This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft File: gSBe85sNP11y-h2XHUGR4Lomhr8.mft (raw, json) Hash identifier: vrTRU6umgO1aZfPw/fO/am5PmzVVxCjVvRKuI5XPlW4= Subject key identifier: 02:01:31:E0:0D:F8:81:61:84:77:79:3D:55:43:E1:F0:CD:A9:F8:BF Authority key identifier: 81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF Certificate issuer: /CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf Certificate serial: 019AF1645AC13CBAD0A7E107CFED9EEFB8F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft Manifest number: 0E47 Signing time: Sat 06 Dec 2025 02:01:16 +0000 Manifest this update: Sat 06 Dec 2025 02:01:16 +0000 Manifest next update: Sun 07 Dec 2025 02:01:16 +0000 Files and hashes: 1: gSBe85sNP11y-h2XHUGR4Lomhr8.crl (hash: 8qdmhJzYho2BieuyoOcoNxEQwplIjkgVSzsJNQTF+kE=) 2: tejhqyIYcfJnZD52AowM2BpZATQ.roa (hash: oI2/9MVukstCSiurn/ztv7Ci6tJsVocDaOvri7bb8FY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:5a:c1:3c:ba:d0:a7:e1:07:cf:ed:9e:ef:b8:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf Validity Not Before: Dec 6 02:01:16 2025 GMT Not After : Dec 7 02:01:16 2025 GMT Subject: CN=020131e00df881618477793d5543e1f0cda9f8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:e3:0c:8b:e7:85:aa:d3:1e:61:50:1c:b2: 98:72:e4:ce:03:34:f8:58:d4:b9:84:29:9b:42:cc: 49:e7:65:04:e2:ce:68:3c:08:71:c1:b8:af:00:ec: 1b:14:24:95:f3:90:88:60:9a:5e:02:08:a5:51:76: 2e:e7:8f:82:4c:b0:a5:f4:ec:66:4f:0f:3f:9b:78: 0e:8b:b3:8f:ef:f8:97:79:35:a2:30:c6:50:87:73: 58:b0:57:16:4f:d3:fa:0a:92:5d:81:d8:57:0c:7c: 59:a7:93:ef:02:fd:b1:ac:61:33:8b:f3:60:c6:4c: 33:97:34:6f:f2:8f:2b:ab:3f:d6:04:26:db:b7:bd: b3:5e:31:29:25:de:d0:e9:66:bb:c7:46:f3:46:99: c3:32:33:12:f1:a2:18:24:01:04:02:f2:9f:b8:ce: 9a:ab:12:62:d8:0d:28:8f:ef:04:da:bc:41:2e:03: 18:53:90:14:19:ee:14:33:9b:87:12:29:ee:73:09: 7b:a5:37:a1:fc:5f:13:c1:c3:75:b8:51:be:3e:bd: d0:1a:f2:6a:f9:ea:7e:a2:8f:59:dd:76:b4:fd:20: 18:b5:7b:83:63:98:96:00:e5:1c:03:fc:d2:cc:75: 2f:8f:d9:2b:e3:f4:ca:12:94:f5:7a:0c:f5:31:20: fa:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:01:31:E0:0D:F8:81:61:84:77:79:3D:55:43:E1:F0:CD:A9:F8:BF X509v3 Authority Key Identifier: keyid:81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:a1:95:85:86:09:a1:85:5d:34:35:98:6f:63:d9:b9:ff:41: 3a:4f:55:6e:3d:0a:b8:cb:92:95:5a:84:53:b0:3d:fb:bd:dd: 61:e9:94:89:26:19:78:02:7b:e6:36:2d:75:ee:4a:f5:e7:76: dd:1c:7f:d0:97:bb:5a:95:d4:ae:5c:3a:1b:df:ea:07:95:d6: 8d:38:9c:c1:f7:27:76:34:f0:fe:59:88:de:16:8c:34:83:4e: 7f:41:5c:9c:0f:6f:47:15:60:0f:30:54:f5:0e:5b:89:1d:0e: 9d:e1:53:2d:49:3b:48:8e:af:77:e7:b3:25:e7:b7:3e:cb:fd: e9:08:16:f4:49:6b:7b:81:db:ff:58:d5:32:f4:eb:75:37:12: 34:62:c7:5b:4c:81:41:9a:cb:fd:93:01:ea:ad:ff:b2:51:a0: fc:2c:34:17:93:c3:88:ee:60:15:07:08:59:e7:af:80:cb:1b: a8:b9:f0:b7:16:fc:62:48:4b:c6:bd:52:24:32:87:d8:db:0d: e8:53:28:ec:82:f1:b4:44:1a:09:9e:6d:8e:f3:93:81:69:11: 51:b8:7b:70:d6:fa:79:c0:0e:92:b6:45:15:ca:5e:da:81:e4: 79:b7:9a:91:69:d5:6a:9c:31:6e:3d:89:69:28:73:68:71:f7: 76:73:00:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFrBPLrQp+EHz+2e77j3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMjA1ZWYzOWIwZDNmNWQ3MmZhMWQ5NzFkNDE5MWUwYmEy Njg2YmYwHhcNMjUxMjA2MDIwMTE2WhcNMjUxMjA3MDIwMTE2WjAzMTEwLwYDVQQD EygwMjAxMzFlMDBkZjg4MTYxODQ3Nzc5M2Q1NTQzZTFmMGNkYTlmOGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyPjDIvnharTHmFQHLKYcuTOAzT4 WNS5hCmbQsxJ52UE4s5oPAhxwbivAOwbFCSV85CIYJpeAgilUXYu54+CTLCl9Oxm Tw8/m3gOi7OP7/iXeTWiMMZQh3NYsFcWT9P6CpJdgdhXDHxZp5PvAv2xrGEzi/Ng xkwzlzRv8o8rqz/WBCbbt72zXjEpJd7Q6Wa7x0bzRpnDMjMS8aIYJAEEAvKfuM6a qxJi2A0oj+8E2rxBLgMYU5AUGe4UM5uHEinucwl7pTeh/F8TwcN1uFG+Pr3QGvJq +ep+oo9Z3Xa0/SAYtXuDY5iWAOUcA/zSzHUvj9kr4/TKEpT1egz1MSD6CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIBMeAN+IFhhHd5PVVD4fDNqfi/MB8GA1UdIwQY MBaAFIEgXvObDT9dcvodlx1BkeC6Joa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iNTY4ODEtZTkxOS00NDVhLTk5MjMt ODlhOTAyMzI2MWYxLzEvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iNTY4ODEtZTkxOS00NDVhLTk5MjMtODlhOTAyMzI2MWYx LzEvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoaGVhYYJ oYVdNDWYb2PZuf9BOk9Vbj0KuMuSlVqEU7A9+73dYemUiSYZeAJ75jYtde5K9ed2 3Rx/0Je7WpXUrlw6G9/qB5XWjTicwfcndjTw/lmI3haMNINOf0FcnA9vRxVgDzBU 9Q5biR0OneFTLUk7SI6vd+ezJee3Psv96QgW9Elre4Hb/1jVMvTrdTcSNGLHW0yB QZrL/ZMB6q3/slGg/Cw0F5PDiO5gFQcIWeevgMsbqLnwtxb8YkhLxr1SJDKH2NsN 6FMo7ILxtEQaCZ5tjvOTgWkRUbh7cNb6ecAOkrZFFcpe2oHkebeakWnVapwxbj2J aShzaHH3dnMA1w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:54 2025 by rpki-client