This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft File: GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json) Hash identifier: MouszUETRuMVKKCjA0/N4J2AID5RJyhRXk8YCbGoriY= Subject key identifier: 7D:43:15:52:1D:D8:2F:2A:8B:60:09:4B:7C:C4:4A:BB:DB:18:2B:2A Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd Certificate serial: 019AF12DA6A9B8D10907DDF99833870E578C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:31 +0000 Manifest this update: Sat 06 Dec 2025 01:01:31 +0000 Manifest next update: Sun 07 Dec 2025 01:01:31 +0000 Files and hashes: 1: 8hfZpPtt0GO_DVotiG51hg4eT8w.roa (hash: aRQIDK4lxFg6x90EVDVduD7FDzfgBWcJpd7K/cuKbaE=) 2: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: wG7ScQNFuT4nzf3VLTuN6W0mjeh+4PzQLM75SyKgtUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a6:a9:b8:d1:09:07:dd:f9:98:33:87:0e:57:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd Validity Not Before: Dec 6 01:01:31 2025 GMT Not After : Dec 7 01:01:31 2025 GMT Subject: CN=7d4315521dd82f2a8b60094b7cc44abbdb182b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:20:63:61:26:a6:ce:76:4f:c3:d8:61:7a:bc: b3:6a:36:f0:cc:6f:10:ee:b8:ba:a3:b6:cb:0f:92: 6f:c4:d5:86:2c:69:8e:cb:c2:9a:92:a2:c6:1e:4c: 71:10:21:ca:62:3b:f3:c1:82:15:3b:88:ab:1e:6b: 21:aa:0c:3c:b5:57:5c:d0:14:03:b3:0c:9c:13:89: d2:c9:52:aa:b9:95:11:5e:68:db:d5:a0:89:8a:a2: 71:1a:cd:fa:37:c4:f3:9a:4b:da:9a:f0:3f:6c:72: e0:c1:5a:6f:e6:d5:46:14:f9:23:8f:78:7e:fb:0a: ae:43:48:4b:28:9e:8d:fb:67:c3:12:11:c3:aa:9f: 54:b8:db:0b:5a:f8:0f:e4:48:34:a2:0b:92:b2:88: 55:1f:2f:e6:ee:29:2c:07:be:4d:26:b0:b3:cf:cb: 91:90:33:9f:2b:3b:ff:14:5c:7d:a2:de:3d:21:3b: ec:b4:6c:c1:af:5e:02:8f:cd:a9:6e:05:a4:0a:c3: 08:25:1e:bd:5f:e2:75:2c:53:22:88:17:7b:a7:3a: 95:a7:cf:76:d4:8e:20:21:0c:03:a0:43:fe:3f:1d: 71:fc:92:6a:e6:f4:4f:ae:f7:0e:4e:2f:cb:df:81: 91:22:d7:f5:e7:02:10:3d:c4:a0:d3:87:be:30:65: a7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:43:15:52:1D:D8:2F:2A:8B:60:09:4B:7C:C4:4A:BB:DB:18:2B:2A X509v3 Authority Key Identifier: keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:2c:8d:1e:a6:8f:0d:a1:aa:da:8f:d5:09:5b:c2:ba:1b:fc: ea:55:c2:81:39:28:e8:32:db:55:61:8c:7c:53:eb:54:9f:5c: 84:23:08:d3:56:ff:9a:fb:cb:ee:fc:e8:35:92:dc:74:fb:d1: 60:a2:f3:7f:36:66:a3:d7:a2:e5:0d:cb:8a:9c:1e:4d:b1:19: 7f:58:9a:b9:68:ad:e7:ce:4f:98:21:9c:66:75:4d:3d:e3:47: f3:bc:ee:42:52:7a:92:40:48:2b:de:9e:db:e0:8a:3c:5c:9a: e6:d1:d5:90:41:0a:18:2d:c7:7c:66:2f:3b:82:31:78:16:63: 2b:5f:f5:a1:66:1d:69:1a:c7:c4:92:cc:dc:b1:91:ef:90:ed: 3f:d5:8b:10:2a:41:8f:ea:c2:45:e7:1d:7c:43:8e:57:38:d5: 97:1d:24:5a:8f:27:0b:37:b2:85:e6:27:ed:c0:7c:58:7d:2f: f1:fe:5a:3e:09:dc:6f:fb:8b:06:42:2d:25:1d:05:df:45:18: 0d:e6:82:5e:5d:7f:dd:cf:69:7f:b2:da:aa:0f:a9:14:71:da: e6:31:a6:d5:2a:9c:13:4b:26:81:ea:b9:18:be:3c:ab:52:b8: 4e:eb:9c:77:c6:9e:ef:d8:1e:12:99:6b:39:c9:7f:6f:8c:53: 6e:10:8b:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLaapuNEJB935mDOHDleMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YmNjNDA3YmYzODgxZTI5NjZhNTQ4YzQzMmIzZjA0MDE0 Njk5ZGQwHhcNMjUxMjA2MDEwMTMxWhcNMjUxMjA3MDEwMTMxWjAzMTEwLwYDVQQD Eyg3ZDQzMTU1MjFkZDgyZjJhOGI2MDA5NGI3Y2M0NGFiYmRiMTgyYjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyBjYSamznZPw9hheryzajbwzG8Q 7ri6o7bLD5JvxNWGLGmOy8KakqLGHkxxECHKYjvzwYIVO4irHmshqgw8tVdc0BQD swycE4nSyVKquZURXmjb1aCJiqJxGs36N8TzmkvamvA/bHLgwVpv5tVGFPkjj3h+ +wquQ0hLKJ6N+2fDEhHDqp9UuNsLWvgP5Eg0oguSsohVHy/m7iksB75NJrCzz8uR kDOfKzv/FFx9ot49ITvstGzBr14Cj82pbgWkCsMIJR69X+J1LFMiiBd7pzqVp892 1I4gIQwDoEP+Px1x/JJq5vRPrvcOTi/L34GRItf15wIQPcSg04e+MGWn6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1DFVId2C8qi2AJS3zESrvbGCsqMB8GA1UdIwQY MBaAFBm8xAe/OIHilmpUjEMrPwQBRpndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80ZWNhNWUtNDM0My00NmZlLWJiYjYt NDQ5NzdkN2FiOWNhLzEvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy80ZWNhNWUtNDM0My00NmZlLWJiYjYtNDQ5NzdkN2FiOWNh LzEvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSyNHqaP DaGq2o/VCVvCuhv86lXCgTko6DLbVWGMfFPrVJ9chCMI01b/mvvL7vzoNZLcdPvR YKLzfzZmo9ei5Q3LipweTbEZf1iauWit585PmCGcZnVNPeNH87zuQlJ6kkBIK96e 2+CKPFya5tHVkEEKGC3HfGYvO4IxeBZjK1/1oWYdaRrHxJLM3LGR75DtP9WLECpB j+rCRecdfEOOVzjVlx0kWo8nCzeyheYn7cB8WH0v8f5aPgncb/uLBkItJR0F30UY DeaCXl1/3c9pf7Laqg+pFHHa5jGm1SqcE0smgeq5GL48q1K4Tuucd8ae79geEplr Ocl/b4xTbhCLmw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:36 2025 by rpki-client