This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft File: GbEF0UjemWA2_fIcsgijOKFYzto.mft (raw, json) Hash identifier: evq1noMlL3eUFK3hicDfctqm3roH+BNkjdJzUY1UO9s= Subject key identifier: 50:46:A3:18:A6:7B:74:49:F9:35:4F:16:67:B3:1C:06:2D:A6:24:2B Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA Certificate issuer: /CN=19b105d148de996036fdf21cb208a338a158ceda Certificate serial: 019B1A28D37D757001CA460571E5CDC7ADE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft Manifest number: 06F9 Signing time: Sun 14 Dec 2025 00:00:41 +0000 Manifest this update: Sun 14 Dec 2025 00:00:41 +0000 Manifest next update: Mon 15 Dec 2025 00:00:41 +0000 Files and hashes: 1: GbEF0UjemWA2_fIcsgijOKFYzto.crl (hash: HlapmswSq0R5T05F7GnW+5XLFMOvweou8gMeYCM7g0A=) 2: Kef5Ht8ih3zCR7oI2xwNCCek_c0.roa (hash: PcoTymr3WCdK/2NTP+Gx/1hjHNciVhC2nMEqt8P6Dww=) 3: QdqTKHoiqUSS3YbPBuNzrQhQ9-U.roa (hash: q0TCHE5AUt7fjjG6UbQUxp5tdbPD8QNzCCk/O3w0dcI=) 4: bJaPvlpLwHUl9ZMeCz6Qju7dCQ4.roa (hash: P7xXaDBj8KlM/Rm+qxd2RUE4iuJ1o4jB4LwpB/1ek+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:28:d3:7d:75:70:01:ca:46:05:71:e5:cd:c7:ad:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda Validity Not Before: Dec 14 00:00:41 2025 GMT Not After : Dec 15 00:00:41 2025 GMT Subject: CN=5046a318a67b7449f9354f1667b31c062da6242b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:35:99:fb:68:25:4f:d8:e0:18:98:dd:a4:d5: 35:44:dc:16:22:e4:6d:2c:9a:9f:82:fa:19:f5:fc: 70:fd:f1:7b:ef:70:5e:75:ac:8f:06:5d:49:4d:8d: d6:d6:d6:d2:42:b1:94:6a:97:a9:76:34:af:c5:cc: 15:79:98:7e:68:88:86:73:07:85:9c:6e:42:d2:ef: 8c:1a:b1:6b:99:4f:1b:94:ac:16:40:fd:93:e1:74: c8:d9:a5:1b:11:a5:52:84:cc:22:25:a7:82:af:b4: 82:d8:97:6a:12:f5:c8:51:3c:d8:69:05:b4:a5:cb: 63:ab:ba:ce:70:a1:da:15:03:1c:ce:7f:c3:bb:5b: 74:03:e0:6e:3c:ad:f6:ad:72:b5:16:9b:09:65:1b: b5:36:28:4c:ba:52:1e:f2:4a:b6:c3:4e:d7:7a:96: fc:ce:0f:9b:06:0a:9f:2f:16:d4:45:b4:35:7b:94: a0:1d:10:ef:63:d7:36:b6:a3:70:35:99:e0:b3:8a: 95:e4:2d:ce:6f:04:94:50:68:03:92:a0:8c:fd:70: e4:11:52:d3:3a:eb:9f:3e:85:f0:a5:41:8a:06:de: b2:b4:cb:35:7b:30:c6:0c:5c:b0:34:ce:f6:b5:7f: e1:74:aa:db:b9:f3:02:2e:81:21:b0:08:8b:d2:0c: c6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:46:A3:18:A6:7B:74:49:F9:35:4F:16:67:B3:1C:06:2D:A6:24:2B X509v3 Authority Key Identifier: keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d2:5a:df:40:8e:46:fa:b2:55:8e:e6:c7:fd:c6:41:df:e3: 