This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft File: gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json) Hash identifier: BQ+97uQZKppc8TcAcimsFXAEawCQvRwtv1R+XlBpVzM= Subject key identifier: AE:0C:68:F4:2E:35:E4:33:1F:65:47:B3:72:A1:5E:A3:22:DB:23:BA Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95 Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595 Certificate serial: 019B3A901B4C771249155CF5D56D998DA9EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft Manifest number: 13AB Signing time: Sat 20 Dec 2025 07:01:21 +0000 Manifest this update: Sat 20 Dec 2025 07:01:21 +0000 Manifest next update: Sun 21 Dec 2025 07:01:21 +0000 Files and hashes: 1: bYTh9rqmyoD0Z9Or16ek84SzWn4.roa (hash: 4klJmHJXl6kfKkt89+CuaKwDfZrFu99Y5sLGCeYnZ1E=) 2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: PQ6zbywbQJpXHrfLmuvanHwtD1nWLrKXY7rI41nHPwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:1b:4c:77:12:49:15:5c:f5:d5:6d:99:8d:a9:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595 Validity Not Before: Dec 20 07:01:21 2025 GMT Not After : Dec 21 07:01:21 2025 GMT Subject: CN=ae0c68f42e35e4331f6547b372a15ea322db23ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:86:59:6c:82:a8:85:ed:93:8b:fc:fb:f6:9c: 3b:18:09:7a:80:f0:68:bf:b8:82:74:1f:44:83:1d: ea:28:76:f9:29:45:24:22:a9:b9:e5:9b:6c:c6:ba: 5c:d5:46:f2:a1:f7:ff:9e:56:d1:b2:b7:12:af:7d: ad:2e:7d:d3:9b:6b:1f:a7:89:e0:3d:7c:ee:f2:ca: 89:eb:20:e6:68:5c:5d:29:ab:c5:d5:cd:d5:e1:ce: 5f:87:bc:b9:d3:eb:b1:95:d8:4f:79:42:42:75:b9: fb:79:4f:73:dd:e0:21:7f:00:9d:7f:71:3e:1b:8b: b8:18:ca:d5:ac:74:f3:ff:58:66:0c:0c:53:e5:b8: 8d:0b:5a:29:e1:54:30:99:4d:20:e3:b7:1d:03:07: 39:d1:10:5a:61:e9:8a:3d:e2:f6:de:7a:78:3b:80: 89:0b:7f:c9:b1:9b:6b:02:53:09:72:4d:e2:d2:97: 4e:55:e8:75:7c:47:57:86:27:4b:0a:e6:6f:27:ff: e8:b3:2a:48:06:db:67:1a:af:a2:8b:1d:21:03:d6: ca:40:dc:41:ec:88:33:6e:db:69:63:c9:3a:57:ad: 5a:71:0c:82:96:d8:ce:d2:09:dd:f9:0d:db:8a:6a: a1:cf:57:1e:3f:70:56:96:19:74:94:e0:f8:f5:20: 39:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0C:68:F4:2E:35:E4:33:1F:65:47:B3:72:A1:5E:A3:22:DB:23:BA X509v3 Authority Key Identifier: keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ec:29:d3:6f:71:79:39:25:73:fd:c9:6a:4d:fe:43:b6:83: 3e:d7:08:b5:13:5c:a0:87:b8:3a:62:83:98:fa:9a:91:c0:66: ba:0d:43:21:51:63:fc:27:a0:25:4c:75:5c:e7:30:c7:1e:0a: 04:8d:6b:76:a4:37:ac:f7:51:6c:22:4d:81:85:b6:5d:ba:71: 3e:52:2e:09:2a:fa:dd:af:14:4d:20:66:ec:a7:7e:1b:4c:9f: ab:e5:b9:49:92:76:e6:63:ff:b8:34:82:74:b9:34:fc:0c:6c: f5:ac:88:08:0d:a1:81:7f:62:88:ec:20:be:bc:30:50:3d:37: 08:6c:d3:14:05:b6:e0:a4:de:59:7e:92:cc:cf:db:0f:d6:1e: f0:cb:b1:f1:fa:73:6b:d3:4a:a2:ae:88:96:6d:a3:fa:e2:a0: fc:b9:ad:7a:22:57:ab:80:fe:4a:d8:3e:7b:3d:70:f2:82:53: cc:6f:09:a7:f2:b6:20:d1:5d:85:8e:5c:24:9c:be:8a:c0:89: 66:3a:5f:f1:89:03:d1:35:cb:fb:ad:68:81:33:5d:ae:45:3e: 0e:a4:f2:fd:8f:3c:44:6f:cd:91:87:f2:03:af:59:b5:ba:e8: 8a:df:de:4f:f5:b1:83:76:28:0c:36:ea:82:b2:fb:e4:42:a5: cf:38:c1:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kBtMdxJJFVz11W2ZjanvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYzc4NjI3Nzk0ZTg3ZmY5NzE4ZGIxYjBkZjdlZWUyZWRi MzM1OTUwHhcNMjUxMjIwMDcwMTIxWhcNMjUxMjIxMDcwMTIxWjAzMTEwLwYDVQQD EyhhZTBjNjhmNDJlMzVlNDMzMWY2NTQ3YjM3MmExNWVhMzIyZGIyM2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YZZbIKohe2Ti/z79pw7GAl6gPBo v7iCdB9Egx3qKHb5KUUkIqm55Ztsxrpc1Ubyoff/nlbRsrcSr32tLn3Tm2sfp4ng PXzu8sqJ6yDmaFxdKavF1c3V4c5fh7y50+uxldhPeUJCdbn7eU9z3eAhfwCdf3E+ G4u4GMrVrHTz/1hmDAxT5biNC1op4VQwmU0g47cdAwc50RBaYemKPeL23np4O4CJ C3/JsZtrAlMJck3i0pdOVeh1fEdXhidLCuZvJ//osypIBttnGq+iix0hA9bKQNxB 7IgzbttpY8k6V61acQyCltjO0gnd+Q3bimqhz1ceP3BWlhl0lOD49SA5iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4MaPQuNeQzH2VHs3KhXqMi2yO6MB8GA1UdIwQY MBaAFILHhid5Tof/lxjbGw337uLtszWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMt NjI2ZmMwNDAzYWM5LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMtNjI2ZmMwNDAzYWM5 LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvOwp029x eTklc/3Jak3+Q7aDPtcItRNcoIe4OmKDmPqakcBmug1DIVFj/CegJUx1XOcwxx4K BI1rdqQ3rPdRbCJNgYW2XbpxPlIuCSr63a8UTSBm7Kd+G0yfq+W5SZJ25mP/uDSC dLk0/Axs9ayICA2hgX9iiOwgvrwwUD03CGzTFAW24KTeWX6SzM/bD9Ye8Mux8fpz a9NKoq6Ilm2j+uKg/LmteiJXq4D+Stg+ez1w8oJTzG8Jp/K2INFdhY5cJJy+isCJ Zjpf8YkD0TXL+61ogTNdrkU+DqTy/Y88RG/NkYfyA69Ztbroit/eT/Wxg3YoDDbq grL75EKlzzjBpg== -----END CERTIFICATE-----Generated at Sat Dec 20 15:27:37 2025 by rpki-client