This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft File: guS0v-5FTQqkcKXAqUEDSdSh13Q.mft (raw, json) Hash identifier: q7yJmnYi0W3qBi6+dUiyF9VK5Cut0v1lbAmMM1POuf0= Subject key identifier: 4D:CE:AC:A0:8F:0D:A6:F7:E1:F6:7C:7D:75:A7:E6:0F:36:D0:E4:75 Authority key identifier: 82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74 Certificate issuer: /CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774 Certificate serial: 019AF1D1E64509B512E91B8535228ACFF027 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft Manifest number: 10AA Signing time: Sat 06 Dec 2025 04:00:56 +0000 Manifest this update: Sat 06 Dec 2025 04:00:56 +0000 Manifest next update: Sun 07 Dec 2025 04:00:56 +0000 Files and hashes: 1: guS0v-5FTQqkcKXAqUEDSdSh13Q.crl (hash: BUXzwJP+QdJQJDNnlCvPBeYsFFu5eeK0Y3ZNMprvxpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e6:45:09:b5:12:e9:1b:85:35:22:8a:cf:f0:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774 Validity Not Before: Dec 6 04:00:56 2025 GMT Not After : Dec 7 04:00:56 2025 GMT Subject: CN=4dceaca08f0da6f7e1f67c7d75a7e60f36d0e475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:23:35:64:37:b2:31:1f:0c:79:00:14:dc:ea: 12:62:5c:dd:70:f1:ce:b3:b9:67:e9:22:3f:c6:b2: a7:fc:96:00:6f:70:2e:81:38:70:03:1e:de:ce:0a: f8:84:ac:4e:d9:60:75:17:44:75:60:0d:b2:1d:76: 3c:db:46:57:a0:e6:ce:8a:dd:fa:ce:89:e2:e9:68: 65:dd:51:d5:b7:dc:37:93:4c:7e:db:53:7f:20:03: a0:9b:b2:18:c6:a1:47:4e:dd:62:b4:26:36:e5:f6: 77:d7:aa:90:35:08:12:2a:1b:57:ff:48:b2:42:73: 1e:4f:f5:9e:b5:9b:5a:11:de:39:f5:aa:48:ce:57: 82:3c:9f:75:4e:57:ff:f5:4f:d8:a6:0b:d6:66:1a: ee:5b:0f:ae:c4:b9:ae:b4:4a:92:cf:eb:0f:cb:a6: 9c:de:91:40:17:00:c7:4d:4f:87:14:41:6b:01:f1: 5e:76:2d:a7:12:c4:9c:88:fe:1b:a0:3f:bd:0c:10: c5:26:d0:0c:5f:84:37:7b:72:de:01:a5:15:20:83: 71:1e:66:1a:d4:5c:74:f4:d4:da:b0:aa:b2:e6:62: c0:af:9c:ff:b4:9b:58:9c:43:5a:d6:c7:0c:ab:6a: bc:4d:b8:7c:af:da:ec:e9:72:74:1b:a1:c5:8d:05: 60:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CE:AC:A0:8F:0D:A6:F7:E1:F6:7C:7D:75:A7:E6:0F:36:D0:E4:75 X509v3 Authority Key Identifier: keyid:82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:19:49:a2:21:52:25:df:9c:ed:cf:b7:16:52:94:cd:32:72: b8:49:f2:ed:38:ad:94:ba:e3:81:84:a4:3c:c5:af:d7:db:59: a2:aa:ac:7c:32:42:e4:42:d1:65:86:3f:58:ea:5a:4d:07:78: e7:48:38:5d:16:83:f2:b4:88:fe:7c:80:d1:fa:38:88:ac:df: 4f:b3:37:e9:5b:a2:ec:74:f0:69:93:e3:5e:27:91:be:f0:4e: d9:d8:a4:d5:05:7f:3b:c0:a9:b7:97:af:77:4a:9f:ca:2b:26: 3f:8c:f7:c2:2e:85:d3:3c:e4:66:93:6c:38:f5:be:ab:96:47: 0a:af:f3:61:39:bf:d4:bc:20:90:19:59:2f:d2:98:a1:a2:88: 06:fe:6e:d7:1a:3b:f5:32:5f:e3:3c:75:36:4c:c7:0a:4d:11: 98:c8:e8:43:7a:88:27:32:24:72:12:ad:39:c3:a9:fb:d4:69: 08:3b:f2:ec:06:db:c2:cc:b8:fd:fc:51:89:53:a0:99:3d:7f: a3:f6:50:45:29:7b:84:5f:28:90:9f:ab:ed:f7:1c:11:12:d1: 1b:58:7c:b4:aa:8b:93:c4:d6:63:f8:96:c3:49:2a:11:2b:e2: db:90:d5:60:11:39:3d:5f:04:2d:08:1f:80:14:3a:c0:72:12: 26:2a:4f:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eZFCbUS6RuFNSKKz/AnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZTRiNGJmZWU0NTRkMGFhNDcwYTVjMGE5NDEwMzQ5ZDRh MWQ3NzQwHhcNMjUxMjA2MDQwMDU2WhcNMjUxMjA3MDQwMDU2WjAzMTEwLwYDVQQD Eyg0ZGNlYWNhMDhmMGRhNmY3ZTFmNjdjN2Q3NWE3ZTYwZjM2ZDBlNDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniM1ZDeyMR8MeQAU3OoSYlzdcPHO s7ln6SI/xrKn/JYAb3AugThwAx7ezgr4hKxO2WB1F0R1YA2yHXY820ZXoObOit36 zoni6Whl3VHVt9w3k0x+21N/IAOgm7IYxqFHTt1itCY25fZ316qQNQgSKhtX/0iy QnMeT/WetZtaEd459apIzleCPJ91Tlf/9U/YpgvWZhruWw+uxLmutEqSz+sPy6ac 3pFAFwDHTU+HFEFrAfFedi2nEsSciP4boD+9DBDFJtAMX4Q3e3LeAaUVIINxHmYa 1Fx09NTasKqy5mLAr5z/tJtYnENa1scMq2q8Tbh8r9rs6XJ0G6HFjQVgCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3OrKCPDab34fZ8fXWn5g820OR1MB8GA1UdIwQY MBaAFILktL/uRU0KpHClwKlBA0nUodd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3VTMHYtNUZUUXFrY0tYQXFVRURTZFNoMTNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9lMGNjYjQtMGZhZi00ODY1LTk2MWYt MzdhYmU5Nzk2MGQ1LzEvZ3VTMHYtNUZUUXFrY0tYQXFVRURTZFNoMTNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9lMGNjYjQtMGZhZi00ODY1LTk2MWYtMzdhYmU5Nzk2MGQ1 LzEvZ3VTMHYtNUZUUXFrY0tYQXFVRURTZFNoMTNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghlJoiFS Jd+c7c+3FlKUzTJyuEny7TitlLrjgYSkPMWv19tZoqqsfDJC5ELRZYY/WOpaTQd4 50g4XRaD8rSI/nyA0fo4iKzfT7M36Vui7HTwaZPjXieRvvBO2dik1QV/O8Cpt5ev d0qfyismP4z3wi6F0zzkZpNsOPW+q5ZHCq/zYTm/1LwgkBlZL9KYoaKIBv5u1xo7 9TJf4zx1NkzHCk0RmMjoQ3qIJzIkchKtOcOp+9RpCDvy7Abbwsy4/fxRiVOgmT1/ o/ZQRSl7hF8okJ+r7fccERLRG1h8tKqLk8TWY/iWw0kqESvi25DVYBE5PV8ELQgf gBQ6wHISJipPlQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:22 2025 by rpki-client