This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft File: GbEF0UjemWA2_fIcsgijOKFYzto.mft (raw, json) Hash identifier: J1+c6zUHZpdUPVt0h/FUKvH14cKbplg3y2hNXJz71XM= Subject key identifier: C1:73:20:29:DE:1C:48:27:F1:48:CF:2D:8A:5C:73:F8:ED:9C:BB:8E Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA Certificate issuer: /CN=19b105d148de996036fdf21cb208a338a158ceda Certificate serial: 019B4A70C62828D697A051AD4822897B69D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft Manifest number: 0712 Signing time: Tue 23 Dec 2025 09:01:03 +0000 Manifest this update: Tue 23 Dec 2025 09:01:03 +0000 Manifest next update: Wed 24 Dec 2025 09:01:03 +0000 Files and hashes: 1: GbEF0UjemWA2_fIcsgijOKFYzto.crl (hash: 37MnUCxSP3zv021pUbOzI2/+r18WU6OIcu/sNaE2Djk=) 2: Kef5Ht8ih3zCR7oI2xwNCCek_c0.roa (hash: PcoTymr3WCdK/2NTP+Gx/1hjHNciVhC2nMEqt8P6Dww=) 3: QdqTKHoiqUSS3YbPBuNzrQhQ9-U.roa (hash: q0TCHE5AUt7fjjG6UbQUxp5tdbPD8QNzCCk/O3w0dcI=) 4: bJaPvlpLwHUl9ZMeCz6Qju7dCQ4.roa (hash: P7xXaDBj8KlM/Rm+qxd2RUE4iuJ1o4jB4LwpB/1ek+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:70:c6:28:28:d6:97:a0:51:ad:48:22:89:7b:69:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda Validity Not Before: Dec 23 09:01:03 2025 GMT Not After : Dec 24 09:01:03 2025 GMT Subject: CN=c1732029de1c4827f148cf2d8a5c73f8ed9cbb8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:af:c9:03:2f:21:8b:ec:7f:e9:46:8a:f3:01: b5:1f:f6:3c:f6:e4:2c:a2:cf:d4:98:d4:13:09:4c: c1:41:87:b7:f5:d9:cd:f6:0a:66:5c:c5:64:cc:ac: 5e:5e:e6:b3:f9:c5:83:d3:7c:3c:11:ca:0b:1e:cb: db:ae:83:72:38:b7:40:1e:91:e0:5c:2b:ee:cc:3e: 8d:e5:9e:d5:8f:75:53:0a:9e:07:49:17:5b:3a:a9: da:33:ee:aa:c6:f3:da:ea:2f:70:80:ef:bb:c4:25: 33:27:ba:d3:bd:c6:cf:0f:4a:a1:2a:88:49:42:44: 0f:c6:de:08:f2:42:93:ab:7c:d5:25:b6:80:ee:35: 29:6a:e6:09:36:32:d8:83:2a:13:0b:b8:eb:f4:6c: 49:09:b0:f5:68:48:ea:e6:4a:93:4e:1d:d0:61:1d: a1:14:be:fa:93:c3:5c:58:46:8c:9d:ec:31:83:7d: cc:83:88:3a:be:f1:1b:c4:66:25:8a:4d:57:ae:6c: 33:4f:30:ac:a3:35:e7:36:48:fe:b8:08:03:3b:55: 2e:d0:28:b2:b9:31:d5:b1:6c:b7:25:eb:c9:5c:d9: 62:d0:1d:e8:86:f7:d0:57:63:e0:d6:81:9f:98:2b: 03:2d:05:29:e6:5c:1e:5e:31:14:96:1f:ef:2c:c5: 0e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:73:20:29:DE:1C:48:27:F1:48:CF:2D:8A:5C:73:F8:ED:9C:BB:8E X509v3 Authority Key Identifier: keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:d0:1c:1d:6f:29:93:3f:3b:01:ec:09:1e:5a:f1:43:87:51: 