:cf:8f:7f:90:99:68:7f:79:e1:0f:65:23:99:46: dd:f1:f6:ec:39:df:ff:a9:5f:40:94:0a:e3:c0:be: ed:e5:04:c1:1a:47:5a:cc:d2:67:c8:61:19:3e:c8: 32:57:ed:b7:5e:c6:95:1e:ca:f0:73:2d:f1:06:03: 13:d2:cd:65:25:9d:4e:c3:29:91:11:da:c7:28:16: 30:35:20:96:67:aa:a4:e2:3e:29:28:5c:b8:b8:65: 7b:a9:c7:de:e5:c9:f8:00:82:d5:7d:8c:d5:67:ff: 89:56:4f:36:7f:3e:f3:f6:ae:93:08:4a:26:46:36: 56:42:6f:80:90:c5:01:4a:84:a4:9d:c2:70:e6:dc: 06:52:bc:81:57:ff:53:4a:a4:e7:8e:9b:94:e0:a7: 22:1a:4a:ee:d8:93:27:09:25:c0:9b:97:5d:37:8d: c7:9a:b5:8b:82:98:d0:e4:72:19:ff:cf:4a:39:c7: c0:5d:19:ec:0e:5b:35:51:96:d4:5f:9a:be:06:94: b7:1e:05:06:11:52:27:a3:36:4c:7f:96:36:f6:26: 1c:77:48:c6:aa:00:7e:52:8d:90:3c:e5:16:54:bd: f1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CB:3E:CF:08:A4:F4:8B:0D:A5:88:D1:C5:56:55:06:00:2A:2A:44 X509v3 Authority Key Identifier: keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:e3:41:c2:d3:63:c2:35:a9:d0:f7:a0:b8:9d:cc:93:d4:5b: 29:62:05:9d:86:61:ec:5b:e0:98:42:7c:a5:ab:00:85:6f:30: e9:7e:b6:bf:97:b5:fd:79:4d:ba:28:d9:a7:de:d3:9f:3f:b3: 5b:d7:39:4b:4a:cc:8b:b5:50:80:31:ee:8b:ef:cf:44:23:c6: c2:95:12:0d:d5:d1:a2:22:b6:db:0e:06:6b:57:40:2e:b9:f3: 4d:25:0d:55:0a:cd:2f:8c:32:11:a5:5e:b4:86:57:59:0e:4d: f3:ab:59:c2:c9:f1:f8:52:0f:da:e7:50:33:5d:39:85:a6:53: cb:c1:6f:24:82:b0:f1:4c:30:de:48:e5:b6:e2:8e:e7:22:70: f9:2d:1e:8e:03:35:ef:6b:4a:c5:02:1e:65:f0:9e:48:cd:76: b2:e9:49:2f:50:52:56:8f:1f:2d:b0:69:a9:cc:9f:86:c7:17: 9e:c7:8f:d8:2d:cf:13:48:c1:6a:12:01:1f:41:d4:a9:a1:71: 05:19:5c:72:33:3e:35:e2:7a:58:29:9a:93:8e:c4:25:78:9f: de:12:60:85:9d:22:df:8a:00:57:98:46:30:ef:0f:fc:a0:16: dd:da:e2:f0:df:78:28:40:b8:48:f0:df:0b:bf:72:c5:1e:4e: dd:33:d9:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjNadJg9AbFLPBdmY26QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MjQwMDg0MTVjYTE4NWI4ZWRkZWRjMmRjZGQ4ZDA5NDQx YTc3OTQwHhcNMjUxMjA2MDEwMjA4WhcNMjUxMjA3MDEwMjA4WjAzMTEwLwYDVQQD Eyg3MGNiM2VjZjA4YTRmNDhiMGRhNTg4ZDFjNTU2NTUwNjAwMmEyYTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL6c22h8nf8Y+JqxSphgioemb2qN HsqkjXzUCwHtz49/kJlof3nhD2UjmUbd8fbsOd//qV9AlArjwL7t5QTBGkdazNJn yGEZPsgyV+23XsaVHsrwcy3xBgMT0s1lJZ1OwymREdrHKBYwNSCWZ6qk4j4pKFy4 uGV7qcfe5cn4AILVfYzVZ/+JVk82fz7z9q6TCEomRjZWQm+AkMUBSoSkncJw5twG UryBV/9TSqTnjpuU4KciGkru2JMnCSXAm5ddN43HmrWLgpjQ5HIZ/89KOcfAXRns Dls1UZbUX5q+BpS3HgUGEVInozZMf5Y29iYcd0jGqgB+Uo2QPOUWVL3xJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDLPs8IpPSLDaWI0cVWVQYAKipEMB8GA1UdIwQY MBaAFBkkAIQVyhhbjt3twtzdjQlEGneUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQt N2E4MGVkNjIxNzgxLzEvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQtN2E4MGVkNjIxNzgx LzEvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgONBwtNj wjWp0PeguJ3Mk9RbKWIFnYZh7FvgmEJ8pasAhW8w6X62v5e1/XlNuijZp97Tnz+z W9c5S0rMi7VQgDHui+/PRCPGwpUSDdXRoiK22w4Ga1dALrnzTSUNVQrNL4wyEaVe tIZXWQ5N86tZwsnx+FIP2udQM105haZTy8FvJIKw8Uww3kjltuKO5yJw+S0ejgM1 72tKxQIeZfCeSM12sulJL1BSVo8fLbBpqcyfhscXnseP2C3PE0jBahIBH0HUqaFx BRlccjM+NeJ6WCmak47EJXif3hJghZ0i34oAV5hGMO8P/KAW3dri8N94KEC4SPDf C79yxR5O3TPZwg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:49 2025 by rpki-client