This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft File: G7yEG3eaK7LCio2u4rLRDVp8NNU.mft (raw, json) Hash identifier: m1ARCDn3PcVi3W5BrAAMurEPnkl7Gt2jlJh5un3/eE8= Subject key identifier: 28:30:32:38:60:B0:67:81:DB:FE:4B:88:29:88:CC:5C:96:CB:F2:99 Authority key identifier: 1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5 Certificate issuer: /CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5 Certificate serial: 019B2DB0331C7F36D461449DD860D9F058B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 19:01:20 +0000 Manifest this update: Wed 17 Dec 2025 19:01:20 +0000 Manifest next update: Thu 18 Dec 2025 19:01:20 +0000 Files and hashes: 1: G7yEG3eaK7LCio2u4rLRDVp8NNU.crl (hash: 6+M/fUG4HDrLFvO3yNFy0C2FkvH3IJ/GVi2SLKPPlxI=) 2: VBl-ShtkY5AIJWsXxjtVR-loSP4.roa (hash: UuFGS1s0gPMKN8UjwJZO3gcLtja3SP+rxmHIDo2PFTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:33:1c:7f:36:d4:61:44:9d:d8:60:d9:f0:58:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5 Validity Not Before: Dec 17 19:01:20 2025 GMT Not After : Dec 18 19:01:20 2025 GMT Subject: CN=2830323860b06781dbfe4b882988cc5c96cbf299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:7d:67:bd:8b:2b:a2:e7:0d:57:0a:52:21: 17:7a:5b:4f:42:4f:f1:e9:8c:24:25:6b:88:87:01: ee:5f:e1:ad:eb:6a:71:c5:3d:4a:8a:f7:1e:b2:d8: 87:3a:39:af:41:a4:60:76:de:ef:29:be:df:31:62: 91:50:aa:fd:38:0c:5c:a9:54:06:42:ac:6a:0a:5a: 93:07:f6:23:c4:56:2d:bf:06:eb:e1:c9:39:17:f8: ba:3c:81:a1:be:97:8d:7b:cc:be:ff:fd:b1:48:38: 98:c8:0b:a6:cd:ef:06:a3:27:2f:b7:f7:ba:62:fa: b7:1f:08:d3:7a:4d:1b:9e:25:25:ae:e6:fb:68:b9: a5:e9:94:6f:03:99:61:8c:e9:87:cf:55:cb:a8:c0: fc:0f:50:e2:07:bd:93:21:d9:92:55:b2:ef:fe:0c: b6:ba:04:f9:e0:45:25:26:c5:af:bb:06:2e:8d:8c: 7e:0d:08:f8:b6:c8:2a:f2:39:e6:6c:c1:a1:50:d9: 5b:ea:94:49:bc:c3:a3:f6:89:a4:ea:3f:b6:b1:55: d5:0b:94:ea:ed:7a:dd:38:df:6c:3b:1d:e8:95:a0: e3:3b:48:cc:bb:fd:0a:56:0d:fe:cc:fb:5e:93:ea: cb:d4:12:80:13:f6:f9:90:26:8c:fc:ef:0d:23:03: 71:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:30:32:38:60:B0:67:81:DB:FE:4B:88:29:88:CC:5C:96:CB:F2:99 X509v3 Authority Key Identifier: keyid:1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a2:b6:ec:88:4a:cc:af:05:32:b1:4c:f3:ff:1f:80:96:06: 1a:61:60:e1:d2:87:26:0d:49:7e:a4:e6:03:8c:6b:8c:3a:05: 80:be:2c:ab:3f:1d:0a:ea:e2:0a:50:de:6b:d7:e0:4b:ab:bb: