This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft File: gUbejOwB0FJTbA8I3-eotT-arsI.mft (raw, json) Hash identifier: OvD4T3Si09ttGa+dOynfmaOpNK/fU9t+mKpDz0mKVZo= Subject key identifier: 2A:92:9A:AB:C4:6C:6B:8C:46:E1:68:65:B9:43:0B:53:5A:71:A1:9E Authority key identifier: 81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2 Certificate issuer: /CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2 Certificate serial: 019B1E05C55F046E8818B6EF291009A976EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft Manifest number: 1776 Signing time: Sun 14 Dec 2025 18:00:53 +0000 Manifest this update: Sun 14 Dec 2025 18:00:53 +0000 Manifest next update: Mon 15 Dec 2025 18:00:53 +0000 Files and hashes: 1: A4PQ0gQ7q04XkXEWkOpsFcG55U0.roa (hash: BlIGTUdhWCkztoNKbN33qtlZGYIZKP+ZzvO3VxYHAQ8=) 2: S1ukHOQHwZ5FXTblgAJkMrxdPMo.roa (hash: nsbro8MsYnPkoUuF8RjKDn+GAEU45Dqsh1VzCFmduco=) 3: gUbejOwB0FJTbA8I3-eotT-arsI.crl (hash: 0CmOrnary37o7jbfycrMC/Ev32zMQ4OegtUoE1lBO5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:05:c5:5f:04:6e:88:18:b6:ef:29:10:09:a9:76:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2 Validity Not Before: Dec 14 18:00:53 2025 GMT Not After : Dec 15 18:00:53 2025 GMT Subject: CN=2a929aabc46c6b8c46e16865b9430b535a71a19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5d:f4:db:82:a5:53:45:65:c5:44:29:a1:30: b4:63:05:7b:63:31:5e:0c:f1:25:49:56:6a:ea:74: 17:66:6c:d2:79:15:d0:b7:df:54:8b:dc:66:b2:c9: a5:3e:d3:a9:ce:6c:60:12:3b:99:a0:a6:a2:1b:4c: 12:c2:f1:9b:be:74:1d:ce:23:55:9a:a2:6f:07:65: 3d:1c:80:33:14:f6:74:15:5a:58:0a:66:b1:fc:42: 2b:8e:49:fd:25:21:67:e5:74:e7:1b:df:2e:cb:89: 00:06:16:e4:54:d0:1d:33:7c:e5:3b:a4:a5:46:7e: b8:bb:0c:44:96:08:8e:bd:3c:96:89:b2:bb:60:c8: c2:d0:32:56:15:28:49:f9:e5:7b:07:f5:e7:1d:23: a8:96:70:2d:5c:4a:27:92:8f:0b:71:fe:69:62:00: 81:ed:b3:47:92:b5:28:83:38:1b:2f:13:6c:16:7c: af:32:3d:3e:3e:e0:fb:3a:80:ab:30:52:39:39:fc: 79:9c:57:4c:d6:04:3a:33:17:53:bc:bb:ee:09:24: a2:05:cc:a6:bb:1a:4c:1c:05:59:a4:cc:2f:3f:bf: 38:e7:bf:e5:4a:c3:00:e9:68:f0:ab:ff:d1:a2:e1: 7e:eb:24:70:e4:73:54:56:0f:c7:f5:8a:3f:f2:e9: 4c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:92:9A:AB:C4:6C:6B:8C:46:E1:68:65:B9:43:0B:53:5A:71:A1:9E X509v3 Authority Key Identifier: keyid:81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:75:d8:7b:9c:09:14:0d:74:43:e8:82:59:60:3a:b3:de:9f: 