This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft File: GsBs8snpV1N0OXNPBYSoIEp7gxE.mft (raw, json) Hash identifier: /57MBcyXR9B/j6i7WYcekr8gscrtPH4Bl4JffFPxRfA= Subject key identifier: 4B:CD:29:36:6F:4D:6F:DB:F5:9D:03:AB:40:3B:B5:08:2A:B5:AA:2F Authority key identifier: 1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11 Certificate issuer: /CN=1ac06cf2c9e957537439734f0584a8204a7b8311 Certificate serial: 019AF42E4FB9FC91704D375CEBAC29AD5578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 15:01:07 +0000 Manifest this update: Sat 06 Dec 2025 15:01:07 +0000 Manifest next update: Sun 07 Dec 2025 15:01:07 +0000 Files and hashes: 1: GsBs8snpV1N0OXNPBYSoIEp7gxE.crl (hash: xI+d46MhVyg3/CCfYMm+Z80f16b1ImV7ZaDSrrRdIOA=) 2: td5of2c-zNIx95LtRN04mtFJYAg.roa (hash: rMhWdT4I0hK2RGp5gGoiamCjAXi8+XSWiM4KXZ7JjMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:4f:b9:fc:91:70:4d:37:5c:eb:ac:29:ad:55:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ac06cf2c9e957537439734f0584a8204a7b8311 Validity Not Before: Dec 6 15:01:07 2025 GMT Not After : Dec 7 15:01:07 2025 GMT Subject: CN=4bcd29366f4d6fdbf59d03ab403bb5082ab5aa2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:ea:5e:e6:a6:86:50:51:f5:91:f5:57:bc: 29:84:12:18:73:4b:f6:1d:28:10:73:1b:89:81:5e: d6:49:b8:1a:ad:4d:df:72:df:91:84:c4:9d:82:0a: 7f:51:34:c0:9d:d0:9d:df:02:40:26:43:05:95:8c: f0:3e:82:c6:64:52:2f:0e:3a:71:5f:15:ac:28:d6: 6c:95:17:5d:09:fa:f1:81:b8:82:8b:58:43:f8:37: 37:77:f0:27:9e:4b:37:ae:56:96:fe:2e:7d:04:51: 1b:ce:11:1a:4e:9c:40:6a:35:07:01:ad:2e:ef:0f: 6e:fa:ac:19:e6:7b:f0:a7:e4:28:2d:1d:0c:a0:0d: a0:70:59:68:25:68:74:98:03:1c:6e:a7:74:23:b4: f5:f0:60:f8:6b:42:41:3b:40:f2:8d:91:1e:e7:99: b9:c4:76:39:76:f8:38:5b:cf:c8:f6:b5:8a:cf:9e: ae:63:b8:9c:30:e7:b3:3b:66:45:29:07:d5:a5:0d: e3:61:e1:8b:e6:18:29:81:13:40:33:71:5a:3c:b0: 44:ac:eb:7d:c3:db:3c:e2:d5:c1:bf:68:dc:36:8c: 8d:5a:7f:11:8a:16:46:5b:5d:6b:7e:90:92:3c:e1: c8:17:87:3b:63:58:e3:7d:ba:d1:46:fe:b1:f9:72: 43:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CD:29:36:6F:4D:6F:DB:F5:9D:03:AB:40:3B:B5:08:2A:B5:AA:2F X509v3 Authority Key Identifier: keyid:1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:2e:58:7f:0c:38:dd:b1:3d:cc:39:08:6d:8c:24:ab:1b:ee: bd:7e:d3:1b:b9:49:3c:4c:ad:0c:2d:d3:e3:ad:37:29:a4:92: 