3c:73:bf:c6:9c:cf:59:5f:4a:dc:88:9a:7b:23:82:6e:0b:a4: 94:71:58:88:ff:ee:bc:b4:1e:cd:e0:fd:c3:62:e6:35:69:f1: 4f:da:59:eb:1e:a3:cd:19:0e:3c:fd:f4:a5:c6:24:6a:5b:92: f6:b7:06:41:72:98:04:38:8e:4d:71:31:02:44:a5:07:59:b9: 60:79:39:b6:00:92:27:ae:69:5b:3f:c7:c8:d1:09:bb:95:e7: 26:61:2a:64:a4:14:da:46:4e:15:57:5c:5c:bd:51:a4:f1:af: 21:e6:51:d7:f5:bb:24:e8:0c:27:16:80:ab:2e:ff:4e:fe:12: 42:94:f6:d1:eb:59:3e:a0:83:da:69:f5:a3:2d:de:ce:8d:d1: 36:bd:90:58:e0:74:d0:19:33:15:1a:82:86:c9:02:02:29:ca: ae:90:7b:c0:b4:da:53:31:82:26:34:57:5d:e8:b3:e9:c4:5d: 9f:bf:cc:d1:24:c2:09:93:ae:21:ee:0b:da:02:67:3c:91:82: 58:6a:6c:7b:03:45:83:d8:3e:51:30:33:17:9d:ed:db:b3:83: 89:eb:77:89:7d:e2:2e:d4:0e:5f:13:54:fb:a1:f1:4a:50:f0: c2:5c:ac:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKNN9dXABykYFceXNx63lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YjEwNWQxNDhkZTk5NjAzNmZkZjIxY2IyMDhhMzM4YTE1 OGNlZGEwHhcNMjUxMjE0MDAwMDQxWhcNMjUxMjE1MDAwMDQxWjAzMTEwLwYDVQQD Eyg1MDQ2YTMxOGE2N2I3NDQ5ZjkzNTRmMTY2N2IzMWMwNjJkYTYyNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jWZ+2glT9jgGJjdpNU1RNwWIuRt LJqfgvoZ9fxw/fF773BedayPBl1JTY3W1tbSQrGUapepdjSvxcwVeZh+aIiGcweF nG5C0u+MGrFrmU8blKwWQP2T4XTI2aUbEaVShMwiJaeCr7SC2JdqEvXIUTzYaQW0 pctjq7rOcKHaFQMczn/Du1t0A+BuPK32rXK1FpsJZRu1NihMulIe8kq2w07Xepb8 zg+bBgqfLxbURbQ1e5SgHRDvY9c2tqNwNZngs4qV5C3ObwSUUGgDkqCM/XDkEVLT OuufPoXwpUGKBt6ytMs1ezDGDFywNM72tX/hdKrbufMCLoEhsAiL0gzG/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBGoxime3RJ+TVPFmezHAYtpiQrMB8GA1UdIwQY MBaAFBmxBdFI3plgNv3yHLIIozihWM7aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JFRjBVamVtV0EyX2ZJY3NnaWpPS0ZZenRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi81MmNiOGQtMTFkNC00ZjljLThmOTIt MjZlNjRkNzhiMGM2LzEvR2JFRjBVamVtV0EyX2ZJY3NnaWpPS0ZZenRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi81MmNiOGQtMTFkNC00ZjljLThmOTItMjZlNjRkNzhiMGM2 LzEvR2JFRjBVamVtV0EyX2ZJY3NnaWpPS0ZZenRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9Ja30CO RvqyVY7mx/3GQd/jPHO/xpzPWV9K3IiaeyOCbguklHFYiP/uvLQezeD9w2LmNWnx T9pZ6x6jzRkOPP30pcYkaluS9rcGQXKYBDiOTXExAkSlB1m5YHk5tgCSJ65pWz/H yNEJu5XnJmEqZKQU2kZOFVdcXL1RpPGvIeZR1/W7JOgMJxaAqy7/Tv4SQpT20etZ PqCD2mn1oy3ezo3RNr2QWOB00BkzFRqChskCAinKrpB7wLTaUzGCJjRXXeiz6cRd n7/M0STCCZOuIe4L2gJnPJGCWGpsewNFg9g+UTAzF53t27ODiet3iX3iLtQOXxNU +6HxSlDwwlysZA== -----END CERTIFICATE-----Generated at Sun Dec 14 08:38:55 2025 by rpki-client