This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json) Hash identifier: lQCe9RmNjNoPNI2AZje5dsHQYyHfKUesyae24ZU76XY= Subject key identifier: 0A:1A:F7:A8:52:73:0F:2E:75:19:D5:A2:74:28:C6:03:56:1C:E3:2F Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39 Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39 Certificate serial: 019B42492238D603E671CCBDBA5E1256A016 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft Manifest number: 04B3 Signing time: Sun 21 Dec 2025 19:00:47 +0000 Manifest this update: Sun 21 Dec 2025 19:00:47 +0000 Manifest next update: Mon 22 Dec 2025 19:00:47 +0000 Files and hashes: 1: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: bYSO6PNyUbh+jQnEiphQsy+QCpm2O0BSoNbqqnlkOCo=) 2: dD6GIMFFXfcUZKikgptCTP1SjMg.roa (hash: R7h9/T2YRhEDBxQsNxpJ6+ajaERwVVA7HS/wWVJDGB8=) 3: n1LYpQBp74CBUc1iCkyyz1kpuDI.roa (hash: dntlfrX6kYRLASagUJhBDGwAMZaEo7XW+NU8zsgCpzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:22:38:d6:03:e6:71:cc:bd:ba:5e:12:56:a0:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39 Validity Not Before: Dec 21 19:00:47 2025 GMT Not After : Dec 22 19:00:47 2025 GMT Subject: CN=0a1af7a852730f2e7519d5a27428c603561ce32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:49:73:31:ca:5b:89:b8:45:78:aa:f6:4f:77: c1:de:f1:8e:94:3e:95:b6:7f:f7:79:b2:e4:d2:1f: 81:7c:be:42:7b:ec:f0:c9:27:6f:25:1c:49:61:40: ed:3b:da:85:ba:27:05:7b:bf:56:8f:ae:a6:bd:6b: 23:e7:57:c8:7c:cd:6e:ce:4e:1b:e4:8d:bd:31:be: ae:a3:20:56:32:88:7b:77:95:25:f0:44:b3:4a:1f: e3:3f:b3:a2:b6:15:87:88:99:a2:33:ef:f3:ad:61: d0:3c:15:53:d7:f7:86:71:e5:a1:b1:9c:23:18:63: 6e:d7:9f:67:ef:3b:ca:c0:3c:3a:48:09:4a:1e:33: 4b:ba:93:cd:dd:3a:e0:ce:84:67:5b:75:e5:3f:2a: 0a:21:29:a1:34:e2:5d:e9:3f:23:4d:f8:88:54:a5: 77:9d:78:50:ac:51:a4:58:0d:d7:5b:c6:50:f3:96: 35:3e:ec:c3:4d:72:1c:a7:34:a1:ce:13:7e:4c:d6: cf:53:8f:75:f9:14:7b:65:e8:79:4d:5e:5f:52:c7: 60:de:51:87:66:0b:7e:35:85:31:f0:9f:b1:00:73: 53:c7:2c:d9:60:69:50:3d:00:1e:12:3d:71:10:ae: 92:7a:f3:5d:f2:3a:10:ae:a8:2f:9a:34:84:21:18: 24:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1A:F7:A8:52:73:0F:2E:75:19:D5:A2:74:28:C6:03:56:1C:E3:2F X509v3 Authority Key Identifier: keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:6b:b8:a6:13:6c:9e:a5:f1:4d:e1:07:51:d9:98:fd:e8:b8: 59:fd:e0:e5:4f:87:84:17:17:57:59:09:1c:b9:27:b5:d7:9b: