This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft File: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft (raw, json) Hash identifier: f+ImyEbxnurYtXGCbU8HrshkDos86iHRhGvy/RHVv1s= Subject key identifier: F9:6E:1F:B2:49:6C:91:7A:C3:D7:D2:2A:07:CA:5E:44:53:44:9E:DE Authority key identifier: 1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3 Certificate issuer: /CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3 Certificate serial: 019AF31D5D4BF7BCB7201A7B8C7817854A6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft Manifest number: 0C27 Signing time: Sat 06 Dec 2025 10:02:58 +0000 Manifest this update: Sat 06 Dec 2025 10:02:58 +0000 Manifest next update: Sun 07 Dec 2025 10:02:58 +0000 Files and hashes: 1: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl (hash: q6oRd613Zks+hfWjRnTzOvyPZTPJgCHILdH4aqR4Huo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:5d:4b:f7:bc:b7:20:1a:7b:8c:78:17:85:4a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3 Validity Not Before: Dec 6 10:02:58 2025 GMT Not After : Dec 7 10:02:58 2025 GMT Subject: CN=f96e1fb2496c917ac3d7d22a07ca5e4453449ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:48:cb:00:28:35:53:cd:5c:a2:e1:94:31: 94:da:95:ff:62:1a:47:89:f0:9b:36:b8:86:ca:fc: 6f:d8:32:47:16:e9:60:54:90:18:5c:12:ca:30:66: 5c:4e:5e:e6:83:a2:7f:ae:ea:83:09:d2:8b:f8:33: b6:53:1f:07:93:d6:d6:4e:f5:71:46:78:3e:3d:f3: 1d:31:e3:58:1e:a8:aa:7b:b9:f4:fe:7d:95:e0:67: 0c:12:6d:24:d7:fb:22:c7:3e:50:7d:57:88:f9:ac: 27:1d:2a:5b:77:61:bb:b5:89:fa:6a:b3:cc:2e:16: 57:eb:0d:92:fa:3c:78:fe:1d:5c:85:6a:50:3a:60: 47:a4:0a:a5:6e:ed:36:aa:4c:69:99:ad:32:6b:fe: c6:72:6d:10:03:24:9b:00:37:ff:7b:21:4b:21:4d: e7:9a:dd:97:b2:91:e2:71:d0:36:ee:1c:04:95:08: f1:3c:fb:48:37:ef:11:3b:0c:a9:33:9a:29:e9:28: 0e:39:60:cd:ea:39:d9:d8:7f:de:9c:e1:8c:61:76: c3:0e:24:3a:d0:6d:d3:60:4c:61:04:55:56:c8:8d: a9:f5:47:07:95:05:62:67:b7:14:d1:2c:75:7b:36: c5:bf:ce:79:f4:e3:34:10:0f:61:aa:1e:c0:2d:25: ef:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6E:1F:B2:49:6C:91:7A:C3:D7:D2:2A:07:CA:5E:44:53:44:9E:DE X509v3 Authority Key Identifier: keyid:1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a7:9a:cd:1a:8b:54:0f:3c:33:ef:50:0d:9f:16:c9:2d:21: 4d:e2:fa:20:cb:2f:d1:7d:d0:a2:e3:64:bd:38:74:f3:de:5d: 7c:d7:25:3a:3b:15:fa:84:fd:95:7d:ce:7f:ac:3e:af:34:33: 4c:79:1b:f8:82:1f:c7:42:25:b9:06:13:fe:76:64:69:72:50: f1:f4:c3:ee:0f:c5:ab:10:d6:c2:92:71:57:12:1b:45:bf:75: 88:0d:19:e2:a9:be:d7:55:04:21:25:7d:e5:3b:95:4e:1a:ed: fa:22:fe:19:8a:5d:95:66:01:c4:84:ab:a0:ac:e8:bf:61:57: c3:5e:54:da:3c:ac:97:92:a2:98:4f:e6:e9:19:45:61:98:97: 75:87:17:05:df:a4:c9:4f:bf:6d:9e:3f:95:85:48:ff:4d:25: 01:ec:d2:04:5f:09:6f:71:39:d0:26:83:9e:13:dd:b2:98:1e: dc:ea:a8:19:ed:ad:aa:1c:e6:f4:de:55:fe:94:19:02:04:5e: 29:99:c0:8e:9a:18:a7:d2:ae:55:c2:a3:b5:d2:50:ec:e1:3b: 02:de:57:24:34:b4:ff:dc:20:d0:13:7b:c3:cb:6a:cc:d9:f3: de:96:76:32:29:08:15:74:65:6f:9d:03:1c:4f:46:4f:52:11: 23:4a:85:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHV1L97y3IBp7jHgXhUprMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOTEzNjMyNjgwOWYwNjg3ZjdkN2Q0ZGMxYTgxYjdiOTlh M2Q3ZDMwHhcNMjUxMjA2MTAwMjU4WhcNMjUxMjA3MTAwMjU4WjAzMTEwLwYDVQQD EyhmOTZlMWZiMjQ5NmM5MTdhYzNkN2QyMmEwN2NhNWU0NDUzNDQ5ZWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsdIywAoNVPNXKLhlDGU2pX/YhpH ifCbNriGyvxv2DJHFulgVJAYXBLKMGZcTl7mg6J/ruqDCdKL+DO2Ux8Hk9bWTvVx Rng+PfMdMeNYHqiqe7n0/n2V4GcMEm0k1/sixz5QfVeI+awnHSpbd2G7tYn6arPM LhZX6w2S+jx4/h1chWpQOmBHpAqlbu02qkxpma0ya/7Gcm0QAySbADf/eyFLIU3n mt2XspHicdA27hwElQjxPPtIN+8ROwypM5op6SgOOWDN6jnZ2H/enOGMYXbDDiQ6 0G3TYExhBFVWyI2p9UcHlQViZ7cU0Sx1ezbFv8559OM0EA9hqh7ALSXvJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPluH7JJbJF6w9fSKgfKXkRTRJ7eMB8GA1UdIwQY MBaAFBuRNjJoCfBof319TcGoG3uZo9fTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzVFMk1tZ0o4R2hfZlgxTndhZ2JlNW1qMTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZjBjODItNjMzMC00OTcxLTk4YzAt NTliNTNiM2E2ZGExLzEvRzVFMk1tZ0o4R2hfZlgxTndhZ2JlNW1qMTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi83ZjBjODItNjMzMC00OTcxLTk4YzAtNTliNTNiM2E2ZGEx LzEvRzVFMk1tZ0o4R2hfZlgxTndhZ2JlNW1qMTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6eazRqL VA88M+9QDZ8WyS0hTeL6IMsv0X3QouNkvTh0895dfNclOjsV+oT9lX3Of6w+rzQz THkb+IIfx0IluQYT/nZkaXJQ8fTD7g/FqxDWwpJxVxIbRb91iA0Z4qm+11UEISV9 5TuVThrt+iL+GYpdlWYBxISroKzov2FXw15U2jysl5KimE/m6RlFYZiXdYcXBd+k yU+/bZ4/lYVI/00lAezSBF8Jb3E50CaDnhPdspge3OqoGe2tqhzm9N5V/pQZAgRe KZnAjpoYp9KuVcKjtdJQ7OE7At5XJDS0/9wg0BN7w8tqzNnz3pZ2MikIFXRlb50D HE9GT1IRI0qF4A== -----END CERTIFICATE-----Generated at Sat Dec 6 20:01:06 2025 by rpki-client