This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft File: G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft (raw, json) Hash identifier: wHnsY4tg+1bQ/Ie7E9hF/ozCTG9A60zyGUZE7lP1c4Q= Subject key identifier: CC:B9:80:8F:4B:23:A6:03:25:68:54:25:9B:DC:1F:18:67:8C:1E:9F Authority key identifier: 1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A Certificate issuer: /CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a Certificate serial: 019B35326D823FE6849C325026A07C7A70EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft Manifest number: 023A Signing time: Fri 19 Dec 2025 06:00:55 +0000 Manifest this update: Fri 19 Dec 2025 06:00:55 +0000 Manifest next update: Sat 20 Dec 2025 06:00:55 +0000 Files and hashes: 1: G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl (hash: 1Z5j80w8msnqOcxOdsy4p9RcM3VpKnK8x8JoihmMf6k=) 2: G1iTz--AdrX58wnteKblePSt-Jw.roa (hash: 0Fp+SXPuf0GKZAv8TJo76eTj4M6Vb7IJbISKBHsaJUM=) 3: Z0dVNzk7EGrkYKQ-9HMAEEn28xQ.roa (hash: m7NbNzI3ua/XgXbydcjNQqSmMP9x4tm6jOp74hABwTg=) 4: pBdQvnX6dKY3XlqUYWMWUMcKsus.roa (hash: 7HSL2j8DzWASbakGMcnWSJulH/02edTERxWRK0JJXZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:6d:82:3f:e6:84:9c:32:50:26:a0:7c:7a:70:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a Validity Not Before: Dec 19 06:00:55 2025 GMT Not After : Dec 20 06:00:55 2025 GMT Subject: CN=ccb9808f4b23a603256854259bdc1f18678c1e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:28:8b:4b:34:31:34:e1:e9:a6:20:23:b2:2e: 38:71:27:21:73:b1:8a:7a:60:d5:d4:79:8f:c4:1e: 88:e7:b0:13:cf:8b:dd:ca:a4:dc:4c:c9:36:40:14: 78:05:cb:70:61:4f:b5:cb:e2:2d:b2:f6:3d:1f:ec: 74:4e:f6:ce:20:36:82:68:bc:51:b5:a7:90:8b:f5: 50:a8:37:94:fa:22:dc:d3:0b:63:4c:ed:20:e6:32: 8b:8e:61:c8:8b:33:84:2b:6b:d3:5f:18:f8:55:c0: b5:6c:80:5c:6b:2d:b9:65:2f:7e:98:3f:22:61:bc: 8a:6a:94:03:17:87:80:5f:ec:fc:73:34:8d:c7:24: d1:40:db:91:2a:ea:b7:63:de:31:11:ce:a1:28:a4: 55:c3:bd:bd:bd:57:21:5f:40:17:4e:66:28:31:e7: 15:73:3b:59:90:05:b6:58:c7:01:e7:df:e5:17:3c: 5a:4b:1a:99:05:9b:b3:93:13:3c:62:e0:b1:95:69: 2f:b2:88:32:38:f8:68:22:2c:40:3d:ef:e8:25:b0: 06:3e:3a:87:6d:e5:0b:f0:e5:ea:c6:31:24:25:a2: 21:c0:35:3c:0b:b4:fc:2b:ef:48:52:7f:a8:14:c4: fc:d0:c0:67:07:74:a7:60:84:21:3a:37:ba:38:17: b2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B9:80:8F:4B:23:A6:03:25:68:54:25:9B:DC:1F:18:67:8C:1E:9F