This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: E8U6cUK20TDrS/eIlbA5Scupzs+wQsJuc4D9FSktZuc=
Subject key identifier: BE:A0:C0:2D:0A:86:D0:7C:5D:7F:14:82:7A:74:BC:19:E8:66:FA:22
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 019B1F87F198E27656604671D2B61B7F95D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 1778
Signing time: Mon 15 Dec 2025 01:02:41 +0000
Manifest this update: Mon 15 Dec 2025 01:02:41 +0000
Manifest next update: Tue 16 Dec 2025 01:02:41 +0000
Files and hashes: 1: Wka8U3x86jnATnb9jP1IM9JUg7Q.roa (hash: U3QbT6zi/lWoOslxKHpAgFLF1TaLlii47IIoTKw4FTY=)
2: elawQd6GCERPNU07ZCI-dli47NA.roa (hash: 0JYGGAHMRXtvzvfYfM6q/NrguHYhOFVdE7wB8JPPhJs=)
3: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: tW1XGJLD6ecxjK3mx6vbjBnXgHCWAr55bL6mDpXUpmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1f:87:f1:98:e2:76:56:60:46:71:d2:b6:1b:7f:95:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Dec 15 01:02:41 2025 GMT
Not After : Dec 16 01:02:41 2025 GMT
Subject: CN=bea0c02d0a86d07c5d7f14827a74bc19e866fa22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:68:fe:ad:6f:d1:aa:c7:f4:a3:13:e6:03:
5b:e1:7f:e6:a4:4d:d6:58:38:4d:57:a6:b9:e7:71:
9d:a1:21:0e:76:ac:e2:4d:ee:20:a9:35:d8:6b:5b:
c5:5f:9c:de:d2:57:61:c3:1e:f5:cb:9c:8e:54:a6:
b4:fc:88:1a:67:4b:fe:89:d1:73:5e:66:3d:62:b3:
52:2c:e3:d6:f2:23:41:7f:fe:0d:89:6a:89:ee:4d:
43:19:17:16:f3:25:5b:90:40:1a:30:6d:37:89:71:
4e:9e:3d:6c:d0:e4:6c:6c:a5:df:e0:b9:52:08:0d:
2d:a3:29:c9:1a:c3:5a:36:54:81:7f:9c:7d:33:32:
09:cc:9f:cc:7e:e9:77:1d:3e:3d:4c:9e:a1:5f:be:
31:f4:1b:b9:85:48:db:e3:82:d6:15:8a:db:d4:ec:
2a:b9:c7:6f:42:d9:50:c4:9d:1b:ec:ca:a1:13:71:
e4:33:11:79:61:54:20:0e:9d:a8:fd:c0:d1:07:cb:
b5:41:93:48:f6:22:80:cb:09:f6:89:0c:68:9e:bf:
f0:0d:05:1f:2d:db:b4:8f:33:7c:aa:7d:3f:c0:c3:
bc:84:5a:ac:0c:f3:86:9d:f4:d5:2f:79:be:8d:43:
4e:39:77:51:84:6a:da:f3:a4:21:fe:5d:5c:ba:c9:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A0:C0:2D:0A:86:D0:7C:5D:7F:14:82:7A:74:BC:19:E8:66:FA:22
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a5:a0:95:99:9d:21:9d:4c:ad:86:0e:4b:94:23:b8:78:18:
ca:3c:16:16:4f:d1:69:f3:14:bc:50:f8:0d:50:28:8d:15:ab:
de:04:a3:12:7d:d3:12:1c:88:0e:92:e9:75:d1:fb:90:0e:86:
eb:f1:7e:37:f8:7e:2b:29:7f:e3:5d:e9:a2:d6:c2:11:c6:85:
d2:e4:95:20:91:cc:1b:e2:b6:dd:0b:23:25:16:8f:b1:0e:1c:
61:84:83:a1:e5:b1:ef:df:b1:13:f7:00:d9:2f:4d:25:cd:f5:
b8:ef:b2:ad:11:20:23:7e:14:39:0b:3f:a8:f1:b9:1a:86:60:
b3:55:8f:43:94:55:27:63:2b:52:b8:3f:61:d0:6a:98:26:a7:
a0:2e:ca:7a:62:c5:d7:c2:66:b1:45:5a:97:8e:cc:a7:ec:e7:
87:02:c2:c6:97:a6:4f:3d:12:e8:dd:02:53:c1:97:28:31:0c:
ba:5d:19:a0:aa:b6:22:af:17:ff:87:c7:45:8b:f8:3d:2d:54:
e7:6b:41:a7:40:e6:19:2c:ce:10:30:20:2f:14:72:21:80:97:
3d:a0:67:23:27:d1:83:f9:6c:9c:9a:4a:49:04:2d:47:d8:9a:
17:95:5e:d8:c0:e1:eb:18:30:a7:b3:d9:2b:33:dc:1e:c4:e9:
6f:71:32:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsfh/GY4nZWYEZx0rYbf5XSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMmIzMGQ4OWIxYmNmZjY5OWY2NDFmODgwMjY5NDJkMTZh
NzJiY2MwHhcNMjUxMjE1MDEwMjQxWhcNMjUxMjE2MDEwMjQxWjAzMTEwLwYDVQQD
EyhiZWEwYzAyZDBhODZkMDdjNWQ3ZjE0ODI3YTc0YmMxOWU4NjZmYTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaBo/q1v0arH9KMT5gNb4X/mpE3W
WDhNV6a553GdoSEOdqziTe4gqTXYa1vFX5ze0ldhwx71y5yOVKa0/IgaZ0v+idFz
XmY9YrNSLOPW8iNBf/4NiWqJ7k1DGRcW8yVbkEAaMG03iXFOnj1s0ORsbKXf4LlS
CA0toynJGsNaNlSBf5x9MzIJzJ/Mful3HT49TJ6hX74x9Bu5hUjb44LWFYrb1Owq
ucdvQtlQxJ0b7MqhE3HkMxF5YVQgDp2o/cDRB8u1QZNI9iKAywn2iQxonr/wDQUf
Ldu0jzN8qn0/wMO8hFqsDPOGnfTVL3m+jUNOOXdRhGra86Qh/l1cusl3CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6gwC0KhtB8XX8Ugnp0vBnoZvoiMB8GA1UdIwQY
MBaAFIIrMNibG8/2mfZB+IAmlC0WpyvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNjg3NzAtZWRmMi00MzU4LWI4MjEt
OTE0ZDVkYzUxOTdmLzEvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lNjg3NzAtZWRmMi00MzU4LWI4MjEtOTE0ZDVkYzUxOTdm
LzEvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6WglZmd
IZ1MrYYOS5QjuHgYyjwWFk/RafMUvFD4DVAojRWr3gSjEn3TEhyIDpLpddH7kA6G
6/F+N/h+Kyl/413potbCEcaF0uSVIJHMG+K23QsjJRaPsQ4cYYSDoeWx79+xE/cA
2S9NJc31uO+yrREgI34UOQs/qPG5GoZgs1WPQ5RVJ2MrUrg/YdBqmCanoC7KemLF
18JmsUVal47Mp+znhwLCxpemTz0S6N0CU8GXKDEMul0ZoKq2Iq8X/4fHRYv4PS1U
52tBp0DmGSzOEDAgLxRyIYCXPaBnIyfRg/lsnJpKSQQtR9iaF5Ve2MDh6xgwp7PZ
KzPcHsTpb3EyhQ==
-----END CERTIFICATE-----
Generated at Mon Dec 15 06:30:07 2025 by rpki-client