This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft File: gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json) Hash identifier: th6Je3OYNFwasl1Fbsd1IZQn2RXwKHTiaWL+qLCOd7o= Subject key identifier: E2:8A:16:36:BC:9C:BB:BC:D6:ED:8F:CB:D0:DC:5B:0B:F6:EB:4F:D0 Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95 Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595 Certificate serial: 019AF50A9A99302ABF9FEE66CD14D065CF22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft Manifest number: 1387 Signing time: Sat 06 Dec 2025 19:01:43 +0000 Manifest this update: Sat 06 Dec 2025 19:01:43 +0000 Manifest next update: Sun 07 Dec 2025 19:01:43 +0000 Files and hashes: 1: bYTh9rqmyoD0Z9Or16ek84SzWn4.roa (hash: 4klJmHJXl6kfKkt89+CuaKwDfZrFu99Y5sLGCeYnZ1E=) 2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: J4ekW1t6vG4Uovmhk0WDLTNTWaMl6Lc00dljBp894Ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:9a:99:30:2a:bf:9f:ee:66:cd:14:d0:65:cf:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595 Validity Not Before: Dec 6 19:01:43 2025 GMT Not After : Dec 7 19:01:43 2025 GMT Subject: CN=e28a1636bc9cbbbcd6ed8fcbd0dc5b0bf6eb4fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:fd:47:51:00:f5:56:94:6d:a4:9e:29:8f: 3f:5f:d2:85:d6:46:89:75:1d:46:3b:3f:ac:1f:3f: 9a:cb:57:40:95:98:1c:58:f5:64:79:7f:0b:1e:e2: 99:b6:98:31:48:24:7f:0e:82:80:40:99:49:d2:da: 39:f0:36:2c:10:ce:f4:67:b0:5d:31:97:16:e4:ab: 5b:4c:67:73:fd:c9:b5:73:30:96:16:28:e8:5e:96: fe:ba:87:38:b1:e6:30:97:66:31:7d:9e:0f:87:36: a5:57:5c:3c:8c:96:7e:eb:10:9b:0a:ae:08:1a:de: 2d:07:05:66:24:f3:33:9b:69:7e:34:f1:94:36:b1: 89:5e:8f:7f:cd:c2:96:37:37:7f:ed:c7:8f:70:1f: 34:87:34:f6:be:a5:13:c3:4c:7d:dd:4e:a6:57:c1: 35:ee:44:35:b6:d2:da:5b:9d:be:88:96:58:3e:af: c1:fe:b2:d8:38:b1:61:3c:dd:c5:50:23:ee:f4:65: a3:07:50:75:de:ad:ae:55:f0:df:41:0b:e9:b8:82: 17:8b:5f:61:4a:9c:4a:69:ca:ef:d0:4c:8a:9a:83: 3e:b3:70:83:54:d7:e2:86:57:a2:09:b4:e2:84:b1: 07:25:4f:49:8d:5f:f1:36:e4:95:47:4c:47:22:61: 29:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8A:16:36:BC:9C:BB:BC:D6:ED:8F:CB:D0:DC:5B:0B:F6:EB:4F:D0 X509v3 Authority Key Identifier: keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:07:9b:88:f7:86:c2:ef:90:3b:ba:b5:b3:5c:28:b7:23:30: d5:10:10:2d:be:72:7b:ec:9c:cb:d3:b0:20:1f:0c:c9:1e:74: 3f:bd:78:b8:02:63:c6:d6:5d:59:ef:32:0c:e4:cb:8a:83:b7: a0:0b:30:02:51:23:b6:d8:f5:63:b6:d1:71:2d:82:78:40:2b: ce:72:f3:66:60:be:4b:1a:e0:b8:e9:9e:d3:fb:27:5f:80:51: b0:d3:64:0c:b9:f4:42:a1:25:3c:1d:d8:98:b9:4f:dd:3d:9a: 26:0c:65:17:1e:ad:4f:8f:f2:f5:6d:87:24:4a:03:5b:62:2c: 20:36:71:22:6c:2a:41:7a:6d:75:1e:f1:3c:fe:b4:6d:4a:85: 8e:84:bc:49:9d:3a:6c:31:78:80:c2:fc:dc:34:e7:43:f1:d4: f9:1e:ea:b6:99:70:1a:a1:61:86:73:ae:fe:ee:53:c8:23:2a: af:3e:b6:c8:11:46:dd:57:c1:c4:bd:bc:61:ac:89:fa:71:86: a8:84:15:c8:49:c9:16:d7:4c:40:f7:de:1b:ea:89:7d:7d:67: 57:98:39:8b:66:28:5a:62:ad:6f:01:8f:eb:15:c1:a4:52:77: 7c:ab:6d:c4:09:a9:7c:e6:03:b5:65:ec:b6:f1:ea:55:2d:f9: 58:80:56:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CpqZMCq/n+5mzRTQZc8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYzc4NjI3Nzk0ZTg3ZmY5NzE4ZGIxYjBkZjdlZWUyZWRi MzM1OTUwHhcNMjUxMjA2MTkwMTQzWhcNMjUxMjA3MTkwMTQzWjAzMTEwLwYDVQQD EyhlMjhhMTYzNmJjOWNiYmJjZDZlZDhmY2JkMGRjNWIwYmY2ZWI0ZmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyn9R1EA9VaUbaSeKY8/X9KF1kaJ dR1GOz+sHz+ay1dAlZgcWPVkeX8LHuKZtpgxSCR/DoKAQJlJ0to58DYsEM70Z7Bd MZcW5KtbTGdz/cm1czCWFijoXpb+uoc4seYwl2YxfZ4PhzalV1w8jJZ+6xCbCq4I Gt4tBwVmJPMzm2l+NPGUNrGJXo9/zcKWNzd/7cePcB80hzT2vqUTw0x93U6mV8E1 7kQ1ttLaW52+iJZYPq/B/rLYOLFhPN3FUCPu9GWjB1B13q2uVfDfQQvpuIIXi19h SpxKacrv0EyKmoM+s3CDVNfihleiCbTihLEHJU9JjV/xNuSVR0xHImEpJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKKFja8nLu81u2Py9DcWwv260/QMB8GA1UdIwQY MBaAFILHhid5Tof/lxjbGw337uLtszWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMt NjI2ZmMwNDAzYWM5LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMtNjI2ZmMwNDAzYWM5 LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAebiPeG wu+QO7q1s1wotyMw1RAQLb5ye+ycy9OwIB8MyR50P714uAJjxtZdWe8yDOTLioO3 oAswAlEjttj1Y7bRcS2CeEArznLzZmC+SxrguOme0/snX4BRsNNkDLn0QqElPB3Y mLlP3T2aJgxlFx6tT4/y9W2HJEoDW2IsIDZxImwqQXptdR7xPP60bUqFjoS8SZ06 bDF4gML83DTnQ/HU+R7qtplwGqFhhnOu/u5TyCMqrz62yBFG3VfBxL28YayJ+nGG qIQVyEnJFtdMQPfeG+qJfX1nV5g5i2YoWmKtbwGP6xXBpFJ3fKttxAmpfOYDtWXs tvHqVS35WIBWJw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:25:24 2025 by rpki-client