This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json) Hash identifier: WlJnDabWUCOtIE1sYNjS0en3m3k/04A2br/tYHa8cc8= Subject key identifier: 05:99:A0:F2:A5:E8:78:2F:A5:B0:24:66:94:6C:ED:45:20:BE:3D:FC Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29 Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429 Certificate serial: 019B390F594C8D692D90068BAED832D5DF36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 00:01:05 +0000 Manifest this update: Sat 20 Dec 2025 00:01:05 +0000 Manifest next update: Sun 21 Dec 2025 00:01:05 +0000 Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: R8aOjeK6AGjEZ9VXUE3c4ZE1jOkMuhhx+uybG3q7o0k=) 2: YPZsDLLgzY_7M-GC9SiCWRi1ybo.roa (hash: 9PJDi8b5z4045eOIRy/iUo+ovH8jKNIpIEnuC9ZNGWE=) 3: dhax6YlGZdJ59Lja9mjH_mTZXS8.roa (hash: z4HlD8GeanPgFBicLk5Q3SISz2iD/qfFdvuzkfzBoxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:59:4c:8d:69:2d:90:06:8b:ae:d8:32:d5:df:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429 Validity Not Before: Dec 20 00:01:05 2025 GMT Not After : Dec 21 00:01:05 2025 GMT Subject: CN=0599a0f2a5e8782fa5b02466946ced4520be3dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c8:af:aa:a1:b3:c6:80:2d:5d:74:f5:e2:c2: 63:4e:8b:11:ab:2f:de:a0:12:5e:94:12:bd:c9:98: 68:cd:87:90:6e:59:4d:3b:25:db:70:7d:0d:9c:ef: 06:01:17:8c:28:4d:73:72:0a:10:62:39:9a:5a:cf: 2b:61:37:b6:b3:5a:a2:c9:f1:78:f5:e3:77:83:ab: 6e:38:0e:8f:7f:40:bb:3e:3b:f3:44:bd:cb:7e:40: be:fa:e4:72:38:11:9c:b5:b1:17:bf:c6:20:83:dc: 50:49:89:bc:71:b2:9c:9b:40:71:b3:31:7b:db:06: 60:b6:65:c3:bb:d7:8e:28:73:03:85:43:55:41:1d: b1:74:a8:24:3f:9f:f3:02:e2:f6:a5:1e:6f:83:3f: 5f:78:e8:9e:42:00:4f:d8:63:b4:79:ee:0a:f5:3e: 95:08:f9:17:23:18:a1:b9:71:4e:9a:f1:fb:ef:6c: 8b:62:bb:cf:23:0a:9c:0f:33:c7:8b:e8:72:41:17: 75:3b:bb:9a:63:12:e2:8f:04:b2:f8:f0:96:78:ce: 98:d4:5b:a1:50:5f:7a:42:00:53:92:bf:44:7d:90: 9b:22:51:e2:78:09:10:45:4e:14:96:ab:c8:86:63: 3b:37:23:08:e2:15:20:06:3a:84:77:43:86:8d:b3: e2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:99:A0:F2:A5:E8:78:2F:A5:B0:24:66:94:6C:ED:45:20:BE:3D:FC X509v3 Authority Key Identifier: keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:f5:72:72:8e:57:e1:2c:00:4b:ea:57:a9:9b:33:1c:62:fe: 7d:89:51:e1:c8:6c:e0:ad:58:24:eb:d7:38:23:21:13:d1:2a: 2c:b0:91:ca:03:54:ff:19:e7:30:85:81:8e:7d:b8:12:5a:1d: 