This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft File: 1-GSAgviI1Al6xM26hGYLkw91A18.mft (raw, json) Hash identifier: sGV3TvsIvzyRRQTCSiCGERrBVQPx2gyh4Wn2UT/r3bg= Subject key identifier: 8D:22:59:EF:F8:9A:F2:51:CC:7B:3F:1B:00:D5:AD:9C:2E:AB:82:50 Authority key identifier: F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F Certificate issuer: /CN=f8648082f888d4097ac4cdba84660b930f75035f Certificate serial: 019B39463458B9D063C6C84BC1BEC4DD2168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft Manifest number: 3C Signing time: Sat 20 Dec 2025 01:01:00 +0000 Manifest this update: Sat 20 Dec 2025 01:01:00 +0000 Manifest next update: Sun 21 Dec 2025 01:01:00 +0000 Files and hashes: 1: 1-GSAgviI1Al6xM26hGYLkw91A18.crl (hash: fVT+9fRutlER8eel2QRGVXJ1ieSP0DZGmTqFxobnivk=) 2: Y2VJeHf8rSYFPkGAH0xVhAWSCxQ.roa (hash: 3d5t3srO9iC/BdcE17sy3EhUqKaNXX1Bje+/wHHOx3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:34:58:b9:d0:63:c6:c8:4b:c1:be:c4:dd:21:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8648082f888d4097ac4cdba84660b930f75035f Validity Not Before: Dec 20 01:01:00 2025 GMT Not After : Dec 21 01:01:00 2025 GMT Subject: CN=8d2259eff89af251cc7b3f1b00d5ad9c2eab8250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9e:72:61:fb:db:e0:95:82:1b:4c:15:5d:0c: 1b:8a:e3:56:0e:a3:11:18:f3:0f:a3:bd:06:44:4f: d0:75:2b:09:7f:c4:f8:57:16:f4:f0:96:06:00:59: 6b:42:d1:1b:da:dc:7f:7e:ae:fd:2a:a8:9a:f0:e3: 10:1e:5a:01:e4:ef:b3:bd:dc:c6:3a:87:ca:6e:0e: 3a:e3:91:41:0d:9d:0c:7e:73:84:61:7a:a0:f5:35: fd:96:f6:23:3b:a9:da:2d:ec:7c:11:20:c5:2f:45: d5:8f:5f:32:1c:ef:e3:7f:b9:5b:37:d0:3b:67:e7: da:ea:9a:83:42:d4:60:8d:c4:f6:af:04:bb:01:40: 0a:7b:4d:c4:57:43:7f:5a:f3:8f:3d:fe:b5:31:b6: d6:f8:ba:22:76:c8:57:dc:13:ba:e2:35:76:0b:81: 15:37:99:c6:86:74:13:ee:38:19:50:72:9e:46:6d: 6a:5f:f5:80:c9:f1:da:70:ba:28:4e:75:3a:33:b2: f1:4c:23:97:10:76:a9:30:cb:c7:ea:23:42:7b:00: 45:c3:91:6d:a1:a9:da:f5:8f:6d:87:dd:88:fd:b9: bf:1a:d4:3e:1f:21:bf:9b:bb:d1:36:10:2a:9f:b6: 0f:df:3c:ff:28:a9:fc:42:fa:e8:ae:dd:7b:ca:2f: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:22:59:EF:F8:9A:F2:51:CC:7B:3F:1B:00:D5:AD:9C:2E:AB:82:50 X509v3 Authority Key Identifier: keyid:F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:a1:e6:68:7d:61:8f:ef:4f:26:2a:6b:94:26:c3:66:17:90: 85:b0:f9:e9:ca:e3:08:90:1c:ab:1c:bb:f6:2e:72:5e:3a:b3: dd:43:e7:49:b2:01:1f:90:73:d7:a5:f2:e8:00:59:e4:31:74: 1a:32:bd:d2:a6:c0:50:21:45:89:38:c1:d6:ad:63:6b:b9:da: c5:31:52:4e:95:75:9d:af:3c:19:3f:69:fe:60:3e:4a:bd:5b: d3:84:6d:13:c9:8f:63:5c:db:40:4b:2f:3e:1a:b6:10:81:67: 5e:29:ba:f9:e6:d6:3f:b4:61:66:ae:a9:f8:a8:f0:01:be:9f: 09:ef:6b:44:af:68:fb:53:57:72:32:c9:83:6f:26:99:d5:16: c4:35:b4:5d:36:ca:2e:ee:6e:25:9c:fa:80:d1:47:03:9d:ae: 5c:91:36:e9:29:1e:41:08:c0:3f:f8:33:c9:c7:9d:51:47:59: b7:e1:7e:79:80:74:42:1f:63:8a:2f:c0:73:a2:56:90:76:25: d6:17:33:a8:7b:84:e7:a2:dd:93:0a:a2:78:44:dc:c4:40:35: 2e:a1:84:1c:3c:76:c6:ca:2f:86:1f:e5:21:96:3d:0b:91:70: f0:9f:17:e9:98:e8:0e:dd:52:bc:d0:a0:82:c1:77:eb:2d:dc: dc:47:95:98 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs5RjRYudBjxshLwb7E3SFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjQ4MDgyZjg4OGQ0MDk3YWM0Y2RiYTg0NjYwYjkzMGY3 NTAzNWYwHhcNMjUxMjIwMDEwMTAwWhcNMjUxMjIxMDEwMTAwWjAzMTEwLwYDVQQD Eyg4ZDIyNTllZmY4OWFmMjUxY2M3YjNmMWIwMGQ1YWQ5YzJlYWI4MjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z5yYfvb4JWCG0wVXQwbiuNWDqMR GPMPo70GRE/QdSsJf8T4Vxb08JYGAFlrQtEb2tx/fq79Kqia8OMQHloB5O+zvdzG OofKbg4645FBDZ0MfnOEYXqg9TX9lvYjO6naLex8ESDFL0XVj18yHO/jf7lbN9A7 Z+fa6pqDQtRgjcT2rwS7AUAKe03EV0N/WvOPPf61MbbW+LoidshX3BO64jV2C4EV N5nGhnQT7jgZUHKeRm1qX/WAyfHacLooTnU6M7LxTCOXEHapMMvH6iNCewBFw5Ft oana9Y9th92I/bm/GtQ+HyG/m7vRNhAqn7YP3zz/KKn8Qvrort17yi8CswIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFI0iWe/4mvJRzHs/GwDVrZwuq4JQMB8GA1UdIwQY MBaAFPhkgIL4iNQJesTNuoRmC5MPdQNfMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HU0FndmlJMUFsNnhNMjZoR1lMa3c5MUExOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvYjY2MTJiLTk1M2UtNGM2Yy1hYWQw LTNhZjlhNGIwYTg3My8xLzEtR1NBZ3ZpSTFBbDZ4TTI2aEdZTGt3OTFBMTgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmL2I2NjEyYi05NTNlLTRjNmMtYWFkMC0zYWY5YTRiMGE4 NzMvMS8xLUdTQWd2aUkxQWw2eE0yNmhHWUxrdzkxQTE4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsaHm aH1hj+9PJiprlCbDZheQhbD56crjCJAcqxy79i5yXjqz3UPnSbIBH5Bz16Xy6ABZ 5DF0GjK90qbAUCFFiTjB1q1ja7naxTFSTpV1na88GT9p/mA+Sr1b04RtE8mPY1zb QEsvPhq2EIFnXim6+ebWP7RhZq6p+KjwAb6fCe9rRK9o+1NXcjLJg28mmdUWxDW0 XTbKLu5uJZz6gNFHA52uXJE26SkeQQjAP/gzycedUUdZt+F+eYB0Qh9jii/Ac6JW kHYl1hczqHuE56LdkwqieETcxEA1LqGEHDx2xsovhh/lIZY9C5Fw8J8X6ZjoDt1S vNCggsF36y3c3EeVmA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:10 2025 by rpki-client