This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft File: GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json) Hash identifier: YiMdtkBiZf9wXavu+n3uVuEYP6p95NwpcX0tZsgtzjE= Subject key identifier: E5:F6:C5:8D:60:BD:9F:0E:D8:D9:E8:EA:9F:5B:C3:43:CB:BF:2C:8F Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd Certificate serial: 019B3A903C4E68377D184F58A2046889521E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 07:01:29 +0000 Manifest this update: Sat 20 Dec 2025 07:01:29 +0000 Manifest next update: Sun 21 Dec 2025 07:01:29 +0000 Files and hashes: 1: 8hfZpPtt0GO_DVotiG51hg4eT8w.roa (hash: aRQIDK4lxFg6x90EVDVduD7FDzfgBWcJpd7K/cuKbaE=) 2: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: Q1n78TcY1O+UQAkQnaPv4A7+PkPpkA3J05jLcTA3lBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:3c:4e:68:37:7d:18:4f:58:a2:04:68:89:52:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd Validity Not Before: Dec 20 07:01:29 2025 GMT Not After : Dec 21 07:01:29 2025 GMT Subject: CN=e5f6c58d60bd9f0ed8d9e8ea9f5bc343cbbf2c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b7:c5:14:5e:e1:ec:63:e6:ca:50:ad:72:2b: 51:99:6a:0b:0b:a9:6f:50:83:ed:34:11:18:c8:72: c8:8a:a0:f2:79:2b:c9:e9:6a:fb:25:f0:75:d0:5b: 79:79:a7:53:e5:08:11:3c:58:ef:95:2e:72:d5:46: fa:22:19:13:0b:a8:ca:a5:7a:5a:4b:db:8d:df:42: 0b:91:0f:b5:b3:8a:3a:6c:65:e6:3a:0a:03:33:84: e7:12:38:88:92:4e:77:60:a1:ad:41:a0:78:2f:20: 4e:a1:28:29:a5:b3:96:79:d8:a9:0f:96:ef:27:fe: 41:b4:81:5b:26:03:78:d9:07:ed:28:b3:bb:a4:fb: 22:43:7a:9d:aa:98:30:f5:bd:a2:c4:6c:fb:24:e8: cc:7b:21:fe:58:fc:ce:2b:a2:92:11:01:6b:b9:ac: 73:d2:e7:d7:60:e3:ec:94:50:f9:5c:bc:5c:a2:f2: ea:64:72:fb:92:46:f7:72:10:ce:fc:dd:ad:0d:23: 44:87:5f:8f:8a:bd:6b:b4:00:2b:da:ff:05:bd:4c: ad:4e:81:7d:5b:7f:49:1d:cc:18:92:83:88:4b:dd: 69:e6:b3:79:2b:1a:a6:9c:73:f4:8b:c1:b2:0d:6d: e2:33:9a:ef:ad:a9:51:4d:00:69:e0:5f:7a:a6:96: 72:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F6:C5:8D:60:BD:9F:0E:D8:D9:E8:EA:9F:5B:C3:43:CB:BF:2C:8F X509v3 Authority Key Identifier: keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:2d:a6:ed:f6:86:0a:0c:af:c6:e9:5d:c9:fb:ef:19:bc:dc: 55:52:d6:5a:90:80:3a:34:c3:c1:42:15:26:f0:36:50:ff:6e: 0b:45:4a:ee:7c:ed:00:80:74:2d:39:e4:ce:70:c9:e8:a9:2b: 43:64:e0:2f:f9:16:cc:6e:ee:1a:98:e9:33:24:83:cf:f3:ce: 69:87:9f:76:8a:09:42:7c:fc:b8:d2:b5:30:3b:74:9c:69:f8: fe:3f:b5:96:27:1b:e4:26:19:15:bc:2b:75:45:6b:9c:cd:79: de:03:b3:0f:7d:29:f3:31:dd:33:74:27:63:5d:f1:86:e1:12: 1a:2e:4d:28:2f:ba:6b:93:74:29:ae:af:d6:d8:72:57:81:23: 21:ee:9e:62:89:11:22:2e:e1:3b:6b:b5:6d:8a:47:9b:53:ba: b9:81:4c:cf:3d:c0:e7:ea:55:c6:b5:33:93:4a:ee:53:8f:cf: 93:13:4b:6e:8e:0a:c5:fa:c7:4f:48:40:79:89:7a:5e:51:2d: 55:4d:f8:c7:4b:7a:f6:62:2e:8f:4c:1c:f7:ee:c0:c2:f5:58: 19:04:6f:a4:b1:ef:59:e0:22:e2:48:b9:f6:28:77:94:fe:45: ae:5f:ae:a0:0b:6e:7a:15:6b:22:38:26:31:f8:9d:cf:f0:8d: 6a:81:1f:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kDxOaDd9GE9YogRoiVIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YmNjNDA3YmYzODgxZTI5NjZhNTQ4YzQzMmIzZjA0MDE0 Njk5ZGQwHhcNMjUxMjIwMDcwMTI5WhcNMjUxMjIxMDcwMTI5WjAzMTEwLwYDVQQD EyhlNWY2YzU4ZDYwYmQ5ZjBlZDhkOWU4ZWE5ZjViYzM0M2NiYmYyYzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7fFFF7h7GPmylCtcitRmWoLC6lv UIPtNBEYyHLIiqDyeSvJ6Wr7JfB10Ft5eadT5QgRPFjvlS5y1Ub6IhkTC6jKpXpa S9uN30ILkQ+1s4o6bGXmOgoDM4TnEjiIkk53YKGtQaB4LyBOoSgppbOWedipD5bv J/5BtIFbJgN42QftKLO7pPsiQ3qdqpgw9b2ixGz7JOjMeyH+WPzOK6KSEQFruaxz 0ufXYOPslFD5XLxcovLqZHL7kkb3chDO/N2tDSNEh1+Pir1rtAAr2v8FvUytToF9 W39JHcwYkoOIS91p5rN5KxqmnHP0i8GyDW3iM5rvralRTQBp4F96ppZy9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOX2xY1gvZ8O2Nno6p9bw0PLvyyPMB8GA1UdIwQY MBaAFBm8xAe/OIHilmpUjEMrPwQBRpndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80ZWNhNWUtNDM0My00NmZlLWJiYjYt NDQ5NzdkN2FiOWNhLzEvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy80ZWNhNWUtNDM0My00NmZlLWJiYjYtNDQ5NzdkN2FiOWNh LzEvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAry2m7faG CgyvxuldyfvvGbzcVVLWWpCAOjTDwUIVJvA2UP9uC0VK7nztAIB0LTnkznDJ6Kkr Q2TgL/kWzG7uGpjpMySDz/POaYefdooJQnz8uNK1MDt0nGn4/j+1licb5CYZFbwr dUVrnM153gOzD30p8zHdM3QnY13xhuESGi5NKC+6a5N0Ka6v1thyV4EjIe6eYokR Ii7hO2u1bYpHm1O6uYFMzz3A5+pVxrUzk0ruU4/PkxNLbo4KxfrHT0hAeYl6XlEt VU34x0t69mIuj0wc9+7AwvVYGQRvpLHvWeAi4ki59ih3lP5Frl+uoAtuehVrIjgm Mfidz/CNaoEfsA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:47:11 2025 by rpki-client