This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft File: GsvdANJ7iovvyGbK83jxkCdoR2k.mft (raw, json) Hash identifier: Dcmn97mN2UM3NzdbZbaA72uurkpe/DSS+I0oRWOKS0E= Subject key identifier: DD:BE:30:BB:9F:28:95:27:E0:A7:74:00:A4:93:0C:7B:F5:05:1C:5E Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69 Certificate issuer: /CN=1acbdd00d27b8a8befc866caf378f19027684769 Certificate serial: 019B3FB5F80F2634468E118259980D15C5C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft Manifest number: 0A99 Signing time: Sun 21 Dec 2025 07:00:48 +0000 Manifest this update: Sun 21 Dec 2025 07:00:48 +0000 Manifest next update: Mon 22 Dec 2025 07:00:48 +0000 Files and hashes: 1: GsvdANJ7iovvyGbK83jxkCdoR2k.crl (hash: ns8XoMWA7s4dKYBNoyGRxJBU4WN8xjkVEsYXvLqgykw=) 2: JLeYM1Nb1WkxGedHLrl3D2YAcD0.roa (hash: kpcTVdbw29GtZxZaBOoPfJn9eSPlvRnFiHJuCzaGNU4=) 3: izbCDxefHi81Ceh8v70jil8PjrA.roa (hash: G81Vq+SeFhUUiPynuXGPGqpCxUEFG0haFucomHcGaT8=) 4: uvZ9FoblIzzQH1DQjOvcBhSKeZU.roa (hash: knG2zE+cphfPly9s92WP/7hjIDgEXmoUhOUrwgfF5vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:f8:0f:26:34:46:8e:11:82:59:98:0d:15:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769 Validity Not Before: Dec 21 07:00:48 2025 GMT Not After : Dec 22 07:00:48 2025 GMT Subject: CN=ddbe30bb9f289527e0a77400a4930c7bf5051c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e7:cd:e4:fb:4e:8a:82:0a:57:9c:7d:3c:05: 59:04:b5:72:48:93:b3:5f:51:b2:6a:32:27:4c:6a: f0:6b:46:20:23:d6:61:86:24:76:06:6a:0c:d6:f3: bf:1a:1e:de:a5:c4:16:3d:6c:ea:f5:6d:ee:28:76: 87:2a:18:fd:d2:51:1b:df:3f:a1:4e:b0:18:fc:d3: 83:ff:44:57:d4:47:7d:e0:fe:7d:45:4f:5d:fe:36: 5d:6e:c0:29:e2:13:17:ac:4f:fe:5e:d1:98:37:33: 23:1a:69:df:51:0e:0a:d1:4f:be:f7:92:74:d8:28: 62:ae:8f:5f:ff:9d:53:1c:d8:90:2b:b4:59:e8:58: 15:8e:53:19:e6:0c:c3:8e:ae:08:f7:37:48:a7:05: f5:37:9a:84:5f:f7:02:27:02:0a:ec:d7:46:e8:99: d0:32:17:b4:c4:7a:6c:b9:c4:5a:21:68:a1:2e:4c: f2:db:2a:c6:47:71:ee:5e:72:cb:b5:fe:38:a9:b9: 66:d1:cc:56:f7:ed:bf:e0:e1:ce:98:79:71:d6:c7: 3a:c2:1d:9d:bb:3a:90:ae:55:05:6f:8a:49:9e:84: fc:04:cf:7b:c1:64:e6:f2:e9:19:fe:47:f3:90:9f: 37:4c:72:93:e0:12:b4:cf:67:4a:4e:d4:22:2e:d5: 45:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BE:30:BB:9F:28:95:27:E0:A7:74:00:A4:93:0C:7B:F5:05:1C:5E X509v3 Authority Key Identifier: keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:33:9c:0f:4b:17:01:4f:9a:92:d8:07:1c:30:28:5d:03:da: 66:b8:74:76:f7:0b:b6:9b:33:c8:bd:33:d6:9f:8b:42:8d:f4: 38:65:1a:15:4e:c4:19:2b:b9:40:cb:08:10:6c:38:c1:fa:65: 16:7a:49:d4:1c:3e:18:13:5e:a6:c4:71:7e:79:56:d4:6f:c0: 59:3a:a2:29:7b:d6:45:e7:d6:24:ac:98:a4:08:0d:6a:e0:4e: 7f:56:4e:ba:ba:b0:ff:26:8a:ae:2b:13:9c:e8:c4:ff:7a:75: 57:28:c0:54:2f:bc:9c:40:b2:51:4c:3e:e8:84:93:44:3a:11: 22:97:70:2a:ed:3b:85:0a:3e:1b:be:97:07:58:b9:d0:37:da: 2a:f4:f6:fc:55:e3:3e:23:6b:d6:3f:ff:fd:c1:1a:ab:67:37: 47:b0:7e:67:93:35:ef:c8:8f:5d:ce:f4:ea:14:4a:60:1e:61: b3:81:a0:12:fa:22:c3:62:69:e2:ce:ac:08:07:39:ad:e8:37: b3:17:31:d7:fd:29:09:83:16:29:4b:fc:db:a3:7f:c4:1b:12: 6a:c7:1b:bc:31:dd:51:1e:f8:b5:0d:fc:22:84:01:21:42:b5: 66:bb:f9:24:a2:c1:09:a4:7f:db:a0:ec:f5:03:5c:bb:47:05: ba:30:24:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tfgPJjRGjhGCWZgNFcXAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2JkZDAwZDI3YjhhOGJlZmM4NjZjYWYzNzhmMTkwMjc2 ODQ3NjkwHhcNMjUxMjIxMDcwMDQ4WhcNMjUxMjIyMDcwMDQ4WjAzMTEwLwYDVQQD EyhkZGJlMzBiYjlmMjg5NTI3ZTBhNzc0MDBhNDkzMGM3YmY1MDUxYzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOfN5PtOioIKV5x9PAVZBLVySJOz X1GyajInTGrwa0YgI9ZhhiR2BmoM1vO/Gh7epcQWPWzq9W3uKHaHKhj90lEb3z+h TrAY/NOD/0RX1Ed94P59RU9d/jZdbsAp4hMXrE/+XtGYNzMjGmnfUQ4K0U++95J0 2Chiro9f/51THNiQK7RZ6FgVjlMZ5gzDjq4I9zdIpwX1N5qEX/cCJwIK7NdG6JnQ Mhe0xHpsucRaIWihLkzy2yrGR3HuXnLLtf44qblm0cxW9+2/4OHOmHlx1sc6wh2d uzqQrlUFb4pJnoT8BM97wWTm8ukZ/kfzkJ83THKT4BK0z2dKTtQiLtVFpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2+MLufKJUn4Kd0AKSTDHv1BRxeMB8GA1UdIwQY MBaAFBrL3QDSe4qL78hmyvN48ZAnaEdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQt OWY5NTM2YmIyYzM3LzEvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQtOWY5NTM2YmIyYzM3 LzEvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODOcD0sX AU+aktgHHDAoXQPaZrh0dvcLtpszyL0z1p+LQo30OGUaFU7EGSu5QMsIEGw4wfpl FnpJ1Bw+GBNepsRxfnlW1G/AWTqiKXvWRefWJKyYpAgNauBOf1ZOurqw/yaKrisT nOjE/3p1VyjAVC+8nECyUUw+6ISTRDoRIpdwKu07hQo+G76XB1i50DfaKvT2/FXj PiNr1j///cEaq2c3R7B+Z5M178iPXc706hRKYB5hs4GgEvoiw2Jp4s6sCAc5reg3 sxcx1/0pCYMWKUv826N/xBsSascbvDHdUR74tQ38IoQBIUK1Zrv5JKLBCaR/26Ds 9QNcu0cFujAkMQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:21:13 2025 by rpki-client