This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft File: gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft (raw, json) Hash identifier: nT6ZkidJdovqT+RmRV9h77uoRs502S5OmddZfYkd9Ac= Subject key identifier: BB:C1:F6:BA:0D:CC:20:64:A8:0B:D4:A3:67:96:87:F9:60:C9:23:EE Authority key identifier: 81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20 Certificate issuer: /CN=81b65a230d6927dbac201097f949e2eaa2731220 Certificate serial: 019B47A69AAAED540290ACC8E6C9B5C1A317 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft Manifest number: 0D25 Signing time: Mon 22 Dec 2025 20:00:59 +0000 Manifest this update: Mon 22 Dec 2025 20:00:59 +0000 Manifest next update: Tue 23 Dec 2025 20:00:59 +0000 Files and hashes: 1: gEaDDtDg3NGIpNO0dp0YVtxxUek.roa (hash: 1qHWY4UuDI5K0+nd/rC4bO24NaTlHFHg0zG3FVkfXdU=) 2: gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl (hash: jrVCQgHi05QSbofZte9buO0NhxOFZTkbkUj27pOt14k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:9a:aa:ed:54:02:90:ac:c8:e6:c9:b5:c1:a3:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81b65a230d6927dbac201097f949e2eaa2731220 Validity Not Before: Dec 22 20:00:59 2025 GMT Not After : Dec 23 20:00:59 2025 GMT Subject: CN=bbc1f6ba0dcc2064a80bd4a3679687f960c923ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9d:96:ed:03:c0:50:f3:33:3f:31:eb:eb:60: 59:e2:93:89:93:72:1a:5b:26:73:e7:8d:e0:25:4a: db:f2:9c:d5:18:0f:ca:82:08:b6:75:01:ff:f3:ce: f1:cb:d9:e6:8c:d4:61:34:a3:09:e4:d1:fe:9a:24: 8b:10:53:3c:56:35:71:92:4b:79:dc:b3:33:cb:1e: 3b:bb:1d:5b:0d:e2:07:28:81:b4:84:f3:fb:82:11: 84:28:0e:ff:f2:bc:b3:cd:42:be:aa:1e:c4:39:2f: 10:ba:8e:af:97:bb:63:75:79:08:70:5f:67:11:03: 9f:72:7f:ee:1e:3c:4b:03:b7:16:1a:63:08:b0:d4: aa:0f:cb:08:31:f9:0a:9b:ec:85:1b:98:ec:67:96: 51:ce:99:94:05:f4:8f:97:9b:8a:2a:d2:c3:5f:f5: a4:e7:b2:35:2a:73:70:61:dd:6c:10:bf:8f:b5:1f: d6:d5:7a:5e:d8:e2:11:15:90:e6:69:29:6a:6c:96: 07:5b:dc:8c:d1:a8:94:51:85:92:cd:e4:90:87:af: 7b:58:5e:01:4c:73:8d:32:52:6e:8c:ac:3a:81:bd: 10:0f:24:d7:a0:08:a6:f3:98:52:f3:1e:a5:37:39: bf:36:12:52:2e:38:05:2a:b2:de:3e:ba:8c:45:74: 30:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C1:F6:BA:0D:CC:20:64:A8:0B:D4:A3:67:96:87:F9:60:C9:23:EE X509v3 Authority Key Identifier: keyid:81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:26:32:28:58:65:9f:47:b7:e2:0f:fe:3c:6b:5e:18:ee:d0: 0c:f4:fd:e9:88:53:0a:c3:f9:6f:30:c6:fb:84:f5:93:65:b4: f3:34:0f:96:2f:2d:62:dd:76:6a:d2:26:31:ad:f0:2c:ea:65: 11:25:f1:e5:6f:85:e7:18:a3:a6:c0:0c:94:44:35:52:f1:b3: b6:12:ff:84:4c:8c:eb:1b:c3:6f:10:d7:a5:45:c9:d0:05:a1: 03:42:ad:f8:16:57:1d:df:25:16:55:ed:6c:7b:6d:8f:f9:53: 04:84:06:d6:55:83:8e:7e:61:d6:de:3c:8c:87:04:ca:8b:92: 58:ae:84:02:e2:ee:80:ed:e1:25:22:f1:60:74:cc:e9:6a:74: 57:35:cf:cc:9d:fa:58:2e:2c:ba:0b:f0:45:76:8e:4e:21:61: b4:e3:68:a0:65:98:cb:b6:d3:bb:6e:78:d4:cf:1a:11:f6:3a: c7:e7:e4:c0:5b:86:0f:0f:9f:d1:e2:b3:11:4e:d2:e3:64:1c: 39:d2:5d:2e:ad:5f:e7:f3:ca:9b:b6:99:f7:32:46:58:a4:48: 80:ce:bc:fa:e2:ad:bb:43:90:0a:2f:53:b4:05:7e:af:0e:38: 3d:f8:65:8f:7e:33:29:a5:b4:8f:98:9d:87:16:a8:16:94:50: 2c:29:cc:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHppqq7VQCkKzI5sm1waMXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYjY1YTIzMGQ2OTI3ZGJhYzIwMTA5N2Y5NDllMmVhYTI3 MzEyMjAwHhcNMjUxMjIyMjAwMDU5WhcNMjUxMjIzMjAwMDU5WjAzMTEwLwYDVQQD EyhiYmMxZjZiYTBkY2MyMDY0YTgwYmQ0YTM2Nzk2ODdmOTYwYzkyM2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ2W7QPAUPMzPzHr62BZ4pOJk3Ia WyZz543gJUrb8pzVGA/Kggi2dQH/887xy9nmjNRhNKMJ5NH+miSLEFM8VjVxkkt5 3LMzyx47ux1bDeIHKIG0hPP7ghGEKA7/8ryzzUK+qh7EOS8Quo6vl7tjdXkIcF9n EQOfcn/uHjxLA7cWGmMIsNSqD8sIMfkKm+yFG5jsZ5ZRzpmUBfSPl5uKKtLDX/Wk 57I1KnNwYd1sEL+PtR/W1Xpe2OIRFZDmaSlqbJYHW9yM0aiUUYWSzeSQh697WF4B THONMlJujKw6gb0QDyTXoAim85hS8x6lNzm/NhJSLjgFKrLePrqMRXQwDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvB9roNzCBkqAvUo2eWh/lgySPuMB8GA1UdIwQY MBaAFIG2WiMNaSfbrCAQl/lJ4uqicxIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jZGVjZDItMzhkNi00MGNmLWFiMDIt ZGFiOWRjNmRjNGM5LzEvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jZGVjZDItMzhkNi00MGNmLWFiMDItZGFiOWRjNmRjNGM5 LzEvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESYyKFhl n0e34g/+PGteGO7QDPT96YhTCsP5bzDG+4T1k2W08zQPli8tYt12atImMa3wLOpl ESXx5W+F5xijpsAMlEQ1UvGzthL/hEyM6xvDbxDXpUXJ0AWhA0Kt+BZXHd8lFlXt bHttj/lTBIQG1lWDjn5h1t48jIcEyouSWK6EAuLugO3hJSLxYHTM6Wp0VzXPzJ36 WC4sugvwRXaOTiFhtONooGWYy7bTu2541M8aEfY6x+fkwFuGDw+f0eKzEU7S42Qc OdJdLq1f5/PKm7aZ9zJGWKRIgM68+uKtu0OQCi9TtAV+rw44Pfhlj34zKaW0j5id hxaoFpRQLCnMBA== -----END CERTIFICATE-----Generated at Tue Dec 23 03:46:59 2025 by rpki-client