0d:84:ae:33:eb:15:6f:0e:12:a8:b2:5d:4c:e7:0d:fb:4d:3e: 2d:e7:2e:84:bb:bb:87:fb:51:3e:a8:05:be:f5:04:73:86:dc: 4e:23:3e:85:33:ae:69:c1:be:31:94:4e:a1:1e:62:31:9c:af: 62:99:02:80:49:0b:7f:f7:8d:f2:60:65:7f:d4:33:6c:fb:db: c4:ff:12:5c:15:e8:35:3a:04:9f:d4:75:21:96:0e:30:cf:dd: ff:78:f9:ed:49:3f:7f:f6:d1:8d:95:3e:23:82:31:5d:92:71: 3a:b4:66:9a:cd:c3:b0:7f:7c:99:4f:0f:bf:d4:d7:da:fa:a3: b2:c7:04:10:83:da:d2:23:6a:6f:22:b5:ac:76:01:30:13:ee: 7c:9a:e7:27:6c:3c:08:35:0a:c3:c9:81:b9:a6:fc:b7:b0:20: 94:96:c8:fc:41:7e:ea:7b:e3:04:7d:70:df:68:30:a5:96:7b: fe:36:f8:f1:5b:8c:26:6a:54:bf:15:93:bb:53:db:76:50:80: de:bb:4b:88:57:ca:0a:b8:63:d1:dc:c3:bf:f3:d3:b2:bf:af: 86:bb:ff:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lk+5/JFwTTdc66wprVV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYzA2Y2YyYzllOTU3NTM3NDM5NzM0ZjA1ODRhODIwNGE3 YjgzMTEwHhcNMjUxMjA2MTUwMTA3WhcNMjUxMjA3MTUwMTA3WjAzMTEwLwYDVQQD Eyg0YmNkMjkzNjZmNGQ2ZmRiZjU5ZDAzYWI0MDNiYjUwODJhYjVhYTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0bqXuamhlBR9ZH1V7wphBIYc0v2 HSgQcxuJgV7WSbgarU3fct+RhMSdggp/UTTAndCd3wJAJkMFlYzwPoLGZFIvDjpx XxWsKNZslRddCfrxgbiCi1hD+Dc3d/Annks3rlaW/i59BFEbzhEaTpxAajUHAa0u 7w9u+qwZ5nvwp+QoLR0MoA2gcFloJWh0mAMcbqd0I7T18GD4a0JBO0DyjZEe55m5 xHY5dvg4W8/I9rWKz56uY7icMOezO2ZFKQfVpQ3jYeGL5hgpgRNAM3FaPLBErOt9 w9s84tXBv2jcNoyNWn8RihZGW11rfpCSPOHIF4c7Y1jjfbrRRv6x+XJDswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvNKTZvTW/b9Z0Dq0A7tQgqtaovMB8GA1UdIwQY MBaAFBrAbPLJ6VdTdDlzTwWEqCBKe4MRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NCczhzbnBWMU4wT1hOUEJZU29JRXA3Z3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mN2U2ZTktYzEyMS00MDY0LThhZDUt MDdjMTdmZTM3NGE2LzEvR3NCczhzbnBWMU4wT1hOUEJZU29JRXA3Z3hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mN2U2ZTktYzEyMS00MDY0LThhZDUtMDdjMTdmZTM3NGE2 LzEvR3NCczhzbnBWMU4wT1hOUEJZU29JRXA3Z3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOC5Yfww4 3bE9zDkIbYwkqxvuvX7TG7lJPEytDC3T4603KaSSDYSuM+sVbw4SqLJdTOcN+00+ LecuhLu7h/tRPqgFvvUEc4bcTiM+hTOuacG+MZROoR5iMZyvYpkCgEkLf/eN8mBl f9QzbPvbxP8SXBXoNToEn9R1IZYOMM/d/3j57Uk/f/bRjZU+I4IxXZJxOrRmms3D sH98mU8Pv9TX2vqjsscEEIPa0iNqbyK1rHYBMBPufJrnJ2w8CDUKw8mBuab8t7Ag lJbI/EF+6nvjBH1w32gwpZZ7/jb48VuMJmpUvxWTu1PbdlCA3rtLiFfKCrhj0dzD v/PTsr+vhrv/XQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:46 2025 by rpki-client