This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft File: ggBZa784LUmLxewrP9ZTOehbmPI.mft (raw, json) Hash identifier: mJp3ZjvqdlffjtaK/1Xm7bep5QZP20GxG/aTabhZXVs= Subject key identifier: 9D:BA:A1:4F:D1:06:D7:9D:AD:98:03:C5:99:FE:15:F1:A5:A9:3D:3F Authority key identifier: 82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2 Certificate issuer: /CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2 Certificate serial: 019B3C7E414F34EF904C3203D91118FF2921 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft Manifest number: 0F20 Signing time: Sat 20 Dec 2025 16:01:05 +0000 Manifest this update: Sat 20 Dec 2025 16:01:05 +0000 Manifest next update: Sun 21 Dec 2025 16:01:05 +0000 Files and hashes: 1: 0nNYMJ2yluQoQ02pe7IRw8NkdfA.roa (hash: GkG/6rDrk9vq7Jp2NvQPyT4My5GzjO9oZQi+bOX75cE=) 2: ggBZa784LUmLxewrP9ZTOehbmPI.crl (hash: L+1s955TyjGMnTIfq/Iv0n1RABervwKYRiJJPeEapyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:41:4f:34:ef:90:4c:32:03:d9:11:18:ff:29:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2 Validity Not Before: Dec 20 16:01:05 2025 GMT Not After : Dec 21 16:01:05 2025 GMT Subject: CN=9dbaa14fd106d79dad9803c599fe15f1a5a93d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3d:3f:10:f4:d7:b8:3f:96:f0:54:d5:af:f0: be:3d:f2:ba:aa:38:be:28:df:4e:96:b3:13:f8:17: 66:21:75:93:de:29:6b:dd:7e:71:4d:34:e7:a7:3c: 4b:65:c0:21:d3:1e:07:18:36:11:2b:16:94:18:38: 4d:ae:7e:0e:82:fc:33:4d:c5:6a:f7:43:06:d3:62: a5:b7:11:2f:38:27:a2:06:a1:09:66:c6:0b:de:90: 55:0f:52:a5:1d:18:48:b3:3a:ad:16:d8:02:a6:7b: 31:a8:42:be:da:7a:39:0d:64:35:92:d0:a9:45:37: 4d:48:f9:55:83:b8:f8:04:45:6b:a7:64:75:29:d7: 22:c7:5e:4e:ff:8f:7e:6c:bc:99:91:3f:af:78:1d: 78:82:d7:e5:a6:cd:9d:ca:12:92:c9:25:3b:b1:57: 7c:8f:f9:13:0e:06:d3:b6:5d:b4:89:45:d0:4e:ca: a3:5e:b7:a3:05:25:0f:d6:92:01:10:6e:4b:e7:87: 16:3e:d2:f4:fc:9d:1c:3e:86:07:a7:7a:97:f0:b0: 38:54:39:e7:8a:07:e5:86:7c:8d:e9:45:f4:95:15: aa:1f:60:d8:73:da:a4:83:3c:79:75:5b:9d:98:e2: 3b:48:98:c3:63:da:5b:f8:89:01:08:25:43:ad:46: af:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BA:A1:4F:D1:06:D7:9D:AD:98:03:C5:99:FE:15:F1:A5:A9:3D:3F X509v3 Authority Key Identifier: keyid:82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:51:d6:f1:4d:fd:92:90:6a:5c:ec:23:8d:0d:4d:71:95:49: 12:f0:d5:aa:86:ef:8e:92:27:00:58:78:87:0b:6a:71:d9:f2: 