This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft File: GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft (raw, json) Hash identifier: w95bxj2TCWguLaoCuBqJimXlggskya1AbVwG4DxYb88= Subject key identifier: B9:8B:07:6C:9D:5D:49:4E:67:B6:DB:79:C5:C9:8C:C4:DD:13:1F:F5 Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42 Certificate issuer: /CN=19b390b62d09950d500cd6bbbd78d0390560ec42 Certificate serial: 019B7C6FBB918E2A11F46FD0F4DA6F730C78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft Manifest number: 0680 Signing time: Fri 02 Jan 2026 02:00:55 +0000 Manifest this update: Fri 02 Jan 2026 02:00:55 +0000 Manifest next update: Sat 03 Jan 2026 02:00:55 +0000 Files and hashes: 1: 9RHmDDSrz_TVDy-BB9jwxctiETg.roa (hash: aSoHx1cw90YD5oFMHiMAaXrr40QHCrlwJm1tiyZ2AA8=) 2: GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl (hash: xUfsnlgTiEjbbGUCV/wF5R3VNFaAq13xDLe4H44zxfQ=) 3: e-bWAWxjxQJbnJGblL9z-udKDeg.roa (hash: F1tIuwxbtLRrgISklNjmuzhPscky9ofsgkm8xnxx5MU=) 4: oc64jGTa7tYBazn5B8iUtkhOiqA.roa (hash: RFnqxJshGlA8TNiqCYqoYq6mvbEyQL7fumOe50DNmVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:6f:bb:91:8e:2a:11:f4:6f:d0:f4:da:6f:73:0c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42 Validity Not Before: Jan 2 02:00:55 2026 GMT Not After : Jan 3 02:00:55 2026 GMT Subject: CN=b98b076c9d5d494e67b6db79c5c98cc4dd131ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0d:a7:0a:d1:82:e8:35:0d:02:7f:47:b3:36: b8:25:6c:1e:86:d9:f3:4a:4e:3d:2b:9c:e3:53:d5: 92:b9:42:9e:b7:b3:be:09:93:b7:f1:3e:3a:bd:9c: e2:46:a9:a9:df:72:44:b4:47:52:44:0b:25:df:ff: 1a:75:d4:a7:2f:c2:68:25:4c:61:4b:4c:84:b5:68: 79:1a:e7:f3:30:ea:74:e2:61:9f:c1:f5:7f:15:a4: 58:a8:80:3c:8a:cf:20:b6:a1:04:48:a8:c8:9b:d4: cb:c6:47:86:b1:31:7c:d7:f4:b6:d9:e0:49:00:03: d1:87:e9:2a:f2:1e:39:cf:86:c4:71:2b:5a:cc:84: 4b:da:45:2e:7b:6d:fc:4d:9a:76:97:4b:2c:74:9f: 3e:65:06:0a:db:ed:75:80:eb:71:0e:fe:0b:ec:df: 17:6d:9e:1c:38:50:a7:2d:c3:8b:79:6c:46:5c:9b: 74:c7:ae:e1:95:bf:0d:63:95:92:e7:6e:67:52:67: 1f:c2:20:82:fd:1d:04:db:1a:dd:07:f6:5c:3b:3b: 95:c1:8c:96:95:7f:4f:e0:5c:4d:b4:01:42:e8:53: 88:07:3b:81:ea:71:00:0b:71:bb:35:4d:44:ee:f1: b0:5d:7b:f2:66:4e:7e:7f:6d:eb:08:1a:54:01:b0: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8B:07:6C:9D:5D:49:4E:67:B6:DB:79:C5:C9:8C:C4:DD:13:1F:F5 X509v3 