This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft File: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft (raw, json) Hash identifier: BOOU0XuuaNLo599GOE2QmRPy5JfmMVp7uWEFn8+YlEs= Subject key identifier: BE:A3:AA:9E:C2:BF:6D:12:71:BE:65:71:55:F8:49:7D:B6:BB:F3:DA Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF Certificate issuer: /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af Certificate serial: 019AF5782805A9872CFC7E9F0F10D2489EB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 21:01:23 +0000 Manifest this update: Sat 06 Dec 2025 21:01:23 +0000 Manifest next update: Sun 07 Dec 2025 21:01:23 +0000 Files and hashes: 1: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl (hash: SjiF/kzrEsAKwz/vFCv0rTosrtk4Bgng4BePKCa+IFI=) 2: S_yQLv48huAuIFJl3M3q9MKN7ww.roa (hash: BfPTYmIN4iY+2dpqgW32GYnFtvPimuKxK2FzlajUXYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:28:05:a9:87:2c:fc:7e:9f:0f:10:d2:48:9e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af Validity Not Before: Dec 6 21:01:23 2025 GMT Not After : Dec 7 21:01:23 2025 GMT Subject: CN=bea3aa9ec2bf6d1271be657155f8497db6bbf3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:57:b9:51:c1:3f:ff:df:7c:a9:2d:2e:ed:bf: be:7e:4a:0c:6e:bf:eb:31:92:40:7b:aa:ed:6b:68: ae:18:2d:d2:2d:22:15:21:e6:44:4f:c0:ab:07:32: 6e:16:c8:14:7a:0f:94:d5:fc:63:51:15:91:4b:2a: 43:50:64:b2:a1:24:07:99:6f:39:25:9c:d9:56:42: 40:a9:b1:e8:c9:4e:a7:f0:d0:b3:23:3b:93:2b:ba: e7:76:d8:29:3e:5d:4c:dc:9c:01:6e:af:b2:ea:64: 66:ae:06:16:2c:92:75:a6:54:df:75:e5:c9:1c:32: d8:5c:04:c5:95:77:93:b8:0d:e6:7d:e7:68:03:d1: 95:84:b7:02:a0:ca:15:7a:fa:1d:9d:dd:cd:03:e7: e4:bb:b9:49:f9:b4:32:31:6e:e7:d2:8c:b0:9d:c1: 4e:c9:bb:f6:74:7c:cd:63:8a:a4:ca:fa:cf:33:79: f2:8b:9d:f9:f5:28:12:65:cf:c4:c2:66:34:d8:89: a2:01:e3:10:39:1a:80:de:1c:4e:10:66:4f:d0:4c: 4d:01:24:41:72:2d:a1:9c:ec:33:1a:f8:d4:0e:ea: 62:09:eb:35:ab:48:b8:b9:60:8d:eb:50:87:1d:2e: d7:76:0a:25:5e:97:88:b3:cd:b6:08:3f:1f:e5:cb: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A3:AA:9E:C2:BF:6D:12:71:BE:65:71:55:F8:49:7D:B6:BB:F3:DA X509v3 Authority Key Identifier: keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:10:6d:d1:45:1d:28:ff:11:25:b6:0f:09:b3:1f:91:05:eb: 49:f0:b6:4e:c3:df:cf:79:1c:f1:5a:63:d9:f2:c3:b9:d7:d9: 4c:e4:15:40:46:40:c4:8a:56:84:08:3f:31:c1:7d:70:ba:e4: 8f:25:c2:78:4e:b5:81:cc:2e:b1:5b:90:0a:bc:79:8e:8b:f8: 7e:8e:8e:68:4e:ee:e0:31:3e:cf:e5:8e:93:b2:f0:c2:e0:16: 8e:70:e4:49:60:d2:b7:ad:93:0c:43:12:27:7d:32:3c:2e:a0: ff:c7:0c:dd:74:33:9f:3d:a4:13:de:c8:62:a6:ae:92:37:2f: e3:a2:2d:38:46:00:9d:af:45:bd:c1:14:d0:c7:62:8f:9b:ef: 10:2e:21:b9:f8:25:59:02:f1:0b:0b:06:ea:5f:a4:56:56:91: e8:c6:6a:08:a6:55:11:b0:7e:c5:78:35:12:63:30:9c:6e:87: 6d:90:0c:eb:61:17:eb:38:c0:0d:d1:d0:c9:67:5f:8a:f5:44: 95:39:2a:f7:2a:63:4b:46:5a:54:a3:2b:14:71:61:7c:9e:10: 72:0b:cc:85:2d:e1:66:58:2f:7d:1d:fc:4b:16:80:4b:aa:e5: 73:47:6f:f8:63:69:00:0f:c0:a0:03:08:c4:71:4b:74:ec:ad: b4:81:68:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eCgFqYcs/H6fDxDSSJ6zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhM2U5NzBlZDYyNzcxMzQzYTA5NmZmYjJlZmMyNmFiYjdl ZDY4YWYwHhcNMjUxMjA2MjEwMTIzWhcNMjUxMjA3MjEwMTIzWjAzMTEwLwYDVQQD EyhiZWEzYWE5ZWMyYmY2ZDEyNzFiZTY1NzE1NWY4NDk3ZGI2YmJmM2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1e5UcE//998qS0u7b++fkoMbr/r MZJAe6rta2iuGC3SLSIVIeZET8CrBzJuFsgUeg+U1fxjURWRSypDUGSyoSQHmW85 JZzZVkJAqbHoyU6n8NCzIzuTK7rndtgpPl1M3JwBbq+y6mRmrgYWLJJ1plTfdeXJ HDLYXATFlXeTuA3mfedoA9GVhLcCoMoVevodnd3NA+fku7lJ+bQyMW7n0oywncFO ybv2dHzNY4qkyvrPM3nyi5359SgSZc/EwmY02ImiAeMQORqA3hxOEGZP0ExNASRB ci2hnOwzGvjUDupiCes1q0i4uWCN61CHHS7XdgolXpeIs822CD8f5cvvIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6jqp7Cv20Scb5lcVX4SX22u/PaMB8GA1UdIwQY MBaAFBo+lw7WJ3E0Oglv+y78Jqu37WivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUt ZDQ4OTA5NGM2NjA0LzEvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUtZDQ4OTA5NGM2NjA0 LzEvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1hBt0UUd KP8RJbYPCbMfkQXrSfC2TsPfz3kc8Vpj2fLDudfZTOQVQEZAxIpWhAg/McF9cLrk jyXCeE61gcwusVuQCrx5jov4fo6OaE7u4DE+z+WOk7LwwuAWjnDkSWDSt62TDEMS J30yPC6g/8cM3XQznz2kE97IYqaukjcv46ItOEYAna9FvcEU0Mdij5vvEC4hufgl WQLxCwsG6l+kVlaR6MZqCKZVEbB+xXg1EmMwnG6HbZAM62EX6zjADdHQyWdfivVE lTkq9ypjS0ZaVKMrFHFhfJ4QcgvMhS3hZlgvfR38SxaAS6rlc0dv+GNpAA/AoAMI xHFLdOyttIFogQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:00:13 2025 by rpki-client