This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft File: gFBQT0sXdugLitn4s1bmE7WFs1o.mft (raw, json) Hash identifier: 2q8w4ZPy5qqb5wzdg2/mmZAPL1N4fWu3oFtLcVaKNAA= Subject key identifier: 37:08:2E:40:EE:37:82:2E:28:E1:C5:47:64:7B:B2:A9:26:98:9C:12 Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A Certificate issuer: /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a Certificate serial: 019B10136511A7A9B5CC87D66621DC7290A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft Manifest number: 1294 Signing time: Fri 12 Dec 2025 01:01:05 +0000 Manifest this update: Fri 12 Dec 2025 01:01:05 +0000 Manifest next update: Sat 13 Dec 2025 01:01:05 +0000 Files and hashes: 1: Yk_mB5Br41Nhda13vL3dksE5LgU.roa (hash: K0LuZJCRzNJs5Bjbkimkjj4nwWKGnFgBw0hG+qjP3AM=) 2: gFBQT0sXdugLitn4s1bmE7WFs1o.crl (hash: tslJMMRZVrmgvqTERyJJxYJxOZIKfppzYBh2PEi9Iek=) 3: lkCjPKHQ8Kw51UGG5Fx-gWmfZeo.roa (hash: IrYEpIdSCLf/ZAAdJvK3O7zC/ibmRmQLp4sdzgkQJvg=) 4: mRlLG-5kU_wBciWClXIVvCGQxeE.roa (hash: ZuSklCsUXIbLUEwi1a/wPQy/93NYaA4MC8miFKmm96c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:65:11:a7:a9:b5:cc:87:d6:66:21:dc:72:90:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a Validity Not Before: Dec 12 01:01:05 2025 GMT Not After : Dec 13 01:01:05 2025 GMT Subject: CN=37082e40ee37822e28e1c547647bb2a926989c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:b8:62:cd:28:c8:1b:ad:2e:e3:c2:59:66: bc:42:b3:17:a4:52:ee:0a:00:3f:d1:cd:d1:87:c4: 15:03:cc:d3:fc:ae:f0:97:cd:9b:4b:da:5b:33:6a: 2e:bf:e0:74:60:ba:16:d9:df:d1:f6:ae:15:d4:5c: 17:90:d9:e2:71:3c:69:4c:2e:61:11:18:93:98:05: 10:0b:89:98:42:a7:e2:2b:a7:35:ad:cd:ab:2a:5a: 44:ae:08:ba:50:52:ad:bf:16:32:a6:c7:53:3c:69: 35:4b:e8:61:03:9c:34:6a:ca:d9:4b:6c:5c:97:18: 51:38:ab:0e:b3:10:37:d0:62:70:2d:76:83:56:ef: a0:36:37:8c:03:e6:77:ba:8a:85:ab:76:47:7e:dd: 61:0f:a3:44:c5:d0:58:0c:93:1c:f3:f9:36:2a:35: f2:30:73:d3:8c:b0:11:53:ac:49:c8:97:24:b8:4f: 05:9a:73:07:42:c3:a2:2a:b7:ec:b6:a4:5c:99:a3: e2:ec:0b:18:5f:a8:d5:ff:72:e6:12:37:2f:7b:3f: fa:b3:d9:44:09:d6:ed:10:5c:d2:a9:13:df:20:1c: 3a:ee:1b:05:bf:0d:71:ab:f9:f8:d2:a9:f9:8b:1d: 7d:c0:bc:73:5e:0f:b9:0d:4c:73:5a:b1:2a:82:8c: d2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:08:2E:40:EE:37:82:2E:28:E1:C5:47:64:7B:B2:A9:26:98:9C:12 X509v3 Authority Key Identifier: keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ec:eb:bf:6d:45:58:35:28:47:11:8b:c3:64:39:1b:cc:5a: 21:7f:13:a6:86:f8:16:7b:d2:57:67:8e:1d:c9:f0:ec:f0:08: 69:12:32:b3:2a:40:50:d1:bb:9c:2e:55:86:b6:b4:11:c7:ea: 0c:1d:13:1e:4b:f2:20:02:f7:b8:75:34:53:1f:97:07:75:40: f5:fc:27:cd:59:ce:cd:83:de:01:46:d2:83:3a:55:3a:2c:73: b5:57:41:b1:4c:f3:19:8a:c3:e5:c2:0a:57:55:e9:df:eb:30: 56:f0:9f:e3:da:cb:49:bb:0b:5e:07:d3:1e:1a:e7:98:9a:81: ce:ea:9d:8d:d5:79:dc:a8:ee:c1:5d:44:1c:eb:00:5e:0f:1c: 99:05:e1:10:12:cf:73:b6:a6:8e:64:ed:42:13:4e:bf:33:17: b6:d9:2e:53:8e:d0:fc:a6:6b:2b:1b:88:72:4d:a3:97:6f:a1: 61:ee:b9:b4:40:0a:3b:01:87:94:5d:3d:25:a1:bb:ae:7c:47: f6:42:da:04:1d:d8:b8:17:30:1b:da:3a:ea:57:56:01:93:19: 8a:d6:e9:46:41:40:cf:b6:cc:88:0d:1e:98:9d:50:f1:07:66: a6:15:94:17:5e:80:9a:ef:ef:83:14:eb:02:a4:1f:10:42:8d: 4e:c0:57:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE2URp6m1zIfWZiHccpCjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNTA1MDRmNGIxNzc2ZTgwYjhhZDlmOGIzNTZlNjEzYjU4 NWIzNWEwHhcNMjUxMjEyMDEwMTA1WhcNMjUxMjEzMDEwMTA1WjAzMTEwLwYDVQQD EygzNzA4MmU0MGVlMzc4MjJlMjhlMWM1NDc2NDdiYjJhOTI2OTg5YzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgC4Ys0oyButLuPCWWa8QrMXpFLu CgA/0c3Rh8QVA8zT/K7wl82bS9pbM2ouv+B0YLoW2d/R9q4V1FwXkNnicTxpTC5h ERiTmAUQC4mYQqfiK6c1rc2rKlpErgi6UFKtvxYypsdTPGk1S+hhA5w0asrZS2xc lxhROKsOsxA30GJwLXaDVu+gNjeMA+Z3uoqFq3ZHft1hD6NExdBYDJMc8/k2KjXy MHPTjLARU6xJyJckuE8FmnMHQsOiKrfstqRcmaPi7AsYX6jV/3LmEjcvez/6s9lE CdbtEFzSqRPfIBw67hsFvw1xq/n40qn5ix19wLxzXg+5DUxzWrEqgozSoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcILkDuN4IuKOHFR2R7sqkmmJwSMB8GA1UdIwQY MBaAFIBQUE9LF3boC4rZ+LNW5hO1hbNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9iNTk3MTUtYjA1YS00YjRhLWE5MjIt MDE0NGEzMjgyYTJlLzEvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9iNTk3MTUtYjA1YS00YjRhLWE5MjItMDE0NGEzMjgyYTJl LzEvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvOzrv21F WDUoRxGLw2Q5G8xaIX8Tpob4FnvSV2eOHcnw7PAIaRIysypAUNG7nC5Vhra0Ecfq DB0THkvyIAL3uHU0Ux+XB3VA9fwnzVnOzYPeAUbSgzpVOixztVdBsUzzGYrD5cIK V1Xp3+swVvCf49rLSbsLXgfTHhrnmJqBzuqdjdV53KjuwV1EHOsAXg8cmQXhEBLP c7amjmTtQhNOvzMXttkuU47Q/KZrKxuIck2jl2+hYe65tEAKOwGHlF09JaG7rnxH 9kLaBB3YuBcwG9o66ldWAZMZitbpRkFAz7bMiA0emJ1Q8QdmphWUF16Amu/vgxTr AqQfEEKNTsBXMA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:58:19 2025 by rpki-client