d9:cc:71:60:c1:ee:48:ee:1a:5b:e4:77:d2:90:e1:88:e8:75: 0e:40:2d:8a:ea:ae:c9:e2:af:22:35:7d:60:6b:9d:7d:54:41: 07:83:c5:23:e8:d3:c4:c8:23:31:20:c2:4d:72:ca:10:ac:54: 79:b6:c6:71:9f:7f:e6:f3:ad:dd:95:eb:7a:12:bb:ad:45:9f: a6:86:45:31:74:c6:d4:4b:20:21:2f:7c:ce:97:7b:21:00:f9: 29:4f:c8:b0:73:18:15:c0:ba:87:7e:d7:2c:37:33:c4:fd:fc: 70:c4:e6:e0:3a:f6:62:e8:f3:41:8f:05:c7:fd:09:95:5e:94: c4:54:03:4e:aa:c7:b6:4a:17:eb:5e:40:31:f9:56:85:c2:cc: c0:48:c9:b8:38:86:e8:fe:a3:ec:1a:91:78:cb:64:a3:1f:31: b9:e0:5b:81:b9:14:04:a4:71:eb:7c:ee:21:63:08:77:8b:cb: 62:c4:08:a9:78:6f:5e:43:e9:0c:8d:2a:d7:e5:c7:93:fa:1d: c1:e3:98:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsDMcfzbUYUSd2GDZ8FizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYmM4NDFiNzc5YTJiYjJjMjhhOGRhZWUyYjJkMTBkNWE3 YzM0ZDUwHhcNMjUxMjE3MTkwMTIwWhcNMjUxMjE4MTkwMTIwWjAzMTEwLwYDVQQD EygyODMwMzIzODYwYjA2NzgxZGJmZTRiODgyOTg4Y2M1Yzk2Y2JmMjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT59Z72LK6LnDVcKUiEXeltPQk/x 6YwkJWuIhwHuX+Gt62pxxT1KivcestiHOjmvQaRgdt7vKb7fMWKRUKr9OAxcqVQG QqxqClqTB/YjxFYtvwbr4ck5F/i6PIGhvpeNe8y+//2xSDiYyAumze8Goycvt/e6 Yvq3HwjTek0bniUlrub7aLml6ZRvA5lhjOmHz1XLqMD8D1DiB72TIdmSVbLv/gy2 ugT54EUlJsWvuwYujYx+DQj4tsgq8jnmbMGhUNlb6pRJvMOj9omk6j+2sVXVC5Tq 7XrdON9sOx3olaDjO0jMu/0KVg3+zPtek+rL1BKAE/b5kCaM/O8NIwNxxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgwMjhgsGeB2/5LiCmIzFyWy/KZMB8GA1UdIwQY MBaAFBu8hBt3miuywoqNruKy0Q1afDTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzd5RUczZWFLN0xDaW8ydTRyTFJEVnA4Tk5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82MDQ0N2QtZDMwNS00ZGVhLTlkYWEt MjY4MzcwMzhjNjg4LzEvRzd5RUczZWFLN0xDaW8ydTRyTFJEVnA4Tk5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82MDQ0N2QtZDMwNS00ZGVhLTlkYWEtMjY4MzcwMzhjNjg4 LzEvRzd5RUczZWFLN0xDaW8ydTRyTFJEVnA4Tk5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKK27IhK zK8FMrFM8/8fgJYGGmFg4dKHJg1JfqTmA4xrjDoFgL4sqz8dCuriClDea9fgS6u7 2cxxYMHuSO4aW+R30pDhiOh1DkAtiuquyeKvIjV9YGudfVRBB4PFI+jTxMgjMSDC TXLKEKxUebbGcZ9/5vOt3ZXrehK7rUWfpoZFMXTG1EsgIS98zpd7IQD5KU/IsHMY FcC6h37XLDczxP38cMTm4Dr2YujzQY8Fx/0JlV6UxFQDTqrHtkoX615AMflWhcLM wEjJuDiG6P6j7BqReMtkox8xueBbgbkUBKRx63zuIWMId4vLYsQIqXhvXkPpDI0q 1+XHk/odweOY/A== -----END CERTIFICATE-----Generated at Wed Dec 17 21:25:07 2025 by rpki-client