Authority Key Identifier: keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e3:43:11:df:df:50:5a:55:a8:67:5b:e7:6f:28:80:3a:2b: 77:a5:28:5e:2b:1f:21:f7:6e:c2:d3:89:bd:24:6a:3d:7c:a0: 39:01:a0:b4:2a:fa:93:79:59:74:63:e3:22:87:ba:71:5c:f9: 3c:79:49:ce:f7:c5:e1:48:32:5a:62:1d:d1:98:20:94:cb:6f: 21:25:e5:9d:79:4e:d6:9e:65:c2:03:d8:ed:1f:81:78:e7:e2: c8:4d:40:5e:90:94:cc:8d:33:a0:cd:d4:28:69:c1:45:d6:f2: 13:92:5d:a0:c8:b9:0a:39:d4:0d:44:96:55:af:ba:2a:a5:b8: 7c:97:e6:79:89:4e:98:06:06:68:c9:c7:a3:e6:c6:b0:0c:9c: 8f:c4:1e:87:9c:10:19:04:bd:77:86:2b:f5:e8:f1:9f:4d:7b: 86:25:4b:0f:19:84:85:a9:6f:91:93:85:97:ea:2a:63:d2:1f: 1b:2e:16:26:58:ec:09:cd:49:12:b6:13:a1:2f:15:db:af:87: 74:1f:a0:f7:eb:f0:04:f4:1b:9a:3a:05:71:06:b2:86:05:be: 23:80:b7:d6:02:0d:73:82:74:ad:eb:05:ee:14:61:b1:1a:22: 9e:3b:d6:bc:aa:57:46:6f:4f:24:75:93:9b:cc:30:d8:27:df: c7:0e:9f:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8b7uRjioR9G/Q9Npvcwx4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YjM5MGI2MmQwOTk1MGQ1MDBjZDZiYmJkNzhkMDM5MDU2 MGVjNDIwHhcNMjYwMTAyMDIwMDU1WhcNMjYwMTAzMDIwMDU1WjAzMTEwLwYDVQQD EyhiOThiMDc2YzlkNWQ0OTRlNjdiNmRiNzljNWM5OGNjNGRkMTMxZmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q2nCtGC6DUNAn9Hsza4JWwehtnz Sk49K5zjU9WSuUKet7O+CZO38T46vZziRqmp33JEtEdSRAsl3/8addSnL8JoJUxh S0yEtWh5GufzMOp04mGfwfV/FaRYqIA8is8gtqEESKjIm9TLxkeGsTF81/S22eBJ AAPRh+kq8h45z4bEcStazIRL2kUue238TZp2l0ssdJ8+ZQYK2+11gOtxDv4L7N8X bZ4cOFCnLcOLeWxGXJt0x67hlb8NY5WS525nUmcfwiCC/R0E2xrdB/ZcOzuVwYyW lX9P4FxNtAFC6FOIBzuB6nEAC3G7NU1E7vGwXXvyZk5+f23rCBpUAbAEoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmLB2ydXUlOZ7bbecXJjMTdEx/1MB8GA1UdIwQY MBaAFBmzkLYtCZUNUAzWu7140DkFYOxCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2Mt MTQ0ZDc0NzNlYTU5LzEvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2MtMTQ0ZDc0NzNlYTU5 LzEvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuNDEd/f UFpVqGdb528ogDord6UoXisfIfduwtOJvSRqPXygOQGgtCr6k3lZdGPjIoe6cVz5 PHlJzvfF4UgyWmId0ZgglMtvISXlnXlO1p5lwgPY7R+BeOfiyE1AXpCUzI0zoM3U KGnBRdbyE5JdoMi5CjnUDUSWVa+6KqW4fJfmeYlOmAYGaMnHo+bGsAycj8Qeh5wQ GQS9d4Yr9ejxn017hiVLDxmEhalvkZOFl+oqY9IfGy4WJljsCc1JErYToS8V26+H dB+g9+vwBPQbmjoFcQayhgW+I4C31gINc4J0resF7hRhsRoinjvWvKpXRm9PJHWT m8ww2Cffxw6fSw== -----END CERTIFICATE-----Generated at Fri Jan 2 08:21:03 2026 by rpki-client