This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft File: GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft (raw, json) Hash identifier: tQ8hlWJ5PBcCLSafYZmx6qnyCeURCA6bojfzCzYKY9U= Subject key identifier: FA:27:13:FC:85:40:AD:E0:3F:39:4A:06:A4:A0:05:38:10:BB:51:96 Authority key identifier: 1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48 Certificate issuer: /CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748 Certificate serial: 019AF50B833F0F7A8F32185DD97E0EFC3937 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft Manifest number: 0AC3 Signing time: Sat 06 Dec 2025 19:02:43 +0000 Manifest this update: Sat 06 Dec 2025 19:02:43 +0000 Manifest next update: Sun 07 Dec 2025 19:02:43 +0000 Files and hashes: 1: GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl (hash: Pn01Ot+6+ZQbdO409IJ8sXjOSaOmz+OExmn/2niRVMg=) 2: sQzNar_4JseiL9UNqmWgBSd_A68.roa (hash: 6EjRuBumMEH87fOFnzWurdMoQt/hXzQEoZOF6qbEThc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:83:3f:0f:7a:8f:32:18:5d:d9:7e:0e:fc:39:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748 Validity Not Before: Dec 6 19:02:43 2025 GMT Not After : Dec 7 19:02:43 2025 GMT Subject: CN=fa2713fc8540ade03f394a06a4a0053810bb5196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a2:42:7d:70:a1:bf:14:8c:53:f3:9f:3f:ca: 0f:4c:e5:61:0d:db:36:96:15:7b:cc:03:3b:77:97: 7d:fb:fd:c3:94:0a:c5:81:76:6e:75:d9:4b:9a:2b: 43:0a:69:02:d0:17:75:76:9e:d1:58:9c:fc:b5:b9: 8d:c0:cf:31:9c:c9:05:3b:da:be:d2:a4:d7:83:96: c1:6e:70:a5:1e:6f:a0:c7:80:1c:a1:2d:7f:16:c6: ec:60:97:fb:86:65:ff:87:bd:28:d5:b2:6a:ac:ee: 87:62:84:6b:a6:f3:c5:6b:dc:b6:70:c7:94:1b:3f: c8:9b:77:9c:25:9d:48:45:e2:66:af:25:f2:8f:b3: fe:0a:a2:a3:81:38:f8:22:d6:0f:43:8d:a7:9d:ad: 67:8d:17:f0:fd:76:12:19:e5:c0:ab:70:f2:7c:9d: 27:f1:f8:e7:8d:52:79:f8:a3:fd:0b:3f:f6:26:18: 82:e6:6b:90:ae:16:12:7e:85:b4:3e:60:d5:0d:4c: 58:f6:77:3f:2a:c8:dd:5a:cb:45:d3:1e:1e:6d:a2: 04:54:be:51:d1:57:9c:82:06:74:5f:6b:a3:8c:46: cd:49:69:8f:e2:6e:b9:63:a1:cd:49:61:da:18:6b: 6d:23:41:7c:fe:ae:dc:a2:c0:26:f3:d2:ec:cd:00: ff:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:27:13:FC:85:40:AD:E0:3F:39:4A:06:A4:A0:05:38:10:BB:51:96 X509v3 Authority Key Identifier: keyid:1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:42:95:ee:da:a8:96:44:a2:13:bd:3d:2c:69:a4:55:f9:f1: 99:bc:3b:ea:33:b2:25:22:2e:80:58:e6:ef:1b:db:0f:94:61: 11:66:5d:9a:c4:86:9c:86:9d:08:6e:ac:c6:72:d4:6b:99:ef: ae:02:42:f9:3c:b7:20:b1:02:7b:d7:74:d5:02:2f:3b:0b:62: 44:fe:9d:08:ca:03:e5:97:d9:f3:fa:00:de:2b:42:25:32:ea: ff:53:41:66:e5:19:68:bf:cb:d5:1e:d9:2a:c7:85:7e:68:20: a3:03:78:e8:4e:72:ce:4c:4c:4b:72:7d:74:c4:ba:89:f9:05: 0c:44:bf:51:c1:a5:db:18:3f:96:90:7c:d0:fa:7f:b5:8d:c9: 77:68:4f:4b:b7:1a:e8:4d:18:0e:fe:6b:8b:95:e5:3a:4e:d0: 97:a9:b7:51:0d:f7:5a:01:8b:e4:91:4f:05:94:59:a1:37:65: ce:b3:5a:88:1b:0d:cd:40:91:dd:35:19:aa:ca:2d:4e:7e:6a: 41:98:95:9b:cc:74:19:d2:f4:48:61:2c:d1:43:5f:a8:4c:79: 03:32:1c:88:c4:36:5a:c2:8e:e8:4a:72:af:06:b6:ce:cb:23: af:77:77:8a:c5:27:4c:6a:5c:fb:57:ae:50:4d:52:ee:cc:cd: ab:bf:74:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C4M/D3qPMhhd2X4O/Dk3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYzI0NTZjNzBmOGFhYTUzYmQ4OTQwZmUyM2YxM2NmYTI3 MGU3NDgwHhcNMjUxMjA2MTkwMjQzWhcNMjUxMjA3MTkwMjQzWjAzMTEwLwYDVQQD EyhmYTI3MTNmYzg1NDBhZGUwM2YzOTRhMDZhNGEwMDUzODEwYmI1MTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6JCfXChvxSMU/OfP8oPTOVhDds2 lhV7zAM7d5d9+/3DlArFgXZuddlLmitDCmkC0Bd1dp7RWJz8tbmNwM8xnMkFO9q+ 0qTXg5bBbnClHm+gx4AcoS1/FsbsYJf7hmX/h70o1bJqrO6HYoRrpvPFa9y2cMeU Gz/Im3ecJZ1IReJmryXyj7P+CqKjgTj4ItYPQ42nna1njRfw/XYSGeXAq3DyfJ0n 8fjnjVJ5+KP9Cz/2JhiC5muQrhYSfoW0PmDVDUxY9nc/KsjdWstF0x4ebaIEVL5R 0VecggZ0X2ujjEbNSWmP4m65Y6HNSWHaGGttI0F8/q7cosAm89LszQD/OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPonE/yFQK3gPzlKBqSgBTgQu1GWMB8GA1UdIwQY MBaAFBrCRWxw+KqlO9iUD+I/E8+icOdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mZjViODMtOWMyMC00ZDk3LTk3Yzct NWExZDU1ODQzNzhkLzEvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mZjViODMtOWMyMC00ZDk3LTk3YzctNWExZDU1ODQzNzhk LzEvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREKV7tqo lkSiE709LGmkVfnxmbw76jOyJSIugFjm7xvbD5RhEWZdmsSGnIadCG6sxnLUa5nv rgJC+Ty3ILECe9d01QIvOwtiRP6dCMoD5ZfZ8/oA3itCJTLq/1NBZuUZaL/L1R7Z KseFfmggowN46E5yzkxMS3J9dMS6ifkFDES/UcGl2xg/lpB80Pp/tY3Jd2hPS7ca 6E0YDv5ri5XlOk7Ql6m3UQ33WgGL5JFPBZRZoTdlzrNaiBsNzUCR3TUZqsotTn5q QZiVm8x0GdL0SGEs0UNfqEx5AzIciMQ2WsKO6Epyrwa2zssjr3d3isUnTGpc+1eu UE1S7szNq790dw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:50:04 2025 by rpki-client