This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft File: gEbjOGAXHvbsYOvPxexayRwldXw.mft (raw, json) Hash identifier: cSgogfqlauBrHpPoYxS/MZE8jH2fuKrP1aVQI4/2uj8= Subject key identifier: 9F:2B:56:9F:29:B0:5A:C5:30:47:20:C0:CB:3C:ED:2E:58:AF:F3:4F Authority key identifier: 80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C Certificate issuer: /CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c Certificate serial: 019B2F308D5CEC81FDAE7D3AB6216D964A0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft Manifest number: 091A Signing time: Thu 18 Dec 2025 02:01:09 +0000 Manifest this update: Thu 18 Dec 2025 02:01:09 +0000 Manifest next update: Fri 19 Dec 2025 02:01:09 +0000 Files and hashes: 1: gEbjOGAXHvbsYOvPxexayRwldXw.crl (hash: aGTvn+Vvlj5Lo9AAMVEI0pnoh9kphSDyR88UAnJh1ww=) 2: h1XtrgQS4y6F2QyLyCE8H5yVgX0.roa (hash: nBro9lqJpw++Y/bB5Bh7ukI6Oz6bg0ejSLEPfy18Wfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:8d:5c:ec:81:fd:ae:7d:3a:b6:21:6d:96:4a:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c Validity Not Before: Dec 18 02:01:09 2025 GMT Not After : Dec 19 02:01:09 2025 GMT Subject: CN=9f2b569f29b05ac5304720c0cb3ced2e58aff34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:51:9a:82:38:a1:0d:d3:1b:5f:d9:75:42:d5: 71:fa:23:57:a2:66:36:d4:96:d7:3b:8e:c9:5f:88: 72:23:9a:35:a2:3a:94:be:7d:63:73:c6:41:a5:28: 85:db:dd:e2:97:b4:e4:3e:a5:1d:9f:fa:0a:36:6b: bf:29:b2:c3:70:e2:6a:62:41:dd:cd:da:67:9d:16: 1c:b2:13:ad:e8:ff:36:1b:d7:a7:75:c5:a1:3f:5c: 88:aa:fb:77:a2:a9:f0:98:67:58:31:f6:ff:2b:03: 4a:f4:58:d5:68:05:f3:6b:34:da:57:4e:db:dc:76: fa:fd:91:7b:c0:91:97:7e:7b:10:e9:13:89:ce:12: ac:e5:b7:4b:b7:9f:ea:66:73:90:2a:d2:04:ac:4c: ff:3d:4b:7e:93:2e:52:80:16:3f:30:d7:bb:ae:40: eb:66:13:a0:08:d5:2c:83:ee:7c:ee:20:0a:a5:68: 97:9d:26:6c:fa:54:36:ff:6c:5c:ef:98:4e:a4:33: 41:0c:20:d1:a2:36:a0:55:97:85:c9:cf:dc:6b:af: 20:8c:01:dc:37:f6:5a:5d:d3:74:8a:f9:61:55:09: 09:c3:5e:c8:84:d6:b4:1d:bb:62:8d:cf:99:c6:57: b4:4e:61:4c:45:eb:77:97:a1:c0:8d:a5:ca:ac:0b: b3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2B:56:9F:29:B0:5A:C5:30:47:20:C0:CB:3C:ED:2E:58:AF:F3:4F X509v3 Authority Key Identifier: keyid:80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0c:9c:f0:84:42:ef:d1:4c:e3:fe:2b:c8:ae:aa:17:7d:08: 7e:89:80:1b:b6:f5:40:22:7b:a8:0f:44:7c:8a:4f:fc:22:25: 