This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json) Hash identifier: ywMscaOOm/cfsddIFFzgtfaDaAMRm4Io5A0+ftgeRm0= Subject key identifier: 84:CB:CC:BB:1B:8E:FD:1D:E0:05:F6:52:F4:22:27:ED:B9:4F:08:1B Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 019AF2099BA20A3D66CB664434FEFE683F02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft Manifest number: 0BA1 Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: 2qbv-Pz4jvP3wMojh-nzxxXsgEA.roa (hash: 6+tOpgdGlSlIz8zd2wwUoB5CJwy5U+RYKeXiB03sSqI=) 2: 4iz3Hu7F2tbrDoJ4Ra5IwOQBcc8.roa (hash: IuX1GQGX1ljfGB12u2KgCWJaKWaeRSMtVHGJgPlmubc=) 3: C1tAEFoIcdJAtF2ExZVQXIH_FsY.roa (hash: 4q/3ob8n81loULFL00VzaUuNzAhMUIybAm+ctGIuwP0=) 4: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: 2Nfk9WZpbmhmWI6J6qg7KugOekwo4dJoewwv8upLGKE=) 5: R1122jvmaRFCyB-pLRYd5mvSj18.roa (hash: Mn7gPdy8qzzJOoR47mruMMkcr1ejf5GwtKlMHf6MI9I=) 6: W0IlYJBPaOJMLv1mCH5NTe9bDXI.roa (hash: h5rJEpD/zc6V9IYMVIxJVkoM8iIZhHm9sfu6/N8DwVg=) 7: fttIzMxOwmjSozc_t0Orv1bMCR8.roa (hash: 7qRC870+e9CdmGPm+1LaqV5Fck2e/MGelVXSHVaR9pg=) 8: m8Tdxvep8gBoC6AvkeleXRfcmoc.roa (hash: JYOwdAc9iDDM7jQ9HDSgVBqUbsa0fTnhwbYX6eo7TMw=) 9: mgJS3W7Q1z7oQKmX5lJZfvASfdU.roa (hash: txXvckVXMlcgRykwLcE07dh3QNh7v2yueF/O/NOTi+w=) 10: r0MpZWGF2my5L4ptog2DrTmu7No.roa (hash: z4pivdKzari5mOdXF7fYltYsmUc2SDlRQvzzFytcUVQ=) 11: r1Iga4svRdXgkzzcH3Kg0RXZCVM.roa (hash: JeLfIM6nAeSe3Dl7vi7FqJjfcjK2HshwWCY2+gwSDpU=) 12: xdWwTqIEbBWD-ayZaCrJQr7xhvk.roa (hash: XVK45wg0nZbg1ksXLgfN8TmYvrajdIvWajx9rGkrzcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9b:a2:0a:3d:66:cb:66:44:34:fe:fe:68:3f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=84cbccbb1b8efd1de005f652f42227edb94f081b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:17:5d:3f:aa:45:34:3a:2e:e6:4f:0a:a2:8b: 1e:1a:56:9b:cc:10:5a:24:15:c5:c3:cf:11:0b:57: fe:61:49:c6:00:88:6e:99:6c:e1:9f:e8:2d:fd:10: 28:f8:6f:7f:2b:ef:24:0f:62:f7:05:6e:62:3a:b2: 3d:30:19:d9:34:a1:a5:2b:6a:9d:f9:f3:ab:ba:bd: 5c:85:19:d6:e0:ae:e6:aa:05:f7:ab:ab:66:2a:f5: 39:08:6a:aa:64:5e:5e:60:80:b2:c8:f9:0e:d9:3b: ac:76:d1:95:b4:03:36:fc:62:54:30:72:33:52:3e: a6:91:03:6d:0a:46:c7:1e:d6:27:dd:19:60:f1:69: 1d:99:5c:79:0b:55:c6:e5:ad:2a:49:3f:16:2d:d4: 53:e3:b0:4a:cb:70:65:27:c6:cc:1d:c4:c1:99:6f: 00:d6:00:cb:0a:b3:ba:27:36:2b:88:42:d8:db:c5: 