This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft File: gEbjOGAXHvbsYOvPxexayRwldXw.mft (raw, json) Hash identifier: Qswr4vH6wuPw8HWKvWkhzyTES2ZzxOoXhydpsMZW3h0= Subject key identifier: 56:09:99:C4:2E:EB:22:D8:3D:FE:56:D5:79:0B:69:0C:57:4E:4B:35 Authority key identifier: 80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C Certificate issuer: /CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c Certificate serial: 019AF163F009BC274EF11ADAF8818F982F68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft Manifest number: 08FA Signing time: Sat 06 Dec 2025 02:00:49 +0000 Manifest this update: Sat 06 Dec 2025 02:00:49 +0000 Manifest next update: Sun 07 Dec 2025 02:00:49 +0000 Files and hashes: 1: gEbjOGAXHvbsYOvPxexayRwldXw.crl (hash: l3DWrbNfqvjnoSprfQLayk/weX+rajIzeVSrfplKw+o=) 2: h1XtrgQS4y6F2QyLyCE8H5yVgX0.roa (hash: nBro9lqJpw++Y/bB5Bh7ukI6Oz6bg0ejSLEPfy18Wfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f0:09:bc:27:4e:f1:1a:da:f8:81:8f:98:2f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c Validity Not Before: Dec 6 02:00:49 2025 GMT Not After : Dec 7 02:00:49 2025 GMT Subject: CN=560999c42eeb22d83dfe56d5790b690c574e4b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:24:a9:a9:5f:05:c7:67:a7:b3:25:7b:72:d4: b5:1d:fe:12:d5:bb:e1:46:11:10:c9:dc:3f:d9:37: 49:08:d6:ba:40:15:a4:b8:f2:7a:c8:bd:27:d4:f3: 97:24:9e:4d:90:9c:2c:fe:35:81:55:df:44:45:bb: 03:52:80:4b:7c:0f:46:b2:1b:4e:2c:9a:b6:43:6f: 0e:33:c4:0c:ad:f9:8c:e8:62:5d:68:42:84:53:12: 41:cb:5c:fb:27:9a:56:49:f0:9a:6f:27:69:c4:11: 62:d1:b4:2b:b0:66:41:56:49:96:d7:3f:70:d2:a2: 85:fb:fd:e4:86:fe:6b:38:3c:c5:3b:a1:1d:4b:e7: 19:da:5f:f8:d1:f2:73:89:bd:2e:85:cb:05:2e:39: 2b:82:9e:1c:38:9e:c4:c8:dd:0f:ae:83:df:02:d7: bf:8e:d4:14:dd:53:f4:ba:9b:fd:32:98:cc:63:09: 5c:01:c4:e3:47:b4:75:c1:8b:d4:83:23:c6:32:33: a3:4c:91:27:66:7c:b8:81:24:15:33:e0:85:05:34: 0c:12:c9:a3:b9:69:44:45:f4:83:e7:92:16:48:ee: 3f:44:30:ef:a5:96:10:ce:ce:c4:52:f4:fc:63:22: 3d:87:39:c5:7e:d0:a3:a3:4d:c5:c0:d6:fe:13:d6: b1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:09:99:C4:2E:EB:22:D8:3D:FE:56:D5:79:0B:69:0C:57:4E:4B:35 X509v3 Authority Key Identifier: keyid:80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:02:0a:8f:ef:6f:62:2a:33:d2:65:68:b2:09:26:9e:9b:4e: e3:c6:68:0b:ca:54:48:76:95:81:f7:31:2d:b5:b8:00:fe:4f: 