This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft File: GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft (raw, json) Hash identifier: +jxRjaT886hwd7jcHICNWJd1MnuJpt3nIA+STPsjQag= Subject key identifier: 28:B9:B7:52:5D:76:59:BD:5F:4D:E8:EE:5D:08:05:41:11:AA:8A:06 Authority key identifier: 19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13 Certificate issuer: /CN=1925e6387b33e94069a89a5d1be68904e4090613 Certificate serial: 019AF12E8573F85B6AC928E6698203B5DE2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft Manifest number: 043A Signing time: Sat 06 Dec 2025 01:02:29 +0000 Manifest this update: Sat 06 Dec 2025 01:02:29 +0000 Manifest next update: Sun 07 Dec 2025 01:02:29 +0000 Files and hashes: 1: GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl (hash: MMbTv+q5lZPBmzv1lwlp74dA9AW2VIAb/E3mJ1ybDjY=) 2: KKovPP5k_vOQvmKc7t5x14I_gos.roa (hash: xTSJVhmS95WWwOtUsvBgdC5iNk4sqmcitObjOn9r3l4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:85:73:f8:5b:6a:c9:28:e6:69:82:03:b5:de:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1925e6387b33e94069a89a5d1be68904e4090613 Validity Not Before: Dec 6 01:02:29 2025 GMT Not After : Dec 7 01:02:29 2025 GMT Subject: CN=28b9b7525d7659bd5f4de8ee5d08054111aa8a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ad:af:c3:66:c1:3c:4b:a8:73:5e:6c:88:67: 9b:12:b7:4d:1f:e2:d3:b6:88:b9:a0:9c:ba:51:b2: 82:57:0a:68:22:99:14:d4:12:cd:be:3e:89:fa:11: 2e:15:de:8d:30:87:0c:bd:71:97:1e:34:15:b8:88: b5:2b:c5:20:47:cc:47:6c:4c:66:3f:4a:0d:14:08: fe:c4:b0:6a:0b:2a:4b:17:b3:14:4b:44:33:73:94: e7:4a:f2:9f:dc:54:f1:2e:74:c9:22:aa:45:da:0d: ab:3e:21:36:bd:5e:ca:7d:ce:48:df:4f:80:1b:ff: 09:07:32:75:b1:bb:3c:af:67:65:5a:66:65:99:62: 13:d0:61:e4:dc:b0:e6:6f:eb:fb:11:24:f7:51:de: f0:9a:2e:95:66:04:67:c6:f3:ee:f7:fc:c7:1e:1b: dc:e9:bd:ed:49:17:9f:30:25:5c:d3:1f:2c:f5:88: ee:a2:14:0d:d3:fb:65:22:7e:34:e9:91:c7:70:60: 1d:11:63:6c:56:40:89:57:ed:53:80:c5:ce:44:ae: 8e:91:ba:51:ce:18:83:fb:88:94:d9:6c:d4:be:0c: de:94:07:27:46:22:89:10:cf:38:c1:ac:36:aa:69: 49:ee:4f:95:94:ec:6a:88:2c:86:33:b4:aa:2f:3a: f5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B9:B7:52:5D:76:59:BD:5F:4D:E8:EE:5D:08:05:41:11:AA:8A:06 X509v3 Authority Key Identifier: keyid:19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:81:59:ec:51:8b:6e:12:3a:29:77:ab:00:8d:17:03:32:ec: e6:8f:d9:90:d9:e7:b2:1e:82:c7:ce:fc:2b:56:64:f2:da:c1: 4f:7d:51:1f:08:ab:bf:fd:50:3c:0d:cb:48:ed:28:d2:aa:c8: 1c:cd:5d:16:7f:d4:ea:5d:59:c7:b6:99:0c:2b:b5:2a:95:62: 5f:e9:9a:f7:67:de:17:1b:a9:31:80:e0:c6:13:4a:77:3f:7e: f6:b7:4a:35:d5:b0:5e:49:2e:23:66:34:04:21:82:4b:5d:5b: 0c:0a:5c:86:30:33:79:dc:09:9d:0d:4b:b0:95:ba:55:3b:e3: b4:31:08:61:72:98:e4:44:9a:28:49:69:87:7e:03:a7:b9:6c: d2:5c:b6:e0:94:a4:c0:c4:2f:e1:e9:78:af:cf:61:79:22:80: 4a:24:d2:10:44:3c:07:e1:cc:d9:33:09:c8:fb:31:b0:c8:8f: 20:8c:c2:a6:db:15:01:6c:83:63:9d:2b:ed:3c:e0:59:24:f2: 10:05:1c:c4:44:01:9b:7f:7e:c2:87:f3:a9:8e:b3:e7:5c:eb: f4:87:28:aa:53:8f:63:0f:1b:c3:28:f7:f4:07:ee:90:c7:29: 94:e6:3a:5d:cf:13:93:59:19:8a:e0:57:f0:d2:42:28:f4:42: 17:3a:65:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLoVz+FtqySjmaYIDtd4tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MjVlNjM4N2IzM2U5NDA2OWE4OWE1ZDFiZTY4OTA0ZTQw OTA2MTMwHhcNMjUxMjA2MDEwMjI5WhcNMjUxMjA3MDEwMjI5WjAzMTEwLwYDVQQD EygyOGI5Yjc1MjVkNzY1OWJkNWY0ZGU4ZWU1ZDA4MDU0MTExYWE4YTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq2vw2bBPEuoc15siGebErdNH+LT toi5oJy6UbKCVwpoIpkU1BLNvj6J+hEuFd6NMIcMvXGXHjQVuIi1K8UgR8xHbExm P0oNFAj+xLBqCypLF7MUS0Qzc5TnSvKf3FTxLnTJIqpF2g2rPiE2vV7Kfc5I30+A G/8JBzJ1sbs8r2dlWmZlmWIT0GHk3LDmb+v7EST3Ud7wmi6VZgRnxvPu9/zHHhvc 6b3tSRefMCVc0x8s9YjuohQN0/tlIn406ZHHcGAdEWNsVkCJV+1TgMXORK6OkbpR zhiD+4iU2WzUvgzelAcnRiKJEM84waw2qmlJ7k+VlOxqiCyGM7SqLzr1YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCi5t1Jddlm9X03o7l0IBUERqooGMB8GA1UdIwQY MBaAFBkl5jh7M+lAaaiaXRvmiQTkCQYTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kNGUwZGItMThjMS00NDgzLTg4MDMt OTY2Njg1ZWE0MGY5LzEvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kNGUwZGItMThjMS00NDgzLTg4MDMtOTY2Njg1ZWE0MGY5 LzEvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA24FZ7FGL bhI6KXerAI0XAzLs5o/ZkNnnsh6Cx878K1Zk8trBT31RHwirv/1QPA3LSO0o0qrI HM1dFn/U6l1Zx7aZDCu1KpViX+ma92feFxupMYDgxhNKdz9+9rdKNdWwXkkuI2Y0 BCGCS11bDApchjAzedwJnQ1LsJW6VTvjtDEIYXKY5ESaKElph34Dp7ls0ly24JSk wMQv4el4r89heSKASiTSEEQ8B+HM2TMJyPsxsMiPIIzCptsVAWyDY50r7TzgWSTy EAUcxEQBm39+wofzqY6z51zr9IcoqlOPYw8bwyj39AfukMcplOY6Xc8Tk1kZiuBX 8NJCKPRCFzplqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:32 2025 by rpki-client