This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json) Hash identifier: yCpdv++G+/7rgMfTZgrRx0bl5aXDRGpWFgEUy7wxN9s= Subject key identifier: B8:5A:3B:E7:48:C8:63:50:0C:B0:D9:4D:72:5B:C3:2E:2B:BC:41:3A Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29 Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429 Certificate serial: 019B59E3B11E21ABE816E7CF72E66BE70E3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 09:00:52 +0000 Manifest this update: Fri 26 Dec 2025 09:00:52 +0000 Manifest next update: Sat 27 Dec 2025 09:00:52 +0000 Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: Q1M6qqS7ppjBbWQdsD683VXreHb+ElXAmpdBbVMMTkM=) 2: YPZsDLLgzY_7M-GC9SiCWRi1ybo.roa (hash: 9PJDi8b5z4045eOIRy/iUo+ovH8jKNIpIEnuC9ZNGWE=) 3: dhax6YlGZdJ59Lja9mjH_mTZXS8.roa (hash: z4HlD8GeanPgFBicLk5Q3SISz2iD/qfFdvuzkfzBoxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:b1:1e:21:ab:e8:16:e7:cf:72:e6:6b:e7:0e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429 Validity Not Before: Dec 26 09:00:52 2025 GMT Not After : Dec 27 09:00:52 2025 GMT Subject: CN=b85a3be748c863500cb0d94d725bc32e2bbc413a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:76:c8:16:8b:06:ee:bf:58:9c:cb:08:4f:52: 0e:8d:ec:2d:dd:20:b4:85:41:d4:d6:45:24:65:67: 55:8e:29:25:10:e0:61:48:92:85:eb:65:6f:1d:ad: 83:71:0f:99:38:19:75:91:a2:99:b0:e0:a5:f5:ca: 6f:3a:29:20:cc:9a:84:d5:b7:87:b2:7e:3d:43:39: a8:30:5a:4e:c8:c4:83:43:77:29:96:ee:ba:f7:65: 1b:4b:3b:5a:d4:a1:67:fe:83:2b:30:af:31:fb:2f: 08:ef:43:b4:82:6a:fe:b6:52:85:bd:42:d3:f5:c9: 72:b6:96:79:7b:7c:b4:34:62:17:d2:4e:d0:11:c3: 2c:dc:ea:bd:50:c7:e2:bf:86:85:ca:d5:37:96:d8: cc:85:06:6a:17:e5:2d:33:99:f1:36:41:50:ad:1c: 33:9e:f6:a8:e0:fe:86:9b:cc:72:b1:42:9e:7b:f7: dd:0a:35:f0:b6:91:79:2e:76:52:09:5f:4a:d0:47: 67:66:bd:9c:85:92:7d:d5:1e:b8:da:c7:fa:db:9b: db:74:7b:f1:30:d2:65:6e:84:a1:8d:82:c4:1e:93: 9d:b5:1f:c2:74:df:6b:18:4a:a0:60:22:68:16:e2: a9:da:49:43:a8:04:73:e6:f5:4f:0a:5b:fd:a3:63: 64:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5A:3B:E7:48:C8:63:50:0C:B0:D9:4D:72:5B:C3:2E:2B:BC:41:3A X509v3 Authority Key Identifier: keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3f:3a:f7:49:59:6c:21:86:ac:51:31:eb:91:be:41:72:96: 27:62:84:88:81:5b:a7:fe:f9:d2:3f:fe:d7:3a:92:08:34:5d: f2:e6:82:79:fa:e5:99:66:60:b1:32:ca:cf:ad:32:bd:c0:e3: bc:56:6f:1b:04:fb:d4:5e:36:c0:88:5a:82:b9:e8:89:fc:25: 32:f2:bd:89:01:f6:66:1f:a9:e2:99:03:82:2b:8e:e2:f0:db: 02:63:c6:e4:61:fb:53:ff:94:6b:5b:df:1a:b5:db:c2:fc:d4: 75:d0:a8:30:64:8a:5c:97:f1:42:7d:23:a0:99:c9:c8:91:28: ee:dd:42:19:09:89:df:53:35:9f:1f:46:0f:4b:ef:ad:a3:dc: b0:5e:3e:a6:8e:d4:b6:7f:f7:ff:e6:b7:cb:8a:60:62:3a:57: eb:01:34:3e:2d:43:bc:9a:32:9d:59:6f:df:dd:9e:d5:a3:1e: 1c:0a:32:b7:4b:f2:da:f1:3f:92:cb:ca:aa:6a:9e:ff:15:2a: 47:81:f0:9e:4c:37:ab:a9:0a:00:5c:9e:44:d3:72:80:14:2e: 39:58:e3:39:36:ca:24:e5:93:e4:6a:8c:65:de:40:7b:8d:e0: 9f:20:a7:33:24:fb:b8:72:11:ae:89:ae:0b:c5:d5:49:6c:df: 9d:26:c4:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ47EeIavoFufPcuZr5w49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTdhNWVjMThjNGYyYzQ0Nzg0YWRjNTAzODM1NmJlNWFl ODk0MjkwHhcNMjUxMjI2MDkwMDUyWhcNMjUxMjI3MDkwMDUyWjAzMTEwLwYDVQQD EyhiODVhM2JlNzQ4Yzg2MzUwMGNiMGQ5NGQ3MjViYzMyZTJiYmM0MTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3bIFosG7r9YnMsIT1IOjewt3SC0 hUHU1kUkZWdVjiklEOBhSJKF62VvHa2DcQ+ZOBl1kaKZsOCl9cpvOikgzJqE1beH sn49QzmoMFpOyMSDQ3cplu6692UbSzta1KFn/oMrMK8x+y8I70O0gmr+tlKFvULT 9clytpZ5e3y0NGIX0k7QEcMs3Oq9UMfiv4aFytU3ltjMhQZqF+UtM5nxNkFQrRwz nvao4P6Gm8xysUKee/fdCjXwtpF5LnZSCV9K0EdnZr2chZJ91R642sf625vbdHvx MNJlboShjYLEHpOdtR/CdN9rGEqgYCJoFuKp2klDqARz5vVPClv9o2NkfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhaO+dIyGNQDLDZTXJbwy4rvEE6MB8GA1UdIwQY MBaAFBgXpewYxPLER4StxQODVr5a6JQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JlbDdCakU4c1JIaEszRkE0Tld2bHJvbENrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC83NzM2NzgtZTIwMC00NmFmLTg2YzEt NmJkODAyMmQyZWFlLzEvR0JlbDdCakU4c1JIaEszRkE0Tld2bHJvbENrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC83NzM2NzgtZTIwMC00NmFmLTg2YzEtNmJkODAyMmQyZWFl LzEvR0JlbDdCakU4c1JIaEszRkE0Tld2bHJvbENrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALT8690lZ bCGGrFEx65G+QXKWJ2KEiIFbp/750j/+1zqSCDRd8uaCefrlmWZgsTLKz60yvcDj vFZvGwT71F42wIhagrnoifwlMvK9iQH2Zh+p4pkDgiuO4vDbAmPG5GH7U/+Ua1vf GrXbwvzUddCoMGSKXJfxQn0joJnJyJEo7t1CGQmJ31M1nx9GD0vvraPcsF4+po7U tn/3/+a3y4pgYjpX6wE0Pi1DvJoynVlv392e1aMeHAoyt0vy2vE/ksvKqmqe/xUq R4Hwnkw3q6kKAFyeRNNygBQuOVjjOTbKJOWT5GqMZd5Ae43gnyCnMyT7uHIRromu C8XVSWzfnSbEdQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:30 2025 by rpki-client