This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft File: gsbbjg23mzF0_umfxqYFz1bfvck.mft (raw, json) Hash identifier: 6wmJMHxkZrd1uGLT7ISFwOXW3uLgN6INiRHQRRz9WrA= Subject key identifier: BF:AA:F9:4D:E8:24:F3:88:E5:B5:DB:53:46:D2:D5:29:F6:57:99:01 Authority key identifier: 82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9 Certificate issuer: /CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9 Certificate serial: 019B32D69F9FAA2AB48A26B47C9250F29EB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft Manifest number: 08F6 Signing time: Thu 18 Dec 2025 19:01:24 +0000 Manifest this update: Thu 18 Dec 2025 19:01:24 +0000 Manifest next update: Fri 19 Dec 2025 19:01:24 +0000 Files and hashes: 1: gsbbjg23mzF0_umfxqYFz1bfvck.crl (hash: 39LXrUPRA/zC4J9vpLYJnat6qUbER4jDWgDAdMzinC0=) 2: x6jSUPrNwCyjzV69rEteWUbA8bw.roa (hash: 1zp500CT5AdJ87LI8ByrofonFUUOcrdgDO051AN4e6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:9f:9f:aa:2a:b4:8a:26:b4:7c:92:50:f2:9e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9 Validity Not Before: Dec 18 19:01:24 2025 GMT Not After : Dec 19 19:01:24 2025 GMT Subject: CN=bfaaf94de824f388e5b5db5346d2d529f6579901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1a:e0:80:96:4f:cd:b7:d7:d9:53:fe:0b:ff: b2:6a:4c:ad:e8:a1:d8:47:5a:de:ef:5c:7b:4a:42: 4a:9c:b3:aa:33:23:ec:72:d1:4d:2a:8f:cf:4a:48: a2:a5:a0:18:8f:73:4f:17:c4:2b:3d:3c:2c:9f:df: ad:e6:1d:86:33:95:9f:88:c6:09:57:7a:59:d3:74: 97:6c:b6:ba:6f:7d:ea:67:16:ec:0e:e2:2a:e7:af: e2:28:e9:e8:95:f5:e8:5a:46:06:f9:27:0d:f7:c4: e7:fc:26:7e:0c:4c:f9:43:dc:8e:8d:ef:4b:92:48: c1:b9:1b:05:07:75:e0:c0:45:cf:d2:6f:d5:af:bc: b9:ac:4d:1c:1a:88:e9:80:e8:c5:08:95:62:2d:a7: f5:2c:ee:3c:38:d6:75:55:d6:e4:da:58:e1:40:c1: 8a:2c:d6:55:62:9b:87:dc:e9:3a:85:a9:8c:bd:0a: af:db:ce:1d:6e:17:82:94:76:5f:e9:fa:25:ed:08: 51:31:b1:f9:fa:cf:81:e4:7a:27:59:81:3f:2f:68: a7:7d:5f:e2:20:9d:47:0d:6f:d9:a0:e8:65:5a:2b: d4:07:71:39:e4:fe:5b:19:10:7e:a2:d8:db:9b:4a: 79:e1:6c:02:a6:bb:f7:ce:4b:7c:ab:ba:77:19:d8: b2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AA:F9:4D:E8:24:F3:88:E5:B5:DB:53:46:D2:D5:29:F6:57:99:01 X509v3 Authority Key Identifier: keyid:82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:fc:d4:3d:55:69:d6:18:8d:8f:f8:f8:43:13:55:04:08:74: ed:f9:81:d1:e9:58:30:4f:41:da:d1:e6:41:3c:1d:3c:49:31: 