This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft File: GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft (raw, json) Hash identifier: MD99ColSgd5rjUSJe1QxHQ4EIGtMYjCKA+n72yfaE/Q= Subject key identifier: 3D:CE:05:E6:DD:A1:57:4F:03:06:91:9E:EE:E4:76:23:FE:D3:DA:69 Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42 Certificate issuer: /CN=19b390b62d09950d500cd6bbbd78d0390560ec42 Certificate serial: 019B41A4D4248ED047B502FD509CD4CA63AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft Manifest number: 0661 Signing time: Sun 21 Dec 2025 16:01:19 +0000 Manifest this update: Sun 21 Dec 2025 16:01:19 +0000 Manifest next update: Mon 22 Dec 2025 16:01:19 +0000 Files and hashes: 1: 1BCQS42AU0GGH4PRx7vWlNY6UnM.roa (hash: UsPM1kz8JudOE7Cn+hyYQwficWvW1KbcDmuvAJ6iOSc=) 2: 31ag2HrgANjhnzyqvzYcA_GuDbg.roa (hash: 2P8QZCQEYwZ7T/ngNrFwmBzstV47MWzT0cHknGsfldw=) 3: GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl (hash: fWzwZHnfE1HLlz/ngaRRVYHfyZ1XMTKXSd/5+ULGYhE=) 4: xKJMBlinbdfn34LVJF69A7qgGkk.roa (hash: ghKwNM3pv6/CjqUkOttxn9jN7TiH2L3Yp/7tBiGxOUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:d4:24:8e:d0:47:b5:02:fd:50:9c:d4:ca:63:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42 Validity Not Before: Dec 21 16:01:19 2025 GMT Not After : Dec 22 16:01:19 2025 GMT Subject: CN=3dce05e6dda1574f0306919eeee47623fed3da69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:99:d9:43:69:13:ce:6d:d9:1f:d6:fe:07:cc: 5a:13:a9:61:5e:bc:06:df:16:77:af:aa:34:54:45: 88:7b:30:a7:49:ac:8d:94:0b:cf:9f:52:a5:5e:2b: 8d:ae:eb:3e:3f:d8:e9:83:66:f0:38:22:a4:0c:d9: 3f:43:78:f6:58:ab:07:ca:30:f4:09:cc:56:0e:cc: 78:15:5d:28:17:a6:71:8b:2f:8b:c1:c1:14:cc:19: 4d:9b:5b:be:a7:bd:ac:4c:a1:63:e8:85:a6:bf:64: 80:f2:5a:ad:6a:42:e0:b8:53:e8:6e:d3:b5:d2:ba: 71:d4:e5:8a:7d:0a:6c:ad:b7:ca:fe:28:32:4d:75: 98:d8:a7:ec:da:c1:3a:a6:85:02:54:92:e8:ef:c0: 83:4d:9c:db:40:21:98:a9:22:ef:e1:1e:1e:34:26: f4:0f:b6:3b:8d:d5:9e:31:eb:9b:c9:06:37:b5:49: 3e:48:22:49:5a:0c:d7:66:fb:28:df:41:80:11:30: 0f:53:df:17:8b:48:e5:cc:fb:c7:2f:5b:fc:17:99: a4:dd:3d:77:f1:d0:97:c8:59:e2:88:66:66:11:5e: 3e:40:35:11:b7:f5:09:05:2a:c3:f7:f1:5a:65:da: fb:bd:7c:21:3d:22:a4:a9:ba:07:55:3e:52:b9:be: 60:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CE:05:E6:DD:A1:57:4F:03:06:91:9E:EE:E4:76:23:FE:D3:DA:69 