26:fc:00:29:d3:b5:70:5a:2f:0c:8f:be:af:c7:89: b0:74:ac:49:45:e9:48:3b:ad:e5:4b:d7:60:aa:ff: 37:1d:d5:8c:31:11:b0:d2:63:4f:da:7f:5f:31:2e: ea:8f:33:25:bd:e1:a4:d0:44:b0:f7:84:81:ec:5f: 53:8f:6e:9a:3e:d0:59:96:59:6c:be:5a:e2:8c:b8: f2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CB:CC:BB:1B:8E:FD:1D:E0:05:F6:52:F4:22:27:ED:B9:4F:08:1B X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:60:e6:7d:2b:76:f7:27:e6:59:05:b9:92:a0:a5:1b:b7:a9: c2:19:fd:9d:09:e2:38:42:24:f4:58:c0:c3:09:61:aa:22:2c: 5c:35:a8:b3:8f:12:9b:8e:99:46:d9:41:95:54:f7:fd:02:9b: 89:f2:bd:74:3b:c6:d8:3f:fa:65:5d:21:48:66:2f:4c:80:96: 45:a1:c9:90:e4:2e:e9:15:c7:4f:7f:f9:08:7b:10:72:53:9a: 69:d4:20:ef:89:fb:db:fe:ec:37:8a:49:32:f9:d9:f7:31:5e: 66:a5:91:61:4e:11:fc:2d:f4:43:58:5a:61:9e:ec:c2:42:fd: 4f:02:29:9e:be:14:bc:6a:2c:68:a1:bf:4b:e2:87:19:7d:b6: eb:04:55:1f:da:5b:75:b4:0e:db:e6:b0:ff:57:a2:00:33:d9: 84:63:68:4e:6a:c2:8b:21:c6:66:39:6b:0a:fa:62:dd:62:c9: 8f:12:48:29:5d:b6:bd:0e:0c:4b:57:29:2b:8b:22:16:2e:e2: 5e:5a:d4:af:bd:76:4f:6c:85:ff:14:d7:26:a7:bb:a9:77:da: 5f:ac:9f:be:86:3f:24:24:b3:69:81:6d:b5:32:21:37:07:89: 8f:10:f9:02:96:d1:89:97:35:f3:29:12:e7:8d:e4:52:c2:71: 9c:99:ec:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZuiCj1my2ZENP7+aD8CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD Eyg4NGNiY2NiYjFiOGVmZDFkZTAwNWY2NTJmNDIyMjdlZGI5NGYwODFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhddP6pFNDou5k8KooseGlabzBBa JBXFw88RC1f+YUnGAIhumWzhn+gt/RAo+G9/K+8kD2L3BW5iOrI9MBnZNKGlK2qd +fOrur1chRnW4K7mqgX3q6tmKvU5CGqqZF5eYICyyPkO2TusdtGVtAM2/GJUMHIz Uj6mkQNtCkbHHtYn3Rlg8WkdmVx5C1XG5a0qST8WLdRT47BKy3BlJ8bMHcTBmW8A 1gDLCrO6JzYriELY28Um/AAp07VwWi8Mj76vx4mwdKxJRelIO63lS9dgqv83HdWM MRGw0mNP2n9fMS7qjzMlveGk0ESw94SB7F9Tj26aPtBZlllsvlrijLjy+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITLzLsbjv0d4AX2UvQiJ+25TwgbMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGDmfSt2 9yfmWQW5kqClG7epwhn9nQniOEIk9FjAwwlhqiIsXDWos48Sm46ZRtlBlVT3/QKb ifK9dDvG2D/6ZV0hSGYvTICWRaHJkOQu6RXHT3/5CHsQclOaadQg74n72/7sN4pJ MvnZ9zFeZqWRYU4R/C30Q1haYZ7swkL9TwIpnr4UvGosaKG/S+KHGX226wRVH9pb dbQO2+aw/1eiADPZhGNoTmrCiyHGZjlrCvpi3WLJjxJIKV22vQ4MS1cpK4siFi7i XlrUr712T2yF/xTXJqe7qXfaX6yfvoY/JCSzaYFttTIhNweJjxD5ApbRiZc18ykS 543kUsJxnJnsfA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:47:05 2025 by rpki-client