This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft File: GbvChJjrFpWQsGmgBUFMQaF5skA.mft (raw, json) Hash identifier: +ZmW7WXV32ZOmK9bZHONrl7Ap9L9VZY8H41+kL9kkG0= Subject key identifier: 3C:B8:84:12:92:38:35:9D:C9:3E:2A:57:01:BC:D1:D5:22:01:C0:A2 Authority key identifier: 19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40 Certificate issuer: /CN=19bbc28498eb169590b069a005414c41a179b240 Certificate serial: 019AF31B9D81EA67F456A7AE4D4DA4274A80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:01:04 +0000 Manifest this update: Sat 06 Dec 2025 10:01:04 +0000 Manifest next update: Sun 07 Dec 2025 10:01:04 +0000 Files and hashes: 1: GbvChJjrFpWQsGmgBUFMQaF5skA.crl (hash: KVpWG+oWep43xJ6KAkNzZYj3XJNvv+EfAbpGz++B4mc=) 2: qMZKQsm86k3APveafN2OHKFVdlc.roa (hash: StEeWkUrbwVbFDe+g7Oaxogo7FQ3MGb8RnH0U7tSpHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:9d:81:ea:67:f4:56:a7:ae:4d:4d:a4:27:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19bbc28498eb169590b069a005414c41a179b240 Validity Not Before: Dec 6 10:01:04 2025 GMT Not After : Dec 7 10:01:04 2025 GMT Subject: CN=3cb884129238359dc93e2a5701bcd1d52201c0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:eb:f2:08:3f:c2:0b:75:65:07:4f:0b:c8:13: 7c:43:4e:47:f1:ed:c4:ca:bc:9b:0f:3c:fa:f4:18: 65:be:97:c6:72:e1:66:b7:f0:24:12:48:f2:7f:6a: 22:e4:f5:66:17:ad:65:4f:9d:4d:cc:ac:c6:5a:0a: f0:49:bb:2b:e1:20:28:6f:fc:b7:c5:40:f0:2f:a3: 48:9d:c4:5c:8f:a4:87:27:4c:2b:0e:e6:bb:09:0f: 3c:7a:3c:38:66:5e:16:0d:2a:77:fc:f9:4e:b4:b5: ac:ae:d9:e0:93:6f:80:6a:b6:aa:46:19:2c:ed:e2: 73:04:83:db:f4:48:ac:af:34:ee:69:1e:6d:6b:8f: dd:d3:73:41:bf:f1:9f:1e:cc:ac:2f:21:46:97:20: 09:33:c8:5b:cf:21:53:cc:36:18:c8:a8:5d:8f:25: 37:3d:ca:fd:53:92:8a:7e:09:ee:f1:95:a2:7f:5a: 19:89:aa:e0:63:c6:56:f4:be:22:2a:57:e7:e5:03: dc:c9:7e:da:36:11:40:91:71:4a:54:fc:bc:dd:3e: 9b:8b:c0:5a:aa:d4:6f:fd:07:c0:0a:8a:17:07:9e: 31:05:10:d4:67:e9:fd:5b:5c:4a:6e:37:7e:f6:24: af:3f:b9:af:cd:96:28:d7:3d:9f:cf:4e:97:71:43: 51:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B8:84:12:92:38:35:9D:C9:3E:2A:57:01:BC:D1:D5:22:01:C0:A2 X509v3 Authority Key Identifier: keyid:19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0a:04:17:e8:32:d7:c3:a2:fb:20:bb:a1:23:d6:05:57:24: c8:01:78:99:44:3e:0f:bb:70:2b:e0:76:be:63:44:7d:75:66: b2:c0:0c:f2:f2:78:07:ee:9f:c1:8f:fa:da:7d:c1:df:d5:f5: 98:fb:8e:d9:58:25:a2:f0:a5:02:13:3e:a9:7e:ee:4d:fa:26: ea:c8:3e:84:b5:73:27:dd:a5:eb:7a:cb:7d:8f:cd:ac:d3:78: 55:45:ae:0c:e3:a9:0a:12:97:2f:0c:68:56:3d:be:05:16:0e: f3:f0:95:b7:9e:3b:86:dc:2e:0d:f7:e1:f3:c9:4b:b1:a3:f7: f3:16:1b:4c:b3:7e:18:ee:50:4f:76:86:82:18:f2:07:68:f8: 0e:a8:48:a1:e2:d3:fc:1a:15:0b:c2:ea:28:83:3f:bd:51:b7: 31:1e:f4:38:19:15:9e:fb:c8:f5:8c:24:20:1a:c6:6f:91:69: 69:b6:c9:c5:09:62:8b:9d:5d:c2:f0:6a:f1:51:ab:9d:f2:df: 41:51:eb:b0:38:38:e2:19:20:e4:c4:50:4a:04:5a:03:5f:60: ff:fa:b2:a5:cc:7e:27:51:53:79:4f:7e:3a:fd:37:2a:8b:23: ab:65:9c:4b:28:fa:79:64:58:7c:e6:17:1c:0d:dc:4e:3a:60: cd:83:d9:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG52B6mf0VqeuTU2kJ0qAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YmJjMjg0OThlYjE2OTU5MGIwNjlhMDA1NDE0YzQxYTE3 OWIyNDAwHhcNMjUxMjA2MTAwMTA0WhcNMjUxMjA3MTAwMTA0WjAzMTEwLwYDVQQD EygzY2I4ODQxMjkyMzgzNTlkYzkzZTJhNTcwMWJjZDFkNTIyMDFjMGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuvyCD/CC3VlB08LyBN8Q05H8e3E yrybDzz69BhlvpfGcuFmt/AkEkjyf2oi5PVmF61lT51NzKzGWgrwSbsr4SAob/y3 xUDwL6NIncRcj6SHJ0wrDua7CQ88ejw4Zl4WDSp3/PlOtLWsrtngk2+AaraqRhks 7eJzBIPb9EisrzTuaR5ta4/d03NBv/GfHsysLyFGlyAJM8hbzyFTzDYYyKhdjyU3 Pcr9U5KKfgnu8ZWif1oZiargY8ZW9L4iKlfn5QPcyX7aNhFAkXFKVPy83T6bi8Ba qtRv/QfACooXB54xBRDUZ+n9W1xKbjd+9iSvP7mvzZYo1z2fz06XcUNRkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDy4hBKSODWdyT4qVwG80dUiAcCiMB8GA1UdIwQY MBaAFBm7woSY6xaVkLBpoAVBTEGhebJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2J2Q2hKanJGcFdRc0dtZ0JVRk1RYUY1c2tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xNjg2NWItMGU3MC00MTYwLWE0OGQt N2YwMTk3MjE4NmEzLzEvR2J2Q2hKanJGcFdRc0dtZ0JVRk1RYUY1c2tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8xNjg2NWItMGU3MC00MTYwLWE0OGQtN2YwMTk3MjE4NmEz LzEvR2J2Q2hKanJGcFdRc0dtZ0JVRk1RYUY1c2tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQoEF+gy 18Oi+yC7oSPWBVckyAF4mUQ+D7twK+B2vmNEfXVmssAM8vJ4B+6fwY/62n3B39X1 mPuO2VglovClAhM+qX7uTfom6sg+hLVzJ92l63rLfY/NrNN4VUWuDOOpChKXLwxo Vj2+BRYO8/CVt547htwuDffh88lLsaP38xYbTLN+GO5QT3aGghjyB2j4DqhIoeLT /BoVC8LqKIM/vVG3MR70OBkVnvvI9YwkIBrGb5FpabbJxQlii51dwvBq8VGrnfLf QVHrsDg44hkg5MRQSgRaA19g//qypcx+J1FTeU9+Ov03Kosjq2WcSyj6eWRYfOYX HA3cTjpgzYPZiA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:36:49 2025 by rpki-client