55:d3:74:7e:92:a8:07:17:8c:59:4e:97:73:1a:a9:0d:75:49: 6d:78:b4:0a:28:0e:d9:a3:ba:3f:f8:02:3d:38:48:30:26:0e: 5f:aa:c1:ef:59:ff:7b:43:89:37:7a:b8:f9:6c:ad:c5:15:28: f6:34:9a:12:68:e1:1f:c4:b4:eb:96:14:0a:05:89:be:68:d8: be:c3:7b:81:95:b1:90:e4:b0:23:1c:08:2d:58:fe:bf:57:02: 46:de:73:2b:83:2c:60:7e:10:c3:0a:69:77:d0:75:ae:6d:83: 4b:9e:5f:eb:ca:65:5d:0a:a8:30:b2:be:0c:d5:2c:e9:e7:bb: 32:e6:1f:9f:e6:c2:3b:8d:66:e1:af:71:61:dc:19:15:78:51: 4a:99:bb:c2:81:5e:df:95:7d:d7:6b:50:d7:41:0d:63:a7:56: 85:da:88:53:37:90:e8:38:6b:08:ce:44:a9:1f:db:4c:9d:e1: be:a8:37:f5:1b:ed:c9:e5:76:3c:92:68:94:aa:f3:95:3c:5f: 46:1e:f1:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D1lMjWktkAaLrtgy1d82MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTdhNWVjMThjNGYyYzQ0Nzg0YWRjNTAzODM1NmJlNWFl ODk0MjkwHhcNMjUxMjIwMDAwMTA1WhcNMjUxMjIxMDAwMTA1WjAzMTEwLwYDVQQD EygwNTk5YTBmMmE1ZTg3ODJmYTViMDI0NjY5NDZjZWQ0NTIwYmUzZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcivqqGzxoAtXXT14sJjTosRqy/e oBJelBK9yZhozYeQbllNOyXbcH0NnO8GAReMKE1zcgoQYjmaWs8rYTe2s1qiyfF4 9eN3g6tuOA6Pf0C7PjvzRL3LfkC++uRyOBGctbEXv8Ygg9xQSYm8cbKcm0BxszF7 2wZgtmXDu9eOKHMDhUNVQR2xdKgkP5/zAuL2pR5vgz9feOieQgBP2GO0ee4K9T6V CPkXIxihuXFOmvH772yLYrvPIwqcDzPHi+hyQRd1O7uaYxLijwSy+PCWeM6Y1Fuh UF96QgBTkr9EfZCbIlHieAkQRU4UlqvIhmM7NyMI4hUgBjqEd0OGjbPizQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWZoPKl6HgvpbAkZpRs7UUgvj38MB8GA1UdIwQY MBaAFBgXpewYxPLER4StxQODVr5a6JQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JlbDdCakU4c1JIaEszRkE0Tld2bHJvbENrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC83NzM2NzgtZTIwMC00NmFmLTg2YzEt NmJkODAyMmQyZWFlLzEvR0JlbDdCakU4c1JIaEszRkE0Tld2bHJvbENrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC83NzM2NzgtZTIwMC00NmFmLTg2YzEtNmJkODAyMmQyZWFl LzEvR0JlbDdCakU4c1JIaEszRkE0Tld2bHJvbENrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1fVyco5X 4SwAS+pXqZszHGL+fYlR4chs4K1YJOvXOCMhE9EqLLCRygNU/xnnMIWBjn24Elod VdN0fpKoBxeMWU6XcxqpDXVJbXi0CigO2aO6P/gCPThIMCYOX6rB71n/e0OJN3q4 +WytxRUo9jSaEmjhH8S065YUCgWJvmjYvsN7gZWxkOSwIxwILVj+v1cCRt5zK4Ms YH4Qwwppd9B1rm2DS55f68plXQqoMLK+DNUs6ee7MuYfn+bCO41m4a9xYdwZFXhR Spm7woFe35V912tQ10ENY6dWhdqIUzeQ6DhrCM5EqR/bTJ3hvqg39RvtyeV2PJJo lKrzlTxfRh7xrQ== -----END CERTIFICATE-----Generated at Sat Dec 20 03:22:25 2025 by rpki-client