This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft File: 1GbRcMgQujTELpIOhNQmKEWXf4U.mft (raw, json) Hash identifier: D0q1DxJW1vXsU2CqV6cvJLFuu9NVCgj8ZwDDzcC3Z7o= Subject key identifier: 28:1A:63:52:23:0B:0C:AF:FD:6C:3E:2B:41:CD:E8:BA:4B:EA:26:64 Authority key identifier: D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85 Certificate issuer: /CN=d466d170c810ba34c42e920e84d4262845977f85 Certificate serial: 019AF2AD8CCDAE0376DEEE2728DAFDFA1BAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft Manifest number: 0675 Signing time: Sat 06 Dec 2025 08:00:51 +0000 Manifest this update: Sat 06 Dec 2025 08:00:51 +0000 Manifest next update: Sun 07 Dec 2025 08:00:51 +0000 Files and hashes: 1: 1GbRcMgQujTELpIOhNQmKEWXf4U.crl (hash: rhGatTts6s/x9BudPz5jOuV1HHKZPyRTjkulu/dDlWE=) 2: r0qME3D6vnHPgW7FfIJR7qyiR6U.roa (hash: +N7ZuBvhriEjaq14DPYwTSmD1pr2ezeFoDJODymMVSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:8c:cd:ae:03:76:de:ee:27:28:da:fd:fa:1b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d466d170c810ba34c42e920e84d4262845977f85 Validity Not Before: Dec 6 08:00:51 2025 GMT Not After : Dec 7 08:00:51 2025 GMT Subject: CN=281a6352230b0caffd6c3e2b41cde8ba4bea2664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9c:f9:3b:7b:b8:bd:60:72:94:e6:73:89:ec: 1d:7a:3d:7b:7a:af:2e:72:5e:4f:37:8d:dc:af:d6: a5:56:e1:30:b0:22:70:37:fd:54:5b:b7:89:58:3c: 78:ee:b4:51:c5:3c:03:17:9f:4c:ba:fe:c6:1d:61: 89:6d:98:4e:d7:f8:12:b6:cc:e1:93:aa:7d:48:fe: ae:f0:8e:47:b1:0b:bc:98:84:61:69:aa:63:22:2f: b4:cd:30:d5:2b:72:e5:48:4e:c0:54:a2:f2:0a:3e: ca:11:35:10:ef:b6:2e:c4:18:a3:ff:30:e5:ea:7d: ba:4d:c4:a2:37:bc:47:20:1d:eb:9e:61:82:8c:c3: 06:61:b0:31:02:03:58:0a:24:1a:e4:2b:9e:cb:0b: 82:35:ab:da:8f:8e:fd:48:14:47:2d:69:09:27:fe: bc:3a:3d:a0:c2:2b:2e:57:e8:45:85:27:c6:1e:9f: f0:d7:21:a7:e0:b6:bd:ee:17:f3:3c:18:69:33:5d: 7a:3d:86:87:cf:c2:44:de:e1:90:9b:cd:8e:4e:8d: 6f:96:a1:91:94:14:ec:bf:70:c9:bf:0a:53:1d:31: 04:01:3a:3f:32:4c:3d:04:d0:2a:7c:90:41:1b:5f: 3f:ed:23:9b:5f:e8:6d:25:38:67:e6:d1:70:2e:ee: 0c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1A:63:52:23:0B:0C:AF:FD:6C:3E:2B:41:CD:E8:BA:4B:EA:26:64 X509v3 Authority Key Identifier: keyid:D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f9:57:60:7b:9d:9a:60:19:07:28:97:12:49:1c:dd:20:fa: 8d:0b:50:33:71:86:6b:14:c8:50:e8:06:27:15:60:83:31:8a: 