1d:d0:4f:a9:74:5f:3a:d9:70:35:26:6b:f8:7f:0f:45:d2:59: 24:22:c0:8e:a3:0c:de:84:47:22:ed:13:d0:11:03:f5:dc:d1: 89:e0:78:65:6d:37:af:91:16:ee:50:38:95:61:67:cc:ac:79: b8:21:c8:26:fc:df:a1:20:12:03:79:eb:b3:0c:fd:ca:bf:4c: 28:2a:7d:76:fe:88:bd:7b:9e:be:0a:f0:f7:9a:01:59:6b:c9: e7:f1:b9:d8:1d:11:c6:05:7a:d8:55:6f:61:0a:b9:00:c7:2f: 36:25:fc:b2:cd:8c:a2:12:3f:1b:de:62:b1:5e:c3:7f:e1:2f: 29:f4:66:8b:5a:18:0c:3f:47:3a:bb:21:e6:5c:05:92:ee:a3: 54:7e:98:ea:13:5d:52:13:93:76:8e:36:57:56:d2:b1:b7:74: 7d:eb:04:79:7c:50:62:1f:a2:33:a2:88:17:4a:ab:48:fe:7a: cb:fa:6d:b4:5e:e2:05:db:54:ea:5d:eb:86:36:b5:5e:37:80: cc:22:14:d6:9a:b8:fd:d1:c3:52:33:5c:dc:7a:e7:db:02:7d: d0:d3:e2:06:ed:85:19:94:c3:64:07:0c:da:33:4e:61:48:fb: 7f:01:a6:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBcVfBG6IGLbvKRAJqXbuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNDZkZThjZWMwMWQwNTI1MzZjMGYwOGRmZTdhOGI1M2Y5 YWFlYzIwHhcNMjUxMjE0MTgwMDUzWhcNMjUxMjE1MTgwMDUzWjAzMTEwLwYDVQQD EygyYTkyOWFhYmM0NmM2YjhjNDZlMTY4NjViOTQzMGI1MzVhNzFhMTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF3024KlU0VlxUQpoTC0YwV7YzFe DPElSVZq6nQXZmzSeRXQt99Ui9xmssmlPtOpzmxgEjuZoKaiG0wSwvGbvnQdziNV mqJvB2U9HIAzFPZ0FVpYCmax/EIrjkn9JSFn5XTnG98uy4kABhbkVNAdM3zlO6Sl Rn64uwxElgiOvTyWibK7YMjC0DJWFShJ+eV7B/XnHSOolnAtXEonko8Lcf5pYgCB 7bNHkrUogzgbLxNsFnyvMj0+PuD7OoCrMFI5Ofx5nFdM1gQ6MxdTvLvuCSSiBcym uxpMHAVZpMwvP78457/lSsMA6Wjwq//RouF+6yRw5HNUVg/H9Yo/8ulMJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqSmqvEbGuMRuFoZblDC1NacaGeMB8GA1UdIwQY MBaAFIFG3ozsAdBSU2wPCN/nqLU/mq7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1ViZWpPd0IwRkpUYkE4STMtZW90VC1hcnNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kZjhkOWEtOGRkYi00NGIzLTlhYzAt Y2Q1NzJmZDA0NGVlLzEvZ1ViZWpPd0IwRkpUYkE4STMtZW90VC1hcnNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9kZjhkOWEtOGRkYi00NGIzLTlhYzAtY2Q1NzJmZDA0NGVl LzEvZ1ViZWpPd0IwRkpUYkE4STMtZW90VC1hcnNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXXYe5wJ FA10Q+iCWWA6s96fHdBPqXRfOtlwNSZr+H8PRdJZJCLAjqMM3oRHIu0T0BED9dzR ieB4ZW03r5EW7lA4lWFnzKx5uCHIJvzfoSASA3nrswz9yr9MKCp9dv6IvXuevgrw 95oBWWvJ5/G52B0RxgV62FVvYQq5AMcvNiX8ss2MohI/G95isV7Df+EvKfRmi1oY DD9HOrsh5lwFku6jVH6Y6hNdUhOTdo42V1bSsbd0fesEeXxQYh+iM6KIF0qrSP56 y/pttF7iBdtU6l3rhja1XjeAzCIU1pq4/dHDUjNc3Hrn2wJ90NPiBu2FGZTDZAcM 2jNOYUj7fwGmYA== -----END CERTIFICATE-----Generated at Sun Dec 14 21:51:44 2025 by rpki-client