This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft File: gBbMsax3x8AqTt5gbfH375c6C_k.mft (raw, json) Hash identifier: Xw+vrGIh6t67Lq6FAYf2b8J1rGrrBDpzRHuXwVqtQzI= Subject key identifier: 1C:15:F3:5C:B1:ED:D5:2A:88:C0:87:7A:78:C5:B6:D7:CB:B1:8F:76 Authority key identifier: 80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9 Certificate issuer: /CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9 Certificate serial: 019AF27660DAC0795F99DCD8A7DDC15E40B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft Manifest number: 120E Signing time: Sat 06 Dec 2025 07:00:35 +0000 Manifest this update: Sat 06 Dec 2025 07:00:35 +0000 Manifest next update: Sun 07 Dec 2025 07:00:35 +0000 Files and hashes: 1: Ax6Vm0VTZQY0FLe1VYl0Sd0_sqo.roa (hash: X5Han0rbC/tYWBQcqeDkAJUru7qclM/G19tIpVV4C6g=) 2: gBbMsax3x8AqTt5gbfH375c6C_k.crl (hash: /Q/U9LX+TAAtH6l1HtxZdGedzGYXMvpsSR4ElTCZyuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:60:da:c0:79:5f:99:dc:d8:a7:dd:c1:5e:40:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9 Validity Not Before: Dec 6 07:00:35 2025 GMT Not After : Dec 7 07:00:35 2025 GMT Subject: CN=1c15f35cb1edd52a88c0877a78c5b6d7cbb18f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:fa:9f:69:47:a8:1d:87:e9:68:1f:10:f2: 69:18:13:84:7f:1e:5f:ba:b9:10:68:08:74:fe:ff: 8a:d5:78:61:72:4d:06:83:c5:39:c3:87:09:1c:4e: 04:cf:1c:e2:58:8c:6c:09:6e:22:30:e1:d8:f3:08: 8a:9d:a8:29:10:17:eb:24:33:31:6f:07:6b:46:48: 49:98:eb:41:04:88:e6:94:5b:1c:85:37:57:31:d1: f9:ca:cf:aa:40:94:82:aa:0a:af:dd:f9:a0:3f:a6: 53:f5:aa:12:c2:f2:f6:88:36:83:c9:9a:d9:94:62: ff:4e:03:38:6b:07:8d:7a:13:91:f2:64:d7:07:cb: ba:5f:d7:63:26:ed:6e:87:a6:8e:c5:67:ef:54:5e: 89:4b:ae:29:18:93:72:db:80:6d:8a:ec:cc:8a:57: 02:87:f1:24:99:11:38:3a:ac:42:1d:9e:3c:76:16: 65:37:22:e9:8e:bf:45:5a:e9:49:f3:f9:7a:d0:85: eb:30:5c:a5:13:c9:57:c1:6a:9c:85:7b:fa:84:db: dc:88:1b:1c:f3:81:8d:52:19:25:9b:e9:18:c3:33: 4b:06:ca:34:84:77:5c:2b:3b:7e:4c:59:8c:7e:3f: d1:50:e2:d8:e5:98:fe:73:ac:64:36:8e:07:2e:a4: 96:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:15:F3:5C:B1:ED:D5:2A:88:C0:87:7A:78:C5:B6:D7:CB:B1:8F:76 X509v3 Authority Key Identifier: keyid:80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:07:ee:c5:45:44:18:a2:a9:02:57:df:6c:bc:ac:8c:b8:34: 95:72:dc:0a:30:4a:12:fd:0a:1e:2a:6c:b9:e1:d3:1a:f4:b1: ad:9c:db:87:6e:7c:de:89:73:c3:ba:cc:93:41:cc:4c:7f:ea: cf:6f:ec:c7:fd:ea:03:5f:31:9e:80:cc:e7:07:9e:f3:29:5d: de:da:73:44:1e:6e:ec:50:cd:40:0b:3a:b3:d7:08:0b:0c:4c: f1:3a:e8:4d:5f:2e:a4:fb:5f:50:b3:84:63:b0:1a:59:98:63: b1:dc:9d:96:40:78:32:d7:bb:bf:26:56:db:2c:cb:c2:16:1d: 29:b0:8c:95:81:67:bd:ff:af:39:fe:12:64:32:bc:30:06:14: 5e:75:20:17:0e:73:23:1d:c0:8d:a2:78:fc:42:ae:5f:41:65: 1c:87:a5:c2:93:57:1a:b1:9b:60:f8:c6:52:ab:e7:bf:a6:f9: 30:b4:7d:3c:39:49:ab:f1:c3:0a:e1:ee:ac:3d:60:ec:5a:5a: 0f:84:3b:d7:a4:f8:1b:28:00:dd:a9:38:91:c7:7a:42:cc:63: ec:a0:21:ed:f7:58:d2:30:10:04:66:5c:aa:b8:af:68:71:b0: d4:f2:9c:47:cb:28:7d:87:68:83:a6:8e:f5:3f:c7:02:93:ae: 32:f5:18:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmDawHlfmdzYp93BXkC5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMTZjY2IxYWM3N2M3YzAyYTRlZGU2MDZkZjFmN2VmOTcz YTBiZjkwHhcNMjUxMjA2MDcwMDM1WhcNMjUxMjA3MDcwMDM1WjAzMTEwLwYDVQQD EygxYzE1ZjM1Y2IxZWRkNTJhODhjMDg3N2E3OGM1YjZkN2NiYjE4Zjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOr6n2lHqB2H6WgfEPJpGBOEfx5f urkQaAh0/v+K1Xhhck0Gg8U5w4cJHE4EzxziWIxsCW4iMOHY8wiKnagpEBfrJDMx bwdrRkhJmOtBBIjmlFschTdXMdH5ys+qQJSCqgqv3fmgP6ZT9aoSwvL2iDaDyZrZ lGL/TgM4aweNehOR8mTXB8u6X9djJu1uh6aOxWfvVF6JS64pGJNy24BtiuzMilcC h/EkmRE4OqxCHZ48dhZlNyLpjr9FWulJ8/l60IXrMFylE8lXwWqchXv6hNvciBsc 84GNUhklm+kYwzNLBso0hHdcKzt+TFmMfj/RUOLY5Zj+c6xkNo4HLqSWVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwV81yx7dUqiMCHenjFttfLsY92MB8GA1UdIwQY MBaAFIAWzLGsd8fAKk7eYG3x9++XOgv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hYmMwZjgtMWYxZi00YzY1LWJiODUt YTk2NmFlODU2OTI2LzEvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9hYmMwZjgtMWYxZi00YzY1LWJiODUtYTk2NmFlODU2OTI2 LzEvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwfuxUVE GKKpAlffbLysjLg0lXLcCjBKEv0KHipsueHTGvSxrZzbh2583olzw7rMk0HMTH/q z2/sx/3qA18xnoDM5wee8yld3tpzRB5u7FDNQAs6s9cICwxM8TroTV8upPtfULOE Y7AaWZhjsdydlkB4Mte7vyZW2yzLwhYdKbCMlYFnvf+vOf4SZDK8MAYUXnUgFw5z Ix3AjaJ4/EKuX0FlHIelwpNXGrGbYPjGUqvnv6b5MLR9PDlJq/HDCuHurD1g7Fpa D4Q716T4GygA3ak4kcd6Qsxj7KAh7fdY0jAQBGZcqrivaHGw1PKcR8sofYdog6aO 9T/HApOuMvUYgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:10 2025 by rpki-client