This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft File: GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft (raw, json) Hash identifier: JXjDcL2YAOK1JwjYRGqO4SD+kg3bDA8kdg++cpfaUq4= Subject key identifier: EF:22:5F:08:23:28:0E:8B:44:BD:9E:57:7A:E1:E5:B6:5F:31:AF:5F Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42 Certificate issuer: /CN=19b390b62d09950d500cd6bbbd78d0390560ec42 Certificate serial: 019AF464C558D5DE49E48A85055F4F97EE71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft Manifest number: 0639 Signing time: Sat 06 Dec 2025 16:00:36 +0000 Manifest this update: Sat 06 Dec 2025 16:00:36 +0000 Manifest next update: Sun 07 Dec 2025 16:00:36 +0000 Files and hashes: 1: 1BCQS42AU0GGH4PRx7vWlNY6UnM.roa (hash: UsPM1kz8JudOE7Cn+hyYQwficWvW1KbcDmuvAJ6iOSc=) 2: 31ag2HrgANjhnzyqvzYcA_GuDbg.roa (hash: 2P8QZCQEYwZ7T/ngNrFwmBzstV47MWzT0cHknGsfldw=) 3: GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl (hash: Ee1vbmbWjgt1a+Vy0Uy2xvV9U25dZV0FaK1Zoes7peI=) 4: xKJMBlinbdfn34LVJF69A7qgGkk.roa (hash: ghKwNM3pv6/CjqUkOttxn9jN7TiH2L3Yp/7tBiGxOUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:c5:58:d5:de:49:e4:8a:85:05:5f:4f:97:ee:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42 Validity Not Before: Dec 6 16:00:36 2025 GMT Not After : Dec 7 16:00:36 2025 GMT Subject: CN=ef225f0823280e8b44bd9e577ae1e5b65f31af5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e3:43:02:c7:7d:2b:1a:62:7d:34:e6:96:3a: b5:cc:62:b2:f0:eb:6a:f4:be:b1:b2:6b:12:8a:25: da:fe:d8:50:6b:62:ce:64:c9:3e:15:a6:61:e4:bb: 46:84:3e:67:17:e5:5a:b4:23:a4:51:e8:44:a1:d7: ce:d6:47:4c:85:31:f2:3e:b4:f8:c4:46:c6:80:6c: 67:03:1b:f0:ce:36:1d:ad:fb:f3:6f:48:15:46:ee: f8:8b:80:d4:a7:be:6e:55:26:09:83:81:fd:60:5c: b7:9a:a7:76:4d:ad:ff:88:28:0c:1f:64:5b:45:7f: c9:09:26:cb:ab:2e:bf:4e:c3:da:ad:61:97:98:81: ff:2c:66:e7:6f:f7:28:55:df:b5:15:cc:12:fe:ee: e1:ba:91:5e:6d:a8:db:ab:69:fb:a3:29:89:de:6c: 2d:cc:d0:2c:5f:ea:7b:d3:97:cb:91:f5:86:cb:c3: 3a:d5:90:0a:fe:d8:a1:bf:92:2f:4a:96:63:a9:82: f7:bb:98:47:4d:a3:28:10:ce:80:99:56:40:6e:bd: 9d:8d:b7:17:65:d2:cb:f6:83:17:35:56:a7:c0:d0: 48:83:fe:07:86:7a:a2:d1:90:24:79:71:a4:9e:90: 15:57:96:94:d5:aa:d2:54:8c:fd:6c:0b:3d:9d:8c: 41:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:22:5F:08:23:28:0E:8B:44:BD:9E:57:7A:E1:E5:B6:5F:31:AF:5F