This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft File: GbsyomYvkFwNi_JH7ODbxnmha4Q.mft (raw, json) Hash identifier: B+8jE8JEJUocwUI+S6wsG/rB1MYAxDlFv6xBK/1CCU8= Subject key identifier: 63:48:AC:8E:C1:44:01:D0:E4:78:F5:FF:13:97:88:BC:CC:50:15:DF Authority key identifier: 19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84 Certificate issuer: /CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84 Certificate serial: 019AF208E02FF76DEE22C218AD7173BCAAEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft Manifest number: 0482 Signing time: Sat 06 Dec 2025 05:00:59 +0000 Manifest this update: Sat 06 Dec 2025 05:00:59 +0000 Manifest next update: Sun 07 Dec 2025 05:00:59 +0000 Files and hashes: 1: GbsyomYvkFwNi_JH7ODbxnmha4Q.crl (hash: WDFsuX2HMi1Mgmz0REDGBRtlwlTdE/ku1GdbH+W3lF0=) 2: rm-ctcMQkJoTJnbIDJV3c0v42nw.roa (hash: 0ZXTmxuKHi0QHBCAQY3aiWs6mf8IDw4nbeNjb8cUWcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e0:2f:f7:6d:ee:22:c2:18:ad:71:73:bc:aa:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84 Validity Not Before: Dec 6 05:00:59 2025 GMT Not After : Dec 7 05:00:59 2025 GMT Subject: CN=6348ac8ec14401d0e478f5ff139788bccc5015df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:e9:47:1d:de:e6:45:99:4c:3e:31:0a:4c: cb:59:3e:f6:8f:e0:4f:1e:71:ca:d7:cc:08:23:91: 0a:d7:99:75:52:57:64:f2:54:2d:af:2a:ca:8f:45: 12:fa:7a:3f:09:00:a5:b6:1c:76:96:46:ab:c6:89: 17:01:28:15:f7:06:73:ab:64:3e:32:99:35:84:86: 97:3a:e7:d9:1c:46:45:98:7a:a2:84:39:e0:96:97: 5f:6d:8c:e2:ba:24:36:1e:85:6d:29:76:fe:72:80: e2:f1:e7:2f:5f:2b:8b:e7:7d:13:d7:da:7d:14:d7: 84:23:1e:5d:8a:4a:15:fe:62:d1:38:94:2d:06:5a: ba:a2:52:f3:c9:ff:41:fd:e1:ca:1b:19:1f:83:3f: dd:f8:25:a9:a3:85:5b:43:cf:8e:cb:26:e9:36:8a: d3:98:00:a3:32:e6:a4:e7:ea:31:13:ba:07:df:48: 91:8a:49:d9:76:04:52:4f:37:27:6b:b6:47:87:22: f9:8e:ba:a5:af:da:4e:18:ed:71:b2:bf:28:a6:ad: 02:44:20:b7:18:b2:84:3f:28:50:b5:65:7b:f0:54: c9:9f:52:17:fb:d1:dc:c3:2b:99:cd:8c:00:8b:13: 99:a9:b1:0d:21:1c:ff:eb:24:bc:37:ab:54:3b:cc: 12:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:48:AC:8E:C1:44:01:D0:E4:78:F5:FF:13:97:88:BC:CC:50:15:DF X509v3 Authority Key Identifier: keyid:19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ef:9a:16:81:c2:be:77:10:69:bf:c5:3c:f6:a7:9d:24:0b: c2:84:40:47:09:03:6c:c5:47:59:b6:1b:1d:89:19:d7:ef:b6: 