X509v3 Authority Key Identifier: keyid:1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:63:05:01:d0:e1:c7:e0:30:b3:bc:97:f2:2c:05:10:c5:66: 7c:3b:d8:54:81:e0:81:d7:33:2a:01:e5:56:51:28:67:23:a7: c0:e1:25:2f:35:e7:4c:54:f7:a0:de:15:ab:a9:b5:68:7f:5e: d4:1d:74:1a:56:8e:ad:1e:0d:d7:c6:68:53:31:a0:01:71:fe: 11:fe:17:38:83:99:bf:94:f2:61:f4:f8:bb:8d:1d:97:cc:51: 9f:55:dc:f7:8f:b5:fe:be:14:b8:00:ac:3d:91:30:67:5c:e8: ef:8e:41:a5:e2:5d:7d:81:a0:3b:e2:8c:0f:6a:3d:84:45:c5: 62:74:9b:3f:ce:7a:cc:26:6d:38:5b:72:96:29:db:58:6e:3e: 5b:c1:13:59:cc:14:0f:c1:de:87:f1:a8:0b:71:47:81:3b:99: e4:44:f9:df:25:2d:a9:fa:cf:85:53:10:fe:29:72:2c:f3:67: c4:2f:87:76:09:c7:ce:bd:e9:10:19:03:98:ba:7f:4d:b2:11: c2:46:d8:d4:eb:25:1e:0f:fb:f1:31:9c:a0:87:48:ba:6a:b4: d0:3d:a9:f5:a6:81:85:bf:34:fc:71:e0:47:cf:31:aa:80:d0: 8d:1a:1d:ae:27:4d:f3:ae:9f:8d:69:46:ac:95:ac:91:d9:02: e3:6a:12:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mm2CP+aEnDJQJqB8enDuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZWEzZTk5YmJiMGRkYTc4MDg0MjE5YTYxMzQ5MmU1ZTZk OWI0NWEwHhcNMjUxMjE5MDYwMDU1WhcNMjUxMjIwMDYwMDU1WjAzMTEwLwYDVQQD EyhjY2I5ODA4ZjRiMjNhNjAzMjU2ODU0MjU5YmRjMWYxODY3OGMxZTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiiLSzQxNOHppiAjsi44cSchc7GK emDV1HmPxB6I57ATz4vdyqTcTMk2QBR4BctwYU+1y+ItsvY9H+x0TvbOIDaCaLxR taeQi/VQqDeU+iLc0wtjTO0g5jKLjmHIizOEK2vTXxj4VcC1bIBcay25ZS9+mD8i YbyKapQDF4eAX+z8czSNxyTRQNuRKuq3Y94xEc6hKKRVw729vVchX0AXTmYoMecV cztZkAW2WMcB59/lFzxaSxqZBZuzkxM8YuCxlWkvsogyOPhoIixAPe/oJbAGPjqH beUL8OXqxjEkJaIhwDU8C7T8K+9IUn+oFMT80MBnB3SnYIQhOje6OBeyWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMy5gI9LI6YDJWhUJZvcHxhnjB6fMB8GA1UdIwQY MBaAFBvqPpm7sN2ngIQhmmE0kuXm2bRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2Ut YTBiY2M5MTJkNzM1LzEvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2UtYTBiY2M5MTJkNzM1 LzEvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx2MFAdDh x+Aws7yX8iwFEMVmfDvYVIHggdczKgHlVlEoZyOnwOElLzXnTFT3oN4Vq6m1aH9e 1B10GlaOrR4N18ZoUzGgAXH+Ef4XOIOZv5TyYfT4u40dl8xRn1Xc94+1/r4UuACs PZEwZ1zo745BpeJdfYGgO+KMD2o9hEXFYnSbP856zCZtOFtylinbWG4+W8ETWcwU D8Heh/GoC3FHgTuZ5ET53yUtqfrPhVMQ/ilyLPNnxC+HdgnHzr3pEBkDmLp/TbIR wkbY1OslHg/78TGcoIdIumq00D2p9aaBhb80/HHgR88xqoDQjRodridN866fjWlG rJWskdkC42oSlw== -----END CERTIFICATE-----Generated at Fri Dec 19 15:05:18 2025 by rpki-client