This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft File: gSBe85sNP11y-h2XHUGR4Lomhr8.mft (raw, json) Hash identifier: 7Upkhfrt1tmr+Qb5ff9IF62owQuXjSU+E9ZIgUs8BFc= Subject key identifier: CE:32:05:F6:06:0E:EF:26:19:2B:AF:B3:44:AA:C7:32:B5:C8:F5:4F Authority key identifier: 81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF Certificate issuer: /CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf Certificate serial: 019B59ACCD0D8529DE81F46AF279DE8FE514 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft Manifest number: 0E7D Signing time: Fri 26 Dec 2025 08:00:55 +0000 Manifest this update: Fri 26 Dec 2025 08:00:55 +0000 Manifest next update: Sat 27 Dec 2025 08:00:55 +0000 Files and hashes: 1: gSBe85sNP11y-h2XHUGR4Lomhr8.crl (hash: oA9S5h67q0dbW05gIe1r/Ysv4YxSNd21C8fRiBUGH0Y=) 2: tejhqyIYcfJnZD52AowM2BpZATQ.roa (hash: oI2/9MVukstCSiurn/ztv7Ci6tJsVocDaOvri7bb8FY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:cd:0d:85:29:de:81:f4:6a:f2:79:de:8f:e5:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf Validity Not Before: Dec 26 08:00:55 2025 GMT Not After : Dec 27 08:00:55 2025 GMT Subject: CN=ce3205f6060eef26192bafb344aac732b5c8f54f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7f:4b:96:57:72:a4:1d:0e:59:cd:9c:c1:3f: 29:95:6d:ca:76:eb:18:36:c2:62:40:4f:b6:7d:97: e0:01:1d:6a:d0:37:27:90:48:a4:0a:18:ec:4a:bd: 18:81:ae:4a:18:8e:12:4f:f3:28:94:ac:ee:59:f3: 88:85:00:5c:b2:41:1b:ce:9f:f7:5b:59:69:6e:5e: fc:70:49:d0:a0:ae:e6:de:ab:9c:8b:37:f3:61:77: 7e:ee:55:31:20:93:16:71:b1:26:1d:5d:06:cd:bf: 40:bb:ad:63:19:a6:4f:e9:54:ec:28:a2:72:f8:d7: 64:50:e7:b6:af:29:16:6c:37:1d:7f:cb:c5:d1:47: 13:87:f5:7a:6e:aa:23:2d:0c:53:b6:82:64:4d:19: 6e:75:71:31:d0:92:35:48:f6:1f:b4:b0:32:d5:0b: 3c:9f:4e:7a:78:53:84:ff:a6:fc:e2:c1:b1:b1:06: 56:a3:06:5e:39:a8:5f:81:d7:40:d9:92:14:30:24: 2e:53:10:32:b8:df:83:bf:d0:c2:ea:60:03:02:45: 78:ea:75:ac:67:4e:db:f1:81:cb:10:63:c2:d0:0b: cb:00:67:01:8f:91:8a:36:e4:d4:c5:db:b3:25:86: f6:0d:c1:59:20:77:db:bd:2d:1a:9d:cd:ca:b3:7b: 67:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:32:05:F6:06:0E:EF:26:19:2B:AF:B3:44:AA:C7:32:B5:C8:F5:4F X509v3 Authority Key Identifier: keyid:81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:7c:2c:b6:9a:9a:ae:c7:66:99:52:04:e3:d7:ad:d4:22:cd: e4:85:db:4a:84:bf:c3:d9:ae:2e:cb:2e:bd:03:16:b5:89:91: e1:75:91:fb:e5:f2:41:f9:c0:26:03:56:8d:cc:2f:15:92:92: 96:a5:ad:a9:3d:32:74:fb:db:81:65:27:14:b3:b9:12:d0:d2: 2c:87:87:b6:c6:3a:cc:7e:3c:03:0b:b7:ea:7f:bf:1e:32:ea: 92:19:0d:62:3d:63:a7:28:86:f8:ea:cb:99:86:06:9c:0f:f3: 8e:ac:cb:cf:2e:e7:12:c2:a1:e2:9e:38:ce:44:40:ec:40:27: 59:67:5e:15:d0:92:18:51:a9:c7:1b:a9:86:e3:3b:b2:ca:07: 1d:4c:90:b7:07:87:98:9c:02:83:22:aa:5f:ed:dc:6d:51:1d: 63:08:e2:cd:89:db:0f:8e:12:5e:63:17:2b:86:5e:60:2d:a7: 77:e9:7c:92:1c:40:41:c6:73:78:e2:9a:11:07:d5:18:33:e5: 3e:b4:33:80:46:b6:f8:79:8c:d2:0e:74:26:45:c9:a9:07:99: 87:04:6e:75:e7:f0:e3:ed:9f:8e:bb:e3:03:d3:56:b8:11:6b: 6c:c9:a5:37:3d:9f:de:cf:81:2f:d7:12:6d:f0:63:a4:15:06: c0:45:75:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrM0NhSnegfRq8nnej+UUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMjA1ZWYzOWIwZDNmNWQ3MmZhMWQ5NzFkNDE5MWUwYmEy Njg2YmYwHhcNMjUxMjI2MDgwMDU1WhcNMjUxMjI3MDgwMDU1WjAzMTEwLwYDVQQD EyhjZTMyMDVmNjA2MGVlZjI2MTkyYmFmYjM0NGFhYzczMmI1YzhmNTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8X9LlldypB0OWc2cwT8plW3KdusY NsJiQE+2fZfgAR1q0DcnkEikChjsSr0Yga5KGI4ST/MolKzuWfOIhQBcskEbzp/3 W1lpbl78cEnQoK7m3qucizfzYXd+7lUxIJMWcbEmHV0Gzb9Au61jGaZP6VTsKKJy +NdkUOe2rykWbDcdf8vF0UcTh/V6bqojLQxTtoJkTRludXEx0JI1SPYftLAy1Qs8 n056eFOE/6b84sGxsQZWowZeOahfgddA2ZIUMCQuUxAyuN+Dv9DC6mADAkV46nWs Z07b8YHLEGPC0AvLAGcBj5GKNuTUxduzJYb2DcFZIHfbvS0anc3Ks3tn0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4yBfYGDu8mGSuvs0SqxzK1yPVPMB8GA1UdIwQY MBaAFIEgXvObDT9dcvodlx1BkeC6Joa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iNTY4ODEtZTkxOS00NDVhLTk5MjMt ODlhOTAyMzI2MWYxLzEvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iNTY4ODEtZTkxOS00NDVhLTk5MjMtODlhOTAyMzI2MWYx LzEvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXwstpqa rsdmmVIE49et1CLN5IXbSoS/w9muLssuvQMWtYmR4XWR++XyQfnAJgNWjcwvFZKS lqWtqT0ydPvbgWUnFLO5EtDSLIeHtsY6zH48Awu36n+/HjLqkhkNYj1jpyiG+OrL mYYGnA/zjqzLzy7nEsKh4p44zkRA7EAnWWdeFdCSGFGpxxuphuM7ssoHHUyQtweH mJwCgyKqX+3cbVEdYwjizYnbD44SXmMXK4ZeYC2nd+l8khxAQcZzeOKaEQfVGDPl PrQzgEa2+HmM0g50JkXJqQeZhwRudefw4+2fjrvjA9NWuBFrbMmlNz2f3s+BL9cS bfBjpBUGwEV14g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:24 2025 by rpki-client