This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft File: G2pafunSGn3UW7v_9DGzZN6gta4.mft (raw, json) Hash identifier: 0sy5ebw+HZ1rcqFK6yreEcXVxSWo6RhYU1LvqVJBEQw= Subject key identifier: D3:A8:72:0B:48:53:8F:51:53:CF:33:DB:55:DE:85:CF:1B:A2:A7:98 Authority key identifier: 1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE Certificate issuer: /CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae Certificate serial: 019AF163FA008BC701E7A6A883DD5E59DABD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft Manifest number: 098D Signing time: Sat 06 Dec 2025 02:00:52 +0000 Manifest this update: Sat 06 Dec 2025 02:00:52 +0000 Manifest next update: Sun 07 Dec 2025 02:00:52 +0000 Files and hashes: 1: G2pafunSGn3UW7v_9DGzZN6gta4.crl (hash: Y1cvg/RRLpk1CKAETLDPjXgmH+UWU+1+v3QO8E4eHPY=) 2: sEHEZJdyZNM4H5KyWrunH6ae2rs.roa (hash: 2fdDOMvINX/MZk3ZnK4mtn0JneFrVoF0x/0pmTQHlWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:fa:00:8b:c7:01:e7:a6:a8:83:dd:5e:59:da:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae Validity Not Before: Dec 6 02:00:52 2025 GMT Not After : Dec 7 02:00:52 2025 GMT Subject: CN=d3a8720b48538f5153cf33db55de85cf1ba2a798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bf:66:c6:eb:6b:48:e6:1f:f8:06:97:6b:d8: a2:f9:c1:ae:00:bd:34:1a:35:45:08:ee:d9:6d:0a: 24:a2:88:41:63:13:3a:03:ad:8d:31:92:7a:a5:c3: 27:da:9e:b7:6e:1b:6e:f1:55:1e:ab:ee:19:33:bf: 2c:c2:b1:29:3a:e7:bf:0b:75:bc:7b:82:38:9c:4a: 92:05:de:6b:d9:91:d4:61:36:4c:3d:d2:ac:46:79: 74:b8:1f:69:f7:e6:4a:a0:cf:e0:f8:df:82:a9:31: 80:24:a9:12:db:95:0e:91:d9:c8:87:2d:3f:93:7d: ef:dc:50:bf:73:35:34:89:53:de:6b:42:ae:3f:09: 4f:cd:1f:20:19:3b:35:fc:a8:ba:a4:9d:05:86:6d: e4:85:5e:9e:5a:67:4f:60:86:20:30:69:47:98:b8: bb:0f:1f:cf:25:12:21:9e:6b:d5:fc:32:d0:0b:39: d4:4a:d7:87:0a:83:44:0f:f0:c2:9d:81:f1:b4:8a: f8:95:fa:bb:9f:a2:a8:96:a1:6a:84:67:af:ef:40: 9c:03:dd:28:b5:c0:ca:02:3d:90:67:ea:4d:2f:b0: 7e:d3:d0:9d:75:9d:b3:64:b4:39:17:30:ec:5c:20: fc:03:4c:82:58:58:c0:a5:65:7a:1d:04:3a:9a:0b: a3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A8:72:0B:48:53:8F:51:53:CF:33:DB:55:DE:85:CF:1B:A2:A7:98 X509v3 Authority Key Identifier: keyid:1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0d:2f:84:4e:08:12:1a:2d:1b:da:4e:04:c9:cc:4b:8d:89: 5f:b4:46:95:fc:61:2c:d6:7f:64:57:c4:85:7a:a4:31:d9:37: 1a:39:32:72:0a:29:e8:57:62:f4:3e:25:48:c4:3b:ba:23:6a: 2f:f4:d9:fc:ef:b1:9d:ad:c6:5e:c6:7e:1e:7c:66:70:29:b8: db:cc:d7:b1:f8:3c:c7:17:5a:fb:a7:bb:27:2f:08:4c:87:62: 88:92:47:25:a4:60:41:77:3c:30:f4:e1:4c:b8:95:5a:b0:99: d6:fe:35:09:5f:61:3a:15:84:98:6e:55:a2:ab:ad:8b:83:d4: da:15:1e:9b:94:04:db:fb:bc:b2:0d:55:6f:07:3a:5c:61:ec: 08:a2:44:36:a8:8c:76:10:a8:ca:f8:19:65:89:a6:38:24:3a: 2f:54:55:13:26:f2:ba:a8:0b:5f:98:c2:61:8c:57:f9:97:49: 33:a0:77:43:66:be:f4:62:13:9f:1e:a4:da:44:81:86:11:2f: 0f:90:06:4f:00:fd:7f:75:ad:98:63:a0:bb:58:65:be:fb:53: 08:45:fc:59:70:e8:f5:f9:b0:d6:0c:9d:cc:0c:da:da:52:6c: 81:19:d2:cf:9d:2d:72:84:f4:38:aa:4c:5a:32:12:1f:5d:a5: ae:f4:c2:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/oAi8cB56aog91eWdq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNmE1YTdlZTlkMjFhN2RkNDViYmJmZmY0MzFiMzY0ZGVh MGI1YWUwHhcNMjUxMjA2MDIwMDUyWhcNMjUxMjA3MDIwMDUyWjAzMTEwLwYDVQQD EyhkM2E4NzIwYjQ4NTM4ZjUxNTNjZjMzZGI1NWRlODVjZjFiYTJhNzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn79mxutrSOYf+AaXa9ii+cGuAL00 GjVFCO7ZbQokoohBYxM6A62NMZJ6pcMn2p63bhtu8VUeq+4ZM78swrEpOue/C3W8 e4I4nEqSBd5r2ZHUYTZMPdKsRnl0uB9p9+ZKoM/g+N+CqTGAJKkS25UOkdnIhy0/ k33v3FC/czU0iVPea0KuPwlPzR8gGTs1/Ki6pJ0Fhm3khV6eWmdPYIYgMGlHmLi7 Dx/PJRIhnmvV/DLQCznUSteHCoNED/DCnYHxtIr4lfq7n6KolqFqhGev70CcA90o tcDKAj2QZ+pNL7B+09CddZ2zZLQ5FzDsXCD8A0yCWFjApWV6HQQ6mgujtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOocgtIU49RU88z21Xehc8boqeYMB8GA1UdIwQY MBaAFBtqWn7p0hp91Fu7//Qxs2TeoLWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kOGIwYzMtM2Y3MC00M2RiLTg1YTQt NWJlMTIwMjM2N2U5LzEvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kOGIwYzMtM2Y3MC00M2RiLTg1YTQtNWJlMTIwMjM2N2U5 LzEvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACg0vhE4I EhotG9pOBMnMS42JX7RGlfxhLNZ/ZFfEhXqkMdk3Gjkycgop6Fdi9D4lSMQ7uiNq L/TZ/O+xna3GXsZ+HnxmcCm428zXsfg8xxda+6e7Jy8ITIdiiJJHJaRgQXc8MPTh TLiVWrCZ1v41CV9hOhWEmG5Voquti4PU2hUem5QE2/u8sg1Vbwc6XGHsCKJENqiM dhCoyvgZZYmmOCQ6L1RVEybyuqgLX5jCYYxX+ZdJM6B3Q2a+9GITnx6k2kSBhhEv D5AGTwD9f3WtmGOgu1hlvvtTCEX8WXDo9fmw1gydzAza2lJsgRnSz50tcoT0OKpM WjISH12lrvTC3g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:07 2025 by rpki-client