This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft File: gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft (raw, json) Hash identifier: SwYl2T2eoW3A4uso4xP5LLd/fXTML+MJHIegrRUCTbs= Subject key identifier: E9:75:C2:43:36:C1:10:67:64:80:B3:62:F1:C0:3A:F2:2A:2E:FF:40 Authority key identifier: 81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20 Certificate issuer: /CN=81b65a230d6927dbac201097f949e2eaa2731220 Certificate serial: 019AF49C0460280D1E7CDF44B402B830D42E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft Manifest number: 0CFA Signing time: Sat 06 Dec 2025 17:00:56 +0000 Manifest this update: Sat 06 Dec 2025 17:00:56 +0000 Manifest next update: Sun 07 Dec 2025 17:00:56 +0000 Files and hashes: 1: gEaDDtDg3NGIpNO0dp0YVtxxUek.roa (hash: 1qHWY4UuDI5K0+nd/rC4bO24NaTlHFHg0zG3FVkfXdU=) 2: gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl (hash: 8ILbmUzF6VE4CCRaWMFUNL+EBHDY5B1vdPrp1LqCfGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:04:60:28:0d:1e:7c:df:44:b4:02:b8:30:d4:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81b65a230d6927dbac201097f949e2eaa2731220 Validity Not Before: Dec 6 17:00:56 2025 GMT Not After : Dec 7 17:00:56 2025 GMT Subject: CN=e975c24336c110676480b362f1c03af22a2eff40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:05:72:9b:d6:3c:94:ff:e0:a3:83:d6:fa: 09:c1:9a:57:1b:cc:5e:47:b4:12:a5:c4:d1:aa:7d: d4:50:f7:cc:2d:84:20:da:d5:e2:54:2e:54:c0:ed: d4:3a:64:1a:16:9c:76:29:57:7d:f0:ad:31:c9:73: 7a:eb:81:04:f9:86:83:0d:48:55:bf:fd:e5:35:03: 72:89:06:b7:88:d1:b6:c7:81:f4:0d:64:96:d0:29: 42:3c:bc:69:ff:8b:df:7e:ec:1a:1e:b4:72:6e:6c: 9e:75:8e:a0:ff:1f:d0:a3:da:e7:83:67:39:8e:6b: b4:8b:c0:3e:24:90:70:d6:93:76:19:f9:73:9b:ee: 83:53:57:e6:73:56:8a:22:8c:8d:50:dd:c9:cf:fa: fc:89:be:96:f8:0b:0c:d0:d3:e9:70:78:1b:e3:ee: ad:2b:06:3d:98:86:f7:50:fc:6c:ea:13:f4:3c:2e: e3:be:a1:b7:b0:ef:e8:a8:4b:9b:ed:72:2d:f4:db: c8:28:85:78:08:a6:d3:8d:75:6a:5e:f1:66:1b:11: b7:17:67:b2:04:51:2d:7b:3c:5f:e0:0b:b0:5f:76: aa:25:9e:6f:76:df:4e:63:4e:f7:d7:35:48:40:08: 3f:f6:5f:13:b3:f0:cf:10:4e:84:60:d4:3c:5e:fe: 1a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:75:C2:43:36:C1:10:67:64:80:B3:62:F1:C0:3A:F2:2A:2E:FF:40 X509v3 Authority Key Identifier: keyid:81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b8:b0:04:89:a6:e4:d3:f4:ce:64:34:b4:f9:ab:6e:51:07: 1e:7f:e4:f8:dc:43:8b:ed:1c:2a:4b:41:30:90:0a:9f:ae:e4: 94:f8:33:c0:22:01:35:cb:8a:2e:18:6b:fc:d5:f9:2f:32:5c: 9f:d9:42:33:44:84:c7:67:16:7c:18:52:09:0f:c0:ce:a5:9a: ae:77:f0:ec:6f:6d:6b:30:af:47:50:1d:9c:c1:0e:02:a5:2e: 4c:6a:70:c2:47:c8:37:1a:e0:08:5a:61:7c:d2:79:2b:3c:b6: 97:c7:53:90:be:a9:75:84:5d:af:d5:73:ab:e0:d0:da:7e:f4: 03:08:d0:73:99:56:05:1c:de:30:f2:fe:51:2b:4d:4c:fe:6f: 6f:db:29:79:d7:0f:04:14:6a:83:5b:1e:fc:ce:b0:4a:c7:65: 6f:46:6c:1b:28:d3:d4:56:69:01:d7:bd:e0:3e:04:16:f7:05: 16:4f:0a:62:91:18:81:70:ba:02:08:b3:fe:98:63:ae:b1:c6: b8:78:57:e2:f0:b6:e9:89:1b:c9:3d:bd:26:6a:48:23:f9:73: c8:4e:a7:5b:ab:81:f7:95:58:69:39:a9:71:07:e3:90:b9:b1: a4:f0:e3:6a:57:d5:e1:59:27:a7:76:d8:b8:dc:de:56:e4:2a: f5:7d:ad:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nARgKA0efN9EtAK4MNQuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYjY1YTIzMGQ2OTI3ZGJhYzIwMTA5N2Y5NDllMmVhYTI3 MzEyMjAwHhcNMjUxMjA2MTcwMDU2WhcNMjUxMjA3MTcwMDU2WjAzMTEwLwYDVQQD EyhlOTc1YzI0MzM2YzExMDY3NjQ4MGIzNjJmMWMwM2FmMjJhMmVmZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtoFcpvWPJT/4KOD1voJwZpXG8xe R7QSpcTRqn3UUPfMLYQg2tXiVC5UwO3UOmQaFpx2KVd98K0xyXN664EE+YaDDUhV v/3lNQNyiQa3iNG2x4H0DWSW0ClCPLxp/4vffuwaHrRybmyedY6g/x/Qo9rng2c5 jmu0i8A+JJBw1pN2Gflzm+6DU1fmc1aKIoyNUN3Jz/r8ib6W+AsM0NPpcHgb4+6t KwY9mIb3UPxs6hP0PC7jvqG3sO/oqEub7XIt9NvIKIV4CKbTjXVqXvFmGxG3F2ey BFEtezxf4AuwX3aqJZ5vdt9OY0731zVIQAg/9l8Ts/DPEE6EYNQ8Xv4aDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOl1wkM2wRBnZICzYvHAOvIqLv9AMB8GA1UdIwQY MBaAFIG2WiMNaSfbrCAQl/lJ4uqicxIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jZGVjZDItMzhkNi00MGNmLWFiMDIt ZGFiOWRjNmRjNGM5LzEvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jZGVjZDItMzhkNi00MGNmLWFiMDItZGFiOWRjNmRjNGM5 LzEvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbiwBImm 5NP0zmQ0tPmrblEHHn/k+NxDi+0cKktBMJAKn67klPgzwCIBNcuKLhhr/NX5LzJc n9lCM0SEx2cWfBhSCQ/AzqWarnfw7G9tazCvR1AdnMEOAqUuTGpwwkfINxrgCFph fNJ5Kzy2l8dTkL6pdYRdr9Vzq+DQ2n70AwjQc5lWBRzeMPL+UStNTP5vb9spedcP BBRqg1se/M6wSsdlb0ZsGyjT1FZpAde94D4EFvcFFk8KYpEYgXC6Agiz/phjrrHG uHhX4vC26YkbyT29JmpII/lzyE6nW6uB95VYaTmpcQfjkLmxpPDjalfV4Vknp3bY uNzeVuQq9X2t4w== -----END CERTIFICATE-----Generated at Sun Dec 7 02:25:49 2025 by rpki-client