This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft File: GbEF0UjemWA2_fIcsgijOKFYzto.mft (raw, json) Hash identifier: AqKsF/vKvXjVZh92pvh2ge7YXoKjp/mr1DfEIVDKY7w= Subject key identifier: EC:03:8B:1D:01:26:5A:FE:3C:1F:DA:E9:47:AC:EC:25:EB:5B:1D:73 Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA Certificate issuer: /CN=19b105d148de996036fdf21cb208a338a158ceda Certificate serial: 019AF19B489C207CF67579D97C4DA44A7BC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft Manifest number: 06E4 Signing time: Sat 06 Dec 2025 03:01:16 +0000 Manifest this update: Sat 06 Dec 2025 03:01:16 +0000 Manifest next update: Sun 07 Dec 2025 03:01:16 +0000 Files and hashes: 1: GbEF0UjemWA2_fIcsgijOKFYzto.crl (hash: cYqA8RqczQZmS5VAhqMFVJN8Xy/2oiuwPlf/ui+SKJo=) 2: Kef5Ht8ih3zCR7oI2xwNCCek_c0.roa (hash: PcoTymr3WCdK/2NTP+Gx/1hjHNciVhC2nMEqt8P6Dww=) 3: QdqTKHoiqUSS3YbPBuNzrQhQ9-U.roa (hash: q0TCHE5AUt7fjjG6UbQUxp5tdbPD8QNzCCk/O3w0dcI=) 4: bJaPvlpLwHUl9ZMeCz6Qju7dCQ4.roa (hash: P7xXaDBj8KlM/Rm+qxd2RUE4iuJ1o4jB4LwpB/1ek+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:48:9c:20:7c:f6:75:79:d9:7c:4d:a4:4a:7b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda Validity Not Before: Dec 6 03:01:16 2025 GMT Not After : Dec 7 03:01:16 2025 GMT Subject: CN=ec038b1d01265afe3c1fdae947acec25eb5b1d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:07:bf:8d:90:ee:40:df:0b:99:12:b7:99:97: 20:32:67:f0:f4:34:fe:47:0a:29:0c:40:c9:1c:da: 9a:30:cc:90:3c:5e:ba:86:ab:2f:e3:67:36:71:78: 00:9a:dd:d2:48:60:fd:21:d2:fb:f4:04:ef:4a:5a: 56:5d:65:f5:1d:a8:4d:cd:83:31:c1:c2:a8:c1:59: 38:e9:ce:db:88:9c:c5:42:a9:b2:d3:05:c9:2a:03: 81:96:4e:f2:65:3d:98:33:63:4c:56:10:d2:ef:85: 75:25:2d:f7:de:06:11:2c:43:27:aa:5a:c2:c7:70: 49:9c:d4:b4:f8:23:1d:18:d4:8c:cc:a7:f4:83:71: 64:95:f7:40:d7:6e:d7:a6:ab:f9:00:64:f8:d4:af: cd:2c:e3:42:f4:42:98:97:4e:ec:48:17:69:43:2f: d9:3d:3f:b9:b3:38:88:a7:e6:1b:95:0d:49:5c:e1: 05:70:ca:88:f9:01:74:7b:03:bb:0c:b7:68:26:d7: 48:f3:57:89:70:0d:a2:4b:62:ba:d3:59:a9:e7:3f: 5e:3a:d0:d6:6c:22:01:c2:ab:85:6a:df:c3:ba:98: 9f:9c:77:7f:a2:a3:29:76:69:52:85:d8:2d:40:47: 3a:a8:41:8f:7f:a8:20:fc:42:fd:97:b0:46:9c:2b: cf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:03:8B:1D:01:26:5A:FE:3C:1F:DA:E9:47:AC:EC:25:EB:5B:1D:73 X509v3 Authority Key Identifier: keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:89:a4:16:05:47:f6:30:fe:c1:71:50:df:bd:69:48:c5:9f: 