This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft File: gbv0m8K-YG6m9Ivb-WJX3natfMA.mft (raw, json) Hash identifier: g/JAAxuLxlvT3R+xaVYoDDembf9FlHQLconXAh7URnU= Subject key identifier: 8F:5D:55:5B:A3:87:63:00:6D:D3:19:67:D8:11:30:8D:C4:CF:CA:69 Authority key identifier: 81:BB:F4:9B:C2:BE:60:6E:A6:F4:8B:DB:F9:62:57:DE:76:AD:7C:C0 Certificate issuer: /CN=81bbf49bc2be606ea6f48bdbf96257de76ad7cc0 Certificate serial: 019AF31D08A6915FC046AD36ED8395CDAC68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:02:37 +0000 Manifest this update: Sat 06 Dec 2025 10:02:37 +0000 Manifest next update: Sun 07 Dec 2025 10:02:37 +0000 Files and hashes: 1: gbv0m8K-YG6m9Ivb-WJX3natfMA.crl (hash: rtH2sPEGXUoPwWZ6jW+PQ89e8FoBg2MNIEkAYmKzclQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:08:a6:91:5f:c0:46:ad:36:ed:83:95:cd:ac:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81bbf49bc2be606ea6f48bdbf96257de76ad7cc0 Validity Not Before: Dec 6 10:02:37 2025 GMT Not After : Dec 7 10:02:37 2025 GMT Subject: CN=8f5d555ba38763006dd31967d811308dc4cfca69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:23:df:29:11:e9:a8:28:4c:0a:68:0e:09:cc: 96:4d:33:a6:b4:47:79:fa:11:9e:8a:91:e3:c6:ab: bb:b6:2b:74:82:2a:0c:54:70:ff:4e:31:ef:5c:61: 8e:98:f5:00:50:cb:88:9c:71:dc:5c:8f:5d:45:5c: 1a:69:af:6e:35:9c:26:7c:21:36:4f:f2:2e:bf:f2: cd:30:36:ce:a5:5a:8c:ca:14:35:73:b7:18:ff:77: fc:50:11:aa:8a:32:5f:96:07:cd:70:42:52:08:b8: c7:4b:5a:5c:cd:78:49:89:dc:e4:5f:a8:85:81:1f: 38:6c:20:10:1a:df:92:75:9c:be:34:e6:82:70:6d: 4e:a4:bd:86:3d:67:84:2b:6f:b9:76:2f:9f:5d:63: 44:6b:7e:a8:7b:47:93:5b:b1:8c:d4:a0:44:23:37: c3:64:25:be:ee:bc:27:30:e6:37:2c:5f:8d:31:9f: f3:db:85:2b:32:61:00:bd:11:bb:02:20:9f:9c:7c: cf:cb:1c:5f:d7:3d:02:7a:31:35:c1:5f:cd:60:96: b0:8a:fa:03:cb:d2:bd:19:af:d7:81:54:91:20:71: 1f:5c:e6:fd:64:29:60:3e:c5:e7:b5:e9:52:96:fb: 69:16:47:f7:e6:6a:ba:ce:92:02:b8:ab:42:da:c3: dc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5D:55:5B:A3:87:63:00:6D:D3:19:67:D8:11:30:8D:C4:CF:CA:69 X509v3 Authority Key Identifier: keyid:81:BB:F4:9B:C2:BE:60:6E:A6:F4:8B:DB:F9:62:57:DE:76:AD:7C:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:d1:00:b0:e5:c1:7f:db:8e:05:7a:c3:33:d9:2e:05:b6:91: 78:8b:38:8d:15:ea:bb:65:4a:07:90:b0:a0:b4:e7:c5:be:a3: 21:d1:90:a6:2b:16:67:99:16:5b:7e:59:4c:1f:d8:ef:1c:47: