This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft File: G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft (raw, json) Hash identifier: EMxYnOPdGDcNKSi4ROved5dtkuUeM+QHq/4Nrd3t7q8= Subject key identifier: 43:1B:AC:6B:FA:6F:B0:A9:EF:E0:18:13:93:DA:44:EF:6F:BD:16:CA Authority key identifier: 1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A Certificate issuer: /CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a Certificate serial: 019B292EA7DD419C8CC9AF86068BE7C63787 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft Manifest number: 0233 Signing time: Tue 16 Dec 2025 22:01:22 +0000 Manifest this update: Tue 16 Dec 2025 22:01:22 +0000 Manifest next update: Wed 17 Dec 2025 22:01:22 +0000 Files and hashes: 1: 1-QgVdEVAtmDVzPL1t30XEpMkKpg.roa (hash: Nb18hgZy/dUiDthUh4PrNXR3WH0/oCbuHBjHexDpA0Y=) 2: G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl (hash: U/o5cYCoSDckbxQj3M4CIulpclr1hzUr9B6GDPylvPY=) 3: G1iTz--AdrX58wnteKblePSt-Jw.roa (hash: 0Fp+SXPuf0GKZAv8TJo76eTj4M6Vb7IJbISKBHsaJUM=) 4: Z0dVNzk7EGrkYKQ-9HMAEEn28xQ.roa (hash: m7NbNzI3ua/XgXbydcjNQqSmMP9x4tm6jOp74hABwTg=) 5: pBdQvnX6dKY3XlqUYWMWUMcKsus.roa (hash: 7HSL2j8DzWASbakGMcnWSJulH/02edTERxWRK0JJXZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2e:a7:dd:41:9c:8c:c9:af:86:06:8b:e7:c6:37:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a Validity Not Before: Dec 16 22:01:22 2025 GMT Not After : Dec 17 22:01:22 2025 GMT Subject: CN=431bac6bfa6fb0a9efe0181393da44ef6fbd16ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:37:36:4e:ab:f6:f3:ef:5f:8a:d8:37:01:05: e7:b7:b1:81:4b:41:84:79:e4:a8:2d:89:69:23:98: d8:96:34:46:f6:4b:b8:b5:2f:8c:ea:dc:aa:e4:ff: 68:3a:43:7e:a5:de:b2:93:74:8c:56:01:44:c7:48: d2:21:f2:02:c6:06:7d:75:89:81:32:fd:38:f2:6e: e6:4c:22:0c:97:e1:e7:23:03:ee:3d:c9:4f:d8:3f: fb:8a:e5:17:cc:2e:2e:a9:d5:26:13:f1:a4:fd:61: 4d:54:4a:cc:66:fa:e6:23:c3:05:02:ca:08:a7:75: 28:11:b8:f6:96:42:6f:e5:90:7c:5f:92:50:a4:20: 7b:d6:5c:2b:6d:e4:99:26:6a:f0:6d:0f:0f:0f:3b: 94:27:be:50:c7:3a:55:c0:8f:3c:67:40:a6:df:32: 63:2e:e9:62:40:69:73:20:0c:94:28:37:18:05:0a: 1d:12:6b:2a:7b:0a:5c:0f:5d:e9:1b:a2:e9:04:9f: 2a:75:aa:68:76:35:54:ba:1a:c2:2c:d8:6e:be:32: eb:16:a8:94:ed:19:db:dd:15:56:23:b6:7f:5f:5c: f8:e6:05:ac:da:e3:d5:ff:64:18:0c:e2:81:e8:33: 67:d4:0c:40:1b:bb:bd:f1:35:fb:9a:71:bd:a4:9b: 32:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1B:AC:6B:FA:6F:B0:A9:EF:E0:18:13:93:DA:44:EF:6F:BD:16:CA X509v3 Authority Key Identifier: keyid:1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:59:75:1a:2a:3d:1f:83:7a:49:95:c1:d2:cb:82:8f:f8:9e: 91:0e:e1:1e:4a:b8:c4:e5:ef:82:67:19:19:46:e7:94:fa:4c: d6:30:00:87:18:65:d7:5a:76:23:11:4d:d1:eb:08:8a:af:56: 1d:d2:c4:51:cb:21:93:d4:ea:94:d6:cb:c7:a7:07:50:11:7f: 9e:6a:fd:95:d3:97:43:f8:77:a6:36:4b:76:62:a0:91:02:de: 77:c4:8f:35:79:d7:a8:15:e5:90:ef:5a:10:9b:e9:53:81:62: fc:a5:f0:fe:b2:34:10:04:c1:fd:23:00:f3:06:29:e9:a2:a9: 5e:7f:ee:3a:f1:df:16:c0:26:5c:ec:2c:6d:e5:34:cd:91:aa: 5a:f6:fa:5e:54:df:a8:56:5c:98:26:c8:d4:20:66:b0:99:48: c4:3f:2a:c4:97:76:8d:82:71:9e:e8:4b:be:d4:4e:11:2a:15: 1e:7e:18:8d:ec:11:99:4c:85:03:3f:42:55:ee:1e:8d:c1:13: e1:4f:0e:53:56:ca:67:6f:48:22:dd:47:8c:7e:12:22:07:4e: 4d:93:d8:8f:56:b8:6c:18:c2:0a:ab:c9:e8:3f:b4:04:e4:64: 0c:c1:f2:ec:f3:b3:68:15:af:3a:d0:4b:09:03:46:a7:15:c9: 22:c9:3b:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLqfdQZyMya+GBovnxjeHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZWEzZTk5YmJiMGRkYTc4MDg0MjE5YTYxMzQ5MmU1ZTZk OWI0NWEwHhcNMjUxMjE2MjIwMTIyWhcNMjUxMjE3MjIwMTIyWjAzMTEwLwYDVQQD Eyg0MzFiYWM2YmZhNmZiMGE5ZWZlMDE4MTM5M2RhNDRlZjZmYmQxNmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jc2Tqv28+9fitg3AQXnt7GBS0GE eeSoLYlpI5jYljRG9ku4tS+M6tyq5P9oOkN+pd6yk3SMVgFEx0jSIfICxgZ9dYmB Mv048m7mTCIMl+HnIwPuPclP2D/7iuUXzC4uqdUmE/Gk/WFNVErMZvrmI8MFAsoI p3UoEbj2lkJv5ZB8X5JQpCB71lwrbeSZJmrwbQ8PDzuUJ75QxzpVwI88Z0Cm3zJj LuliQGlzIAyUKDcYBQodEmsqewpcD13pG6LpBJ8qdapodjVUuhrCLNhuvjLrFqiU 7Rnb3RVWI7Z/X1z45gWs2uPV/2QYDOKB6DNn1AxAG7u98TX7mnG9pJsyTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMbrGv6b7Cp7+AYE5PaRO9vvRbKMB8GA1UdIwQY MBaAFBvqPpm7sN2ngIQhmmE0kuXm2bRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2Ut YTBiY2M5MTJkNzM1LzEvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2UtYTBiY2M5MTJkNzM1 LzEvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsll1Gio9 H4N6SZXB0suCj/iekQ7hHkq4xOXvgmcZGUbnlPpM1jAAhxhl11p2IxFN0esIiq9W HdLEUcshk9TqlNbLx6cHUBF/nmr9ldOXQ/h3pjZLdmKgkQLed8SPNXnXqBXlkO9a EJvpU4Fi/KXw/rI0EATB/SMA8wYp6aKpXn/uOvHfFsAmXOwsbeU0zZGqWvb6XlTf qFZcmCbI1CBmsJlIxD8qxJd2jYJxnuhLvtROESoVHn4YjewRmUyFAz9CVe4ejcET 4U8OU1bKZ29IIt1HjH4SIgdOTZPYj1a4bBjCCqvJ6D+0BORkDMHy7POzaBWvOtBL CQNGpxXJIsk7cA== -----END CERTIFICATE-----Generated at Wed Dec 17 00:27:12 2025 by rpki-client