This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft File: ggBZa784LUmLxewrP9ZTOehbmPI.mft (raw, json) Hash identifier: aHRSQRmiiopn7+C7LaBJpJdaSQSp01rjFf5IYUF+lxc= Subject key identifier: A7:9A:B1:12:41:0B:01:69:C3:52:ED:79:EF:32:38:49:68:0E:38:49 Authority key identifier: 82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2 Certificate issuer: /CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2 Certificate serial: 019AF12CBEEA0DB22BFB5D544E49CDCF7B61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft Manifest number: 0EF9 Signing time: Sat 06 Dec 2025 01:00:32 +0000 Manifest this update: Sat 06 Dec 2025 01:00:32 +0000 Manifest next update: Sun 07 Dec 2025 01:00:32 +0000 Files and hashes: 1: 0nNYMJ2yluQoQ02pe7IRw8NkdfA.roa (hash: GkG/6rDrk9vq7Jp2NvQPyT4My5GzjO9oZQi+bOX75cE=) 2: ggBZa784LUmLxewrP9ZTOehbmPI.crl (hash: 59eT4BcTrUWHFvoQ/14scpfpXGBVS7hvim/XHGe3UCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:be:ea:0d:b2:2b:fb:5d:54:4e:49:cd:cf:7b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2 Validity Not Before: Dec 6 01:00:32 2025 GMT Not After : Dec 7 01:00:32 2025 GMT Subject: CN=a79ab112410b0169c352ed79ef323849680e3849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:b4:dc:9f:cf:3d:6a:0b:e9:09:de:35:fa: f7:dd:a9:6d:ae:d4:db:84:c1:10:ec:1a:37:44:1f: ec:55:84:ae:a0:5f:15:c5:c2:7f:6c:f2:a9:6c:6e: 7d:12:48:b4:73:29:e5:8d:f1:01:bb:1e:6b:3b:3b: 6b:ad:bc:f8:85:80:83:89:e4:8a:5e:ac:3f:f5:1c: c1:44:ee:74:f2:0c:b3:02:8f:a3:ae:57:c1:77:cd: de:47:36:5d:ef:dd:b8:87:31:de:71:6f:6c:9b:63: ab:48:36:be:ab:96:36:d5:ed:7c:45:15:6e:fb:40: 8f:d9:ae:0d:da:4c:51:6c:59:92:0e:40:2c:cb:bd: 14:19:5c:f5:b0:55:11:34:97:ac:71:b4:c3:d0:4b: 4d:12:d2:60:3a:66:e8:ab:8b:f2:7c:5e:a1:d3:85: 18:05:53:f9:50:bf:76:7b:ac:e6:23:bc:52:31:94: 2b:ce:77:f8:37:7a:40:1a:ec:cd:9a:d8:fa:06:cc: 10:c5:c2:be:e1:9f:bf:39:ac:07:81:81:c3:58:ff: a5:77:66:e5:c1:4e:73:48:fd:6f:58:29:8b:00:53: 06:d5:ff:4b:e7:1b:f9:ec:f2:25:d6:f0:b5:4f:92: 32:26:94:1d:45:b9:2e:b9:27:3e:3d:0a:c5:f5:27: 44:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9A:B1:12:41:0B:01:69:C3:52:ED:79:EF:32:38:49:68:0E:38:49 X509v3 Authority Key Identifier: keyid:82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:92:85:19:be:ae:f6:80:61:85:8a:c3:90:01:38:c3:45:5b: 89:af:b1:23:15:85:46:e4:73:ec:91:b8:80:02:8a:74:20:64: 