This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft File: GbZo5W_iW9bcU4AO4XdQYezAkgY.mft (raw, json) Hash identifier: BjgDqFYTeuXEeNtqaMXc2E9bXGIfsOdcXMQdEVfSM3g= Subject key identifier: BC:1A:A1:5E:F3:31:5C:16:95:3B:D7:0A:C9:3F:EE:83:97:A3:A2:D6 Authority key identifier: 19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06 Certificate issuer: /CN=19b668e56fe25bd6dc53800ee1775061ecc09206 Certificate serial: 019B5A51A45899E17516E42685155DB8310F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft Manifest number: 01EA Signing time: Fri 26 Dec 2025 11:00:58 +0000 Manifest this update: Fri 26 Dec 2025 11:00:58 +0000 Manifest next update: Sat 27 Dec 2025 11:00:58 +0000 Files and hashes: 1: GbZo5W_iW9bcU4AO4XdQYezAkgY.crl (hash: 3IrJnUk6IsIIMiwGMewcfz3xfgJafdso8SKijcmjmVc=) 2: RiL09rS6VjBEVN__JOM2U5RqEcI.roa (hash: uYgL/yhRbt5qevmx86ZZVWKBSugMaqO2EFz8Vo1U7Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:a4:58:99:e1:75:16:e4:26:85:15:5d:b8:31:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19b668e56fe25bd6dc53800ee1775061ecc09206 Validity Not Before: Dec 26 11:00:58 2025 GMT Not After : Dec 27 11:00:58 2025 GMT Subject: CN=bc1aa15ef3315c16953bd70ac93fee8397a3a2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8b:6b:f0:cf:f0:ca:54:a0:9e:a0:25:72:1c: e0:3d:c4:b5:71:bc:e9:f3:b1:61:c4:4c:55:c1:2a: e7:e5:43:2c:83:16:01:d3:19:f7:fa:94:88:93:2c: e1:69:13:f0:cd:d1:9d:59:0e:15:4f:13:a2:d0:92: 04:06:af:19:55:ef:2c:8b:be:e6:2b:c5:42:81:ad: 47:41:2c:7e:0f:29:06:48:13:f6:82:db:80:94:c4: b3:ac:84:c7:e0:b9:b7:f9:b2:15:9d:03:5c:c4:eb: c2:fb:60:ec:9d:0b:a8:cb:bc:c8:60:d3:ee:c0:84: e6:4d:4a:ce:61:d9:48:0f:cb:34:04:5c:5d:ce:1d: 9a:96:13:f5:2d:13:19:e2:35:93:8e:4c:c0:a0:50: 1d:ae:26:ed:96:ba:51:b8:dd:bb:f9:7e:38:f5:0a: a5:78:56:3b:aa:8c:b7:b2:c1:f5:31:dd:45:67:33: ef:86:ec:8a:1c:e2:8d:ab:43:60:b2:fe:27:a2:b8: 9e:55:1f:b3:5b:b3:7f:57:9f:6a:24:14:1f:f3:ac: 7e:33:08:c6:d8:ee:fa:06:bd:93:9f:86:21:3e:02: 81:f3:69:1e:93:54:72:43:64:f1:d8:6d:72:b3:0b: 07:06:33:01:a6:af:d1:a5:a1:f0:f7:b9:b7:65:fe: d3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1A:A1:5E:F3:31:5C:16:95:3B:D7:0A:C9:3F:EE:83:97:A3:A2:D6 X509v3 Authority Key Identifier: keyid:19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ea:f2:e8:40:4d:b9:a9:39:95:4f:41:e0:47:7b:d3:c9:91: 88:60:5e:f7:3b:dd:8f:ff:59:64:1e:f3:0a:01:a6:8b:f5:26: e4:b3:2c:ae:0e:f8:a1:12:0d:0a:d9:a7:97:d5:0a:1d:fe:f7: 07:41:13:08:9b:ff:f9:6b:3a:4d:12:cf:64:d7:2b:af:c3:89: d3:ee:0b:5f:b7:3f:e1:dd:80:f4:b4:fe:e0:ee:50:d3:32:22: 4e:d8:5a:21:b6:f6:64:15:9e:82:26:0c:43:07:d9:9d:27:cc: 85:44:3d:65:ea:2f:9a:84:d3:88:38:d2:cc:7d:66:f6:57:db: eb:d5:86:5e:9d:35:9a:45:e2:b7:5a:7c:57:02:98:d7:72:08: 27:e9:c3:28:2e:87:b9:52:3b:cb:96:fc:d2:ec:80:ae:0f:2c: b3:d6:29:c7:4a:26:24:62:dc:a8:9c:ed:da:fc:47:d1:87:e6: bc:51:f2:24:4a:96:b9:c3:bd:42:d5:e6:50:8a:fe:35:18:e4: 9a:ee:a0:6d:09:c6:8c:3f:19:29:b3:34:bd:c4:14:a5:35:55: 53:67:7e:25:89:ae:38:36:a9:5f:ca:90:1d:ee:67:19:33:36: d2:9a:2f:b5:55:a9:d2:cb:b6:9f:60:62:36:4e:0f:ed:c2:8e: 5d:65:6f:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUaRYmeF1FuQmhRVduDEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YjY2OGU1NmZlMjViZDZkYzUzODAwZWUxNzc1MDYxZWNj MDkyMDYwHhcNMjUxMjI2MTEwMDU4WhcNMjUxMjI3MTEwMDU4WjAzMTEwLwYDVQQD EyhiYzFhYTE1ZWYzMzE1YzE2OTUzYmQ3MGFjOTNmZWU4Mzk3YTNhMmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYtr8M/wylSgnqAlchzgPcS1cbzp 87FhxExVwSrn5UMsgxYB0xn3+pSIkyzhaRPwzdGdWQ4VTxOi0JIEBq8ZVe8si77m K8VCga1HQSx+DykGSBP2gtuAlMSzrITH4Lm3+bIVnQNcxOvC+2DsnQuoy7zIYNPu wITmTUrOYdlID8s0BFxdzh2alhP1LRMZ4jWTjkzAoFAdribtlrpRuN27+X449Qql eFY7qoy3ssH1Md1FZzPvhuyKHOKNq0Ngsv4norieVR+zW7N/V59qJBQf86x+MwjG 2O76Br2Tn4YhPgKB82kek1RyQ2Tx2G1yswsHBjMBpq/RpaHw97m3Zf7TXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwaoV7zMVwWlTvXCsk/7oOXo6LWMB8GA1UdIwQY MBaAFBm2aOVv4lvW3FOADuF3UGHswJIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JabzVXX2lXOWJjVTRBTzRYZFFZZXpBa2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kNzBkNDYtMjY1YS00MDkyLTgzMzEt ZWY1ZjA5M2Y1Mzk1LzEvR2JabzVXX2lXOWJjVTRBTzRYZFFZZXpBa2dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9kNzBkNDYtMjY1YS00MDkyLTgzMzEtZWY1ZjA5M2Y1Mzk1 LzEvR2JabzVXX2lXOWJjVTRBTzRYZFFZZXpBa2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+ry6EBN uak5lU9B4Ed708mRiGBe9zvdj/9ZZB7zCgGmi/Um5LMsrg74oRINCtmnl9UKHf73 B0ETCJv/+Ws6TRLPZNcrr8OJ0+4LX7c/4d2A9LT+4O5Q0zIiTthaIbb2ZBWegiYM QwfZnSfMhUQ9ZeovmoTTiDjSzH1m9lfb69WGXp01mkXit1p8VwKY13IIJ+nDKC6H uVI7y5b80uyArg8ss9Ypx0omJGLcqJzt2vxH0YfmvFHyJEqWucO9QtXmUIr+NRjk mu6gbQnGjD8ZKbM0vcQUpTVVU2d+JYmuODapX8qQHe5nGTM20povtVWp0su2n2Bi Nk4P7cKOXWVvlQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:18 2025 by rpki-client