This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft File: gsbbjg23mzF0_umfxqYFz1bfvck.mft (raw, json) Hash identifier: LidW3skb3PY403qzCWowTJxx5Gu+ecIJ3Xwd7/AvHrQ= Subject key identifier: 90:3D:D2:62:73:C3:7C:06:47:6F:C6:E5:20:D5:64:12:3E:3D:8D:6F Authority key identifier: 82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9 Certificate issuer: /CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9 Certificate serial: 019B0E26B14DCC83C13CF2AC620504FA8520 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft Manifest number: 08E3 Signing time: Thu 11 Dec 2025 16:02:55 +0000 Manifest this update: Thu 11 Dec 2025 16:02:55 +0000 Manifest next update: Fri 12 Dec 2025 16:02:55 +0000 Files and hashes: 1: gsbbjg23mzF0_umfxqYFz1bfvck.crl (hash: 3G7jWzxMpsN3GLxdQBMJhEZ449jlWgHkhl5u4FuXj8Y=) 2: x6jSUPrNwCyjzV69rEteWUbA8bw.roa (hash: 1zp500CT5AdJ87LI8ByrofonFUUOcrdgDO051AN4e6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:b1:4d:cc:83:c1:3c:f2:ac:62:05:04:fa:85:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9 Validity Not Before: Dec 11 16:02:55 2025 GMT Not After : Dec 12 16:02:55 2025 GMT Subject: CN=903dd26273c37c06476fc6e520d564123e3d8d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:47:d6:fd:43:e9:9b:c1:0b:ea:00:3a:26:94: 60:5c:55:a0:99:ba:88:98:20:e7:c0:c8:c9:6a:42: 2d:73:aa:b1:68:47:8d:f4:bd:c2:e2:66:57:3f:44: 08:c0:be:24:7b:df:41:69:f7:8b:fd:25:30:74:09: 72:9f:21:d5:f9:19:eb:78:98:83:1f:9e:ae:8b:65: 06:0f:ab:2b:fb:b1:f3:7b:0b:a5:fb:47:b6:df:f9: 13:a4:d8:4b:7e:b6:7b:d8:3c:df:94:a8:88:e4:80: ae:24:45:c8:5a:5f:80:ba:71:b9:2c:af:47:7c:ca: 5f:5f:60:5d:4b:07:f5:3b:08:d3:f3:c9:35:f7:93: 3e:95:c3:98:43:6a:c9:39:66:7b:41:cc:a4:d1:74: ca:b9:b4:a7:2e:6e:39:44:ca:96:1f:5b:28:56:6f: 9f:31:6d:df:49:68:0f:a5:0a:b5:0c:94:38:9f:59: 40:24:a3:e1:6e:6f:f2:08:03:05:21:80:5b:7e:3e: 25:e4:a0:aa:fb:17:46:7a:48:f4:2b:72:4a:e1:7a: 4e:c2:65:d3:a4:c7:aa:de:11:ce:72:64:85:02:49: a9:0b:2c:30:74:ae:34:9e:fc:87:97:53:ed:b1:25: 9f:9e:c4:7b:07:6d:d6:17:96:34:14:85:8f:b3:91: e2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3D:D2:62:73:C3:7C:06:47:6F:C6:E5:20:D5:64:12:3E:3D:8D:6F X509v3 Authority Key Identifier: keyid:82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:1c:d2:07:ab:a4:7c:1e:f1:84:72:0e:41:69:6f:6d:19:2e: 1a:15:4a:c0:59:60:6d:26:9f:c7:69:7c:3e:fb:52:48:57:92: 