71:ab:ba:07:df:1a:85:58:42:8d:f4:30:99:2e:d1:53:d6:c2: 45:48:1a:d1:0e:0a:de:df:cc:7b:15:34:24:4b:2b:26:b8:0f: 5b:6f:aa:df:b4:95:41:c0:3e:97:0f:f1:f1:18:d5:c0:66:37: 40:31:fc:70:b3:ef:45:c7:31:78:c1:fa:84:56:e2:16:ad:5e: 04:51:0a:8b:60:6e:1f:29:90:81:4c:c6:5d:bc:8c:2b:90:af: 7e:30:62:00:b8:6a:fb:ef:48:04:7f:92:49:9e:1f:fd:cf:13: bc:1a:9a:ed:87:b4:fe:4b:4f:e8:06:5c:e3:65:b2:ff:e9:ee: f8:6e:0c:79:c2:15:91:45:f9:f9:e3:25:28:21:a8:61:29:b3: 98:85:50:67:a9:80:d7:d3:9f:dd:d8:b6:7b:5f:8c:ca:a1:6e: 76:e6:f1:4b:ef:ad:22:3b:0e:e7:42:2e:a2:a8:f4:0c:31:23: 02:e4:59:83:0e:9d:87:37:d6:bd:ff:01:bc:a6:73:d6:0c:b2: 3e:0d:ac:68:f8:b3:d9:08:cd:32:50:1d:82:c8:42:4a:07:93: b1:89:a6:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fkFPNO+QTDID2REY/ykhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMDA1OTZiYmYzODJkNDk4YmM1ZWMyYjNmZDY1MzM5ZTg1 Yjk4ZjIwHhcNMjUxMjIwMTYwMTA1WhcNMjUxMjIxMTYwMTA1WjAzMTEwLwYDVQQD Eyg5ZGJhYTE0ZmQxMDZkNzlkYWQ5ODAzYzU5OWZlMTVmMWE1YTkzZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT0/EPTXuD+W8FTVr/C+PfK6qji+ KN9OlrMT+BdmIXWT3ilr3X5xTTTnpzxLZcAh0x4HGDYRKxaUGDhNrn4OgvwzTcVq 90MG02KltxEvOCeiBqEJZsYL3pBVD1KlHRhIszqtFtgCpnsxqEK+2no5DWQ1ktCp RTdNSPlVg7j4BEVrp2R1Kdcix15O/49+bLyZkT+veB14gtflps2dyhKSySU7sVd8 j/kTDgbTtl20iUXQTsqjXrejBSUP1pIBEG5L54cWPtL0/J0cPoYHp3qX8LA4VDnn igflhnyN6UX0lRWqH2DYc9qkgzx5dVudmOI7SJjDY9pb+IkBCCVDrUaviwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ26oU/RBtedrZgDxZn+FfGlqT0/MB8GA1UdIwQY MBaAFIIAWWu/OC1Ji8XsKz/WUznoW5jyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2dCWmE3ODRMVW1MeGV3clA5WlRPZWhibVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS81MzY0MzEtOWNiZS00M2E5LThjMWYt NjhhZDJkMTExYmFjLzEvZ2dCWmE3ODRMVW1MeGV3clA5WlRPZWhibVBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS81MzY0MzEtOWNiZS00M2E5LThjMWYtNjhhZDJkMTExYmFj LzEvZ2dCWmE3ODRMVW1MeGV3clA5WlRPZWhibVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1HW8U39 kpBqXOwjjQ1NcZVJEvDVqobvjpInAFh4hwtqcdnycau6B98ahVhCjfQwmS7RU9bC RUga0Q4K3t/MexU0JEsrJrgPW2+q37SVQcA+lw/x8RjVwGY3QDH8cLPvRccxeMH6 hFbiFq1eBFEKi2BuHymQgUzGXbyMK5CvfjBiALhq++9IBH+SSZ4f/c8TvBqa7Ye0 /ktP6AZc42Wy/+nu+G4MecIVkUX5+eMlKCGoYSmzmIVQZ6mA19Of3di2e1+MyqFu dubxS++tIjsO50Iuoqj0DDEjAuRZgw6dhzfWvf8BvKZz1gyyPg2saPiz2QjNMlAd gshCSgeTsYmmLQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:45:29 2025 by rpki-client