X509v3 Authority Key Identifier: keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ed:13:a5:d0:f2:91:2f:5b:d5:c6:ef:81:17:1f:bf:a3:be: eb:cf:a9:58:b8:69:1f:6d:93:bd:ab:22:b7:d6:ba:74:35:47: 76:c9:1f:f2:5d:dd:95:1a:66:e7:27:a5:d9:b2:1c:3f:56:7b: c9:41:09:3f:06:d3:41:47:64:4c:a7:09:ce:a8:a9:16:4f:7d: 4d:68:49:47:0e:2d:f5:da:aa:5b:b1:62:55:6a:fc:a2:58:0f: f8:22:1d:67:52:a6:0c:b8:7e:f5:90:40:14:5f:92:31:dc:2f: 75:31:87:c8:9e:22:ba:2a:fc:eb:a7:14:f2:61:ff:cd:db:2f: 72:89:ad:17:fd:b9:c4:5c:ff:c2:1a:c7:de:36:2a:05:cf:8b: 61:ba:c6:15:48:4c:bc:cc:ae:5a:ba:82:d0:1e:78:2e:20:ea: b3:5d:17:d6:1e:d2:91:f7:82:7f:a6:d9:d2:a3:06:7e:96:d2: 3a:34:60:fc:2f:52:18:1b:c2:a3:23:69:8e:7f:73:9c:38:d6: e4:25:b1:05:0f:f0:06:57:0a:06:73:45:42:02:0d:8c:65:3d: aa:a1:50:5b:13:63:91:bf:28:55:64:8d:87:5b:5f:bd:0f:03: e9:6d:47:44:7d:21:e6:57:9e:fa:01:43:d5:5e:b2:5a:42:94: 0c:e6:19:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZMVY1d5J5IqFBV9Pl+5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YjM5MGI2MmQwOTk1MGQ1MDBjZDZiYmJkNzhkMDM5MDU2 MGVjNDIwHhcNMjUxMjA2MTYwMDM2WhcNMjUxMjA3MTYwMDM2WjAzMTEwLwYDVQQD EyhlZjIyNWYwODIzMjgwZThiNDRiZDllNTc3YWUxZTViNjVmMzFhZjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ONDAsd9KxpifTTmljq1zGKy8Otq 9L6xsmsSiiXa/thQa2LOZMk+FaZh5LtGhD5nF+VatCOkUehEodfO1kdMhTHyPrT4 xEbGgGxnAxvwzjYdrfvzb0gVRu74i4DUp75uVSYJg4H9YFy3mqd2Ta3/iCgMH2Rb RX/JCSbLqy6/TsParWGXmIH/LGbnb/coVd+1FcwS/u7hupFebajbq2n7oymJ3mwt zNAsX+p705fLkfWGy8M61ZAK/tihv5IvSpZjqYL3u5hHTaMoEM6AmVZAbr2djbcX ZdLL9oMXNVanwNBIg/4Hhnqi0ZAkeXGknpAVV5aU1arSVIz9bAs9nYxB1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8iXwgjKA6LRL2eV3rh5bZfMa9fMB8GA1UdIwQY MBaAFBmzkLYtCZUNUAzWu7140DkFYOxCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2Mt MTQ0ZDc0NzNlYTU5LzEvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2MtMTQ0ZDc0NzNlYTU5 LzEvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPO0TpdDy kS9b1cbvgRcfv6O+68+pWLhpH22Tvasit9a6dDVHdskf8l3dlRpm5yel2bIcP1Z7 yUEJPwbTQUdkTKcJzqipFk99TWhJRw4t9dqqW7FiVWr8olgP+CIdZ1KmDLh+9ZBA FF+SMdwvdTGHyJ4iuir866cU8mH/zdsvcomtF/25xFz/whrH3jYqBc+LYbrGFUhM vMyuWrqC0B54LiDqs10X1h7SkfeCf6bZ0qMGfpbSOjRg/C9SGBvCoyNpjn9znDjW 5CWxBQ/wBlcKBnNFQgINjGU9qqFQWxNjkb8oVWSNh1tfvQ8D6W1HRH0h5lee+gFD 1V6yWkKUDOYZXw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:56 2025 by rpki-client