This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft File: GbZo5W_iW9bcU4AO4XdQYezAkgY.mft (raw, json) Hash identifier: JDUPGt7ZLi5b+qu9X8y0ywwPOXRGjGE446RHThu7OJM= Subject key identifier: 96:B9:1F:EA:46:8D:9B:8D:21:11:53:2F:BE:62:08:06:9B:BF:8A:1E Authority key identifier: 19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06 Certificate issuer: /CN=19b668e56fe25bd6dc53800ee1775061ecc09206 Certificate serial: 019AF3F7C30A9253B2B4DE0AC0AEDC76B02B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft Manifest number: 01B5 Signing time: Sat 06 Dec 2025 14:01:32 +0000 Manifest this update: Sat 06 Dec 2025 14:01:32 +0000 Manifest next update: Sun 07 Dec 2025 14:01:32 +0000 Files and hashes: 1: GbZo5W_iW9bcU4AO4XdQYezAkgY.crl (hash: 5trRYilooJO70JGXgSiK/DByR/uutowYmH8Gb1+n7/M=) 2: RiL09rS6VjBEVN__JOM2U5RqEcI.roa (hash: uYgL/yhRbt5qevmx86ZZVWKBSugMaqO2EFz8Vo1U7Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:c3:0a:92:53:b2:b4:de:0a:c0:ae:dc:76:b0:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19b668e56fe25bd6dc53800ee1775061ecc09206 Validity Not Before: Dec 6 14:01:32 2025 GMT Not After : Dec 7 14:01:32 2025 GMT Subject: CN=96b91fea468d9b8d2111532fbe6208069bbf8a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c3:c8:c5:6b:af:06:26:aa:2a:aa:bc:ac:43: 9a:ff:23:fe:57:47:60:57:d4:7c:75:95:7d:f3:14: 47:d9:51:54:5f:c3:47:c7:ce:8d:2d:05:39:f4:90: 8f:90:2c:bc:c2:f1:a6:f5:66:f2:10:bb:7b:bc:bb: ab:50:cd:5d:62:85:6e:c7:48:10:31:bb:e5:ac:fd: a0:a9:d9:99:ca:6d:7e:e8:bc:49:4e:14:18:e5:27: 0f:d5:23:1e:58:0e:b8:b0:fc:77:e2:80:b1:fc:49: 38:81:01:bd:17:4e:d0:08:b9:9a:f7:d6:c8:25:33: 6f:fc:67:b2:9a:8a:ae:e5:61:b3:59:df:6a:22:63: 59:94:95:33:62:92:43:f7:06:c3:f0:23:ad:f1:94: d4:4b:33:c0:d0:53:35:4d:39:15:71:b2:a6:d3:81: a7:98:5f:06:73:75:18:eb:25:10:73:82:99:e1:34: 58:d0:8f:a4:fb:b8:e9:6e:e9:cf:2c:7f:20:d9:e3: 09:34:be:fc:e8:6a:1b:fc:78:74:21:1c:5e:30:2d: 36:bf:e1:2d:f4:32:d2:a5:2b:8e:4e:5d:14:15:83: a3:83:e8:cc:36:b9:9e:5d:69:f6:9c:52:9c:4b:07: ae:57:98:03:1f:1b:cc:d8:0b:8a:62:cc:83:e6:d4: c5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B9:1F:EA:46:8D:9B:8D:21:11:53:2F:BE:62:08:06:9B:BF:8A:1E X509v3 Authority Key Identifier: keyid:19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:05:32:cc:21:35:ff:5b:80:f5:4d:13:99:d0:47:32:5b:b5: 92:b9:d4:17:90:ca:77:82:35:84:4f:11:8f:78:53:4a:d6:83: 