This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft File: gFBQT0sXdugLitn4s1bmE7WFs1o.mft (raw, json) Hash identifier: fzKOYARYxoMXz530EDzcJyEGXXozMlvxBhJlpvsUQaw= Subject key identifier: B0:49:A4:3E:79:2E:DE:73:20:B6:1B:EE:E8:39:3B:F0:A3:55:32:65 Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A Certificate issuer: /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a Certificate serial: 019B3C7EC08F0FCFD621C017715F1159513B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft Manifest number: 12AB Signing time: Sat 20 Dec 2025 16:01:38 +0000 Manifest this update: Sat 20 Dec 2025 16:01:38 +0000 Manifest next update: Sun 21 Dec 2025 16:01:38 +0000 Files and hashes: 1: Yk_mB5Br41Nhda13vL3dksE5LgU.roa (hash: K0LuZJCRzNJs5Bjbkimkjj4nwWKGnFgBw0hG+qjP3AM=) 2: gFBQT0sXdugLitn4s1bmE7WFs1o.crl (hash: klOT0yGMYzwunX/aZci80xoEx2gmaEvcpaps2m5jYHM=) 3: lkCjPKHQ8Kw51UGG5Fx-gWmfZeo.roa (hash: IrYEpIdSCLf/ZAAdJvK3O7zC/ibmRmQLp4sdzgkQJvg=) 4: mRlLG-5kU_wBciWClXIVvCGQxeE.roa (hash: ZuSklCsUXIbLUEwi1a/wPQy/93NYaA4MC8miFKmm96c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:c0:8f:0f:cf:d6:21:c0:17:71:5f:11:59:51:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a Validity Not Before: Dec 20 16:01:38 2025 GMT Not After : Dec 21 16:01:38 2025 GMT Subject: CN=b049a43e792ede7320b61beee8393bf0a3553265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9f:50:20:80:ea:24:d0:af:30:65:a0:a4:e4: 7a:2b:e6:54:d9:72:cc:58:b0:f3:0c:77:d3:bf:df: c2:7a:69:7e:57:a4:ce:82:03:1d:92:43:b6:9c:90: 87:1b:26:cb:4e:40:07:64:65:cc:55:64:ce:8c:a4: 78:2a:fc:43:fd:c6:32:38:7c:2f:b2:b8:c9:52:7c: de:bf:09:d4:4e:88:ee:e0:2b:ee:97:2c:db:0c:b4: 2e:82:7a:74:84:3e:b7:89:88:fb:84:55:e1:6f:7e: 59:9a:e2:e7:d5:f4:5e:a8:08:40:89:db:09:83:cb: 1b:52:1f:f7:89:cc:09:6e:6c:d2:22:98:f3:2c:da: 74:7f:cd:99:fb:e6:bb:8d:b0:5b:c9:0e:35:9f:f9: 36:ab:0f:0e:fb:56:a2:c0:d4:39:c3:51:05:4c:41: f2:b4:a9:a2:c4:4d:de:d8:31:57:34:3e:bb:4a:7e: 8c:07:95:e0:25:a4:04:b4:68:d9:9d:db:b0:01:7b: 2a:90:96:e8:2b:97:a4:40:78:c9:b6:bb:92:d3:e3: a3:9d:7c:2d:c4:8d:28:44:6d:b6:cb:a3:98:9c:fe: d2:fe:54:4b:57:12:a8:5b:7d:4d:ef:48:23:a5:19: ef:34:b9:aa:b4:b1:db:19:65:f8:6e:f5:8c:4f:51: 3e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:49:A4:3E:79:2E:DE:73:20:B6:1B:EE:E8:39:3B:F0:A3:55:32:65 X509v3 Authority Key Identifier: keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:60:fd:d6:37:fa:fc:66:a2:8d:bb:3b:1c:1c:83:87:68:d4: b3:b2:0c:cf:d7:f0:7f:f6:43:d0:0f:e7:86:7b:66:bf:23:c4: 6a:a1:de:6c:b3:00:58:4c:44:50:35:05:72:a6:fd:9a:d7:07: 15:ac:2b:39:1d:6a:fc:42:c0:e6:01:b7:4e:9d:04:5a:f6:91: 72:77:db:6a:a8:73:f2:7b:85:52:29:f5:d2:a5:d1:27:4c:68: 41:ca:ea:d0:f1:93:0a:b2:2a:7d:41:02:bd:54:c1:07:ea:a5: 64:d4:bd:84:cb:e9:b6:3f:85:79:38:a2:63:38:13:24:b7:8d: a4:51:7b:68:01:e8:29:ea:81:be:ce:9d:77:a9:18:e4:50:85: 4c:0b:f7:27:28:27:a0:00:53:ed:94:71:f3:d7:47:ce:77:97: 4c:8d:f5:17:a8:19:3a:2f:d0:aa:f3:bc:a4:35:25:60:92:3e: a7:c2:46:c4:48:b9:57:ff:0d:34:2b:5a:9e:2b:1a:11:30:04: 9b:cb:a3:c9:32:0a:3b:45:9e:26:a4:5f:05:c7:e7:71:d4:4f: 66:56:0f:c5:79:b9:b2:87:f2:5b:08:20:8a:4c:46:c5:df:34: 35:c0:68:64:c8:da:6b:bd:d8:8a:4d:f7:8b:ca:8a:14:68:82: 35:e7:0f:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fsCPD8/WIcAXcV8RWVE7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNTA1MDRmNGIxNzc2ZTgwYjhhZDlmOGIzNTZlNjEzYjU4 NWIzNWEwHhcNMjUxMjIwMTYwMTM4WhcNMjUxMjIxMTYwMTM4WjAzMTEwLwYDVQQD EyhiMDQ5YTQzZTc5MmVkZTczMjBiNjFiZWVlODM5M2JmMGEzNTUzMjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5p9QIIDqJNCvMGWgpOR6K+ZU2XLM WLDzDHfTv9/Ceml+V6TOggMdkkO2nJCHGybLTkAHZGXMVWTOjKR4KvxD/cYyOHwv srjJUnzevwnUToju4CvulyzbDLQugnp0hD63iYj7hFXhb35ZmuLn1fReqAhAidsJ g8sbUh/3icwJbmzSIpjzLNp0f82Z++a7jbBbyQ41n/k2qw8O+1aiwNQ5w1EFTEHy tKmixE3e2DFXND67Sn6MB5XgJaQEtGjZnduwAXsqkJboK5ekQHjJtruS0+OjnXwt xI0oRG22y6OYnP7S/lRLVxKoW31N70gjpRnvNLmqtLHbGWX4bvWMT1E+9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBJpD55Lt5zILYb7ug5O/CjVTJlMB8GA1UdIwQY MBaAFIBQUE9LF3boC4rZ+LNW5hO1hbNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9iNTk3MTUtYjA1YS00YjRhLWE5MjIt MDE0NGEzMjgyYTJlLzEvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9iNTk3MTUtYjA1YS00YjRhLWE5MjItMDE0NGEzMjgyYTJl LzEvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2D91jf6 /Gaijbs7HByDh2jUs7IMz9fwf/ZD0A/nhntmvyPEaqHebLMAWExEUDUFcqb9mtcH FawrOR1q/ELA5gG3Tp0EWvaRcnfbaqhz8nuFUin10qXRJ0xoQcrq0PGTCrIqfUEC vVTBB+qlZNS9hMvptj+FeTiiYzgTJLeNpFF7aAHoKeqBvs6dd6kY5FCFTAv3Jygn oABT7ZRx89dHzneXTI31F6gZOi/QqvO8pDUlYJI+p8JGxEi5V/8NNCtanisaETAE m8ujyTIKO0WeJqRfBcfncdRPZlYPxXm5sofyWwggikxGxd80NcBoZMjaa73Yik33 i8qKFGiCNecP5w== -----END CERTIFICATE-----Generated at Sun Dec 21 01:59:44 2025 by rpki-client