This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft File: pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json) Hash identifier: ag2MeZ5zYcswyOZxcSRCgmmC5KHM43EDGwrZo+Zw3Es= Subject key identifier: BB:34:80:9A:78:20:FF:95:87:A6:BB:E7:21:3A:3D:CC:25:88:39:C9 Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a Certificate serial: 019B2852693007482F6424BA9873E843A1A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft Manifest number: 177E Signing time: Tue 16 Dec 2025 18:00:48 +0000 Manifest this update: Tue 16 Dec 2025 18:00:48 +0000 Manifest next update: Wed 17 Dec 2025 18:00:48 +0000 Files and hashes: 1: 1-KYSj48sD3jE1Gzvv9kFu9QJGtY.roa (hash: H4x96iKua2b3UDRaB1WSf9rakbeSZ8QQwLawXzA3kBc=) 2: kroCcDuLJiEm7WFd8GtQQzKukrk.roa (hash: C4/C9Nc89baYiSQf8o8T95z101LyK5Fm6SS+L143NqQ=) 3: oWikPPO3V0QeY0v8vBGwReraGUs.roa (hash: xHZgaltZECGHYZXkWizrY9iMMJdCdaYUNGOTHUNFxDM=) 4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: rro5gppCP4qR0o7a3LJvr4AYSlsRbwuvr3WBcHXXB9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:69:30:07:48:2f:64:24:ba:98:73:e8:43:a1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a Validity Not Before: Dec 16 18:00:48 2025 GMT Not After : Dec 17 18:00:48 2025 GMT Subject: CN=bb34809a7820ff9587a6bbe7213a3dcc258839c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e1:ce:82:a1:18:5b:03:e5:ff:e0:7f:5f:35: 7f:ee:23:b2:e0:07:80:74:cb:15:bf:2e:28:56:80: 67:d1:71:77:9b:23:3f:33:59:6b:f8:41:de:28:27: 63:50:4a:78:e1:24:e8:25:7d:10:07:5c:d8:30:63: 9a:46:ba:92:b1:77:b0:27:03:db:4a:98:6b:da:73: e1:07:77:91:af:1f:91:cb:73:cc:18:d1:07:c4:1d: 98:79:67:d7:a2:d1:6c:56:20:59:31:d5:70:0e:9d: 4a:bb:62:dd:4f:08:9f:f2:f3:04:02:c2:d3:b8:ab: c0:73:7f:db:aa:8a:98:9d:ed:b4:56:00:9b:78:8c: 5c:7d:31:b1:16:cc:94:4d:00:51:e7:a6:63:17:5e: ba:1d:35:c1:6e:df:dc:67:a4:a2:92:87:5a:97:69: a2:25:ca:6a:16:48:72:c8:c6:69:40:27:46:37:67: 2c:60:17:c7:30:f7:6a:52:98:fd:36:d4:42:71:5f: 35:3b:5a:8d:df:44:a9:f4:35:e3:0e:0e:95:35:64: 86:85:dc:6c:01:ae:b9:6b:40:8e:fe:e2:ff:eb:26: 73:b5:a5:4b:79:b0:8c:7e:3d:4c:16:1a:34:d1:52: c5:77:14:8e:e5:72:37:b9:5e:1c:d5:ea:6d:6b:67: b7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:34:80:9A:78:20:FF:95:87:A6:BB:E7:21:3A:3D:CC:25:88:39:C9 X509v3 Authority Key Identifier: keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:64:a1:df:dd:64:42:84:5f:42:cb:68:b0:e8:f0:a4:83:ad: 58:b0:7a:e0:b2:e9:09:a1:be:07:6d:6d:91:33:59:d8:35:0b: 4f:a6:17:d3:75:9d:92:9d:28:7e:64:e3:c5:a2:4e:0a:6d:c9: a1:9e:0a:47:bb:a4:1c:6e:52:da:4a:09:d1:93:71:73:6b:e2: 84:66:e6:cc:af:d7:27:d4:40:3f:b4:cb:6e:ae:ea:b4:89:0e: 10:84:d9:86:e3:d3:b6:39:65:4a:45:c0:09:c9:16:91:2a:54: 01:89:a7:a3:d6:f2:c8:82:38:de:23:b7:3b:d5:87:81:c6:ea: c8:eb:e2:e7:46:58:06:79:51:f9:66:8c:cb:40:e0:57:d2:e4: be:e3:5f:3f:ba:8c:ac:bd:e1:18:3f:20:50:36:95:93:7b:9d: 06:11:37:28:ee:18:52:d0:f2:f0:f1:0d:2b:85:7f:c5:83:e4: 86:b5:77:35:df:ea:fa:b8:f8:ac:57:fd:3e:bc:66:76:55:8f: 56:73:9d:32:a1:3d:01:39:05:10:18:00:00:68:36:18:c3:9a: 54:d8:72:48:ec:03:47:5c:25:d5:ef:3b:6f:77:d7:a9:eb:0e: 54:52:87:f3:ae:3f:b5:4f:cf:d4:cd:28:ba:6c:87:3b:17:d8: 0a:3a:04:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUmkwB0gvZCS6mHPoQ6GgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MmZjNjBkMzZlMjhiYjhkZjE0NWM4NGFjYWIxOWNmYTUz YjAyNWEwHhcNMjUxMjE2MTgwMDQ4WhcNMjUxMjE3MTgwMDQ4WjAzMTEwLwYDVQQD EyhiYjM0ODA5YTc4MjBmZjk1ODdhNmJiZTcyMTNhM2RjYzI1ODgzOWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuHOgqEYWwPl/+B/XzV/7iOy4AeA dMsVvy4oVoBn0XF3myM/M1lr+EHeKCdjUEp44SToJX0QB1zYMGOaRrqSsXewJwPb Sphr2nPhB3eRrx+Ry3PMGNEHxB2YeWfXotFsViBZMdVwDp1Ku2LdTwif8vMEAsLT uKvAc3/bqoqYne20VgCbeIxcfTGxFsyUTQBR56ZjF166HTXBbt/cZ6Sikodal2mi JcpqFkhyyMZpQCdGN2csYBfHMPdqUpj9NtRCcV81O1qN30Sp9DXjDg6VNWSGhdxs Aa65a0CO/uL/6yZztaVLebCMfj1MFho00VLFdxSO5XI3uV4c1epta2e32wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLs0gJp4IP+Vh6a75yE6PcwliDnJMB8GA1UdIwQY MBaAFKUvxg024ou43xRchKyrGc+lOwJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mMGI5NjAtODZkOC00MDYyLWE1OTct OWI0YTJkNWYzYTc2LzEvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9mMGI5NjAtODZkOC00MDYyLWE1OTctOWI0YTJkNWYzYTc2 LzEvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWSh391k QoRfQstosOjwpIOtWLB64LLpCaG+B21tkTNZ2DULT6YX03Wdkp0ofmTjxaJOCm3J oZ4KR7ukHG5S2koJ0ZNxc2vihGbmzK/XJ9RAP7TLbq7qtIkOEITZhuPTtjllSkXA CckWkSpUAYmno9byyII43iO3O9WHgcbqyOvi50ZYBnlR+WaMy0DgV9LkvuNfP7qM rL3hGD8gUDaVk3udBhE3KO4YUtDy8PENK4V/xYPkhrV3Nd/q+rj4rFf9PrxmdlWP VnOdMqE9ATkFEBgAAGg2GMOaVNhySOwDR1wl1e87b3fXqesOVFKH864/tU/P1M0o umyHOxfYCjoEiQ== -----END CERTIFICATE-----Generated at Tue Dec 16 20:24:17 2025 by rpki-client