This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json) Hash identifier: iS9B/bobmmOez0fjaZYatbR+bq7VxM68nH7H32Ld2ac= Subject key identifier: 26:29:3E:0E:C7:44:67:A9:A0:4C:9A:0E:44:A6:D4:58:0F:53:CA:1A Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f Certificate serial: 019AEFACC960E72EFFEA9793928E4E31A0C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft Manifest number: 0886 Signing time: Fri 05 Dec 2025 18:01:09 +0000 Manifest this update: Fri 05 Dec 2025 18:01:09 +0000 Manifest next update: Sat 06 Dec 2025 18:01:09 +0000 Files and hashes: 1: HYKWqu7dV9T03Pg2YEzmV2pzeLI.roa (hash: 0f4EPwDYkAduai0mg4vA1zfxCrdTubntPDPu+t4qPOY=) 2: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: F/2bK/I20y7anTGrFEgS/IVqT8Nd46IVw5IL8xYUax0=) 3: sKvQstCz9PeJtgIU34nzs9eqEeU.roa (hash: H2Pm4bBxQ3BJkt3Kybv6k8Fd+61WPgE9z93gpg0GcNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:ac:c9:60:e7:2e:ff:ea:97:93:92:8e:4e:31:a0:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f Validity Not Before: Dec 5 18:01:09 2025 GMT Not After : Dec 6 18:01:09 2025 GMT Subject: CN=26293e0ec74467a9a04c9a0e44a6d4580f53ca1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:df:08:ba:a1:31:f8:75:ba:7d:1b:bd:81:45: 58:08:ec:46:53:3a:1a:7e:0a:85:ec:c2:a1:fa:4f: 1b:4d:a5:bb:19:81:3c:52:bc:50:78:27:08:7b:5c: da:49:52:c0:1f:d8:14:c4:57:69:bd:93:97:30:ba: 77:94:51:f2:f1:27:c3:58:1e:d0:55:63:d1:5b:15: ab:14:6e:57:5c:51:b7:e3:02:26:85:c8:a5:dc:3f: f7:04:97:40:6c:a4:d3:1e:4e:96:97:06:e7:6b:7a: a0:85:02:a2:57:e8:06:e9:14:7f:38:66:3d:43:c6: 99:c6:bf:c0:d1:3e:0b:83:d9:28:05:7f:e9:d7:07: 28:87:87:0e:d3:94:a5:81:5c:e2:93:fc:2c:85:f3: 71:fb:7d:f1:34:18:db:4e:8c:ec:a9:2f:0e:98:10: 29:56:7f:77:24:be:70:e8:94:1f:fc:d0:2d:eb:ca: fe:80:98:a8:43:69:7e:5c:00:f9:34:65:2b:e9:88: f8:ce:80:88:50:49:08:3a:9d:84:38:b6:43:5e:09: d9:e9:2e:cd:bf:9b:fa:a4:38:85:f9:1a:30:15:23: 82:97:b9:7e:23:fe:3b:63:72:f1:0c:34:15:ac:a6: 9a:ad:4d:d4:32:c5:c1:19:eb:e7:fb:11:22:ad:f4: 2d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:29:3E:0E:C7:44:67:A9:A0:4C:9A:0E:44:A6:D4:58:0F:53:CA:1A X509v3 Authority Key Identifier: keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:2e:35:b1:ab:f5:b2:6f:e2:f9:18:47:24:f9:e3:c7:1a:f7: d0:78:bf:b6:d4:6f:54:ed:70:32:b4:e4:84:77:71:51:b1:0a: d0:d3:cb:cd:fe:03:6a:07:59:a3:82:09:ca:ab:4b:eb:32:dd: 2e:11:fe:b7:c7:b2:82:96:04:6e:d6:1d:c5:dc:51:3d:a3:15: e7:7d:0e:d3:10:d2:f1:99:06:c2:83:be:8d:a8:44:4c:3f:7b: 1e:46:1c:50:58:4d:a6:ec:ef:af:15:02:31:70:dd:8d:26:1b: c6:08:9a:43:fe:d3:e2:e3:81:a6:b3:3f:5b:78:80:c6:7c:59: e5:94:59:fb:2f:82:12:d9:c2:36:49:4a:42:03:7b:d0:cf:47: 6b:f3:cc:a9:85:b7:d2:b7:e0:a5:0b:09:8c:cc:a7:4c:4e:31: 3c:48:e8:d2:52:fe:8a:d7:f2:98:fb:7c:51:4a:19:71:c6:1b: 9f:b6:06:39:08:b0:94:f9:18:43:ed:3e:a2:2e:9d:61:87:f7: 85:c8:11:ec:cb:c4:f3:36:04:93:fe:4f:b7:cf:26:21:ce:72: 5c:60:78:c5:57:c2:0a:3a:e4:8e:e6:a8:a0:fb:8e:81:43:7f: 0d:8d:0c:8f:72:08:04:c5:68:46:1e:c6:91:03:78:cd:08:7a: 78:a9:33:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvrMlg5y7/6peTko5OMaDBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYjA2MzhiODc2ZjM5NzhjYTdiZDI4ZDdkZTM3MDk5NmIz OTZhM2YwHhcNMjUxMjA1MTgwMTA5WhcNMjUxMjA2MTgwMTA5WjAzMTEwLwYDVQQD EygyNjI5M2UwZWM3NDQ2N2E5YTA0YzlhMGU0NGE2ZDQ1ODBmNTNjYTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn98IuqEx+HW6fRu9gUVYCOxGUzoa fgqF7MKh+k8bTaW7GYE8UrxQeCcIe1zaSVLAH9gUxFdpvZOXMLp3lFHy8SfDWB7Q VWPRWxWrFG5XXFG34wImhcil3D/3BJdAbKTTHk6Wlwbna3qghQKiV+gG6RR/OGY9 Q8aZxr/A0T4Lg9koBX/p1wcoh4cO05SlgVzik/wshfNx+33xNBjbTozsqS8OmBAp Vn93JL5w6JQf/NAt68r+gJioQ2l+XAD5NGUr6Yj4zoCIUEkIOp2EOLZDXgnZ6S7N v5v6pDiF+RowFSOCl7l+I/47Y3LxDDQVrKaarU3UMsXBGevn+xEirfQtFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYpPg7HRGepoEyaDkSm1FgPU8oaMB8GA1UdIwQY MBaAFICwY4uHbzl4ynvSjX3jcJlrOWo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAt MTViMDlmNWY2ZWQ3LzEvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAtMTViMDlmNWY2ZWQ3 LzEvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVC41sav1 sm/i+RhHJPnjxxr30Hi/ttRvVO1wMrTkhHdxUbEK0NPLzf4DagdZo4IJyqtL6zLd LhH+t8eygpYEbtYdxdxRPaMV530O0xDS8ZkGwoO+jahETD97HkYcUFhNpuzvrxUC MXDdjSYbxgiaQ/7T4uOBprM/W3iAxnxZ5ZRZ+y+CEtnCNklKQgN70M9Ha/PMqYW3 0rfgpQsJjMynTE4xPEjo0lL+itfymPt8UUoZccYbn7YGOQiwlPkYQ+0+oi6dYYf3 hcgR7MvE8zYEk/5Pt88mIc5yXGB4xVfCCjrkjuaooPuOgUN/DY0Mj3IIBMVoRh7G kQN4zQh6eKkzYg== -----END CERTIFICATE-----Generated at Fri Dec 5 23:02:58 2025 by rpki-client