This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft File: gBbMsax3x8AqTt5gbfH375c6C_k.mft (raw, json) Hash identifier: lY/z6KAJ8v83oES+ENOLleuwCp3KdMd+dqV3jP0uyHY= Subject key identifier: C7:45:20:03:AF:0F:72:8A:70:3C:FC:67:95:10:1D:74:2A:70:A9:54 Authority key identifier: 80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9 Certificate issuer: /CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9 Certificate serial: 019B58D1697F3DF2C182258FA5CBECB6A2D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft Manifest number: 1243 Signing time: Fri 26 Dec 2025 04:01:17 +0000 Manifest this update: Fri 26 Dec 2025 04:01:17 +0000 Manifest next update: Sat 27 Dec 2025 04:01:17 +0000 Files and hashes: 1: Ax6Vm0VTZQY0FLe1VYl0Sd0_sqo.roa (hash: X5Han0rbC/tYWBQcqeDkAJUru7qclM/G19tIpVV4C6g=) 2: gBbMsax3x8AqTt5gbfH375c6C_k.crl (hash: VzFaWNOTFVBXgYSO/MM+/QZyQGvnnMx4vhjSDbs3jww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:69:7f:3d:f2:c1:82:25:8f:a5:cb:ec:b6:a2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9 Validity Not Before: Dec 26 04:01:17 2025 GMT Not After : Dec 27 04:01:17 2025 GMT Subject: CN=c7452003af0f728a703cfc6795101d742a70a954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:af:d1:b6:ba:a0:bd:f7:a2:46:c0:37:db:72: 6b:e3:d2:81:b4:61:41:ab:63:e6:77:ed:90:91:7e: 7e:72:f9:7b:1a:2d:f7:00:20:71:5a:ed:e4:13:d6: 28:1c:ba:2a:95:6f:25:11:8d:43:a2:2e:48:d1:26: d2:95:c3:22:b9:58:78:ce:3c:18:6c:94:27:cb:b5: df:88:de:69:20:39:8c:09:40:42:2b:d6:3d:4d:bf: 83:e6:b7:7a:e3:00:0c:c9:00:6c:1c:8c:c8:bb:00: 98:2e:b4:09:be:79:5c:38:a6:a7:7b:4c:57:b6:aa: f1:d1:fb:b1:b5:ee:70:92:f4:1d:fe:12:ca:fb:52: d4:c7:5c:81:b0:a7:e0:58:c1:87:d8:60:1e:15:98: d7:81:99:0d:36:cb:10:cb:b0:45:55:6f:51:56:7c: 03:ad:57:da:6d:9c:5e:1d:69:c0:b7:8b:53:f7:33: 0b:06:9b:cd:d6:7a:cb:98:8b:2e:5a:94:58:52:4f: 93:2e:a3:b2:9f:64:8e:74:d7:c7:dc:37:f9:a7:5e: 69:1a:71:08:d5:0d:4d:54:03:e3:3c:dd:64:b5:f9: 2f:80:7d:8e:25:11:fd:0a:64:1c:35:b5:1e:62:a1: 5f:70:a2:d9:6f:28:59:47:74:76:dc:59:00:7c:66: f5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:45:20:03:AF:0F:72:8A:70:3C:FC:67:95:10:1D:74:2A:70:A9:54 X509v3 Authority Key Identifier: keyid:80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:37:b6:a9:62:15:d3:ec:78:69:fe:7c:bc:54:95:d0:38:94: 95:88:49:c2:c1:2c:c5:11:71:ec:0b:f4:af:8b:24:9f:9d:5a: d4:83:15:18:c9:7b:4d:11:77:3a:0c:bd:c8:16:6b:42:c0:6d: 69:be:07:50:55:69:33:50:76:13:2d:63:17:b4:09:34:16:a0: d7:69:f2:bb:53:f2:8c:04:0b:f5:6a:6e:5e:a1:0b:06:e1:10: 21:1d:20:ac:f7:a8:34:6c:f7:b4:48:93:c5:66:07:a9:9d:5b: 2b:b7:ae:a1:05:f0:ab:2b:2e:28:4d:7f:14:98:1d:92:94:4b: bd:00:e6:bd:f9:57:90:56:ef:75:e4:92:6b:29:16:c7:76:11: c0:ce:a8:ff:41:03:f4:fa:c7:ae:46:68:4f:72:c1:08:f8:70: 67:0b:9e:e5:39:29:a1:6d:36:bc:3f:30:a8:4b:62:b8:40:6e: bc:bd:65:d9:62:61:bc:cf:f3:e2:35:ad:f8:fb:46:32:6d:a8: 09:fe:57:73:11:79:55:b9:84:94:04:01:e5:03:70:0f:0d:c8: 7b:ee:07:8a:cc:99:8f:73:6a:15:27:2c:d9:04:5b:61:f2:ff: b4:bf:05:48:cd:93:b3:05:23:0c:cd:15:91:12:34:fe:ce:b2: 9c:89:76:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0Wl/PfLBgiWPpcvstqLQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMTZjY2IxYWM3N2M3YzAyYTRlZGU2MDZkZjFmN2VmOTcz YTBiZjkwHhcNMjUxMjI2MDQwMTE3WhcNMjUxMjI3MDQwMTE3WjAzMTEwLwYDVQQD EyhjNzQ1MjAwM2FmMGY3MjhhNzAzY2ZjNjc5NTEwMWQ3NDJhNzBhOTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK/RtrqgvfeiRsA323Jr49KBtGFB q2Pmd+2QkX5+cvl7Gi33ACBxWu3kE9YoHLoqlW8lEY1Doi5I0SbSlcMiuVh4zjwY bJQny7XfiN5pIDmMCUBCK9Y9Tb+D5rd64wAMyQBsHIzIuwCYLrQJvnlcOKane0xX tqrx0fuxte5wkvQd/hLK+1LUx1yBsKfgWMGH2GAeFZjXgZkNNssQy7BFVW9RVnwD rVfabZxeHWnAt4tT9zMLBpvN1nrLmIsuWpRYUk+TLqOyn2SOdNfH3Df5p15pGnEI 1Q1NVAPjPN1ktfkvgH2OJRH9CmQcNbUeYqFfcKLZbyhZR3R23FkAfGb1xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdFIAOvD3KKcDz8Z5UQHXQqcKlUMB8GA1UdIwQY MBaAFIAWzLGsd8fAKk7eYG3x9++XOgv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hYmMwZjgtMWYxZi00YzY1LWJiODUt YTk2NmFlODU2OTI2LzEvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9hYmMwZjgtMWYxZi00YzY1LWJiODUtYTk2NmFlODU2OTI2 LzEvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDe2qWIV 0+x4af58vFSV0DiUlYhJwsEsxRFx7Av0r4skn51a1IMVGMl7TRF3Ogy9yBZrQsBt ab4HUFVpM1B2Ey1jF7QJNBag12nyu1PyjAQL9WpuXqELBuEQIR0grPeoNGz3tEiT xWYHqZ1bK7euoQXwqysuKE1/FJgdkpRLvQDmvflXkFbvdeSSaykWx3YRwM6o/0ED 9PrHrkZoT3LBCPhwZwue5TkpoW02vD8wqEtiuEBuvL1l2WJhvM/z4jWt+PtGMm2o Cf5XcxF5VbmElAQB5QNwDw3Ie+4HisyZj3NqFScs2QRbYfL/tL8FSM2TswUjDM0V kRI0/s6ynIl2eQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:59 2025 by rpki-client