88:e8:e6:e5:43:b2:df:19:61:43:f2:1c:3f:50:c9:ae:1f:b4: 17:87:13:4d:f1:cb:4d:a5:a9:02:68:93:29:9a:bb:95:32:cf: 99:e1:ee:00:09:c5:c4:2c:4d:44:ea:e8:dc:e1:82:25:70:fc: 0a:6a:9e:c8:92:b2:23:9e:9c:bf:28:be:73:b7:2f:e2:08:1c: 99:ed:4b:4c:eb:a4:36:a2:4b:f1:d3:43:5d:78:c2:29:ff:6a: 93:ec:48:5f:27:db:0d:30:e0:a3:2d:5c:4f:74:f8:49:d8:3d: 4b:ed:4d:d4:13:a0:51:00:13:e5:73:ea:e9:6c:63:1f:d7:3d: e6:1b:57:80:94:f4:c2:44:51:23:1c:ec:c2:ad:13:70:cc:af: 5a:bd:6a:e6:ee:50:a7:64:3f:4f:b8:d5:d8:bb:a5:80:49:3d: 11:b8:28:ec:03:05:da:7c:0a:a8:2d:0e:ee:69:09:ad:a2:3a: d2:b6:55:66:0a:33:86:de:51:bd:8c:a7:ea:b3:ad:f2:cd:69: ba:0e:71:3f:a4:94:77:5b:6f:26:d1:f4:d7:b4:10:e1:05:e7: 62:4d:02:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJrFNzIPBPPKsYgUE+oUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYzZkYjhlMGRiNzliMzE3NGZlZTk5ZmM2YTYwNWNmNTZk ZmJkYzkwHhcNMjUxMjExMTYwMjU1WhcNMjUxMjEyMTYwMjU1WjAzMTEwLwYDVQQD Eyg5MDNkZDI2MjczYzM3YzA2NDc2ZmM2ZTUyMGQ1NjQxMjNlM2Q4ZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0fW/UPpm8EL6gA6JpRgXFWgmbqI mCDnwMjJakItc6qxaEeN9L3C4mZXP0QIwL4ke99BafeL/SUwdAlynyHV+RnreJiD H56ui2UGD6sr+7Hzewul+0e23/kTpNhLfrZ72DzflKiI5ICuJEXIWl+AunG5LK9H fMpfX2BdSwf1OwjT88k195M+lcOYQ2rJOWZ7Qcyk0XTKubSnLm45RMqWH1soVm+f MW3fSWgPpQq1DJQ4n1lAJKPhbm/yCAMFIYBbfj4l5KCq+xdGekj0K3JK4XpOwmXT pMeq3hHOcmSFAkmpCywwdK40nvyHl1PtsSWfnsR7B23WF5Y0FIWPs5HiewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJA90mJzw3wGR2/G5SDVZBI+PY1vMB8GA1UdIwQY MBaAFILG244Nt5sxdP7pn8amBc9W373JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3NiYmpnMjNtekYwX3VtZnhxWUZ6MWJmdmNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85ZTY4NTAtMzEwYy00MjBmLWI3NTUt YmFiYTRlM2QzYzFkLzEvZ3NiYmpnMjNtekYwX3VtZnhxWUZ6MWJmdmNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC85ZTY4NTAtMzEwYy00MjBmLWI3NTUtYmFiYTRlM2QzYzFk LzEvZ3NiYmpnMjNtekYwX3VtZnhxWUZ6MWJmdmNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRzSB6uk fB7xhHIOQWlvbRkuGhVKwFlgbSafx2l8PvtSSFeSiOjm5UOy3xlhQ/IcP1DJrh+0 F4cTTfHLTaWpAmiTKZq7lTLPmeHuAAnFxCxNROro3OGCJXD8CmqeyJKyI56cvyi+ c7cv4ggcme1LTOukNqJL8dNDXXjCKf9qk+xIXyfbDTDgoy1cT3T4Sdg9S+1N1BOg UQAT5XPq6WxjH9c95htXgJT0wkRRIxzswq0TcMyvWr1q5u5Qp2Q/T7jV2LulgEk9 Ebgo7AMF2nwKqC0O7mkJraI60rZVZgozht5RvYyn6rOt8s1pug5xP6SUd1tvJtH0 17QQ4QXnYk0Ckg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:00:03 2025 by rpki-client