This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json) Hash identifier: 3QQvv+rDFQgDwwdssPPFIA0BorYz+j0S1VIgvjNC4AI= Subject key identifier: E7:1A:1C:21:3B:E4:2D:6B:BF:66:51:C2:83:B6:AB:4C:F2:EC:B9:6D Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc Certificate serial: 019B3E6DD89AC5500B9F746B9D78D13CE439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 01:02:24 +0000 Manifest this update: Sun 21 Dec 2025 01:02:24 +0000 Manifest next update: Mon 22 Dec 2025 01:02:24 +0000 Files and hashes: 1: Wka8U3x86jnATnb9jP1IM9JUg7Q.roa (hash: U3QbT6zi/lWoOslxKHpAgFLF1TaLlii47IIoTKw4FTY=) 2: elawQd6GCERPNU07ZCI-dli47NA.roa (hash: 0JYGGAHMRXtvzvfYfM6q/NrguHYhOFVdE7wB8JPPhJs=) 3: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: hUS7kwHtGoOxvkqvPDrGK+gTtMOG6uDYomlHKkk/f0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:d8:9a:c5:50:0b:9f:74:6b:9d:78:d1:3c:e4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc Validity Not Before: Dec 21 01:02:24 2025 GMT Not After : Dec 22 01:02:24 2025 GMT Subject: CN=e71a1c213be42d6bbf6651c283b6ab4cf2ecb96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:de:3a:df:4f:89:2c:9b:77:4e:1c:e3:7d:3f: ad:d7:d0:96:b3:a9:9c:bb:00:e0:c2:32:14:95:1a: e8:0a:cf:12:72:44:7d:ac:2b:43:09:80:61:12:ae: 8e:2f:4c:7e:79:e7:f8:cf:84:25:4b:ab:77:2e:8c: b2:e2:22:3e:24:a8:52:70:ca:12:41:73:f5:c8:7d: 5d:fd:32:bc:61:bd:1e:2f:5e:d4:ea:e2:88:20:1b: 28:77:76:e2:80:3e:ca:8d:56:27:28:6c:85:a0:33: e5:18:96:42:d0:70:30:e9:a4:f8:f9:7b:b9:ab:9d: 11:d2:73:7c:45:f4:21:f2:7b:dd:92:96:40:ec:4e: 9b:81:16:51:f3:7d:4b:52:f0:b8:f4:09:19:b7:06: 7e:79:c6:47:2e:4c:98:3a:0a:a4:95:7f:49:d4:f0: 0c:87:0b:f3:dc:e9:cd:e3:a5:de:3a:5c:19:90:fe: ce:35:57:7f:50:83:9e:72:bf:b7:97:91:79:71:72: 6e:e2:9c:8a:90:f2:6d:d1:00:ef:10:1b:9d:2c:d9: 66:43:ee:ab:cb:f5:d8:35:95:f2:c0:aa:69:02:6b: f0:41:7e:8f:1e:28:ea:55:39:43:82:bc:2b:25:fe: 77:2f:4e:5a:c6:60:c6:61:e7:ee:df:42:7c:ba:01: d7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1A:1C:21:3B:E4:2D:6B:BF:66:51:C2:83:B6:AB:4C:F2:EC:B9:6D X509v3 Authority Key Identifier: keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:63:c5:14:cd:b3:ec:af:af:ae:fe:2c:33:ab:b5:fb:b7:63: a0:b9:b8:a9:e6:66:11:38:f9:82:df:44:cc:56:bf:c9:c2:71: 94:e9:9e:8e:3c:d5:2d:da:75:c9:b8:e9:62:4f:02:ed:1e:21: d2:7c:93:4f:80:cd:02:0e:54:8b:f9:eb:ec:1f:ab:09:51:c8: 9b:64:e8:2a:a6:91:2b:2b:1b:b7:6d:ea:6f:de:04:fd:7a:cb: 18:92:9b:bb:fc:d9:76:03:e4:e3:a7:1d:d8:52:8e:75:da:6e: 5a:fc:f3:83:d8:05:95:20:08:aa:f6:ba:bf:16:57:c0:3d:c3: 95:90:3c:35:e9:07:c9:63:50:ec:6e:8f:b0:1e:a0:27:01:c9: 3f:ec:1b:68:67:07:d1:96:c9:cc:fb:ec:5c:44:7f:6f:c2:54: 1a:c0:49:4a:a6:83:65:1a:b2:02:e3:cd:bd:8a:ab:92:90:57: ed:54:09:32:96:ba:56:cc:62:51:0b:50:99:f3:51:dc:e2:81: c7:8e:40:96:5d:e1:86:01:6e:38:67:26:8b:29:8b:f2:d9:3e: 08:ed:fa:70:2d:2e:6b:85:1d:66:e6:b9:89:57:5c:d2:56:d8: a9:1c:3c:8a:3a:73:4f:fe:f7:d7:e3:b2:76:42:38:a8:04:c4: e4:ab:a3:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bdiaxVALn3RrnXjRPOQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMmIzMGQ4OWIxYmNmZjY5OWY2NDFmODgwMjY5NDJkMTZh NzJiY2MwHhcNMjUxMjIxMDEwMjI0WhcNMjUxMjIyMDEwMjI0WjAzMTEwLwYDVQQD EyhlNzFhMWMyMTNiZTQyZDZiYmY2NjUxYzI4M2I2YWI0Y2YyZWNiOTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt4630+JLJt3ThzjfT+t19CWs6mc uwDgwjIUlRroCs8SckR9rCtDCYBhEq6OL0x+eef4z4QlS6t3Loyy4iI+JKhScMoS QXP1yH1d/TK8Yb0eL17U6uKIIBsod3bigD7KjVYnKGyFoDPlGJZC0HAw6aT4+Xu5 q50R0nN8RfQh8nvdkpZA7E6bgRZR831LUvC49AkZtwZ+ecZHLkyYOgqklX9J1PAM hwvz3OnN46XeOlwZkP7ONVd/UIOecr+3l5F5cXJu4pyKkPJt0QDvEBudLNlmQ+6r y/XYNZXywKppAmvwQX6PHijqVTlDgrwrJf53L05axmDGYefu30J8ugHX5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcaHCE75C1rv2ZRwoO2q0zy7LltMB8GA1UdIwQY MBaAFIIrMNibG8/2mfZB+IAmlC0WpyvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNjg3NzAtZWRmMi00MzU4LWI4MjEt OTE0ZDVkYzUxOTdmLzEvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lNjg3NzAtZWRmMi00MzU4LWI4MjEtOTE0ZDVkYzUxOTdm LzEvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWPFFM2z 7K+vrv4sM6u1+7djoLm4qeZmETj5gt9EzFa/ycJxlOmejjzVLdp1ybjpYk8C7R4h 0nyTT4DNAg5Ui/nr7B+rCVHIm2ToKqaRKysbt23qb94E/XrLGJKbu/zZdgPk46cd 2FKOddpuWvzzg9gFlSAIqva6vxZXwD3DlZA8NekHyWNQ7G6PsB6gJwHJP+wbaGcH 0ZbJzPvsXER/b8JUGsBJSqaDZRqyAuPNvYqrkpBX7VQJMpa6VsxiUQtQmfNR3OKB x45All3hhgFuOGcmiymL8tk+CO36cC0ua4UdZua5iVdc0lbYqRw8ijpzT/731+Oy dkI4qATE5KujYA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:02:34 2025 by rpki-client