40:e3:f4:c2:c0:0c:53:a5:c4:ae:b2:84:de:17:2b:b6:9e:a3: ac:be:74:85:87:cb:70:2d:d6:e2:3b:2f:85:11:b6:f6:1d:46: 18:b8:81:c2:67:5a:3e:6f:8f:26:fa:45:34:1c:e7:af:8b:f9: 4e:ab:56:1e:16:fc:f8:8d:8a:94:29:75:4f:f2:34:3d:73:f5: 69:75:0b:92:6d:eb:a5:1c:65:bd:6f:9a:43:dc:bd:9d:e9:63: 09:25:59:cf:2f:b4:3f:13:cb:f8:29:cb:66:b4:61:94:81:7e: d6:84:ca:f2:cd:c3:b6:6f:2e:ed:27:5c:6b:da:4a:08:88:e4: 7f:34:c5:23:63:5a:e3:8f:c7:3b:48:54:e6:33:11:b3:2c:27: b0:87:d3:2b:03:42:ec:4d:5b:c3:5a:dd:ad:f8:c6:67:1b:ca: a8:1c:d8:e9:c7:fc:ea:68:cd:a5:1e:e4:7d:20:5d:fd:b5:ae: 87:8e:69:37:c3:53:84:22:47:11:5d:98:8e:0d:07:bf:70:65: f1:58:6b:f9:57:77:bd:a2:38:c6:23:70:b4:f2:e0:bb:27:87: 9e:1b:89:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1p+fqiq0iia0fJJQ8p65MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYzZkYjhlMGRiNzliMzE3NGZlZTk5ZmM2YTYwNWNmNTZk ZmJkYzkwHhcNMjUxMjE4MTkwMTI0WhcNMjUxMjE5MTkwMTI0WjAzMTEwLwYDVQQD EyhiZmFhZjk0ZGU4MjRmMzg4ZTViNWRiNTM0NmQyZDUyOWY2NTc5OTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxrggJZPzbfX2VP+C/+yakyt6KHY R1re71x7SkJKnLOqMyPsctFNKo/PSkiipaAYj3NPF8QrPTwsn9+t5h2GM5WfiMYJ V3pZ03SXbLa6b33qZxbsDuIq56/iKOnolfXoWkYG+ScN98Tn/CZ+DEz5Q9yOje9L kkjBuRsFB3XgwEXP0m/Vr7y5rE0cGojpgOjFCJViLaf1LO48ONZ1Vdbk2ljhQMGK LNZVYpuH3Ok6hamMvQqv284dbheClHZf6fol7QhRMbH5+s+B5HonWYE/L2infV/i IJ1HDW/ZoOhlWivUB3E55P5bGRB+otjbm0p54WwCprv3zkt8q7p3GdiyMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+q+U3oJPOI5bXbU0bS1Sn2V5kBMB8GA1UdIwQY MBaAFILG244Nt5sxdP7pn8amBc9W373JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3NiYmpnMjNtekYwX3VtZnhxWUZ6MWJmdmNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85ZTY4NTAtMzEwYy00MjBmLWI3NTUt YmFiYTRlM2QzYzFkLzEvZ3NiYmpnMjNtekYwX3VtZnhxWUZ6MWJmdmNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC85ZTY4NTAtMzEwYy00MjBmLWI3NTUtYmFiYTRlM2QzYzFk LzEvZ3NiYmpnMjNtekYwX3VtZnhxWUZ6MWJmdmNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfzUPVVp 1hiNj/j4QxNVBAh07fmB0elYME9B2tHmQTwdPEkxQOP0wsAMU6XErrKE3hcrtp6j rL50hYfLcC3W4jsvhRG29h1GGLiBwmdaPm+PJvpFNBznr4v5TqtWHhb8+I2KlCl1 T/I0PXP1aXULkm3rpRxlvW+aQ9y9neljCSVZzy+0PxPL+CnLZrRhlIF+1oTK8s3D tm8u7Sdca9pKCIjkfzTFI2Na44/HO0hU5jMRsywnsIfTKwNC7E1bw1rdrfjGZxvK qBzY6cf86mjNpR7kfSBd/bWuh45pN8NThCJHEV2Yjg0Hv3Bl8Vhr+Vd3vaI4xiNw tPLguyeHnhuJwA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:10:34 2025 by rpki-client