This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft File: gIBkPxusC6RJkhdbr7bFlTxz3iw.mft (raw, json) Hash identifier: a/GObltmx0WawY0ZzTZGbEXX8AAoeIJm88h2F9eSAM0= Subject key identifier: 95:AC:7E:77:B3:C3:10:37:03:2D:A6:6A:E5:12:F5:1C:DE:A9:90:98 Authority key identifier: 80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C Certificate issuer: /CN=8080643f1bac0ba44992175bafb6c5953c73de2c Certificate serial: 019B5907FFB74AE536C822EC6AFF9118A535 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft Manifest number: 54 Signing time: Fri 26 Dec 2025 05:00:54 +0000 Manifest this update: Fri 26 Dec 2025 05:00:54 +0000 Manifest next update: Sat 27 Dec 2025 05:00:54 +0000 Files and hashes: 1: gIBkPxusC6RJkhdbr7bFlTxz3iw.crl (hash: bIPrjs9VOcCtd0O3SttcpRO65xIxuakEwaBP0VCPpG0=) 2: wa0NxBcMuL80sC2mEk7CcQyedPA.asa (hash: 7HL3OYKxAbAz2TeBPBTf/numqpWz73s26GNlTDqo8jc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:ff:b7:4a:e5:36:c8:22:ec:6a:ff:91:18:a5:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8080643f1bac0ba44992175bafb6c5953c73de2c Validity Not Before: Dec 26 05:00:54 2025 GMT Not After : Dec 27 05:00:54 2025 GMT Subject: CN=95ac7e77b3c31037032da66ae512f51cdea99098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:47:d5:51:c0:f6:25:63:c9:5d:5b:33:5b: e7:6b:27:98:68:af:a7:5e:5e:28:76:19:8a:3a:df: 4e:f8:b9:fa:df:79:ed:97:8b:ec:85:52:62:50:4e: 58:d5:67:73:5e:f3:d6:f5:65:e8:20:09:af:55:25: 55:3b:4c:98:a6:82:eb:df:fe:8e:8d:55:41:41:83: 25:4b:68:41:d4:2e:6e:12:34:f6:69:84:51:2c:52: 3e:1f:79:4a:1f:91:50:64:53:d2:da:a6:70:8e:29: 6f:53:ec:21:37:17:e6:63:a8:15:ba:6e:eb:67:f1: 0b:0c:6e:05:3e:1a:7f:98:ec:53:4d:6c:38:2c:d5: 8c:03:b7:6a:d0:e3:0e:00:b4:e0:4c:c0:d9:a3:b3: 2e:dc:c7:a8:83:cb:16:e6:98:6a:17:8c:dc:68:6b: 34:7e:b0:53:b1:6a:80:f7:e9:f5:61:3d:69:0f:22: 97:56:5b:1d:2e:7e:3c:6f:3a:02:dd:65:3f:4a:ae: c8:00:65:9f:1b:59:3a:f3:e2:25:89:34:dd:6d:4c: 56:54:61:8a:b2:00:2e:b0:ad:f9:0d:a6:9d:9b:08: da:e4:27:9a:82:7e:5e:16:bf:5a:a5:13:a3:9b:76: c6:1a:da:ed:99:4e:d1:e0:73:7f:55:f2:42:c2:c0: 7e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AC:7E:77:B3:C3:10:37:03:2D:A6:6A:E5:12:F5:1C:DE:A9:90:98 X509v3 Authority Key Identifier: keyid:80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:47:f1:b0:d7:f6:c7:06:08:e8:e2:b5:0d:bf:b1:be:f3:df: 22:45:88:ad:f8:b7:33:8e:99:e9:e3:f4:b2:12:1e:0e:2f:14: be:45:a9:df:19:a2:5f:61:8f:ac:4d:de:7a:31:30:10:f7:31: ed:73:f8:73:35:70:f6:87:4e:ce:60:cc:02:45:3f:1b:ed:e9: 99:35:e1:b2:ac:fa:f4:15:86:8b:dc:85:e7:c6:62:ea:1e:1b: 0b:8f:ad:47:8e:a1:a8:a9:97:01:8d:55:92:ab:09:c5:4f:64: 29:b3:d4:79:ce:c5:6f:e2:1a:8b:19:75:70:dc:74:2e:fe:c5: c9:e2:32:8d:91:2a:0b:66:2d:61:69:f4:97:7f:e9:72:fd:35: a8:6e:05:dd:1a:24:6e:17:6a:5e:fb:ae:16:71:3b:b5:72:4e: 99:dd:78:69:b4:df:19:aa:5d:e5:f6:dd:eb:88:cc:2e:15:a6: 61:60:82:4f:b9:03:db:d5:4d:df:92:a2:47:4e:1f:9a:a8:79: 0d:1a:e1:0c:c8:c1:6e:c6:04:a5:3f:57:ec:b2:1c:10:a9:38: 3a:d6:21:57:fa:48:18:95:df:37:d7:f3:b0:57:77:e1:20:30: 19:ff:ab:a9:7f:1d:bd:1a:e6:75:51:3d:9e:47:f0:c4:69:c2: 70:24:1b:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB/+3SuU2yCLsav+RGKU1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwODA2NDNmMWJhYzBiYTQ0OTkyMTc1YmFmYjZjNTk1M2M3 M2RlMmMwHhcNMjUxMjI2MDUwMDU0WhcNMjUxMjI3MDUwMDU0WjAzMTEwLwYDVQQD Eyg5NWFjN2U3N2IzYzMxMDM3MDMyZGE2NmFlNTEyZjUxY2RlYTk5MDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8JH1VHA9iVjyV1bM1vnayeYaK+n Xl4odhmKOt9O+Ln633ntl4vshVJiUE5Y1WdzXvPW9WXoIAmvVSVVO0yYpoLr3/6O jVVBQYMlS2hB1C5uEjT2aYRRLFI+H3lKH5FQZFPS2qZwjilvU+whNxfmY6gVum7r Z/ELDG4FPhp/mOxTTWw4LNWMA7dq0OMOALTgTMDZo7Mu3Meog8sW5phqF4zcaGs0 frBTsWqA9+n1YT1pDyKXVlsdLn48bzoC3WU/Sq7IAGWfG1k68+IliTTdbUxWVGGK sgAusK35Daadmwja5Ceagn5eFr9apROjm3bGGtrtmU7R4HN/VfJCwsB+xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWsfnezwxA3Ay2mauUS9RzeqZCYMB8GA1UdIwQY MBaAFICAZD8brAukSZIXW6+2xZU8c94sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0lCa1B4dXNDNlJKa2hkYnI3YkZsVHh6M2l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85NjQxNzktYzVlOC00OGMwLThiNjkt MTQ5MmE1NzFjMWYzLzEvZ0lCa1B4dXNDNlJKa2hkYnI3YkZsVHh6M2l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85NjQxNzktYzVlOC00OGMwLThiNjktMTQ5MmE1NzFjMWYz LzEvZ0lCa1B4dXNDNlJKa2hkYnI3YkZsVHh6M2l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEfxsNf2 xwYI6OK1Db+xvvPfIkWIrfi3M46Z6eP0shIeDi8UvkWp3xmiX2GPrE3eejEwEPcx 7XP4czVw9odOzmDMAkU/G+3pmTXhsqz69BWGi9yF58Zi6h4bC4+tR46hqKmXAY1V kqsJxU9kKbPUec7Fb+Iaixl1cNx0Lv7FyeIyjZEqC2YtYWn0l3/pcv01qG4F3Rok bhdqXvuuFnE7tXJOmd14abTfGapd5fbd64jMLhWmYWCCT7kD29VN35KiR04fmqh5 DRrhDMjBbsYEpT9X7LIcEKk4OtYhV/pIGJXfN9fzsFd34SAwGf+rqX8dvRrmdVE9 nkfwxGnCcCQbxQ== -----END CERTIFICATE-----Generated at Fri Dec 26 12:40:31 2025 by rpki-client