This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft File: GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft (raw, json) Hash identifier: ipCflnhup1SjUzUYxF+VIsB9KBlscMhTRzbJACh4A2I= Subject key identifier: EF:54:7A:4D:58:E2:38:76:7C:40:DC:F7:C9:3B:9D:24:22:85:F9:B7 Authority key identifier: 19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13 Certificate issuer: /CN=1925e6387b33e94069a89a5d1be68904e4090613 Certificate serial: 019B4FCE6FF4E36214E4AC4D971671A7EBEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft Manifest number: 046B Signing time: Wed 24 Dec 2025 10:01:27 +0000 Manifest this update: Wed 24 Dec 2025 10:01:27 +0000 Manifest next update: Thu 25 Dec 2025 10:01:27 +0000 Files and hashes: 1: GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl (hash: 16YdeaWSM9xU6XfTNpJ7dUjiY2/UvvWhKGB4/ajvqhs=) 2: KKovPP5k_vOQvmKc7t5x14I_gos.roa (hash: xTSJVhmS95WWwOtUsvBgdC5iNk4sqmcitObjOn9r3l4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:6f:f4:e3:62:14:e4:ac:4d:97:16:71:a7:eb:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1925e6387b33e94069a89a5d1be68904e4090613 Validity Not Before: Dec 24 10:01:27 2025 GMT Not After : Dec 25 10:01:27 2025 GMT Subject: CN=ef547a4d58e238767c40dcf7c93b9d242285f9b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:69:e0:84:0b:be:cd:a3:f5:e8:ff:31:2f:35: f7:76:62:74:09:c0:00:9d:44:52:17:33:f2:03:6b: d0:ce:f5:7e:2f:69:0a:91:82:5b:b8:63:ec:27:56: fa:dd:84:c4:b8:ce:05:4d:24:2b:28:e1:56:e3:a5: 88:45:7c:25:da:13:21:42:37:68:ed:06:49:d7:0a: 71:76:c7:e4:ee:e9:ca:c6:e4:82:f0:39:87:17:bb: c7:4b:f8:f0:ff:24:e7:f9:de:1a:ca:09:24:19:bc: 94:e3:fb:f2:49:db:b6:77:af:e0:5a:4c:bd:86:03: d0:b8:ed:27:f0:1a:a1:a3:ec:e4:70:76:5a:e2:88: 43:68:36:ed:70:07:6d:c3:66:e2:af:ae:97:c5:98: d6:58:d4:df:fa:66:1d:fe:70:b7:5d:9a:f3:23:9a: 64:63:0a:c1:61:46:66:bf:78:f2:d0:c0:de:91:06: 45:1f:40:0e:23:76:50:c6:4b:7b:78:67:17:5d:fe: 9a:71:b0:14:5e:9e:7f:1d:dd:22:7b:ab:76:2b:54: cc:37:9a:ff:a9:94:b2:7b:50:72:ab:db:8b:e3:39: 79:9a:d6:fb:19:42:50:8b:c6:d2:0d:c3:00:9f:89: e1:dc:d5:f0:a3:de:b4:91:cd:33:af:21:d2:bb:87: 8a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:54:7A:4D:58:E2:38:76:7C:40:DC:F7:C9:3B:9D:24:22:85:F9:B7 X509v3 Authority Key Identifier: keyid:19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:16:2e:45:23:97:59:ee:37:6b:b5:f8:a0:b0:95:be:84:e6: 3c:e2:2d:be:d6:86:83:7c:f6:6d:1f:91:03:5c:29:1f:d0:45: 14:47:32:80:51:9c:5c:59:40:90:43:82:61:6a:19:e8:6c:31: 59:f0:20:50:b2:8c:06:ab:0d:48:33:c3:57:df:45:d3:f5:55: 9e:50:3c:c4:89:bf:92:fe:d1:d5:13:d5:a6:0e:88:52:b0:28: fe:b1:b2:a0:fb:e5:c7:0b:a8:0b:7d:7b:45:40:28:f1:9d:20: e8:26:42:5d:a7:28:d9:8a:1d:53:ee:52:b2:b9:2f:85:3a:5e: b0:90:05:20:59:dc:a8:27:eb:2a:53:98:85:b1:1f:0a:6d:15: 9a:3d:75:01:96:a5:26:16:b0:50:6f:d3:e2:0e:82:23:f4:2d: af:0c:aa:00:7e:08:aa:50:4c:47:64:ff:4d:28:29:a5:f1:65: 17:89:a3:94:01:d4:d9:1a:71:9b:5a:33:17:5b:64:20:36:4f: bc:21:db:e8:e0:b5:3f:25:3e:ac:7d:d4:86:1b:51:c2:94:08: e3:34:d6:a4:2e:87:f4:7e:31:a1:23:57:80:06:b3:12:3b:22: 95:a1:37:ab:b9:96:ae:a9:31:82:06:d3:52:79:fd:ba:c3:f6: 5d:ae:42:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzm/042IU5KxNlxZxp+vqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MjVlNjM4N2IzM2U5NDA2OWE4OWE1ZDFiZTY4OTA0ZTQw OTA2MTMwHhcNMjUxMjI0MTAwMTI3WhcNMjUxMjI1MTAwMTI3WjAzMTEwLwYDVQQD EyhlZjU0N2E0ZDU4ZTIzODc2N2M0MGRjZjdjOTNiOWQyNDIyODVmOWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWnghAu+zaP16P8xLzX3dmJ0CcAA nURSFzPyA2vQzvV+L2kKkYJbuGPsJ1b63YTEuM4FTSQrKOFW46WIRXwl2hMhQjdo 7QZJ1wpxdsfk7unKxuSC8DmHF7vHS/jw/yTn+d4aygkkGbyU4/vySdu2d6/gWky9 hgPQuO0n8Bqho+zkcHZa4ohDaDbtcAdtw2bir66XxZjWWNTf+mYd/nC3XZrzI5pk YwrBYUZmv3jy0MDekQZFH0AOI3ZQxkt7eGcXXf6acbAUXp5/Hd0ie6t2K1TMN5r/ qZSye1Byq9uL4zl5mtb7GUJQi8bSDcMAn4nh3NXwo960kc0zryHSu4eKkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9Uek1Y4jh2fEDc98k7nSQihfm3MB8GA1UdIwQY MBaAFBkl5jh7M+lAaaiaXRvmiQTkCQYTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kNGUwZGItMThjMS00NDgzLTg4MDMt OTY2Njg1ZWE0MGY5LzEvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kNGUwZGItMThjMS00NDgzLTg4MDMtOTY2Njg1ZWE0MGY5 LzEvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRYuRSOX We43a7X4oLCVvoTmPOItvtaGg3z2bR+RA1wpH9BFFEcygFGcXFlAkEOCYWoZ6Gwx WfAgULKMBqsNSDPDV99F0/VVnlA8xIm/kv7R1RPVpg6IUrAo/rGyoPvlxwuoC317 RUAo8Z0g6CZCXaco2YodU+5SsrkvhTpesJAFIFncqCfrKlOYhbEfCm0Vmj11AZal JhawUG/T4g6CI/QtrwyqAH4IqlBMR2T/TSgppfFlF4mjlAHU2Rpxm1ozF1tkIDZP vCHb6OC1PyU+rH3UhhtRwpQI4zTWpC6H9H4xoSNXgAazEjsilaE3q7mWrqkxggbT Unn9usP2Xa5CVw== -----END CERTIFICATE-----Generated at Wed Dec 24 13:09:37 2025 by rpki-client