This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft File: gsbbjg23mzF0_umfxqYFz1bfvck.mft (raw, json) Hash identifier: /mCMN7Q7EiJfmWIL+wh+y2JwVNzCRhjS6aW/M0JJZjU= Subject key identifier: BA:99:31:49:80:DD:85:90:3A:46:DF:34:34:15:68:ED:A3:2D:01:44 Authority key identifier: 82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9 Certificate issuer: /CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9 Certificate serial: 019AF31BF84047EA5F414B016840F31E2FDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft Manifest number: 08D5 Signing time: Sat 06 Dec 2025 10:01:27 +0000 Manifest this update: Sat 06 Dec 2025 10:01:27 +0000 Manifest next update: Sun 07 Dec 2025 10:01:27 +0000 Files and hashes: 1: gsbbjg23mzF0_umfxqYFz1bfvck.crl (hash: iVgdXvHaQX6koG1cWM0VitbeuC/gh+Q7SzeX30Ovgk4=) 2: x6jSUPrNwCyjzV69rEteWUbA8bw.roa (hash: 1zp500CT5AdJ87LI8ByrofonFUUOcrdgDO051AN4e6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:f8:40:47:ea:5f:41:4b:01:68:40:f3:1e:2f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9 Validity Not Before: Dec 6 10:01:27 2025 GMT Not After : Dec 7 10:01:27 2025 GMT Subject: CN=ba99314980dd85903a46df34341568eda32d0144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:29:b6:29:a1:33:00:13:09:a7:51:69:b8:55: bd:44:d8:25:b1:ba:95:00:e6:b4:d0:cb:6c:3f:81: fb:ce:c9:4b:73:6a:f7:57:c4:87:96:ac:ce:77:eb: cc:9a:2f:a7:4a:4c:d5:dd:66:fa:38:eb:66:a1:eb: 2f:3d:61:37:38:0b:72:c8:3b:2b:9d:6f:5a:22:44: 7b:f7:ae:d6:ab:0b:76:a6:cf:fa:b2:67:ce:0b:71: a9:a1:09:36:51:d0:ed:78:a5:f5:8a:da:10:eb:91: da:b2:4b:77:2d:49:94:18:e3:f8:19:72:1e:5d:e7: bd:b5:c0:8c:1b:fb:d2:65:75:68:35:0a:eb:92:42: 99:81:7d:69:d4:20:cb:f9:0b:c2:70:eb:87:62:cb: 85:4d:5a:a6:5b:97:e6:ab:0d:e6:4b:b2:a5:04:ff: 70:d5:b2:fc:08:99:01:e7:64:02:80:17:50:e1:e7: 95:fd:8e:aa:58:b1:22:ad:da:22:c4:21:aa:a4:46: ed:72:3f:e4:fb:b3:5f:82:47:a5:d7:78:e1:b0:39: dc:58:d8:1e:49:53:72:82:9b:b1:11:85:89:db:c6: 54:0e:d6:59:d6:1a:cb:d6:25:37:83:b4:52:26:1e: 02:e0:15:54:23:c1:3c:c1:0b:3e:b9:34:8b:9f:ed: 9b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:99:31:49:80:DD:85:90:3A:46:DF:34:34:15:68:ED:A3:2D:01:44 X509v3 Authority Key Identifier: keyid:82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:e0:82:31:4f:d6:60:08:9f:d2:47:39:0d:b3:71:77:40:0d: c0:d8:72:cb:8c:3a:12:53:2e:8e:f8:9f:a5:d3:d5:a2:bf:dc: e3:3e:34:c0:98:be:d0:4c:d0:e5:74:a0:b9:49:92:a8:ea:78: 67:dd:6d:77:f1:14:b7:02:da:b7:7a:4b:ca:99:89:ef:19:51: 32:4a:7e:ed:d9:1d:67:cd:d9:2d:bc:90:3d:f8:0f:32:b1:13: ac:ca:81:9e:00:93:b9:ff:5f:65:89:69:5c:ee:b0:47:50:ba: 38:fb:9b:c7:51:5d:4b:c0:72:7d:a2:c6:cc:13:df:4e:16:a0: ae:03:cb:f4:31:e2:78:45:af:58:e2:e8:35:bb:f1:e6:0c:d5: 7f:d4:d0:51:1a:15:d5:21:b9:67:dc:63:26:b7:e4:ac:d2:fb: 73:31:01:de:e4:5d:12:05:ab:de:f4:17:83:df:e0:3e:ce:4d: 8e:4f:90:65:bf:f0:f9:f0:75:5e:6c:85:52:5b:c5:79:7f:7c: 5f:67:10:9f:43:2e:d6:d0:32:98:4c:2a:f5:25:1f:e4:5d:15: 05:d0:66:87:ae:3f:e6:78:75:09:95:1e:8d:ec:d1:00:36:42: 90:02:c6:fb:fe:0f:49:83:28:e8:73:89:b6:12:42:5e:9f:c7: 20:4a:18:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/hAR+pfQUsBaEDzHi/aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYzZkYjhlMGRiNzliMzE3NGZlZTk5ZmM2YTYwNWNmNTZk ZmJkYzkwHhcNMjUxMjA2MTAwMTI3WhcNMjUxMjA3MTAwMTI3WjAzMTEwLwYDVQQD EyhiYTk5MzE0OTgwZGQ4NTkwM2E0NmRmMzQzNDE1NjhlZGEzMmQwMTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkym2KaEzABMJp1FpuFW9RNglsbqV AOa00MtsP4H7zslLc2r3V8SHlqzOd+vMmi+nSkzV3Wb6OOtmoesvPWE3OAtyyDsr nW9aIkR7967Wqwt2ps/6smfOC3GpoQk2UdDteKX1itoQ65Haskt3LUmUGOP4GXIe Xee9tcCMG/vSZXVoNQrrkkKZgX1p1CDL+QvCcOuHYsuFTVqmW5fmqw3mS7KlBP9w 1bL8CJkB52QCgBdQ4eeV/Y6qWLEirdoixCGqpEbtcj/k+7Nfgkel13jhsDncWNge SVNygpuxEYWJ28ZUDtZZ1hrL1iU3g7RSJh4C4BVUI8E8wQs+uTSLn+2bjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqZMUmA3YWQOkbfNDQVaO2jLQFEMB8GA1UdIwQY MBaAFILG244Nt5sxdP7pn8amBc9W373JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3NiYmpnMjNtekYwX3VtZnhxWUZ6MWJmdmNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85ZTY4NTAtMzEwYy00MjBmLWI3NTUt YmFiYTRlM2QzYzFkLzEvZ3NiYmpnMjNtekYwX3VtZnhxWUZ6MWJmdmNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC85ZTY4NTAtMzEwYy00MjBmLWI3NTUtYmFiYTRlM2QzYzFk LzEvZ3NiYmpnMjNtekYwX3VtZnhxWUZ6MWJmdmNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuCCMU/W YAif0kc5DbNxd0ANwNhyy4w6ElMujvifpdPVor/c4z40wJi+0EzQ5XSguUmSqOp4 Z91td/EUtwLat3pLypmJ7xlRMkp+7dkdZ83ZLbyQPfgPMrETrMqBngCTuf9fZYlp XO6wR1C6OPubx1FdS8ByfaLGzBPfThagrgPL9DHieEWvWOLoNbvx5gzVf9TQURoV 1SG5Z9xjJrfkrNL7czEB3uRdEgWr3vQXg9/gPs5Njk+QZb/w+fB1XmyFUlvFeX98 X2cQn0Mu1tAymEwq9SUf5F0VBdBmh64/5nh1CZUejezRADZCkALG+/4PSYMo6HOJ thJCXp/HIEoYLw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:33 2025 by rpki-client