d6:d0:98:94:a3:10:99:ff:64:6d:2a:59:c4:44:42:ae:c3:56: df:f6:53:f7:c0:21:e7:0a:94:1b:39:b7:76:59:63:61:30:43: 37:15:9e:a9:e9:10:65:80:fe:bd:99:88:89:38:c5:73:62:6e: 4c:e9:7f:d7:9e:83:59:be:68:43:6a:03:34:33:03:88:c9:c4: 19:ad:50:af:4f:98:5c:24:6d:6e:08:55:8f:7c:74:fd:24:ef: 3a:3e:55:81:01:86:15:e6:8c:27:10:ee:c3:f2:21:bf:4e:f2: d1:6f:30:c1:43:e5:8b:94:5e:32:a4:55:08:08:83:a1:5a:6a: d0:1e:6f:c6:d8:20:70:6c:e2:ba:f9:5c:a7:8d:73:53:e1:3d: d2:82:b5:3e:b4:8c:af:31:e2:41:42:93:a2:5f:32:0b:08:59: d7:17:8a:42:df:3f:45:01:40:c0:bf:a1:53:ce:bc:6f:96:d5: 04:11:0f:02:a4:8d:be:d3:d0:b8:36:24:63:8c:0c:96:12:76: ff:fc:3e:10:8c:77:de:0d:e8:ab:83:0b:dc:7b:1d:91:9f:ca: 58:21:a2:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSSI41gPmccy9ul4SVqAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YTYwNDZlMzdjN2UyMDc1YjQxZDZmZWY3MGQyMzEyMzAz YzVmMzkwHhcNMjUxMjIxMTkwMDQ3WhcNMjUxMjIyMTkwMDQ3WjAzMTEwLwYDVQQD EygwYTFhZjdhODUyNzMwZjJlNzUxOWQ1YTI3NDI4YzYwMzU2MWNlMzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0lzMcpbibhFeKr2T3fB3vGOlD6V tn/3ebLk0h+BfL5Ce+zwySdvJRxJYUDtO9qFuicFe79Wj66mvWsj51fIfM1uzk4b 5I29Mb6uoyBWMoh7d5Ul8ESzSh/jP7OithWHiJmiM+/zrWHQPBVT1/eGceWhsZwj GGNu159n7zvKwDw6SAlKHjNLupPN3TrgzoRnW3XlPyoKISmhNOJd6T8jTfiIVKV3 nXhQrFGkWA3XW8ZQ85Y1PuzDTXIcpzShzhN+TNbPU491+RR7Zeh5TV5fUsdg3lGH Zgt+NYUx8J+xAHNTxyzZYGlQPQAeEj1xEK6SevNd8joQrqgvmjSEIRgklQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoa96hScw8udRnVonQoxgNWHOMvMB8GA1UdIwQY MBaAFBmmBG43x+IHW0HW/vcNIxIwPF85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2FZRWJqZkg0Z2RiUWRiLTl3MGpFakE4WHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83OTllNWMtMTU5NC00MDlmLThjNTQt M2ZlYzU4NjE0YzRiLzEvR2FZRWJqZkg0Z2RiUWRiLTl3MGpFakE4WHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83OTllNWMtMTU5NC00MDlmLThjNTQtM2ZlYzU4NjE0YzRi LzEvR2FZRWJqZkg0Z2RiUWRiLTl3MGpFakE4WHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWu4phNs nqXxTeEHUdmY/ei4Wf3g5U+HhBcXV1kJHLkntdeb1tCYlKMQmf9kbSpZxERCrsNW 3/ZT98Ah5wqUGzm3dlljYTBDNxWeqekQZYD+vZmIiTjFc2JuTOl/156DWb5oQ2oD NDMDiMnEGa1Qr0+YXCRtbghVj3x0/STvOj5VgQGGFeaMJxDuw/Ihv07y0W8wwUPl i5ReMqRVCAiDoVpq0B5vxtggcGziuvlcp41zU+E90oK1PrSMrzHiQUKTol8yCwhZ 1xeKQt8/RQFAwL+hU868b5bVBBEPAqSNvtPQuDYkY4wMlhJ2//w+EIx33g3oq4ML 3HsdkZ/KWCGiwA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:18:58 2025 by rpki-client