This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft File: gnMxRuPp1uEVRjF_dSGeogLF-S0.mft (raw, json) Hash identifier: zCp7ewYXDdTZ8Hl1tJbCqPPENVQWnIYHjqyEEAyfFp0= Subject key identifier: 9A:85:3B:0A:8D:1A:76:8D:14:9C:34:85:2B:B3:51:33:D0:7C:F5:48 Authority key identifier: 82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D Certificate issuer: /CN=82733146e3e9d6e11546317f75219ea202c5f92d Certificate serial: 019AF208C94A688BEFC9EFCD75ED6203CA43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft Manifest number: 070D Signing time: Sat 06 Dec 2025 05:00:53 +0000 Manifest this update: Sat 06 Dec 2025 05:00:53 +0000 Manifest next update: Sun 07 Dec 2025 05:00:53 +0000 Files and hashes: 1: Ui37pni8yZO_R93Vyy6g6ty1CZs.roa (hash: KVFAYIQrtJyTceCsFbCiblO1P3leUs2Y5nLFzfChjkg=) 2: gnMxRuPp1uEVRjF_dSGeogLF-S0.crl (hash: k9E/vPPbHS4Pgwvfj8oaFHQVEknua90do08q1IkZPcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c9:4a:68:8b:ef:c9:ef:cd:75:ed:62:03:ca:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82733146e3e9d6e11546317f75219ea202c5f92d Validity Not Before: Dec 6 05:00:53 2025 GMT Not After : Dec 7 05:00:53 2025 GMT Subject: CN=9a853b0a8d1a768d149c34852bb35133d07cf548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:26:dc:0a:6b:a6:c6:cd:0f:28:be:dc:03:15: 46:ca:a6:e3:29:ff:a8:39:b4:ae:a1:fb:6a:55:7d: 49:42:ec:b3:b7:ec:9d:de:ae:25:8c:40:c8:a6:7f: 16:72:24:67:78:84:bc:21:9d:87:02:2f:21:6a:6f: 7b:9c:15:f1:ee:5e:4d:3c:71:26:1f:bc:8c:90:8d: 9d:20:63:f7:1b:a3:1c:80:dd:5a:ac:6e:b6:66:73: 6e:42:43:d7:43:fe:42:17:77:70:81:ac:06:57:26: 77:bd:24:8d:53:68:b2:97:3d:00:05:50:ce:79:88: 77:b8:81:7e:3b:fa:9c:06:05:17:67:55:92:e9:10: 38:74:1f:5a:d6:e1:2e:0c:1f:0f:d0:25:8a:33:67: 45:70:0b:ae:06:3b:4e:3f:08:dc:32:11:15:f0:ec: b6:b3:a0:95:ed:1a:6b:e2:8c:2e:37:8c:ca:b2:da: a1:bb:8f:65:6b:7e:10:c2:be:04:c3:15:95:95:ad: 36:3e:c1:04:5c:6a:04:91:7a:f3:a3:a2:b8:ad:9f: e1:c1:32:85:e6:4f:2f:6f:cc:b4:e5:2d:5f:d5:15: 69:2d:04:43:2d:e2:3f:8f:eb:44:89:31:b2:07:4c: f6:6f:ff:1c:6c:03:36:56:d8:8e:e2:7d:c1:4a:78: 9a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:85:3B:0A:8D:1A:76:8D:14:9C:34:85:2B:B3:51:33:D0:7C:F5:48 X509v3 Authority Key Identifier: keyid:82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:aa:d9:1f:9f:8f:04:f3:ee:9c:fa:d7:9d:26:5a:c8:f3:83: 3b:a8:a0:36:ea:4b:50:42:dd:66:28:80:24:a0:9c:8c:5f:45: a5:3e:f5:61:50:8f:be:3c:c3:f4:0f:b6:49:51:ff:a4:41:a4: a6:4d:d8:e4:43:9f:54:00:f3:53:a4:b8:c8:31:ae:9d:b4:44: 0a:1a:cf:b7:e7:5e:8b:3c:cd:63:e6:07:e7:34:be:fb:51:8b: ec:29:40:02:41:5d:a1:d6:01:b7:70:53:05:6c:79:84:fd:07: c7:2b:92:d7:17:52:79:da:55:64:5d:31:54:15:f7:49:d3:b2: 6d:e9:21:ae:0b:67:34:43:13:08:ae:d8:52:ca:7c:fc:8a:c3: dd:52:c3:7a:bb:86:5e:7b:29:84:0c:05:87:50:8b:80:1b:37: 07:78:96:64:91:7a:8b:82:13:11:70:08:fb:43:a6:63:54:a3: 7e:a7:ec:b0:75:02:d0:41:69:b6:45:06:d5:d2:c3:42:aa:78: 16:d6:8d:e2:12:24:39:58:10:88:e7:67:1f:97:d4:d9:17:2d: 96:43:26:4c:61:ff:aa:e3:56:7e:79:e1:f8:01:01:5a:af:87: 7e:b6:cc:b7:44:5e:09:8a:f3:71:8a:e1:3b:fa:f1:ce:f9:cf: 9d:98:13:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMlKaIvvye/Nde1iA8pDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzMzMTQ2ZTNlOWQ2ZTExNTQ2MzE3Zjc1MjE5ZWEyMDJj NWY5MmQwHhcNMjUxMjA2MDUwMDUzWhcNMjUxMjA3MDUwMDUzWjAzMTEwLwYDVQQD Eyg5YTg1M2IwYThkMWE3NjhkMTQ5YzM0ODUyYmIzNTEzM2QwN2NmNTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCbcCmumxs0PKL7cAxVGyqbjKf+o ObSuoftqVX1JQuyzt+yd3q4ljEDIpn8WciRneIS8IZ2HAi8ham97nBXx7l5NPHEm H7yMkI2dIGP3G6McgN1arG62ZnNuQkPXQ/5CF3dwgawGVyZ3vSSNU2iylz0ABVDO eYh3uIF+O/qcBgUXZ1WS6RA4dB9a1uEuDB8P0CWKM2dFcAuuBjtOPwjcMhEV8Oy2 s6CV7Rpr4owuN4zKstqhu49la34Qwr4EwxWVla02PsEEXGoEkXrzo6K4rZ/hwTKF 5k8vb8y05S1f1RVpLQRDLeI/j+tEiTGyB0z2b/8cbAM2VtiO4n3BSnia/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqFOwqNGnaNFJw0hSuzUTPQfPVIMB8GA1UdIwQY MBaAFIJzMUbj6dbhFUYxf3UhnqICxfktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25NeFJ1UHAxdUVWUmpGX2RTR2VvZ0xGLVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80ZDVlMTYtNWU2NS00ZWQ4LWJiZTMt YmFjYjAyODUzOGRjLzEvZ25NeFJ1UHAxdUVWUmpGX2RTR2VvZ0xGLVMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS80ZDVlMTYtNWU2NS00ZWQ4LWJiZTMtYmFjYjAyODUzOGRj LzEvZ25NeFJ1UHAxdUVWUmpGX2RTR2VvZ0xGLVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOarZH5+P BPPunPrXnSZayPODO6igNupLUELdZiiAJKCcjF9FpT71YVCPvjzD9A+2SVH/pEGk pk3Y5EOfVADzU6S4yDGunbREChrPt+deizzNY+YH5zS++1GL7ClAAkFdodYBt3BT BWx5hP0HxyuS1xdSedpVZF0xVBX3SdOybekhrgtnNEMTCK7YUsp8/IrD3VLDeruG XnsphAwFh1CLgBs3B3iWZJF6i4ITEXAI+0OmY1SjfqfssHUC0EFptkUG1dLDQqp4 FtaN4hIkOVgQiOdnH5fU2RctlkMmTGH/quNWfnnh+AEBWq+HfrbMt0ReCYrzcYrh O/rxzvnPnZgTaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:08 2025 by rpki-client