41:17:2c:e7:0b:cc:68:72:36:43:da:fa:91:cb:9d:76:57:52: e8:16:fd:45:e7:d8:0a:b5:b7:9d:13:64:b4:3a:b3:e8:7e:5c: af:ca:36:8b:c2:da:f7:5e:6d:33:97:7d:32:3f:d8:62:64:b5: e9:b1:7d:62:f6:49:fc:8c:f3:c2:51:57:f2:d4:57:bf:6b:7a: 37:20:d5:62:74:aa:bd:7e:14:cd:80:f3:cf:64:c8:9a:aa:b7: 11:4e:c5:8a:ca:ef:31:20:15:4e:5f:7e:e3:07:13:ee:79:ed: 0e:fb:a3:ad:9b:f0:cd:bc:78:26:37:b6:c9:f6:dc:70:67:53: 89:5c:e9:6d:67:75:aa:34:78:12:2c:92:21:ac:12:1d:81:00: 02:fb:71:11:db:f4:d0:c0:7d:ae:d6:b6:c2:b4:1d:e0:fd:3c: 61:42:31:8c:61:bd:f8:cd:32:d8:dd:4a:9d:19:9d:8f:30:95: 47:e4:9b:80:5b:de:05:45:5d:11:dd:83:86:d8:51:76:0b:48: 3f:7b:bd:01:8b:ea:f9:06:f4:46:09:e3:b4:19:91:77:43:19: 9d:da:68:54:25:88:d6:70:80:ff:29:33:d2:48:c6:2c:2c:0d: 78:c3:23:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcMYoKNaXoFGtSCKJe2nZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YjEwNWQxNDhkZTk5NjAzNmZkZjIxY2IyMDhhMzM4YTE1 OGNlZGEwHhcNMjUxMjIzMDkwMTAzWhcNMjUxMjI0MDkwMTAzWjAzMTEwLwYDVQQD EyhjMTczMjAyOWRlMWM0ODI3ZjE0OGNmMmQ4YTVjNzNmOGVkOWNiYjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6/JAy8hi+x/6UaK8wG1H/Y89uQs os/UmNQTCUzBQYe39dnN9gpmXMVkzKxeXuaz+cWD03w8EcoLHsvbroNyOLdAHpHg XCvuzD6N5Z7Vj3VTCp4HSRdbOqnaM+6qxvPa6i9wgO+7xCUzJ7rTvcbPD0qhKohJ QkQPxt4I8kKTq3zVJbaA7jUpauYJNjLYgyoTC7jr9GxJCbD1aEjq5kqTTh3QYR2h FL76k8NcWEaMnewxg33Mg4g6vvEbxGYlik1XrmwzTzCsozXnNkj+uAgDO1Uu0Ciy uTHVsWy3JevJXNli0B3ohvfQV2Pg1oGfmCsDLQUp5lweXjEUlh/vLMUOcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFzICneHEgn8UjPLYpcc/jtnLuOMB8GA1UdIwQY MBaAFBmxBdFI3plgNv3yHLIIozihWM7aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JFRjBVamVtV0EyX2ZJY3NnaWpPS0ZZenRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi81MmNiOGQtMTFkNC00ZjljLThmOTIt MjZlNjRkNzhiMGM2LzEvR2JFRjBVamVtV0EyX2ZJY3NnaWpPS0ZZenRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi81MmNiOGQtMTFkNC00ZjljLThmOTItMjZlNjRkNzhiMGM2 LzEvR2JFRjBVamVtV0EyX2ZJY3NnaWpPS0ZZenRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw9AcHW8p kz87AewJHlrxQ4dRQRcs5wvMaHI2Q9r6kcuddldS6Bb9RefYCrW3nRNktDqz6H5c r8o2i8La915tM5d9Mj/YYmS16bF9YvZJ/IzzwlFX8tRXv2t6NyDVYnSqvX4UzYDz z2TImqq3EU7FisrvMSAVTl9+4wcT7nntDvujrZvwzbx4Jje2yfbccGdTiVzpbWd1 qjR4EiySIawSHYEAAvtxEdv00MB9rta2wrQd4P08YUIxjGG9+M0y2N1KnRmdjzCV R+SbgFveBUVdEd2DhthRdgtIP3u9AYvq+Qb0RgnjtBmRd0MZndpoVCWI1nCA/ykz 0kjGLCwNeMMjPA== -----END CERTIFICATE-----Generated at Tue Dec 23 12:51:22 2025 by rpki-client