This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json) Hash identifier: 5y+po/rs1EWys2n7Q2ZryjgqtJ03UglTO5XVX11+G+4= Subject key identifier: 98:0C:8B:92:8E:E3:BF:06:98:64:E8:04:4F:2A:17:82:5E:7D:16:9C Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0 Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0 Certificate serial: 019B39EB622661120A4202EC35B32161AEDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft Manifest number: 1468 Signing time: Sat 20 Dec 2025 04:01:25 +0000 Manifest this update: Sat 20 Dec 2025 04:01:25 +0000 Manifest next update: Sun 21 Dec 2025 04:01:25 +0000 Files and hashes: 1: 4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa (hash: 2K/ITDdgk6fYi6thD3A/GwKYq+VGIASYLtA7ItdKnpc=) 2: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: dn5LNpCeG9s5xycHi4Cs8sLekaqO1EVBXE6z0GpRb90=) 3: JkUk0RwhqW1iBr4hL3arEunrp2M.roa (hash: /IEYmQsTDHtYubFLhftis+nToWQhtnU5kLG/4NerSmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:62:26:61:12:0a:42:02:ec:35:b3:21:61:ae:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0 Validity Not Before: Dec 20 04:01:25 2025 GMT Not After : Dec 21 04:01:25 2025 GMT Subject: CN=980c8b928ee3bf069864e8044f2a17825e7d169c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:79:0d:77:7c:c8:1f:b0:d2:6f:f8:73:a0: c2:d5:42:02:7a:4c:1c:52:c6:e2:35:9e:0a:15:33: cd:ab:72:6b:cb:35:fa:09:61:7b:7b:8d:c5:c1:45: bc:fc:c2:2b:c3:a7:02:e9:67:1e:ae:16:8f:68:bd: 80:94:50:5b:08:fe:c0:a4:3a:4a:88:4d:5e:2e:cb: 7b:f8:69:5b:3a:77:f2:34:0b:37:ae:58:3e:72:13: e4:64:50:97:21:8e:75:8f:9c:c3:5b:45:ce:c0:16: 36:55:e1:79:46:fb:ec:71:4f:a1:50:14:c9:66:62: 83:e1:9e:3b:75:7c:12:46:b3:2b:ce:0c:0d:16:ea: d6:c2:1c:e0:5d:96:a3:57:6d:ab:33:a1:09:c6:5f: 2a:2f:eb:b7:a9:57:09:e9:2d:57:fa:e4:cf:58:3a: 66:fc:84:82:46:d9:93:dc:e1:64:16:63:94:ac:52: ff:b9:4e:3a:24:3f:c6:18:67:a9:07:fd:c1:9c:8d: bf:eb:c5:2f:21:d8:8c:ba:98:9a:45:75:ad:7f:9a: 92:75:93:ef:ac:3c:2b:44:90:c4:fa:09:6f:f1:e4: 69:3f:1a:76:da:49:80:61:c8:dc:dd:d7:d9:36:0d: c7:fc:26:51:36:1c:d0:11:a8:7b:ad:21:ed:d1:fc: 45:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0C:8B:92:8E:E3:BF:06:98:64:E8:04:4F:2A:17:82:5E:7D:16:9C X509v3 Authority Key Identifier: keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:0c:0a:d3:ce:66:c2:44:5f:3d:e7:f4:be:ec:ab:e6:57:5b: eb:10:cc:9c:97:2e:d3:6b:47:f1:36:20:47:ae:96:70:71:ef: e3:73:04:8c:d9:55:c9:b3:12:20:00:c3:17:44:dc:b4:1a:c1: e1:dd:ba:35:0c:c9:a7:49:3c:68:ff:9c:3d:4e:aa:6a:75:f2: 4a:b8:fb:84:43:42:6a:0d:4c:1b:ea:42:80:99:75:7a:93:1b: 3b:5f:79:e7:a5:06:17:e7:76:b5:2b:d3:2b:3b:5c:d1:b8:e1: 8a:a5:ed:1e:f9:0f:7f:ce:30:db:65:b9:da:82:96:19:3a:0e: 7c:2f:3c:6c:46:66:08:91:71:c0:cd:f0:69:9a:7d:d3:42:cf: fa:4d:9a:cc:5d:dc:8c:51:d4:e0:10:02:cd:6a:b3:61:65:88: 6e:6c:7f:27:20:d5:87:4f:90:89:4f:91:60:f1:ed:f6:89:de: 5f:af:e7:5b:4a:c4:c0:e1:6d:69:39:7d:1c:5b:a9:e7:a6:d5: 38:9e:99:c9:6b:bc:ca:5a:31:7b:43:50:ef:d6:0e:b2:4a:7f: 0c:e9:48:ff:4c:12:28:e1:af:73:36:5a:3c:71:b1:f5:20:51: e1:cf:f9:9b:5e:3c:db:e1:7c:2e:4c:d9:e5:52:98:2c:f0:00: eb:b1:af:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs562ImYRIKQgLsNbMhYa7cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YjgwMGMzOTEyNmRiM2NhNGUwZDU2OTEwZjBhZDM3OTI1 N2U0YTAwHhcNMjUxMjIwMDQwMTI1WhcNMjUxMjIxMDQwMTI1WjAzMTEwLwYDVQQD Eyg5ODBjOGI5MjhlZTNiZjA2OTg2NGU4MDQ0ZjJhMTc4MjVlN2QxNjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3x5DXd8yB+w0m/4c6DC1UICekwc UsbiNZ4KFTPNq3JryzX6CWF7e43FwUW8/MIrw6cC6WcerhaPaL2AlFBbCP7ApDpK iE1eLst7+GlbOnfyNAs3rlg+chPkZFCXIY51j5zDW0XOwBY2VeF5RvvscU+hUBTJ ZmKD4Z47dXwSRrMrzgwNFurWwhzgXZajV22rM6EJxl8qL+u3qVcJ6S1X+uTPWDpm /ISCRtmT3OFkFmOUrFL/uU46JD/GGGepB/3BnI2/68UvIdiMupiaRXWtf5qSdZPv rDwrRJDE+glv8eRpPxp22kmAYcjc3dfZNg3H/CZRNhzQEah7rSHt0fxF7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgMi5KO478GmGToBE8qF4JefRacMB8GA1UdIwQY MBaAFBm4AMORJts8pODVaRDwrTeSV+SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEt ZjE4YWQ5ZjRjYzM0LzEvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEtZjE4YWQ5ZjRjYzM0 LzEvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQwK085m wkRfPef0vuyr5ldb6xDMnJcu02tH8TYgR66WcHHv43MEjNlVybMSIADDF0TctBrB 4d26NQzJp0k8aP+cPU6qanXySrj7hENCag1MG+pCgJl1epMbO19556UGF+d2tSvT Kztc0bjhiqXtHvkPf84w22W52oKWGToOfC88bEZmCJFxwM3waZp900LP+k2azF3c jFHU4BACzWqzYWWIbmx/JyDVh0+QiU+RYPHt9oneX6/nW0rEwOFtaTl9HFup56bV OJ6ZyWu8yloxe0NQ79YOskp/DOlI/0wSKOGvczZaPHGx9SBR4c/5m1482+F8LkzZ 5VKYLPAA67GveQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:41:25 2025 by rpki-client