36:36:17:6a:04:67:f3:6a:23:bf:74:f2:35:b5:b0:2a:22:2e: ca:98:76:4b:b2:4b:02:50:68:4c:92:5d:f9:a0:8c:ce:68:f8: f8:12:ea:05:70:66:7a:80:3c:b8:96:16:74:dd:92:ae:61:cb: aa:54:8e:0e:fc:b9:ec:54:84:5f:4a:43:05:7d:13:a8:78:48: f3:2a:5c:8f:53:0b:87:8a:e4:ae:0f:c5:aa:8f:c0:3a:d7:b5: b3:ec:dd:d5:a6:c0:5b:04:3e:5c:35:1a:ec:13:f4:49:ef:33: 03:43:7a:9f:73:cb:6e:b6:4c:79:06:07:ec:0f:32:10:0f:b7: d7:8a:bf:a7:fd:fc:de:98:d5:78:49:25:9c:ad:42:e2:1e:08: 35:04:b3:bc:f5:c5:3e:62:10:06:33:41:2e:3e:94:3f:07:58: 4a:2c:d7:3d:19:b6:52:a1:80:64:6c:8b:4c:8c:aa:ff:11:35: 2a:04:d8:52:2e:dd:99:4f:b1:e5:75:77:52:bf:45:64:10:68: 85:01:3e:b1:e9:df:aa:12:6e:44:69:44:5b:53:e9:7e:75:b6: 63:51:39:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz98MKklOytN4KwK7cdrArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YjY2OGU1NmZlMjViZDZkYzUzODAwZWUxNzc1MDYxZWNj MDkyMDYwHhcNMjUxMjA2MTQwMTMyWhcNMjUxMjA3MTQwMTMyWjAzMTEwLwYDVQQD Eyg5NmI5MWZlYTQ2OGQ5YjhkMjExMTUzMmZiZTYyMDgwNjliYmY4YTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cPIxWuvBiaqKqq8rEOa/yP+V0dg V9R8dZV98xRH2VFUX8NHx86NLQU59JCPkCy8wvGm9WbyELt7vLurUM1dYoVux0gQ MbvlrP2gqdmZym1+6LxJThQY5ScP1SMeWA64sPx34oCx/Ek4gQG9F07QCLma99bI JTNv/Geymoqu5WGzWd9qImNZlJUzYpJD9wbD8COt8ZTUSzPA0FM1TTkVcbKm04Gn mF8Gc3UY6yUQc4KZ4TRY0I+k+7jpbunPLH8g2eMJNL786Gob/Hh0IRxeMC02v+Et 9DLSpSuOTl0UFYOjg+jMNrmeXWn2nFKcSweuV5gDHxvM2AuKYsyD5tTFqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJa5H+pGjZuNIRFTL75iCAabv4oeMB8GA1UdIwQY MBaAFBm2aOVv4lvW3FOADuF3UGHswJIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JabzVXX2lXOWJjVTRBTzRYZFFZZXpBa2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kNzBkNDYtMjY1YS00MDkyLTgzMzEt ZWY1ZjA5M2Y1Mzk1LzEvR2JabzVXX2lXOWJjVTRBTzRYZFFZZXpBa2dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9kNzBkNDYtMjY1YS00MDkyLTgzMzEtZWY1ZjA5M2Y1Mzk1 LzEvR2JabzVXX2lXOWJjVTRBTzRYZFFZZXpBa2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAUyzCE1 /1uA9U0TmdBHMlu1krnUF5DKd4I1hE8Rj3hTStaDNjYXagRn82ojv3TyNbWwKiIu yph2S7JLAlBoTJJd+aCMzmj4+BLqBXBmeoA8uJYWdN2SrmHLqlSODvy57FSEX0pD BX0TqHhI8ypcj1MLh4rkrg/Fqo/AOte1s+zd1abAWwQ+XDUa7BP0Se8zA0N6n3PL brZMeQYH7A8yEA+314q/p/383pjVeEklnK1C4h4INQSzvPXFPmIQBjNBLj6UPwdY SizXPRm2UqGAZGyLTIyq/xE1KgTYUi7dmU+x5XV3Ur9FZBBohQE+senfqhJuRGlE W1PpfnW2Y1E5pg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:40 2025 by rpki-client