This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft File: GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json) Hash identifier: Ers0G0HDxH4mefrvdY0OxQuNx+jD2JCd/6SV3o3DOEY= Subject key identifier: E2:4B:D8:CD:5D:51:80:4A:D3:52:EE:30:AF:0D:FF:3E:55:EF:F5:A4 Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd Certificate serial: 019B30E834B468E83EDCBF665FF0249B0A82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 10:01:22 +0000 Manifest this update: Thu 18 Dec 2025 10:01:22 +0000 Manifest next update: Fri 19 Dec 2025 10:01:22 +0000 Files and hashes: 1: 8hfZpPtt0GO_DVotiG51hg4eT8w.roa (hash: aRQIDK4lxFg6x90EVDVduD7FDzfgBWcJpd7K/cuKbaE=) 2: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: ZfU8gVrZaD4NGd5B/CZpeH+NqZq1e+4w2cVZAiLAUK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:34:b4:68:e8:3e:dc:bf:66:5f:f0:24:9b:0a:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd Validity Not Before: Dec 18 10:01:22 2025 GMT Not After : Dec 19 10:01:22 2025 GMT Subject: CN=e24bd8cd5d51804ad352ee30af0dff3e55eff5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9b:85:31:40:82:64:de:c5:1c:02:a1:8e:e5: 98:f3:c1:88:8f:ba:21:14:39:ed:5f:60:7b:9f:44: 81:c9:8a:f1:db:d7:c3:89:1c:65:31:ae:90:39:72: b0:21:27:5b:08:93:11:a6:82:fe:b6:ec:a8:4b:5f: f5:8e:8a:89:dc:f9:a6:69:51:8c:a4:b4:88:d5:67: 5b:d0:b7:8e:18:a2:4b:8f:58:2a:6b:d8:35:01:0b: 43:f7:8a:57:7b:09:45:7e:74:da:ef:5b:ca:84:21: f1:03:12:e8:79:4f:98:cf:25:02:7f:ff:d3:72:af: 35:3c:da:bb:40:35:39:8e:ae:c1:55:63:58:a5:59: 33:27:0b:a1:71:5f:71:e4:3d:f2:4e:ba:f9:fe:72: e5:a3:60:19:14:a4:f4:52:b3:6d:15:27:83:be:38: 12:ab:aa:2c:03:c9:f5:d6:19:64:c6:7a:9e:f6:ea: 0c:1c:2b:1c:04:99:76:1e:0c:54:06:8d:22:10:ed: 9d:65:90:3f:11:25:21:a3:ea:9d:c9:12:fa:72:27: 6c:86:c1:61:00:d1:a0:25:c0:8a:ad:a3:4b:d0:3e: b3:97:49:9a:cf:dd:71:c8:65:b7:6a:ae:c8:12:9a: cb:19:bb:d0:55:33:a2:9c:6c:a3:ed:b5:cc:fb:4b: e5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4B:D8:CD:5D:51:80:4A:D3:52:EE:30:AF:0D:FF:3E:55:EF:F5:A4 X509v3 Authority Key Identifier: keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7a:25:fc:ba:3e:d6:58:d0:b3:45:77:fd:b4:9a:94:35:2e: 00:39:f1:73:0b:82:3f:97:e8:19:60:d5:3f:19:a7:cc:9d:df: c5:3b:d3:6d:d5:c6:ef:3a:8e:59:d9:d7:e1:71:13:89:96:89: 96:fd:7e:52:88:82:c8:d8:f2:9b:70:cd:d9:b4:5d:c3:f0:19: a2:dc:5a:88:ab:ae:b1:a4:63:87:26:0c:d4:a5:14:9c:b3:ac: c1:7d:c5:25:37:87:4e:48:7d:55:87:d8:0b:16:3d:e3:c3:f2: 70:e8:af:64:3c:31:f0:c9:8e:7f:31:d4:26:b0:f0:3d:bf:1d: 14:06:2e:0a:9f:b5:9c:46:f2:71:5b:74:b0:57:96:cf:08:25: 77:55:e9:dd:0a:be:c3:27:f8:be:cd:fc:cc:b9:1b:5f:46:bf: 04:81:13:d2:e2:f7:6e:5a:ca:5c:61:14:8e:e4:b1:c2:92:16: 81:83:6c:83:16:96:29:f1:7d:71:1e:4e:a6:74:c0:4d:a5:df: 98:c2:22:1b:83:99:47:5c:41:f7:d2:67:05:09:e3:2b:56:8a: f0:30:e1:f8:ef:8c:e8:02:e9:43:ba:08:eb:a7:e3:a2:e1:37: 8e:06:c9:d3:b5:98:fa:76:b7:ce:e7:11:d7:56:63:d8:c6:a6: 75:86:6e:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6DS0aOg+3L9mX/AkmwqCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YmNjNDA3YmYzODgxZTI5NjZhNTQ4YzQzMmIzZjA0MDE0 Njk5ZGQwHhcNMjUxMjE4MTAwMTIyWhcNMjUxMjE5MTAwMTIyWjAzMTEwLwYDVQQD EyhlMjRiZDhjZDVkNTE4MDRhZDM1MmVlMzBhZjBkZmYzZTU1ZWZmNWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JuFMUCCZN7FHAKhjuWY88GIj7oh FDntX2B7n0SByYrx29fDiRxlMa6QOXKwISdbCJMRpoL+tuyoS1/1joqJ3PmmaVGM pLSI1Wdb0LeOGKJLj1gqa9g1AQtD94pXewlFfnTa71vKhCHxAxLoeU+YzyUCf//T cq81PNq7QDU5jq7BVWNYpVkzJwuhcV9x5D3yTrr5/nLlo2AZFKT0UrNtFSeDvjgS q6osA8n11hlkxnqe9uoMHCscBJl2HgxUBo0iEO2dZZA/ESUho+qdyRL6cidshsFh ANGgJcCKraNL0D6zl0maz91xyGW3aq7IEprLGbvQVTOinGyj7bXM+0vlWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJL2M1dUYBK01LuMK8N/z5V7/WkMB8GA1UdIwQY MBaAFBm8xAe/OIHilmpUjEMrPwQBRpndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80ZWNhNWUtNDM0My00NmZlLWJiYjYt NDQ5NzdkN2FiOWNhLzEvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy80ZWNhNWUtNDM0My00NmZlLWJiYjYtNDQ5NzdkN2FiOWNh LzEvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHol/Lo+ 1ljQs0V3/bSalDUuADnxcwuCP5foGWDVPxmnzJ3fxTvTbdXG7zqOWdnX4XETiZaJ lv1+UoiCyNjym3DN2bRdw/AZotxaiKuusaRjhyYM1KUUnLOswX3FJTeHTkh9VYfY CxY948PycOivZDwx8MmOfzHUJrDwPb8dFAYuCp+1nEbycVt0sFeWzwgld1Xp3Qq+ wyf4vs38zLkbX0a/BIET0uL3blrKXGEUjuSxwpIWgYNsgxaWKfF9cR5OpnTATaXf mMIiG4OZR1xB99JnBQnjK1aK8DDh+O+M6ALpQ7oI66fjouE3jgbJ07WY+na3zucR 11Zj2MamdYZu2g== -----END CERTIFICATE-----Generated at Thu Dec 18 19:10:42 2025 by rpki-client