This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft File: GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft (raw, json) Hash identifier: vScnHQf9hDximf1HsMsYaB8eGHLneb2M7kOnHjIwPww= Subject key identifier: AA:4B:FB:6A:3D:F6:D9:67:D8:77:27:23:65:0D:C9:52:F1:C8:4F:8C Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86 Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886 Certificate serial: 019B38332FF0E1235D31E174938E1D3406E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft Manifest number: 178A Signing time: Fri 19 Dec 2025 20:00:37 +0000 Manifest this update: Fri 19 Dec 2025 20:00:37 +0000 Manifest next update: Sat 20 Dec 2025 20:00:37 +0000 Files and hashes: 1: 9VHnso7HKhi305msO0E0LZUPW1k.roa (hash: 04hjZ5ZRGMkvxF1mWUhoObmyRw38T7L084gMoET9a40=) 2: GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl (hash: DTSIVsiWBzmVCM/6o7S9rOp8sov8PnyjxRbgfZuHNU8=) 3: Njf2TltOZrdEvD_qof8H0kAWoWg.roa (hash: DfC/KigNnFzfWnrZ4fHRxNqUPwLlnRYcAsAhEzE9YoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:2f:f0:e1:23:5d:31:e1:74:93:8e:1d:34:06:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886 Validity Not Before: Dec 19 20:00:37 2025 GMT Not After : Dec 20 20:00:37 2025 GMT Subject: CN=aa4bfb6a3df6d967d8772723650dc952f1c84f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:75:9e:e4:d7:e4:54:8c:58:ff:25:ac:72:51: 40:64:81:54:0d:20:c3:9c:c3:16:6a:74:6e:d0:a3: 0f:86:0c:15:04:a5:1e:34:40:69:47:bf:fd:26:06: ad:b1:2b:00:72:45:c4:95:0e:3e:bc:76:7e:22:8e: ff:04:c9:57:01:c1:c2:1a:71:90:a9:6f:b1:86:1a: 3b:17:7d:02:d6:12:60:38:e2:76:76:bd:40:88:10: da:15:82:39:8b:4c:ec:b1:f0:76:cc:3a:b2:dd:90: 89:89:69:51:f0:4e:52:c0:2c:0b:ce:3f:18:b3:d8: 7f:72:85:8f:ae:a4:2f:95:97:0b:08:cd:7f:32:24: a5:b5:ae:cb:3e:15:9e:7b:ae:8f:f6:86:57:f1:7e: 8e:3f:0a:53:4f:12:67:98:ce:92:65:a2:f0:a0:25: c7:21:60:89:13:56:13:15:35:79:66:34:49:8b:74: 29:32:17:8b:58:f7:a7:46:94:0a:34:21:8b:28:38: 90:00:a3:71:3b:29:a9:52:09:0d:5d:22:28:84:32: 2a:87:aa:31:3a:38:91:b0:60:3b:c1:df:0c:cb:42: c9:5c:45:2f:08:2b:68:76:d2:d4:24:0d:d7:5b:56: 06:41:f5:34:ee:b7:79:95:3a:89:a1:f7:b9:b7:eb: 10:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4B:FB:6A:3D:F6:D9:67:D8:77:27:23:65:0D:C9:52:F1:C8:4F:8C X509v3 Authority Key Identifier: keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:4e:52:0f:ea:8b:23:a7:17:ff:69:64:e6:0a:b9:04:1d:eb: d0:a5:4a:c3:8a:04:69:fb:9b:5c:75:1f:21:e7:61:b9:a2:12: 8e:65:ae:22:a9:b8:fd:ed:86:22:1c:73:75:cc:63:b4:06:07: f7:61:cb:44:c1:ff:14:30:7e:bb:4d:38:41:4d:b1:22:4d:e0: 88:32:18:9c:f4:2a:10:01:e3:d3:52:a6:70:81:34:d8:4b:4d: 2d:94:76:88:36:7b:ca:ab:c7:2e:ea:58:32:a9:33:b1:be:88: fc:33:3a:e7:54:7c:7c:71:10:88:e3:55:0e:ec:c4:88:16:9d: 69:9a:e6:1e:54:88:de:4b:cc:fe:c6:47:98:81:1f:bf:54:1d: fe:75:64:9a:d8:58:81:00:1c:07:0b:fd:9f:ca:af:20:9f:ec: 7b:06:a1:a3:16:9d:68:7f:39:4a:13:ff:18:5f:a3:a2:c8:ed: 19:09:0d:c1:7c:5e:af:55:7c:79:9a:76:00:a3:d3:3e:a9:1e: c9:8a:bf:79:a6:e9:f7:e0:81:85:71:bd:20:d8:04:8b:76:c7: ab:59:aa:3e:60:1d:6a:0a:e6:8e:60:ac:68:9d:79:0c:61:e0: d1:0b:48:9f:03:65:91:fc:1c:a0:46:06:cb:7d:7b:31:22:90: be:99:7d:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4My/w4SNdMeF0k44dNAbpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZTlkYjI5YWE5MzA4ZTE3NTFiMDNkMGQ2OTk5YmI4Njg4 MDU4ODYwHhcNMjUxMjE5MjAwMDM3WhcNMjUxMjIwMjAwMDM3WjAzMTEwLwYDVQQD EyhhYTRiZmI2YTNkZjZkOTY3ZDg3NzI3MjM2NTBkYzk1MmYxYzg0ZjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63We5NfkVIxY/yWsclFAZIFUDSDD nMMWanRu0KMPhgwVBKUeNEBpR7/9JgatsSsAckXElQ4+vHZ+Io7/BMlXAcHCGnGQ qW+xhho7F30C1hJgOOJ2dr1AiBDaFYI5i0zssfB2zDqy3ZCJiWlR8E5SwCwLzj8Y s9h/coWPrqQvlZcLCM1/MiSlta7LPhWee66P9oZX8X6OPwpTTxJnmM6SZaLwoCXH IWCJE1YTFTV5ZjRJi3QpMheLWPenRpQKNCGLKDiQAKNxOympUgkNXSIohDIqh6ox OjiRsGA7wd8My0LJXEUvCCtodtLUJA3XW1YGQfU07rd5lTqJofe5t+sQaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpL+2o99tln2HcnI2UNyVLxyE+MMB8GA1UdIwQY MBaAFBrp2ymqkwjhdRsD0NaZm7hogFiGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYjc4MzUtZDM2NC00ZTI4LTlhODIt ZWQ5MjMxZmJhZWQxLzEvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lYjc4MzUtZDM2NC00ZTI4LTlhODItZWQ5MjMxZmJhZWQx LzEvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOU5SD+qL I6cX/2lk5gq5BB3r0KVKw4oEafubXHUfIedhuaISjmWuIqm4/e2GIhxzdcxjtAYH 92HLRMH/FDB+u004QU2xIk3giDIYnPQqEAHj01KmcIE02EtNLZR2iDZ7yqvHLupY Mqkzsb6I/DM651R8fHEQiONVDuzEiBadaZrmHlSI3kvM/sZHmIEfv1Qd/nVkmthY gQAcBwv9n8qvIJ/sewahoxadaH85ShP/GF+josjtGQkNwXxer1V8eZp2AKPTPqke yYq/eabp9+CBhXG9INgEi3bHq1mqPmAdagrmjmCsaJ15DGHg0QtInwNlkfwcoEYG y317MSKQvpl9Gw== -----END CERTIFICATE-----Generated at Fri Dec 19 21:49:54 2025 by rpki-client