This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft File: GSx4GHPqSt3idTiBHLaqfhvATxs.mft (raw, json) Hash identifier: AFhBMsO9K8LDJ6TX8RskvJvulMg/Yj+cCo3I8em2SVo= Subject key identifier: A1:65:1F:65:4C:17:20:51:45:04:16:59:49:44:87:A7:DE:27:0A:3F Authority key identifier: 19:2C:78:18:73:EA:4A:DD:E2:75:38:81:1C:B6:AA:7E:1B:C0:4F:1B Certificate issuer: /CN=192c781873ea4adde27538811cb6aa7e1bc04f1b Certificate serial: 019AF12D3F236701B892089A070F88B320E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSx4GHPqSt3idTiBHLaqfhvATxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft Manifest number: 20 Signing time: Sat 06 Dec 2025 01:01:05 +0000 Manifest this update: Sat 06 Dec 2025 01:01:05 +0000 Manifest next update: Sun 07 Dec 2025 01:01:05 +0000 Files and hashes: 1: GSx4GHPqSt3idTiBHLaqfhvATxs.crl (hash: 4VnCVrNmaEfr/1woLvNk0UfKXlBcSnDgP2zmFid62vc=) 2: Qt4Ezt33_0kXVdg-RJT20djh1XM.roa (hash: 3NPofej1c/zsdMN6gt/TX4ck3dTH6hmGSHfSKX9E1FQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft rsync://rpki.ripe.net/repository/DEFAULT/GSx4GHPqSt3idTiBHLaqfhvATxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:3f:23:67:01:b8:92:08:9a:07:0f:88:b3:20:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=192c781873ea4adde27538811cb6aa7e1bc04f1b Validity Not Before: Dec 6 01:01:05 2025 GMT Not After : Dec 7 01:01:05 2025 GMT Subject: CN=a1651f654c17205145041659494487a7de270a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:27:13:a2:90:dc:a3:db:ac:5e:59:db:8c:13: 07:3f:0b:39:3d:21:2d:0b:f3:ed:99:47:98:54:aa: 92:d7:7b:1c:22:f9:ef:25:b7:44:f6:cd:23:70:be: 0f:25:e0:04:9d:ad:b7:68:6b:e9:4f:a1:ba:a2:1f: 73:dc:e1:af:59:4f:65:18:5c:a7:49:42:03:ae:b4: de:5d:b2:13:43:44:4f:f4:b2:5c:f8:ef:6e:c8:bf: ba:3f:0d:3c:a7:43:4a:55:dd:05:0f:0a:51:04:9a: 31:0a:15:19:a5:86:05:07:67:4c:4a:29:80:dc:6c: a7:d9:f3:e5:5b:00:f1:39:ed:28:93:74:c4:b3:50: ac:95:7e:17:43:ec:86:f4:3b:0f:28:d2:9c:85:b0: 35:15:27:50:a0:15:04:ea:55:ab:ba:1b:0c:2d:da: 37:d7:4e:bb:c1:ac:e7:f5:48:89:1c:64:b2:a0:4f: 57:b0:e5:5c:f3:75:20:68:13:d4:19:3c:40:fa:91: 18:14:f9:42:97:78:34:5d:2a:83:f4:df:90:b9:bb: ea:77:03:9f:43:16:1a:e6:53:e4:96:c7:3c:a1:b6: 81:cc:55:17:8e:f0:2a:4b:a7:1b:04:36:6a:be:aa: 6d:43:73:2a:18:f8:3a:a8:3f:6f:71:2a:bf:4d:98: af:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:65:1F:65:4C:17:20:51:45:04:16:59:49:44:87:A7:DE:27:0A:3F X509v3 Authority Key Identifier: keyid:19:2C:78:18:73:EA:4A:DD:E2:75:38:81:1C:B6:AA:7E:1B:C0:4F:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSx4GHPqSt3idTiBHLaqfhvATxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:b3:87:b5:ef:3a:4d:af:e7:88:8e:36:90:df:30:73:9b:6f: 74:1b:01:bf:18:02:f0:30:f1:00:c8:ef:05:de:f3:be:47:af: 97:d4:45:2a:93:1a:73:68:9d:be:7e:32:48:20:ed:6a:ff:9d: 71:12:2f:f6:1f:dc:6b:76:ca:65:61:b9:cf:1b:cd:51:b5:8f: fa:0c:2d:2f:23:b7:63:23:fd:28:56:ab:c3:b6:e9:b1:a3:ce: fa:84:dc:05:89:f7:bd:89:d7:d8:77:d1:0e:cd:4e:bb:32:c2: 26:81:5a:76:4f:ab:99:1c:71:62:62:e8:c3:cb:42:06:9a:24: 45:d0:83:e7:15:98:ad:b6:1e:db:70:3b:ac:bc:6a:84:cd:68: b4:35:f3:31:f0:0b:2a:a0:aa:0c:17:e3:fa:b7:73:0c:0d:e4: 6f:e2:86:71:2f:3f:6d:3c:ca:60:10:ed:55:6b:e4:bf:a7:45: 55:96:8c:ba:d6:62:d1:9f:f4:98:41:9f:ce:a6:d1:a7:e1:a9: a8:02:24:a6:c8:22:4b:7f:e3:e2:fe:ff:d3:80:d2:1b:c0:9e: fc:30:d5:b2:ae:21:02:95:6d:30:8d:a8:17:9a:e8:1e:52:ea: fd:e6:ee:51:fc:ee:ac:b2:d5:6e:28:8a:0b:50:32:39:c9:a3: df:55:ec:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLT8jZwG4kgiaBw+IsyDhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MmM3ODE4NzNlYTRhZGRlMjc1Mzg4MTFjYjZhYTdlMWJj MDRmMWIwHhcNMjUxMjA2MDEwMTA1WhcNMjUxMjA3MDEwMTA1WjAzMTEwLwYDVQQD EyhhMTY1MWY2NTRjMTcyMDUxNDUwNDE2NTk0OTQ0ODdhN2RlMjcwYTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCcTopDco9usXlnbjBMHPws5PSEt C/PtmUeYVKqS13scIvnvJbdE9s0jcL4PJeAEna23aGvpT6G6oh9z3OGvWU9lGFyn SUIDrrTeXbITQ0RP9LJc+O9uyL+6Pw08p0NKVd0FDwpRBJoxChUZpYYFB2dMSimA 3Gyn2fPlWwDxOe0ok3TEs1CslX4XQ+yG9DsPKNKchbA1FSdQoBUE6lWruhsMLdo3 1067wazn9UiJHGSyoE9XsOVc83UgaBPUGTxA+pEYFPlCl3g0XSqD9N+QubvqdwOf QxYa5lPklsc8obaBzFUXjvAqS6cbBDZqvqptQ3MqGPg6qD9vcSq/TZiv0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFlH2VMFyBRRQQWWUlEh6feJwo/MB8GA1UdIwQY MBaAFBkseBhz6krd4nU4gRy2qn4bwE8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1N4NEdIUHFTdDNpZFRpQkhMYXFmaHZBVHhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lZjA0NzctZGNhNy00NjM0LTgwMTIt OTMzNGQ1NDhkMTkzLzEvR1N4NEdIUHFTdDNpZFRpQkhMYXFmaHZBVHhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lZjA0NzctZGNhNy00NjM0LTgwMTItOTMzNGQ1NDhkMTkz LzEvR1N4NEdIUHFTdDNpZFRpQkhMYXFmaHZBVHhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmbOHte86 Ta/niI42kN8wc5tvdBsBvxgC8DDxAMjvBd7zvkevl9RFKpMac2idvn4ySCDtav+d cRIv9h/ca3bKZWG5zxvNUbWP+gwtLyO3YyP9KFarw7bpsaPO+oTcBYn3vYnX2HfR Ds1OuzLCJoFadk+rmRxxYmLow8tCBpokRdCD5xWYrbYe23A7rLxqhM1otDXzMfAL KqCqDBfj+rdzDA3kb+KGcS8/bTzKYBDtVWvkv6dFVZaMutZi0Z/0mEGfzqbRp+Gp qAIkpsgiS3/j4v7/04DSG8Ce/DDVsq4hApVtMI2oF5roHlLq/ebuUfzurLLVbiiK C1AyOcmj31XsWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:54:49 2025 by rpki-client