63:27:c6:25:ce:c9:ce:8b:34:ad:d5:99:21:a5:0e:be:74:ba: f4:37:1d:69:d7:67:33:56:0c:36:3a:db:43:e8:75:94:e4:d2: 21:90:2f:f1:90:89:42:f8:99:81:d7:11:4c:5e:a6:8b:4f:19: c5:f8:4d:b6:1f:9e:98:a5:ef:b3:7b:f1:a2:f9:cf:90:2b:07: 65:49:e3:86:e5:49:3b:de:db:64:6c:d0:85:d8:ec:0e:4b:a3: 6c:28:a6:a2:c9:27:67:da:50:f5:03:6b:ed:24:c5:72:29:8f: 1c:c2:21:e1:3a:99:58:ce:2b:3b:fc:ed:80:39:0e:d1:ae:8c: 7b:2c:d5:ba:c5:df:55:6c:93:3b:77:6a:5c:02:d6:38:ef:13: fd:11:63:19:85:50:31:79:e3:4b:c3:af:22:2f:b5:27:73:e3: 92:fe:f9:db:46:f9:24:8a:f3:5e:8d:c6:5c:e3:d7:2a:e0:9a: df:eb:5c:f6:5e:85:80:e3:f2:d5:f9:98:99:5d:6c:e3:82:30: b7:f3:37:a5:2a:30:f3:1c:97:06:a8:0b:f6:cf:ff:5e:68:ce: 9b:cf:d9:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLL7qDbIr+11UTknNz3thMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMDA1OTZiYmYzODJkNDk4YmM1ZWMyYjNmZDY1MzM5ZTg1 Yjk4ZjIwHhcNMjUxMjA2MDEwMDMyWhcNMjUxMjA3MDEwMDMyWjAzMTEwLwYDVQQD EyhhNzlhYjExMjQxMGIwMTY5YzM1MmVkNzllZjMyMzg0OTY4MGUzODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuji03J/PPWoL6QneNfr33altrtTb hMEQ7Bo3RB/sVYSuoF8VxcJ/bPKpbG59Eki0cynljfEBux5rOztrrbz4hYCDieSK Xqw/9RzBRO508gyzAo+jrlfBd83eRzZd7924hzHecW9sm2OrSDa+q5Y21e18RRVu +0CP2a4N2kxRbFmSDkAsy70UGVz1sFURNJescbTD0EtNEtJgOmboq4vyfF6h04UY BVP5UL92e6zmI7xSMZQrznf4N3pAGuzNmtj6BswQxcK+4Z+/OawHgYHDWP+ld2bl wU5zSP1vWCmLAFMG1f9L5xv57PIl1vC1T5IyJpQdRbkuuSc+PQrF9SdEpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeasRJBCwFpw1Ltee8yOEloDjhJMB8GA1UdIwQY MBaAFIIAWWu/OC1Ji8XsKz/WUznoW5jyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2dCWmE3ODRMVW1MeGV3clA5WlRPZWhibVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS81MzY0MzEtOWNiZS00M2E5LThjMWYt NjhhZDJkMTExYmFjLzEvZ2dCWmE3ODRMVW1MeGV3clA5WlRPZWhibVBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS81MzY0MzEtOWNiZS00M2E5LThjMWYtNjhhZDJkMTExYmFj LzEvZ2dCWmE3ODRMVW1MeGV3clA5WlRPZWhibVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZKFGb6u 9oBhhYrDkAE4w0Vbia+xIxWFRuRz7JG4gAKKdCBkYyfGJc7Jzos0rdWZIaUOvnS6 9DcdaddnM1YMNjrbQ+h1lOTSIZAv8ZCJQviZgdcRTF6mi08ZxfhNth+emKXvs3vx ovnPkCsHZUnjhuVJO97bZGzQhdjsDkujbCimosknZ9pQ9QNr7STFcimPHMIh4TqZ WM4rO/ztgDkO0a6MeyzVusXfVWyTO3dqXALWOO8T/RFjGYVQMXnjS8OvIi+1J3Pj kv7520b5JIrzXo3GXOPXKuCa3+tc9l6FgOPy1fmYmV1s44Iwt/M3pSow8xyXBqgL 9s//XmjOm8/ZTA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:13 2025 by rpki-client