This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft File: GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft (raw, json) Hash identifier: P49M7d5esT419Wt3xCLrac/A9mgkuNgOKWltlaadmW8= Subject key identifier: 0D:78:55:84:AD:D3:4A:C3:C4:25:34:B8:47:24:7E:E1:21:91:DB:1A Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86 Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886 Certificate serial: 019B3C105A7E24CD6E6014321228C84D739D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 14:01:03 +0000 Manifest this update: Sat 20 Dec 2025 14:01:03 +0000 Manifest next update: Sun 21 Dec 2025 14:01:03 +0000 Files and hashes: 1: 9VHnso7HKhi305msO0E0LZUPW1k.roa (hash: 04hjZ5ZRGMkvxF1mWUhoObmyRw38T7L084gMoET9a40=) 2: GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl (hash: PLwvWwLtF9Pu0o9CyXaNc07lKoVFZ/KUPmHJm4ZDqbc=) 3: Njf2TltOZrdEvD_qof8H0kAWoWg.roa (hash: DfC/KigNnFzfWnrZ4fHRxNqUPwLlnRYcAsAhEzE9YoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:5a:7e:24:cd:6e:60:14:32:12:28:c8:4d:73:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886 Validity Not Before: Dec 20 14:01:03 2025 GMT Not After : Dec 21 14:01:03 2025 GMT Subject: CN=0d785584add34ac3c42534b847247ee12191db1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f4:4c:5b:ed:62:76:6c:51:12:d1:f8:1e:9d: 55:2a:20:33:ca:1e:87:63:e1:f9:ad:5f:29:c7:fc: 6e:14:df:b3:d1:0c:d6:58:44:4c:1d:45:7b:60:85: 8f:38:7d:7e:7b:cd:c2:d7:bb:ea:df:cb:56:06:29: e8:b6:c3:f5:87:d5:99:e0:ca:8c:a7:d5:f2:e4:1e: 32:4a:04:5e:85:bb:2d:db:a0:e6:b0:22:b3:4e:bc: 26:b7:1b:cd:0f:e2:54:af:90:c9:09:c0:f6:ce:4a: fd:42:94:a7:9c:8a:fe:67:8a:0f:bd:b1:2f:84:b0: 8a:42:43:94:f3:d0:23:fc:9b:e6:5a:da:38:62:45: fd:72:39:77:e7:80:07:b9:bb:85:23:63:4b:d7:0d: db:95:52:14:0c:33:c3:87:cf:90:a7:62:87:16:0a: 72:90:11:fe:65:72:60:de:c3:aa:46:2f:06:5f:dc: e3:d9:11:21:d2:d9:40:a4:17:52:94:06:24:9e:00: bd:f9:09:d2:d3:63:e3:03:37:c0:64:48:f6:82:1f: eb:58:d8:f3:fd:1b:88:b7:4d:1c:bc:4a:fe:fc:17: 9f:38:3b:7f:f9:2e:22:36:6f:87:74:64:d9:21:4f: 07:85:db:ef:f2:26:ee:6d:32:2e:2a:4b:01:b7:4e: bf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:78:55:84:AD:D3:4A:C3:C4:25:34:B8:47:24:7E:E1:21:91:DB:1A X509v3 Authority Key Identifier: keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:3d:76:8f:5e:5e:a8:82:13:a5:4a:42:3d:4e:5e:e7:5c:e7: a1:3d:a9:f8:4d:70:49:a5:b9:40:62:f3:6f:02:86:37:c3:8f: c1:2c:4e:52:71:8a:1c:62:ad:af:f6:af:fc:bd:ee:cd:4a:5c: ec:ac:01:4c:0f:9a:5d:f7:53:ff:9f:61:9b:b5:e5:54:db:41: 1a:aa:1b:26:f6:4b:96:e6:dc:fc:78:67:0d:17:e5:8b:92:cc: 0f:09:41:ee:21:53:c4:37:09:7f:69:6a:1c:98:87:11:9a:75: 0d:90:88:3b:03:e1:f5:19:cc:ab:01:74:4a:8b:d8:dc:75:d9: 2f:fe:59:bf:1c:d4:b6:38:d9:77:9e:7e:3c:1a:85:d8:1f:fb: b5:aa:b6:af:46:a3:bd:86:d3:f6:1e:a7:0c:34:b1:62:2d:05: 83:1d:8e:85:65:39:5c:08:46:06:98:c7:07:3d:72:76:21:1c: 0e:d8:31:fd:6d:32:f6:a0:26:83:1c:29:a0:ad:ec:e0:1c:07: e1:d1:0d:f1:0d:70:5f:ba:64:9b:92:fb:31:c4:ab:6d:97:04: 4a:d3:84:a3:ea:a3:9a:30:f1:29:52:81:88:cc:52:cc:7e:de: cc:09:e9:67:5e:f7:bd:7d:22:4e:83:7d:64:67:b1:ac:6e:c7: fc:2b:3a:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EFp+JM1uYBQyEijITXOdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZTlkYjI5YWE5MzA4ZTE3NTFiMDNkMGQ2OTk5YmI4Njg4 MDU4ODYwHhcNMjUxMjIwMTQwMTAzWhcNMjUxMjIxMTQwMTAzWjAzMTEwLwYDVQQD EygwZDc4NTU4NGFkZDM0YWMzYzQyNTM0Yjg0NzI0N2VlMTIxOTFkYjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvRMW+1idmxREtH4Hp1VKiAzyh6H Y+H5rV8px/xuFN+z0QzWWERMHUV7YIWPOH1+e83C17vq38tWBinotsP1h9WZ4MqM p9Xy5B4ySgRehbst26DmsCKzTrwmtxvND+JUr5DJCcD2zkr9QpSnnIr+Z4oPvbEv hLCKQkOU89Aj/JvmWto4YkX9cjl354AHubuFI2NL1w3blVIUDDPDh8+Qp2KHFgpy kBH+ZXJg3sOqRi8GX9zj2REh0tlApBdSlAYkngC9+QnS02PjAzfAZEj2gh/rWNjz /RuIt00cvEr+/BefODt/+S4iNm+HdGTZIU8Hhdvv8ibubTIuKksBt06/9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA14VYSt00rDxCU0uEckfuEhkdsaMB8GA1UdIwQY MBaAFBrp2ymqkwjhdRsD0NaZm7hogFiGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYjc4MzUtZDM2NC00ZTI4LTlhODIt ZWQ5MjMxZmJhZWQxLzEvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lYjc4MzUtZDM2NC00ZTI4LTlhODItZWQ5MjMxZmJhZWQx LzEvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAET12j15e qIITpUpCPU5e51znoT2p+E1wSaW5QGLzbwKGN8OPwSxOUnGKHGKtr/av/L3uzUpc 7KwBTA+aXfdT/59hm7XlVNtBGqobJvZLlubc/HhnDRfli5LMDwlB7iFTxDcJf2lq HJiHEZp1DZCIOwPh9RnMqwF0SovY3HXZL/5ZvxzUtjjZd55+PBqF2B/7taq2r0aj vYbT9h6nDDSxYi0Fgx2OhWU5XAhGBpjHBz1ydiEcDtgx/W0y9qAmgxwpoK3s4BwH 4dEN8Q1wX7pkm5L7McSrbZcEStOEo+qjmjDxKVKBiMxSzH7ezAnpZ173vX0iToN9 ZGexrG7H/Cs6vw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:43:16 2025 by rpki-client