This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft File: gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft (raw, json) Hash identifier: XYUfvkh4NwKULH0hUy/yq3pqFuKutWaieroMi0yXwA4= Subject key identifier: 2B:67:8B:FF:97:B9:28:B0:12:C7:BA:00:65:A1:27:7D:C0:BC:D7:67 Authority key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33 Certificate issuer: /CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233 Certificate serial: 019AF209599FD229632A8ED2A738173D5B18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft Manifest number: 0AD5 Signing time: Sat 06 Dec 2025 05:01:30 +0000 Manifest this update: Sat 06 Dec 2025 05:01:30 +0000 Manifest next update: Sun 07 Dec 2025 05:01:30 +0000 Files and hashes: 1: RKmtjmx8dGmZLS6fAJiBKQnORQs.roa (hash: uAM4Z/WN2c7W0xTj1SOSxZNG72uS1HvTkZghAtYIMtE=) 2: gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl (hash: BKlW6h0ZziI0luvx4a1fiR0Y2hQSDahhwEwT07uDPiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:59:9f:d2:29:63:2a:8e:d2:a7:38:17:3d:5b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233 Validity Not Before: Dec 6 05:01:30 2025 GMT Not After : Dec 7 05:01:30 2025 GMT Subject: CN=2b678bff97b928b012c7ba0065a1277dc0bcd767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ba:94:8d:45:e5:65:ff:07:46:31:3d:1e:7a: c8:da:7d:75:18:bb:58:87:dd:ca:df:e8:e2:eb:9f: 20:82:8d:2a:e3:3d:36:07:98:fa:ed:0f:ab:ec:60: 71:6f:76:80:d2:f1:3f:1a:08:c2:28:39:4c:d6:0b: af:dc:05:7e:d4:7e:ee:ed:91:21:70:4a:31:6f:78: 5b:0a:a7:09:3a:98:21:2c:d4:63:33:a6:fb:bc:16: bb:17:42:28:62:b3:58:0b:09:1f:a8:cb:56:5a:70: 29:5f:55:24:91:95:11:62:ad:b9:0f:48:1a:54:a2: 15:54:c3:74:a9:2c:02:e7:70:9e:b8:90:86:c0:bf: 7a:79:c8:8e:91:4a:82:dc:29:94:95:09:bd:23:4c: ac:0d:2b:56:d4:7a:1c:ee:ce:5f:a2:c6:55:f9:27: 44:50:57:1b:2c:41:dc:60:e2:ad:84:e0:14:e3:16: f4:6d:34:79:a4:4c:a6:78:87:82:fe:21:e0:6c:e6: 94:6d:fc:88:14:92:a5:49:dd:a0:33:f3:f7:0f:14: 31:02:32:fb:be:5c:d3:18:a5:a8:b6:70:e3:1f:69: 1e:4c:ba:dd:62:e3:12:3d:4e:f6:a0:54:8b:56:22: 38:a1:1d:de:c0:42:41:3c:7b:a0:4e:c4:a7:3f:05: ef:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:67:8B:FF:97:B9:28:B0:12:C7:BA:00:65:A1:27:7D:C0:BC:D7:67 X509v3 Authority Key Identifier: keyid:82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:51:46:23:f5:77:89:b9:d8:e0:32:7a:8a:0b:f6:63:ae:6e: 8b:6a:4a:88:dc:2e:fe:0c:da:83:5a:da:1f:04:0b:15:51:05: 2c:87:91:61:f9:1a:02:dc:8f:90:10:da:85:8b:b8:b8:0b:52: 7b:51:08:57:27:9b:8e:0f:fd:a1:8e:a5:27:4b:58:9a:0c:ea: 60:dd:50:8f:a1:5f:8e:0f:86:15:a3:ba:42:03:52:60:a0:36: f5:a4:00:0d:3d:ab:48:60:67:e6:91:21:f0:74:0f:c9:65:58: 5e:36:f1:f3:e5:05:ae:5d:c9:3b:17:64:ae:33:c1:c6:a5:31: a9:dd:c1:10:fc:b0:a4:03:c6:58:c7:91:55:9a:a4:41:e8:35: d8:73:1b:32:2a:57:91:7f:4e:99:57:79:b7:a4:56:6e:3d:be: 2e:d6:b5:bf:10:ab:0f:e5:70:4b:d6:ee:75:8c:ba:ab:db:7d: be:71:b0:58:d5:19:db:b0:42:44:a8:96:31:fe:f5:1e:82:12: 38:75:6f:5b:60:99:7e:49:fc:91:39:d9:3c:0e:85:b8:86:c8: 32:75:2c:31:ac:03:1e:e7:80:21:a7:e4:81:07:e6:a2:0e:f0: cc:e8:c8:2e:cf:db:a1:f3:3a:f4:a4:4f:53:3e:74:5c:8f:88: c7:bc:4d:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVmf0iljKo7SpzgXPVsYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjFhNDJiZjIyNjRjYjVlYmNlYzZlMTkwZDAyYTZkNTUz YjYyMzMwHhcNMjUxMjA2MDUwMTMwWhcNMjUxMjA3MDUwMTMwWjAzMTEwLwYDVQQD EygyYjY3OGJmZjk3YjkyOGIwMTJjN2JhMDA2NWExMjc3ZGMwYmNkNzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubqUjUXlZf8HRjE9HnrI2n11GLtY h93K3+ji658ggo0q4z02B5j67Q+r7GBxb3aA0vE/GgjCKDlM1guv3AV+1H7u7ZEh cEoxb3hbCqcJOpghLNRjM6b7vBa7F0IoYrNYCwkfqMtWWnApX1UkkZURYq25D0ga VKIVVMN0qSwC53CeuJCGwL96eciOkUqC3CmUlQm9I0ysDStW1Hoc7s5fosZV+SdE UFcbLEHcYOKthOAU4xb0bTR5pEymeIeC/iHgbOaUbfyIFJKlSd2gM/P3DxQxAjL7 vlzTGKWotnDjH2keTLrdYuMSPU72oFSLViI4oR3ewEJBPHugTsSnPwXvPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtni/+XuSiwEse6AGWhJ33AvNdnMB8GA1UdIwQY MBaAFIJhpCvyJky1687G4ZDQKm1VO2IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21Ha0tfSW1UTFhyenNiaGtOQXFiVlU3WWpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81NGI2NzgtYjJmZS00NDlkLWIzMjYt ZGNhZTcwZjFjOTNiLzEvZ21Ha0tfSW1UTFhyenNiaGtOQXFiVlU3WWpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS81NGI2NzgtYjJmZS00NDlkLWIzMjYtZGNhZTcwZjFjOTNi LzEvZ21Ha0tfSW1UTFhyenNiaGtOQXFiVlU3WWpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlFGI/V3 ibnY4DJ6igv2Y65ui2pKiNwu/gzag1raHwQLFVEFLIeRYfkaAtyPkBDahYu4uAtS e1EIVyebjg/9oY6lJ0tYmgzqYN1Qj6Ffjg+GFaO6QgNSYKA29aQADT2rSGBn5pEh 8HQPyWVYXjbx8+UFrl3JOxdkrjPBxqUxqd3BEPywpAPGWMeRVZqkQeg12HMbMipX kX9OmVd5t6RWbj2+Lta1vxCrD+VwS9budYy6q9t9vnGwWNUZ27BCRKiWMf71HoIS OHVvW2CZfkn8kTnZPA6FuIbIMnUsMawDHueAIafkgQfmog7wzOjILs/bofM69KRP Uz50XI+Ix7xNFg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:30 2025 by rpki-client