This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json) Hash identifier: A1wuZS4OUwG4vwnseYwmC+q6C+LvKEqkN6zFSdHY3HQ= Subject key identifier: 47:68:EE:81:13:94:40:43:43:F6:6B:F0:12:A4:7C:04:2A:09:83:D7 Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f Certificate serial: 019AF57841EAFCB435261D2FF6AD28D83C55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft Manifest number: 0889 Signing time: Sat 06 Dec 2025 21:01:30 +0000 Manifest this update: Sat 06 Dec 2025 21:01:30 +0000 Manifest next update: Sun 07 Dec 2025 21:01:30 +0000 Files and hashes: 1: HYKWqu7dV9T03Pg2YEzmV2pzeLI.roa (hash: 0f4EPwDYkAduai0mg4vA1zfxCrdTubntPDPu+t4qPOY=) 2: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: uTbIO3VMre0JIDolgcz3sBnl9ug9NsS7W+CSmCHtkpc=) 3: sKvQstCz9PeJtgIU34nzs9eqEeU.roa (hash: H2Pm4bBxQ3BJkt3Kybv6k8Fd+61WPgE9z93gpg0GcNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:41:ea:fc:b4:35:26:1d:2f:f6:ad:28:d8:3c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f Validity Not Before: Dec 6 21:01:30 2025 GMT Not After : Dec 7 21:01:30 2025 GMT Subject: CN=4768ee811394404343f66bf012a47c042a0983d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:58:87:76:09:6d:fe:07:c5:82:24:3e:b6:fa: b7:33:0e:62:04:67:e9:4e:ff:e5:03:2c:8b:5c:d5: b4:b7:f5:74:ec:05:6a:cb:42:ae:15:cd:2d:b2:d6: 57:30:51:2b:b3:49:83:0d:5b:e3:62:d6:4d:03:07: c3:e7:6c:2c:ce:bc:b6:46:03:8a:8c:a7:f7:16:a9: 72:42:d6:b2:86:a9:3d:e1:09:cd:44:73:64:d9:42: 73:9d:82:01:11:7f:11:62:02:47:5c:a9:ae:43:a3: 03:94:4c:e0:91:13:a3:52:19:20:a4:c0:16:78:db: 19:5b:96:67:2a:a6:8b:b5:35:d4:55:e0:fc:28:26: 3a:8f:d4:be:04:ea:91:f0:38:8d:5b:ea:e2:20:d6: 6f:dd:dd:eb:d8:36:1b:b4:66:82:ba:17:01:dc:57: 96:23:9b:a4:aa:30:a0:57:6f:50:d7:ef:28:86:c6: 79:45:0e:88:a2:3c:0d:fe:66:d6:5b:93:7a:23:ac: 34:a9:28:21:90:64:4d:3f:cc:70:87:3c:11:b7:62: df:f2:65:04:6a:0d:3f:30:03:f3:08:da:d7:a5:ab: 04:37:19:71:c2:04:68:ea:f3:57:a2:1e:72:c7:ba: 2c:8b:1e:1d:49:28:47:b2:79:3e:d9:68:19:e1:be: cb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:68:EE:81:13:94:40:43:43:F6:6B:F0:12:A4:7C:04:2A:09:83:D7 X509v3 Authority Key Identifier: keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:cb:80:c0:8d:24:f3:95:a5:b4:a8:a5:5a:9b:58:da:30:e6: e7:ff:e7:70:c5:d7:3b:ff:74:0e:8e:fa:3f:bf:f2:74:0d:ec: 35:bf:3d:15:56:70:c0:55:d6:db:52:17:2a:f6:4d:0d:fb:79: b4:9e:a5:01:cc:08:35:f5:0b:03:22:96:ec:1a:11:08:96:c8: b4:dc:9a:14:50:a8:95:ac:d6:f8:e9:74:fe:55:f2:f5:1c:75: e4:14:15:64:92:c4:99:32:9b:a2:30:0e:23:7d:7b:5b:0b:b4: ce:c2:49:2c:98:46:d6:ef:11:16:bc:0a:9f:93:9f:1e:57:84: 9d:22:27:fc:8a:22:10:15:f9:fb:fa:d0:cd:b3:70:46:13:27: 4a:42:72:fe:87:f6:1d:ec:01:22:a0:25:8e:71:5d:6b:9e:f7: 82:5f:9e:2d:0f:86:1b:05:62:49:ad:e1:01:14:30:f9:2c:2c: 4d:71:e5:79:80:00:c1:0f:d5:7b:96:cd:41:f5:5e:42:1a:33: f2:eb:9f:1a:0e:5a:ad:8e:da:a7:dc:41:eb:7f:a0:0a:dc:80: 66:f3:b5:e8:1f:40:2b:d2:34:92:28:0e:3d:d1:6a:ba:e5:c5: 00:0f:4c:da:21:63:ad:02:ae:d4:8a:b5:44:04:4b:92:c0:14: 5c:37:d7:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eEHq/LQ1Jh0v9q0o2DxVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYjA2MzhiODc2ZjM5NzhjYTdiZDI4ZDdkZTM3MDk5NmIz OTZhM2YwHhcNMjUxMjA2MjEwMTMwWhcNMjUxMjA3MjEwMTMwWjAzMTEwLwYDVQQD Eyg0NzY4ZWU4MTEzOTQ0MDQzNDNmNjZiZjAxMmE0N2MwNDJhMDk4M2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkViHdglt/gfFgiQ+tvq3Mw5iBGfp Tv/lAyyLXNW0t/V07AVqy0KuFc0tstZXMFErs0mDDVvjYtZNAwfD52wszry2RgOK jKf3FqlyQtayhqk94QnNRHNk2UJznYIBEX8RYgJHXKmuQ6MDlEzgkROjUhkgpMAW eNsZW5ZnKqaLtTXUVeD8KCY6j9S+BOqR8DiNW+riINZv3d3r2DYbtGaCuhcB3FeW I5ukqjCgV29Q1+8ohsZ5RQ6IojwN/mbWW5N6I6w0qSghkGRNP8xwhzwRt2Lf8mUE ag0/MAPzCNrXpasENxlxwgRo6vNXoh5yx7osix4dSShHsnk+2WgZ4b7L4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdo7oETlEBDQ/Zr8BKkfAQqCYPXMB8GA1UdIwQY MBaAFICwY4uHbzl4ynvSjX3jcJlrOWo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAt MTViMDlmNWY2ZWQ3LzEvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAtMTViMDlmNWY2ZWQ3 LzEvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8uAwI0k 85WltKilWptY2jDm5//ncMXXO/90Do76P7/ydA3sNb89FVZwwFXW21IXKvZNDft5 tJ6lAcwINfULAyKW7BoRCJbItNyaFFColazW+Ol0/lXy9Rx15BQVZJLEmTKbojAO I317Wwu0zsJJLJhG1u8RFrwKn5OfHleEnSIn/IoiEBX5+/rQzbNwRhMnSkJy/of2 HewBIqAljnFda573gl+eLQ+GGwViSa3hARQw+SwsTXHleYAAwQ/Ve5bNQfVeQhoz 8uufGg5arY7ap9xB63+gCtyAZvO16B9AK9I0kigOPdFquuXFAA9M2iFjrQKu1Iq1 RARLksAUXDfX1Q== -----END CERTIFICATE-----Generated at Sun Dec 7 00:12:35 2025 by rpki-client