b1:df:3a:c5:8b:10:83:ac:c6:90:11:c3:25:5f:44:e2:e4:b7: d4:32:4b:2c:91:ca:b6:d3:97:9c:b3:d6:88:f1:29:da:30:da: a9:00:07:17:b4:61:20:7b:80:51:68:e3:d6:1e:a1:f6:be:bf: b7:3f:e2:90:6e:cd:82:56:f9:fb:dc:72:3d:73:a3:6f:2c:4c: e7:c7:ff:e8:4e:eb:2e:99:3e:39:3d:c3:b0:0f:08:20:54:b7: d9:50:1e:12:eb:23:4d:b2:bc:a9:31:9f:a8:dc:73:0f:ed:bd: e2:ed:0a:7c:c5:74:b4:39:6e:d6:4b:98:c4:36:02:79:d6:80: c4:83:72:eb:14:6e:ec:d9:0b:91:42:d9:5e:92:63:2b:92:1e: 78:db:41:02:63:b7:25:31:48:87:01:97:2a:d5:36:4d:41:69: 7e:35:aa:b2:d9:b2:e0:98:dd:59:cb:cc:62:71:36:ae:5a:83: 94:af:4a:0f:12:be:38:65:02:80:f8:81:f5:c9:0d:19:fc:c2: 73:a0:7d:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQimkV/ARq027YOVzaxoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYmJmNDliYzJiZTYwNmVhNmY0OGJkYmY5NjI1N2RlNzZh ZDdjYzAwHhcNMjUxMjA2MTAwMjM3WhcNMjUxMjA3MTAwMjM3WjAzMTEwLwYDVQQD Eyg4ZjVkNTU1YmEzODc2MzAwNmRkMzE5NjdkODExMzA4ZGM0Y2ZjYTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSPfKRHpqChMCmgOCcyWTTOmtEd5 +hGeipHjxqu7tit0gioMVHD/TjHvXGGOmPUAUMuInHHcXI9dRVwaaa9uNZwmfCE2 T/Iuv/LNMDbOpVqMyhQ1c7cY/3f8UBGqijJflgfNcEJSCLjHS1pczXhJidzkX6iF gR84bCAQGt+SdZy+NOaCcG1OpL2GPWeEK2+5di+fXWNEa36oe0eTW7GM1KBEIzfD ZCW+7rwnMOY3LF+NMZ/z24UrMmEAvRG7AiCfnHzPyxxf1z0CejE1wV/NYJawivoD y9K9Ga/XgVSRIHEfXOb9ZClgPsXntelSlvtpFkf35mq6zpICuKtC2sPcEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9dVVujh2MAbdMZZ9gRMI3Ez8ppMB8GA1UdIwQY MBaAFIG79JvCvmBupvSL2/liV952rXzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2J2MG04Sy1ZRzZtOUl2Yi1XSlgzbmF0Zk1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84NjNlZWUtNzcxNC00YmM0LTkyNjgt NDE2OTQyMDJkZTY4LzEvZ2J2MG04Sy1ZRzZtOUl2Yi1XSlgzbmF0Zk1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS84NjNlZWUtNzcxNC00YmM0LTkyNjgtNDE2OTQyMDJkZTY4 LzEvZ2J2MG04Sy1ZRzZtOUl2Yi1XSlgzbmF0Zk1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu9EAsOXB f9uOBXrDM9kuBbaReIs4jRXqu2VKB5CwoLTnxb6jIdGQpisWZ5kWW35ZTB/Y7xxH sd86xYsQg6zGkBHDJV9E4uS31DJLLJHKttOXnLPWiPEp2jDaqQAHF7RhIHuAUWjj 1h6h9r6/tz/ikG7Nglb5+9xyPXOjbyxM58f/6E7rLpk+OT3DsA8IIFS32VAeEusj TbK8qTGfqNxzD+294u0KfMV0tDlu1kuYxDYCedaAxINy6xRu7NkLkULZXpJjK5Ie eNtBAmO3JTFIhwGXKtU2TUFpfjWqstmy4JjdWcvMYnE2rlqDlK9KDxK+OGUCgPiB 9ckNGfzCc6B92Q== -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:28 2025 by rpki-client