This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft File: gbv0m8K-YG6m9Ivb-WJX3natfMA.mft (raw, json) Hash identifier: 3ZbFun435LsHvwEFUs8H1DfKFi79WT0UCedOG8pMkpc= Subject key identifier: 57:AD:2C:3A:F6:D1:09:6F:F1:3F:96:DF:D5:CC:1C:93:3D:18:FD:AB Authority key identifier: 81:BB:F4:9B:C2:BE:60:6E:A6:F4:8B:DB:F9:62:57:DE:76:AD:7C:C0 Certificate issuer: /CN=81bbf49bc2be606ea6f48bdbf96257de76ad7cc0 Certificate serial: 019B70A2F9159C0268CD40BFB4CE3F47FF6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft Manifest number: 17A0 Signing time: Tue 30 Dec 2025 19:01:27 +0000 Manifest this update: Tue 30 Dec 2025 19:01:27 +0000 Manifest next update: Wed 31 Dec 2025 19:01:27 +0000 Files and hashes: 1: gbv0m8K-YG6m9Ivb-WJX3natfMA.crl (hash: /q5kvVT8S89cO98Pzr63O96fu1r3Dem61Nea0R0tT+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 19:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a2:f9:15:9c:02:68:cd:40:bf:b4:ce:3f:47:ff:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81bbf49bc2be606ea6f48bdbf96257de76ad7cc0 Validity Not Before: Dec 30 19:01:27 2025 GMT Not After : Dec 31 19:01:27 2025 GMT Subject: CN=57ad2c3af6d1096ff13f96dfd5cc1c933d18fdab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0b:fb:a3:d1:35:9e:32:16:92:4e:47:1c:7b: b4:36:cd:c7:9b:37:15:a0:e1:c8:4d:8a:44:a5:e2: dc:34:ec:87:e2:ea:aa:d6:f0:ef:bd:e6:8d:75:4f: 96:da:05:b4:47:c9:63:3a:f8:fd:d7:cd:64:e2:5c: 13:ed:0d:d2:6d:e5:b0:3b:c0:1f:17:0e:cd:7f:70: 23:09:d8:af:ec:49:11:56:fd:ca:0c:5b:99:27:b4: fc:c5:18:8b:2c:df:d3:95:5b:b3:9c:0b:b8:91:03: 83:48:9d:e1:69:64:32:9b:61:34:46:2a:8d:dd:b0: 28:56:d9:b8:db:a5:e7:65:32:22:ed:94:09:31:b2: a9:dd:2d:cb:28:63:07:db:dd:ab:60:01:1a:43:97: d1:92:4f:c4:f9:8e:3b:0a:33:54:0a:48:0d:40:15: 1c:75:c5:69:19:9c:6f:1c:25:15:90:2e:a5:42:c2: 4c:5f:20:c3:f3:05:d6:b1:72:48:2d:2c:3d:a4:15: 9b:4f:d6:f2:b3:53:02:49:57:bf:98:a5:24:1f:4d: 4d:28:cf:3f:58:76:95:17:e1:9d:fb:f5:9e:8a:1c: 39:5c:9c:fa:89:66:1b:dd:34:35:b5:2b:5b:6d:3a: a4:c3:93:10:38:da:00:4b:f0:a4:27:e8:00:48:77: b8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AD:2C:3A:F6:D1:09:6F:F1:3F:96:DF:D5:CC:1C:93:3D:18:FD:AB X509v3 Authority Key Identifier: keyid:81:BB:F4:9B:C2:BE:60:6E:A6:F4:8B:DB:F9:62:57:DE:76:AD:7C:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:8e:f7:96:93:18:bf:21:35:e3:b6:b2:7a:ed:81:bf:0e:c0: 9f:a4:a0:a7:7e:cf:5e:52:88:46:6b:ec:49:8e:98:92:90:16: 