X509v3 Authority Key Identifier: keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:fe:0d:f5:44:49:56:d4:fc:34:cd:29:9f:79:d9:f8:cb:a7: f9:44:0f:78:1c:b0:58:bd:e1:14:c9:99:07:86:0b:13:f8:cb: 2e:24:41:f9:b5:8d:bc:63:97:61:a5:94:87:d2:1f:f6:2d:d6: 42:36:32:09:96:38:61:a5:26:5a:8e:a0:b3:71:c5:6b:cc:54: 7e:3b:d1:07:0e:b2:28:92:28:77:51:84:d3:2f:87:a3:17:1c: 6b:62:34:5a:85:b9:ef:58:83:f1:8c:9f:bd:53:21:a4:4e:fe: de:46:e3:fc:45:b7:01:34:d5:b5:72:17:df:7f:01:3f:02:b3: e5:92:a1:46:91:7c:34:d4:9c:24:12:35:3f:69:37:62:83:30: 73:34:6e:1e:78:85:61:5c:7f:cd:0d:66:47:40:b1:39:fb:61: 60:70:54:11:f3:af:b2:6b:d4:d6:07:5c:fa:ad:84:68:0d:cd: 8c:4c:7c:af:f5:a4:98:a8:aa:cf:50:e2:fb:08:0c:f7:5f:d2: fc:c6:e7:71:3e:02:1c:c9:bb:3c:5b:31:5c:22:48:c7:27:bc: 0a:d3:6d:e8:ae:b4:76:d7:24:bf:f9:00:5f:2d:26:88:21:11: fb:f6:50:78:3e:e4:ef:ab:9c:2c:ef:47:e6:6e:a8:95:d0:47: c7:de:b7:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpNQkjtBHtQL9UJzUymOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YjM5MGI2MmQwOTk1MGQ1MDBjZDZiYmJkNzhkMDM5MDU2 MGVjNDIwHhcNMjUxMjIxMTYwMTE5WhcNMjUxMjIyMTYwMTE5WjAzMTEwLwYDVQQD EygzZGNlMDVlNmRkYTE1NzRmMDMwNjkxOWVlZWU0NzYyM2ZlZDNkYTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZnZQ2kTzm3ZH9b+B8xaE6lhXrwG 3xZ3r6o0VEWIezCnSayNlAvPn1KlXiuNrus+P9jpg2bwOCKkDNk/Q3j2WKsHyjD0 CcxWDsx4FV0oF6Zxiy+LwcEUzBlNm1u+p72sTKFj6IWmv2SA8lqtakLguFPobtO1 0rpx1OWKfQpsrbfK/igyTXWY2Kfs2sE6poUCVJLo78CDTZzbQCGYqSLv4R4eNCb0 D7Y7jdWeMeubyQY3tUk+SCJJWgzXZvso30GAETAPU98Xi0jlzPvHL1v8F5mk3T13 8dCXyFniiGZmEV4+QDURt/UJBSrD9/FaZdr7vXwhPSKkqboHVT5Sub5gdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3OBebdoVdPAwaRnu7kdiP+09ppMB8GA1UdIwQY MBaAFBmzkLYtCZUNUAzWu7140DkFYOxCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2Mt MTQ0ZDc0NzNlYTU5LzEvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2MtMTQ0ZDc0NzNlYTU5 LzEvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/4N9URJ VtT8NM0pn3nZ+Mun+UQPeBywWL3hFMmZB4YLE/jLLiRB+bWNvGOXYaWUh9If9i3W QjYyCZY4YaUmWo6gs3HFa8xUfjvRBw6yKJIod1GE0y+Hoxcca2I0WoW571iD8Yyf vVMhpE7+3kbj/EW3ATTVtXIX338BPwKz5ZKhRpF8NNScJBI1P2k3YoMwczRuHniF YVx/zQ1mR0CxOfthYHBUEfOvsmvU1gdc+q2EaA3NjEx8r/WkmKiqz1Di+wgM91/S /MbncT4CHMm7PFsxXCJIxye8CtNt6K60dtckv/kAXy0miCER+/ZQeD7k76ucLO9H 5m6oldBHx963Bg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:09:05 2025 by rpki-client