54:ec:ef:40:2c:23:76:d6:2b:e7:65:08:86:8b:50:a7:4b:62: 8d:31:c7:0f:01:b7:a0:c5:5f:23:e1:d2:09:08:1f:a9:5f:f6: a3:f8:3e:af:49:23:70:34:97:65:db:c6:62:12:f7:51:78:77: 6d:9b:b7:8d:9b:06:e3:59:33:c4:4e:fa:ee:e7:fe:b6:57:54: 0d:dd:47:24:83:ab:9e:f3:f6:7c:e1:b9:cc:82:9c:50:e3:76: a7:2f:4f:fc:75:89:35:76:af:31:77:7d:ef:04:7a:5b:6a:7d: 51:25:35:dc:c3:d9:44:e7:3d:77:9c:d6:e0:6c:84:89:cf:d1: 49:b0:a3:7c:6f:fd:8e:ce:63:37:9a:be:e9:ca:84:81:be:44: fc:3f:ce:08:81:4a:26:e9:fb:07:89:58:71:68:d0:39:ba:ad: db:75:54:71:64:3d:eb:eb:a1:c8:bf:9c:f8:08:87:95:ca:0b: 68:4b:6b:cb:a7:85:65:96:9e:81:75:29:22:0d:e3:92:23:c7: f6:65:48:b8:31:10:90:9f:40:07:1d:09:e5:c1:63:3e:30:3a: 44:77:96:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOAv923uIsIYrXFzvKruMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YmIzMmEyNjYyZjkwNWMwZDhiZjI0N2VjZTBkYmM2Nzlh MTZiODQwHhcNMjUxMjA2MDUwMDU5WhcNMjUxMjA3MDUwMDU5WjAzMTEwLwYDVQQD Eyg2MzQ4YWM4ZWMxNDQwMWQwZTQ3OGY1ZmYxMzk3ODhiY2NjNTAxNWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoLpRx3e5kWZTD4xCkzLWT72j+BP HnHK18wII5EK15l1Uldk8lQtryrKj0US+no/CQClthx2lkarxokXASgV9wZzq2Q+ Mpk1hIaXOufZHEZFmHqihDnglpdfbYziuiQ2HoVtKXb+coDi8ecvXyuL530T19p9 FNeEIx5dikoV/mLROJQtBlq6olLzyf9B/eHKGxkfgz/d+CWpo4VbQ8+OyybpNorT mACjMuak5+oxE7oH30iRiknZdgRSTzcna7ZHhyL5jrqlr9pOGO1xsr8opq0CRCC3 GLKEPyhQtWV78FTJn1IX+9HcwyuZzYwAixOZqbENIRz/6yS8N6tUO8wSbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNIrI7BRAHQ5Hj1/xOXiLzMUBXfMB8GA1UdIwQY MBaAFBm7MqJmL5BcDYvyR+zg28Z5oWuEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JzeW9tWXZrRndOaV9KSDdPRGJ4bm1oYTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jNjhlMzAtM2FhMS00NDM1LWE4OWIt YzQyMTRjNzljOGI4LzEvR2JzeW9tWXZrRndOaV9KSDdPRGJ4bm1oYTRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jNjhlMzAtM2FhMS00NDM1LWE4OWItYzQyMTRjNzljOGI4 LzEvR2JzeW9tWXZrRndOaV9KSDdPRGJ4bm1oYTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgO+aFoHC vncQab/FPPannSQLwoRARwkDbMVHWbYbHYkZ1++2VOzvQCwjdtYr52UIhotQp0ti jTHHDwG3oMVfI+HSCQgfqV/2o/g+r0kjcDSXZdvGYhL3UXh3bZu3jZsG41kzxE76 7uf+tldUDd1HJIOrnvP2fOG5zIKcUON2py9P/HWJNXavMXd97wR6W2p9USU13MPZ ROc9d5zW4GyEic/RSbCjfG/9js5jN5q+6cqEgb5E/D/OCIFKJun7B4lYcWjQObqt 23VUcWQ96+uhyL+c+AiHlcoLaEtry6eFZZaegXUpIg3jkiPH9mVIuDEQkJ9ABx0J 5cFjPjA6RHeWXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:30:11 2025 by rpki-client