2b:af:d1:32:42:7d:63:7c:8a:0c:e9:a8:69:d8:4e:78:fd:9b: 14:bc:05:df:74:f3:53:9a:73:f4:37:e2:ad:a1:06:09:35:0e: 7b:cc:dd:ca:58:18:8b:9e:4a:5b:f7:a6:70:a6:bc:d8:3b:fc: 2b:95:4e:85:45:28:70:98:67:e4:5d:2d:ac:08:0d:fb:49:70: eb:fa:95:a2:b7:bb:5d:18:a3:80:76:d6:fd:dc:54:a6:f3:df: 84:1e:73:5a:7e:50:92:10:14:53:f5:85:63:04:08:8b:c4:89: ab:83:da:89:af:6e:80:3a:aa:b0:85:09:41:b4:e5:e7:26:1e: c0:95:e4:97:b0:fc:fc:b9:87:04:bc:88:2a:92:2b:e9:55:de: f4:23:56:47:83:12:4f:f1:39:78:75:91:2a:7c:14:25:54:5d: d0:91:58:51:03:6c:87:00:58:8f:2d:97:5a:6c:1b:32:ab:4b: c2:7a:c2:de:33:16:b6:df:81:96:86:a9:83:df:e0:11:6b:5b: d0:eb:c2:ee:84:ca:d3:05:83:d8:62:ae:b6:f4:16:f9:19:af: 74:34:32:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwovkVnAJozUC/tM4/R/9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYmJmNDliYzJiZTYwNmVhNmY0OGJkYmY5NjI1N2RlNzZh ZDdjYzAwHhcNMjUxMjMwMTkwMTI3WhcNMjUxMjMxMTkwMTI3WjAzMTEwLwYDVQQD Eyg1N2FkMmMzYWY2ZDEwOTZmZjEzZjk2ZGZkNWNjMWM5MzNkMThmZGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwv7o9E1njIWkk5HHHu0Ns3HmzcV oOHITYpEpeLcNOyH4uqq1vDvveaNdU+W2gW0R8ljOvj9181k4lwT7Q3SbeWwO8Af Fw7Nf3AjCdiv7EkRVv3KDFuZJ7T8xRiLLN/TlVuznAu4kQODSJ3haWQym2E0RiqN 3bAoVtm426XnZTIi7ZQJMbKp3S3LKGMH292rYAEaQ5fRkk/E+Y47CjNUCkgNQBUc dcVpGZxvHCUVkC6lQsJMXyDD8wXWsXJILSw9pBWbT9bys1MCSVe/mKUkH01NKM8/ WHaVF+Gd+/Weihw5XJz6iWYb3TQ1tStbbTqkw5MQONoAS/CkJ+gASHe4wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFetLDr20Qlv8T+W39XMHJM9GP2rMB8GA1UdIwQY MBaAFIG79JvCvmBupvSL2/liV952rXzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2J2MG04Sy1ZRzZtOUl2Yi1XSlgzbmF0Zk1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84NjNlZWUtNzcxNC00YmM0LTkyNjgt NDE2OTQyMDJkZTY4LzEvZ2J2MG04Sy1ZRzZtOUl2Yi1XSlgzbmF0Zk1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS84NjNlZWUtNzcxNC00YmM0LTkyNjgtNDE2OTQyMDJkZTY4 LzEvZ2J2MG04Sy1ZRzZtOUl2Yi1XSlgzbmF0Zk1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQo73lpMY vyE147ayeu2Bvw7An6Sgp37PXlKIRmvsSY6YkpAWK6/RMkJ9Y3yKDOmoadhOeP2b FLwF33TzU5pz9DfiraEGCTUOe8zdylgYi55KW/emcKa82Dv8K5VOhUUocJhn5F0t rAgN+0lw6/qVore7XRijgHbW/dxUpvPfhB5zWn5QkhAUU/WFYwQIi8SJq4Paia9u gDqqsIUJQbTl5yYewJXkl7D8/LmHBLyIKpIr6VXe9CNWR4MST/E5eHWRKnwUJVRd 0JFYUQNshwBYjy2XWmwbMqtLwnrC3jMWtt+Bloapg9/gEWtb0OvC7oTK0wWD2GKu tvQW+RmvdDQyJw== -----END CERTIFICATE-----Generated at Wed Dec 31 03:42:04 2025 by rpki-client