68:ac:5b:24:33:1c:a9:cc:8d:15:ff:04:ab:89:ad:2d:c0:e9: 5c:8e:f1:df:da:70:67:8a:35:03:11:fe:09:cb:86:9d:9d:70: 2b:b2:d8:a5:54:66:d2:c4:43:c9:9a:a0:01:6a:3b:0c:16:52: 03:1e:b2:05:66:b4:7a:93:b0:49:04:18:be:22:26:cd:ff:b1: c6:6b:6d:ef:5f:8d:ee:dc:04:35:08:15:09:ef:58:96:e0:e3: d7:d6:84:a2:7e:68:19:98:97:a8:67:67:c1:a2:2e:f2:bb:46: 26:4f:5c:1a:62:eb:28:0b:5a:8f:f1:11:0d:51:0a:af:70:4a: 07:e6:8e:21:c8:67:58:7f:16:61:81:40:81:67:f1:a1:67:b7: d3:8f:cb:47:25:69:cf:90:5a:6b:d1:d4:09:f4:0a:19:eb:f5: c5:bf:40:70:09:83:da:54:f0:17:36:ee:d2:39:b4:11:f6:f7: 21:c8:0b:5e:92:a5:08:16:47:59:ac:4b:6b:4d:85:39:d4:4e: 57:39:66:79:1b:b9:ed:9f:c5:27:1c:39:b8:a1:cc:73:b4:e8: 2a:82:13:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/AJvCdO8Rra+IGPmC9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNDZlMzM4NjAxNzFlZjZlYzYwZWJjZmM1ZWM1YWM5MWMy NTc1N2MwHhcNMjUxMjA2MDIwMDQ5WhcNMjUxMjA3MDIwMDQ5WjAzMTEwLwYDVQQD Eyg1NjA5OTljNDJlZWIyMmQ4M2RmZTU2ZDU3OTBiNjkwYzU3NGU0YjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSSpqV8Fx2ensyV7ctS1Hf4S1bvh RhEQydw/2TdJCNa6QBWkuPJ6yL0n1POXJJ5NkJws/jWBVd9ERbsDUoBLfA9GshtO LJq2Q28OM8QMrfmM6GJdaEKEUxJBy1z7J5pWSfCabydpxBFi0bQrsGZBVkmW1z9w 0qKF+/3khv5rODzFO6EdS+cZ2l/40fJzib0uhcsFLjkrgp4cOJ7EyN0ProPfAte/ jtQU3VP0upv9MpjMYwlcAcTjR7R1wYvUgyPGMjOjTJEnZny4gSQVM+CFBTQMEsmj uWlERfSD55IWSO4/RDDvpZYQzs7EUvT8YyI9hznFftCjo03FwNb+E9axVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYJmcQu6yLYPf5W1XkLaQxXTks1MB8GA1UdIwQY MBaAFIBG4zhgFx727GDrz8XsWskcJXV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0Viak9HQVhIdmJzWU92UHhleGF5UndsZFh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83ODhkMTAtZThkZi00ZGFjLWFhOGYt ZDM5ZmZjMTZlZjg5LzEvZ0Viak9HQVhIdmJzWU92UHhleGF5UndsZFh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83ODhkMTAtZThkZi00ZGFjLWFhOGYtZDM5ZmZjMTZlZjg5 LzEvZ0Viak9HQVhIdmJzWU92UHhleGF5UndsZFh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgIKj+9v Yioz0mVosgkmnptO48ZoC8pUSHaVgfcxLbW4AP5PaKxbJDMcqcyNFf8Eq4mtLcDp XI7x39pwZ4o1AxH+CcuGnZ1wK7LYpVRm0sRDyZqgAWo7DBZSAx6yBWa0epOwSQQY viImzf+xxmtt71+N7twENQgVCe9YluDj19aEon5oGZiXqGdnwaIu8rtGJk9cGmLr KAtaj/ERDVEKr3BKB+aOIchnWH8WYYFAgWfxoWe304/LRyVpz5Baa9HUCfQKGev1 xb9AcAmD2lTwFzbu0jm0Efb3IcgLXpKlCBZHWaxLa02FOdROVzlmeRu57Z/FJxw5 uKHMc7ToKoITdw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:08 2025 by rpki-client