09:5b:d0:03:ca:1e:75:e5:6a:4d:b9:c3:d6:4a:3b:a4:4c:82: 5a:bc:4c:34:1c:15:32:33:e6:3e:01:58:d5:22:78:d3:94:61: 23:13:d7:fa:06:84:c2:af:b1:cf:c2:cd:0f:74:e8:9a:7b:d7: 63:c9:7e:6d:ab:b9:26:ad:10:a6:69:97:c7:bb:3e:37:16:43: ce:b5:18:30:e6:ac:85:66:77:00:b9:94:f2:e7:74:fc:86:42: 43:77:1b:5f:01:74:b9:9d:44:7f:24:4e:95:87:5f:30:b1:ef: ec:04:1c:f5:6e:f4:f6:69:f0:da:17:71:89:b8:f8:da:63:59: b6:14:21:a7:0a:33:03:96:cc:e3:19:8a:8e:e2:b6:4d:f8:d9: 65:b6:cc:e5:7e:b3:f5:e2:68:b2:b7:33:81:c0:99:57:cf:0c: 5b:a3:4f:65:f6:87:e6:03:a9:8f:96:da:8e:09:53:d7:88:d5: 41:b2:d8:2d:d2:cf:f8:25:5a:9e:ec:01:8d:bd:90:a3:6b:e5: 64:48:89:2f:91:28:6b:57:34:aa:95:44:b7:79:c6:39:2e:b3: 00:f9:f0:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYzNrgN23u4nKNr9+husMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NjZkMTcwYzgxMGJhMzRjNDJlOTIwZTg0ZDQyNjI4NDU5 NzdmODUwHhcNMjUxMjA2MDgwMDUxWhcNMjUxMjA3MDgwMDUxWjAzMTEwLwYDVQQD EygyODFhNjM1MjIzMGIwY2FmZmQ2YzNlMmI0MWNkZThiYTRiZWEyNjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpz5O3u4vWBylOZziewdej17eq8u cl5PN43cr9alVuEwsCJwN/1UW7eJWDx47rRRxTwDF59Muv7GHWGJbZhO1/gStszh k6p9SP6u8I5HsQu8mIRhaapjIi+0zTDVK3LlSE7AVKLyCj7KETUQ77YuxBij/zDl 6n26TcSiN7xHIB3rnmGCjMMGYbAxAgNYCiQa5CueywuCNavaj479SBRHLWkJJ/68 Oj2gwisuV+hFhSfGHp/w1yGn4La97hfzPBhpM116PYaHz8JE3uGQm82OTo1vlqGR lBTsv3DJvwpTHTEEATo/Mkw9BNAqfJBBG18/7SObX+htJThn5tFwLu4MSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgaY1IjCwyv/Ww+K0HN6LpL6iZkMB8GA1UdIwQY MBaAFNRm0XDIELo0xC6SDoTUJihFl3+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUdiUmNNZ1F1alRFTHBJT2hOUW1LRVdYZjRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yMzA2ZjYtNmNjMC00OTgyLWE1MjMt MTY4NDJiZGFkOTI1LzEvMUdiUmNNZ1F1alRFTHBJT2hOUW1LRVdYZjRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8yMzA2ZjYtNmNjMC00OTgyLWE1MjMtMTY4NDJiZGFkOTI1 LzEvMUdiUmNNZ1F1alRFTHBJT2hOUW1LRVdYZjRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/lXYHud mmAZByiXEkkc3SD6jQtQM3GGaxTIUOgGJxVggzGKCVvQA8oedeVqTbnD1ko7pEyC WrxMNBwVMjPmPgFY1SJ405RhIxPX+gaEwq+xz8LND3TomnvXY8l+bau5Jq0QpmmX x7s+NxZDzrUYMOashWZ3ALmU8ud0/IZCQ3cbXwF0uZ1EfyROlYdfMLHv7AQc9W70 9mnw2hdxibj42mNZthQhpwozA5bM4xmKjuK2TfjZZbbM5X6z9eJosrczgcCZV88M W6NPZfaH5gOpj5bajglT14jVQbLYLdLP+CVanuwBjb2Qo2vlZEiJL5Eoa1c0qpVE t3nGOS6zAPnw2w== -----END CERTIFICATE-----Generated at Sat Dec 6 17:06:29 2025 by rpki-client