52:c0:a3:c8:e8:f1:41:38:6e:32:3e:5e:68:6c:f5:0f:92:d2: c4:6c:b8:3e:04:33:d3:dd:c9:b6:62:d1:5a:ee:0a:71:dc:d5: eb:da:41:48:3c:df:77:9e:c0:35:31:30:a6:1d:1e:91:52:82: b2:4d:b9:a7:ec:b7:d0:0b:27:c6:f1:36:0a:0e:a2:e2:a1:51: c3:97:9b:62:59:d3:0c:ab:d3:aa:0f:f1:43:fc:5d:b2:d6:b3: b5:f5:07:3e:de:cc:a1:da:8e:59:b2:4d:7f:0c:61:48:c0:16: 44:64:40:cd:b2:61:9e:86:a4:81:71:bc:a1:54:a8:e7:bf:0b: ea:bc:0d:13:97:cc:d3:74:05:08:cf:a9:4d:e6:48:68:e2:34: 9e:9b:78:3d:8e:dc:ea:a7:63:cf:2c:1f:69:1d:55:78:07:48: da:b2:76:29:f0:89:64:d7:e3:86:2e:52:81:7c:29:be:01:bc: db:90:4a:ca:29:3a:39:6b:94:3b:6b:86:75:24:a1:ab:b1:6c: 59:88:5e:d9:b9:c9:24:dc:8d:4e:e5:7b:ec:88:af:4f:58:60: fa:26:ea:e5:d3:47:43:ed:8d:5e:67:4c:51:f9:fb:a8:22:12: 6e:da:f1:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0icIHz2dXnZfE2kSnvEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YjEwNWQxNDhkZTk5NjAzNmZkZjIxY2IyMDhhMzM4YTE1 OGNlZGEwHhcNMjUxMjA2MDMwMTE2WhcNMjUxMjA3MDMwMTE2WjAzMTEwLwYDVQQD EyhlYzAzOGIxZDAxMjY1YWZlM2MxZmRhZTk0N2FjZWMyNWViNWIxZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qe/jZDuQN8LmRK3mZcgMmfw9DT+ RwopDEDJHNqaMMyQPF66hqsv42c2cXgAmt3SSGD9IdL79ATvSlpWXWX1HahNzYMx wcKowVk46c7biJzFQqmy0wXJKgOBlk7yZT2YM2NMVhDS74V1JS333gYRLEMnqlrC x3BJnNS0+CMdGNSMzKf0g3FklfdA127Xpqv5AGT41K/NLONC9EKYl07sSBdpQy/Z PT+5sziIp+YblQ1JXOEFcMqI+QF0ewO7DLdoJtdI81eJcA2iS2K601mp5z9eOtDW bCIBwquFat/DupifnHd/oqMpdmlShdgtQEc6qEGPf6gg/EL9l7BGnCvPqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwDix0BJlr+PB/a6Ues7CXrWx1zMB8GA1UdIwQY MBaAFBmxBdFI3plgNv3yHLIIozihWM7aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JFRjBVamVtV0EyX2ZJY3NnaWpPS0ZZenRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi81MmNiOGQtMTFkNC00ZjljLThmOTIt MjZlNjRkNzhiMGM2LzEvR2JFRjBVamVtV0EyX2ZJY3NnaWpPS0ZZenRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi81MmNiOGQtMTFkNC00ZjljLThmOTItMjZlNjRkNzhiMGM2 LzEvR2JFRjBVamVtV0EyX2ZJY3NnaWpPS0ZZenRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4mkFgVH 9jD+wXFQ371pSMWfUsCjyOjxQThuMj5eaGz1D5LSxGy4PgQz093JtmLRWu4KcdzV 69pBSDzfd57ANTEwph0ekVKCsk25p+y30AsnxvE2Cg6i4qFRw5ebYlnTDKvTqg/x Q/xdstaztfUHPt7ModqOWbJNfwxhSMAWRGRAzbJhnoakgXG8oVSo578L6rwNE5fM 03QFCM+pTeZIaOI0npt4PY7c6qdjzywfaR1VeAdI2rJ2KfCJZNfjhi5SgXwpvgG8 25BKyik6OWuUO2uGdSShq7FsWYhe2bnJJNyNTuV77IivT1hg+ibq5dNHQ+2NXmdM Ufn7qCISbtrxRA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:47 2025 by rpki-client