This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft File: GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft (raw, json) Hash identifier: I/ABQ+Utx4Y7Bz0uqnUZ8dFsHq56fg5QiMcYY03z+1k= Subject key identifier: 9E:79:84:7E:B2:CC:98:0D:C8:AD:19:7F:8D:49:B5:7E:65:E6:06:3B Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86 Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886 Certificate serial: 019AF68A821713E76D5A219EF62A038094F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft Manifest number: 1768 Signing time: Sun 07 Dec 2025 02:01:03 +0000 Manifest this update: Sun 07 Dec 2025 02:01:03 +0000 Manifest next update: Mon 08 Dec 2025 02:01:03 +0000 Files and hashes: 1: 9VHnso7HKhi305msO0E0LZUPW1k.roa (hash: 04hjZ5ZRGMkvxF1mWUhoObmyRw38T7L084gMoET9a40=) 2: GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl (hash: 25UVc6TmwcHniyNg9Dde1bgZmUYFdP+bnFXV84GMGdI=) 3: Njf2TltOZrdEvD_qof8H0kAWoWg.roa (hash: DfC/KigNnFzfWnrZ4fHRxNqUPwLlnRYcAsAhEzE9YoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:82:17:13:e7:6d:5a:21:9e:f6:2a:03:80:94:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886 Validity Not Before: Dec 7 02:01:03 2025 GMT Not After : Dec 8 02:01:03 2025 GMT Subject: CN=9e79847eb2cc980dc8ad197f8d49b57e65e6063b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f2:ad:ee:dc:77:7d:be:ce:bd:6f:45:95:2e: 84:25:9a:b4:c4:95:33:71:07:e7:2c:82:75:5d:30: 6a:cb:7e:50:56:09:6d:ef:a6:db:dc:64:5c:95:d9: be:e0:be:9c:27:dc:f0:72:12:86:76:82:4d:f6:c3: 9f:9f:1f:05:f5:2f:5f:77:ad:90:62:05:cb:6e:66: 21:74:42:45:5d:ac:f7:a6:05:4e:9c:81:f4:16:bd: dc:4b:da:35:5d:46:18:06:26:20:54:0c:2b:7d:1e: 88:3e:53:49:79:a9:50:db:89:6f:01:30:b8:b0:af: 51:f9:8d:c2:31:96:3c:01:7c:6a:d9:4f:08:f8:ec: 87:a6:9a:a1:59:02:c7:d7:5b:0b:48:76:f1:aa:2c: 0b:97:53:10:9d:13:ae:bf:60:d3:83:3b:5c:39:dc: 56:ab:5a:f6:53:12:ea:f1:86:84:1b:14:39:40:51: 13:f9:c5:f3:88:4f:a4:c1:1d:25:9d:ea:87:4d:9b: 9c:e6:cf:52:7d:b8:67:f1:d7:c7:65:8f:8c:9c:68: 4e:cb:5f:88:c0:6c:39:77:f3:e9:d7:3f:30:e1:b5: 4b:e8:31:41:35:80:16:fc:4a:69:8b:68:b2:9c:36: a1:7c:76:0a:af:ae:08:92:9b:1a:61:25:b0:2e:9e: 14:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:79:84:7E:B2:CC:98:0D:C8:AD:19:7F:8D:49:B5:7E:65:E6:06:3B X509v3 Authority Key Identifier: keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fd:66:78:dd:1d:93:f3:ac:44:02:15:3f:14:c7:c4:c6:e3: 55:4e:1b:27:90:99:ec:66:c6:d0:1b:13:60:05:24:cb:f8:dc: d0:0f:35:2f:19:a0:f9:df:68:87:a6:c9:a4:8c:8f:72:6c:d3: f4:dd:04:54:a5:3d:2e:7a:b0:d8:ae:46:7e:8e:28:b3:42:21: 0b:e8:f6:ef:cc:d9:2b:86:78:cb:da:a4:d8:12:93:f0:df:02: 30:b6:bb:e2:a3:c1:c9:6f:2c:36:5a:e6:1b:e8:a3:1c:66:c5: 22:ab:9f:60:c5:bd:d2:0c:2c:08:d9:e5:b3:78:90:29:d6:f4: f6:38:dc:39:93:3f:fb:a1:94:bf:68:39:e3:c6:3b:f4:e1:9f: 93:25:b5:0c:34:9f:d7:56:34:97:4f:0b:12:fe:a0:80:35:3b: 2c:e0:58:89:48:ad:97:b3:d4:56:23:b3:8a:27:c0:37:14:19: 08:d0:8f:f7:1e:1e:b8:ba:1c:3e:4a:74:4c:1c:5c:a2:35:71: 8a:85:cc:c6:0d:69:cb:69:cf:e5:0a:75:aa:7b:f8:14:f0:d5: eb:78:ce:0b:25:25:1e:b6:af:00:82:09:39:c2:3e:b5:fb:83: 66:ee:aa:38:70:a0:f4:75:37:fb:6e:40:b6:9e:95:0b:2f:3f: be:42:2f:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ioIXE+dtWiGe9ioDgJT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZTlkYjI5YWE5MzA4ZTE3NTFiMDNkMGQ2OTk5YmI4Njg4 MDU4ODYwHhcNMjUxMjA3MDIwMTAzWhcNMjUxMjA4MDIwMTAzWjAzMTEwLwYDVQQD Eyg5ZTc5ODQ3ZWIyY2M5ODBkYzhhZDE5N2Y4ZDQ5YjU3ZTY1ZTYwNjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPKt7tx3fb7OvW9FlS6EJZq0xJUz cQfnLIJ1XTBqy35QVglt76bb3GRcldm+4L6cJ9zwchKGdoJN9sOfnx8F9S9fd62Q YgXLbmYhdEJFXaz3pgVOnIH0Fr3cS9o1XUYYBiYgVAwrfR6IPlNJealQ24lvATC4 sK9R+Y3CMZY8AXxq2U8I+OyHppqhWQLH11sLSHbxqiwLl1MQnROuv2DTgztcOdxW q1r2UxLq8YaEGxQ5QFET+cXziE+kwR0lneqHTZuc5s9Sfbhn8dfHZY+MnGhOy1+I wGw5d/Pp1z8w4bVL6DFBNYAW/Eppi2iynDahfHYKr64IkpsaYSWwLp4UcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ55hH6yzJgNyK0Zf41JtX5l5gY7MB8GA1UdIwQY MBaAFBrp2ymqkwjhdRsD0NaZm7hogFiGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYjc4MzUtZDM2NC00ZTI4LTlhODIt ZWQ5MjMxZmJhZWQxLzEvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lYjc4MzUtZDM2NC00ZTI4LTlhODItZWQ5MjMxZmJhZWQx LzEvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmv1meN0d k/OsRAIVPxTHxMbjVU4bJ5CZ7GbG0BsTYAUky/jc0A81Lxmg+d9oh6bJpIyPcmzT 9N0EVKU9Lnqw2K5Gfo4os0IhC+j278zZK4Z4y9qk2BKT8N8CMLa74qPByW8sNlrm G+ijHGbFIqufYMW90gwsCNnls3iQKdb09jjcOZM/+6GUv2g548Y79OGfkyW1DDSf 11Y0l08LEv6ggDU7LOBYiUitl7PUViOziifANxQZCNCP9x4euLocPkp0TBxcojVx ioXMxg1py2nP5Qp1qnv4FPDV63jOCyUlHravAIIJOcI+tfuDZu6qOHCg9HU3+25A tp6VCy8/vkIvwg== -----END CERTIFICATE-----Generated at Sun Dec 7 05:28:41 2025 by rpki-client