2a:dd:dd:04:a7:83:16:f2:8c:9d:e1:de:e5:cd:79:1b:55:64: 22:ea:66:4e:a9:0e:66:cb:d6:7f:22:23:32:3a:41:bb:8b:c6: c3:db:a9:00:a1:22:a7:a9:88:56:6c:36:b7:bd:10:8c:b6:0a: e7:dd:87:81:05:99:9a:d3:a6:46:cf:dc:30:62:c4:68:9c:03: e8:92:5e:90:92:87:53:31:2c:fd:c9:19:b7:95:8e:58:ce:52: 6b:b7:56:56:a0:da:25:9c:c4:1a:83:66:64:82:a9:82:e5:3b: 6b:69:50:6f:3e:03:41:99:e6:7d:a6:5d:3d:b4:cd:71:61:79: 54:d4:62:ea:c8:d5:8d:75:d3:0b:d8:09:36:29:a1:6a:92:b9: 4c:91:87:74:53:a6:80:9f:fc:26:42:35:29:0d:cb:27:33:57: e1:c2:37:d0:0b:67:43:b2:ce:fd:0c:19:0e:e9:a0:c6:2c:c4: 8a:33:26:5a:0e:b0:91:7a:3a:7d:6d:82:07:b4:4b:3e:ff:cb: 48:e8:c1:d5:ad:da:69:ef:45:80:74:cc:ae:38:56:c3:34:7a: 24:91:bb:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMI1c7IH9rn06tiFtlkoPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNDZlMzM4NjAxNzFlZjZlYzYwZWJjZmM1ZWM1YWM5MWMy NTc1N2MwHhcNMjUxMjE4MDIwMTA5WhcNMjUxMjE5MDIwMTA5WjAzMTEwLwYDVQQD Eyg5ZjJiNTY5ZjI5YjA1YWM1MzA0NzIwYzBjYjNjZWQyZTU4YWZmMzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVGagjihDdMbX9l1QtVx+iNXomY2 1JbXO47JX4hyI5o1ojqUvn1jc8ZBpSiF293il7TkPqUdn/oKNmu/KbLDcOJqYkHd zdpnnRYcshOt6P82G9endcWhP1yIqvt3oqnwmGdYMfb/KwNK9FjVaAXzazTaV07b 3Hb6/ZF7wJGXfnsQ6ROJzhKs5bdLt5/qZnOQKtIErEz/PUt+ky5SgBY/MNe7rkDr ZhOgCNUsg+587iAKpWiXnSZs+lQ2/2xc75hOpDNBDCDRojagVZeFyc/ca68gjAHc N/ZaXdN0ivlhVQkJw17IhNa0Hbtijc+Zxle0TmFMRet3l6HAjaXKrAuzpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8rVp8psFrFMEcgwMs87S5Yr/NPMB8GA1UdIwQY MBaAFIBG4zhgFx727GDrz8XsWskcJXV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0Viak9HQVhIdmJzWU92UHhleGF5UndsZFh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83ODhkMTAtZThkZi00ZGFjLWFhOGYt ZDM5ZmZjMTZlZjg5LzEvZ0Viak9HQVhIdmJzWU92UHhleGF5UndsZFh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83ODhkMTAtZThkZi00ZGFjLWFhOGYtZDM5ZmZjMTZlZjg5 LzEvZ0Viak9HQVhIdmJzWU92UHhleGF5UndsZFh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgyc8IRC 79FM4/4ryK6qF30IfomAG7b1QCJ7qA9EfIpP/CIlKt3dBKeDFvKMneHe5c15G1Vk IupmTqkOZsvWfyIjMjpBu4vGw9upAKEip6mIVmw2t70QjLYK592HgQWZmtOmRs/c MGLEaJwD6JJekJKHUzEs/ckZt5WOWM5Sa7dWVqDaJZzEGoNmZIKpguU7a2lQbz4D QZnmfaZdPbTNcWF5VNRi6sjVjXXTC9gJNimhapK5TJGHdFOmgJ/8JkI1KQ3LJzNX 4cI30AtnQ7LO/QwZDumgxizEijMmWg6wkXo6fW2CB7RLPv/LSOjB1a3aae9FgHTM rjhWwzR6JJG7mQ== -----END CERTIFICATE-----Generated at Thu Dec 18 06:52:12 2025 by rpki-client