This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.mft File: G-vsblSMHSxoMZyNKaNfwG0Fxco.mft (raw, json) Hash identifier: kPxOBntxN5uNwcWqJhbImaDxE6w0Wdb72dCbk/eQ+X4= Subject key identifier: BF:0A:C5:F7:DE:08:70:AB:B8:0A:93:84:C9:59:27:AA:ED:83:15:06 Authority key identifier: 1B:EB:EC:6E:54:8C:1D:2C:68:31:9C:8D:29:A3:5F:C0:6D:05:C5:CA Certificate issuer: /CN=1bebec6e548c1d2c68319c8d29a35fc06d05c5ca Certificate serial: 019AF19B46836E7BF3ED0362938EA47CCDC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-vsblSMHSxoMZyNKaNfwG0Fxco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.mft Manifest number: 0200 Signing time: Sat 06 Dec 2025 03:01:16 +0000 Manifest this update: Sat 06 Dec 2025 03:01:16 +0000 Manifest next update: Sun 07 Dec 2025 03:01:16 +0000 Files and hashes: 1: G-vsblSMHSxoMZyNKaNfwG0Fxco.crl (hash: mEpCK+0U14Pl27qMnZTONZZokeF/0YKBnkZrkNai3ps=) 2: gLxG9OBR-307s9i7CUzgsFayA0w.roa (hash: U9Hk3a/+dmVqWlPybJkT20UlsNmTcI0F5wchliR1XTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.mft rsync://rpki.ripe.net/repository/DEFAULT/G-vsblSMHSxoMZyNKaNfwG0Fxco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:46:83:6e:7b:f3:ed:03:62:93:8e:a4:7c:cd:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bebec6e548c1d2c68319c8d29a35fc06d05c5ca Validity Not Before: Dec 6 03:01:16 2025 GMT Not After : Dec 7 03:01:16 2025 GMT Subject: CN=bf0ac5f7de0870abb80a9384c95927aaed831506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:04:a0:4a:12:a6:a0:71:48:d5:c3:a8:71:90: 4c:d8:5d:5f:a2:a2:91:b7:28:da:74:e7:cf:62:c8: 69:1e:b3:12:35:1f:b9:a9:32:9c:78:9a:00:91:9c: 70:ce:43:12:23:65:9a:9b:a3:79:7f:bf:d2:6c:9a: 69:58:a3:d9:92:ef:fe:19:36:39:c2:40:97:1d:bf: 67:a3:a4:a9:a0:5f:2f:d8:2a:c3:4b:f9:66:d0:38: ff:cf:1c:d2:c8:6c:38:2e:59:14:7f:cf:bf:50:fc: 68:22:34:76:38:2c:cf:35:e0:f2:e3:4f:66:ff:76: 76:cb:0d:ff:3b:a3:1e:2a:cf:62:ea:ad:46:fd:7f: 66:dd:1f:aa:f4:2b:da:3f:91:a3:6c:7e:27:92:ad: b4:6c:e9:eb:9a:be:89:06:2a:11:d9:75:35:22:b7: 94:0b:ec:26:49:36:63:d3:82:6b:94:ca:c2:74:f5: d8:f3:4f:15:21:ee:15:b5:1e:2f:c8:85:06:fb:05: 7a:be:fb:a5:ca:02:67:c4:df:fc:48:e4:8e:71:24: ec:f3:b4:c9:6a:1f:b8:e4:f6:96:db:70:7f:84:ed: 09:3e:05:7e:95:e0:4c:d7:b7:f5:bc:0e:71:42:e0: 97:95:7d:d1:7d:87:c4:9b:d2:0a:4e:48:60:9c:74: 55:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0A:C5:F7:DE:08:70:AB:B8:0A:93:84:C9:59:27:AA:ED:83:15:06 X509v3 Authority Key Identifier: keyid:1B:EB:EC:6E:54:8C:1D:2C:68:31:9C:8D:29:A3:5F:C0:6D:05:C5:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-vsblSMHSxoMZyNKaNfwG0Fxco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:47:ed:9e:08:60:63:02:28:35:b2:a1:bb:f7:fe:0a:4f:8d: ea:e0:69:85:24:00:ef:d1:95:a0:30:ca:6e:84:04:91:5a:68: 9c:ae:57:87:d8:3e:c6:34:f9:9e:71:e7:14:f7:23:4d:53:27: 92:7d:49:01:ae:10:76:b2:80:ef:7f:46:44:7e:41:71:73:08: 33:43:98:91:57:1c:a6:41:03:05:63:d5:1a:38:b5:89:ce:bb: 02:da:36:83:bc:82:1f:25:61:11:87:08:0e:13:56:06:94:33: ea:f9:c3:98:c1:a8:49:78:c0:4a:d9:45:08:36:2d:f9:8a:29: 1c:87:f0:af:4e:95:fc:be:35:c4:1c:e7:5f:57:3e:7e:16:c2: 5b:93:18:e5:99:8e:89:12:1f:14:8d:f6:05:ab:ba:5d:a0:6d: 99:c0:96:2e:d1:85:e2:d2:f0:fc:14:ee:76:6d:e0:89:54:3d: f9:02:8e:82:28:79:f7:87:fa:25:d5:f5:4a:8b:5a:89:de:d9: 00:d5:8e:dd:b0:d4:ea:da:54:76:79:e5:c5:e9:32:89:8d:79: 50:11:f9:39:a9:98:e6:ae:2f:17:8f:b6:06:e3:9b:84:95:85: 20:7d:cf:f0:72:82:f0:fd:e3:07:fd:6f:8f:38:b1:a6:70:e7: 90:ca:e0:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0aDbnvz7QNik46kfM3HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZWJlYzZlNTQ4YzFkMmM2ODMxOWM4ZDI5YTM1ZmMwNmQw NWM1Y2EwHhcNMjUxMjA2MDMwMTE2WhcNMjUxMjA3MDMwMTE2WjAzMTEwLwYDVQQD EyhiZjBhYzVmN2RlMDg3MGFiYjgwYTkzODRjOTU5MjdhYWVkODMxNTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQSgShKmoHFI1cOocZBM2F1foqKR tyjadOfPYshpHrMSNR+5qTKceJoAkZxwzkMSI2Wam6N5f7/SbJppWKPZku/+GTY5 wkCXHb9no6SpoF8v2CrDS/lm0Dj/zxzSyGw4LlkUf8+/UPxoIjR2OCzPNeDy409m /3Z2yw3/O6MeKs9i6q1G/X9m3R+q9CvaP5GjbH4nkq20bOnrmr6JBioR2XU1IreU C+wmSTZj04JrlMrCdPXY808VIe4VtR4vyIUG+wV6vvulygJnxN/8SOSOcSTs87TJ ah+45PaW23B/hO0JPgV+leBM17f1vA5xQuCXlX3RfYfEm9IKTkhgnHRVFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8KxffeCHCruAqThMlZJ6rtgxUGMB8GA1UdIwQY MBaAFBvr7G5UjB0saDGcjSmjX8BtBcXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy12c2JsU01IU3hvTVp5TkthTmZ3RzBGeGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mODVhNTQtN2Y4ZC00YjJmLThjYmMt MmEyYmJjYzIxMDNmLzEvRy12c2JsU01IU3hvTVp5TkthTmZ3RzBGeGNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9mODVhNTQtN2Y4ZC00YjJmLThjYmMtMmEyYmJjYzIxMDNm LzEvRy12c2JsU01IU3hvTVp5TkthTmZ3RzBGeGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUftnghg YwIoNbKhu/f+Ck+N6uBphSQA79GVoDDKboQEkVponK5Xh9g+xjT5nnHnFPcjTVMn kn1JAa4QdrKA739GRH5BcXMIM0OYkVccpkEDBWPVGji1ic67Ato2g7yCHyVhEYcI DhNWBpQz6vnDmMGoSXjAStlFCDYt+YopHIfwr06V/L41xBznX1c+fhbCW5MY5ZmO iRIfFI32Bau6XaBtmcCWLtGF4tLw/BTudm3giVQ9+QKOgih594f6JdX1Sotaid7Z ANWO3bDU6tpUdnnlxekyiY15UBH5OamY5q4vF4+2BuObhJWFIH3P8HKC8P3jB/1v jzixpnDnkMrg0A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:42 2025 by rpki-client