This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft File: G6b10yR0vob2MFiURTdik0TU8Bo.mft (raw, json) Hash identifier: JzgMojyJHBVhlsMclSU1jUmUPqwsGoza7ZBFDcioRTQ= Subject key identifier: 08:BA:74:EC:2F:7A:9E:AE:AB:25:02:BF:9A:B9:18:1F:A3:B7:A4:EA Authority key identifier: 1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A Certificate issuer: /CN=1ba6f5d32474be86f63058944537629344d4f01a Certificate serial: 019AF6540286888847EEB55DC70623E338E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft Manifest number: 0547 Signing time: Sun 07 Dec 2025 01:01:32 +0000 Manifest this update: Sun 07 Dec 2025 01:01:32 +0000 Manifest next update: Mon 08 Dec 2025 01:01:32 +0000 Files and hashes: 1: G6b10yR0vob2MFiURTdik0TU8Bo.crl (hash: 5Ljti2lKDHox3ZssP+1TfOS5EVa9q/+4ONIZ24T8pno=) 2: mToK7O7t52pvY5jAx8Z0JoUDFIM.roa (hash: Xs8G0qX2ZJs522/1L68wTzEgBOm79/mlDz8OPsPAHlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:54:02:86:88:88:47:ee:b5:5d:c7:06:23:e3:38:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba6f5d32474be86f63058944537629344d4f01a Validity Not Before: Dec 7 01:01:32 2025 GMT Not After : Dec 8 01:01:32 2025 GMT Subject: CN=08ba74ec2f7a9eaeab2502bf9ab9181fa3b7a4ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a0:99:53:23:d2:7e:b4:a3:04:9a:38:82:36: c8:b9:7c:4b:6f:bb:4f:19:fb:43:61:95:d1:83:8f: db:ab:60:c0:32:d0:37:47:0d:45:9a:74:91:31:16: c2:82:1f:fa:2a:ef:5e:b0:58:7e:03:49:c5:eb:40: 95:e6:c3:20:cd:7b:02:10:e8:75:c5:da:67:8e:d3: 93:88:5f:fe:68:66:45:8f:c9:f2:41:fb:20:57:e2: 7a:30:1c:2c:ff:81:3d:b7:51:9b:51:c6:18:ac:bf: a1:b0:a8:3f:24:79:13:17:8d:1f:f6:36:32:a0:34: 4c:33:af:fd:79:05:e4:0c:80:9f:00:ec:33:a6:cf: d7:d2:41:2d:03:d3:5a:a5:2d:64:20:53:3b:99:29: e8:41:e6:40:6a:0b:ac:e7:90:5b:70:38:b1:cc:a0: 54:f5:fd:19:76:4d:40:27:bf:29:fa:93:b8:03:f1: 30:78:2e:d4:04:bb:c1:69:53:f3:ff:15:b8:a8:b1: c3:bf:01:80:89:fc:49:79:38:de:ce:25:0e:30:03: c5:54:67:0c:83:93:14:3e:cc:e2:19:b4:9c:d0:c1: d6:63:19:c3:20:c9:69:92:7e:30:ce:f6:63:89:97: fc:f3:62:78:29:12:e3:90:80:c7:29:ec:9c:94:ad: 06:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BA:74:EC:2F:7A:9E:AE:AB:25:02:BF:9A:B9:18:1F:A3:B7:A4:EA X509v3 Authority Key Identifier: keyid:1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f1:eb:fe:04:c8:91:b2:33:54:84:b3:d8:f0:78:3b:78:9c: 1f:27:ca:57:f1:84:a4:06:ae:d0:b8:6f:22:63:96:99:01:40: 64:09:01:da:ae:a4:36:e4:b4:2a:aa:5b:c8:7b:80:09:7e:8d: fa:46:01:29:5b:a8:be:67:08:93:2b:07:f1:99:7d:77:98:74: f9:5f:b6:62:af:3d:d2:3c:1b:e2:3d:a0:f2:6b:23:6e:a4:b1: 7d:77:d8:b2:fe:c0:0e:e2:b1:f6:51:1b:f2:95:81:0a:8d:7e: c0:84:ca:fc:f1:34:1d:ae:0e:b0:80:73:64:50:c4:5c:29:69: 95:69:6c:3a:b7:d6:d8:ec:70:fe:0d:72:9d:f4:ae:57:d7:ed: 6f:64:af:05:65:9c:45:de:8f:cb:20:f9:ee:9f:2e:53:57:5f: e0:01:f8:d2:87:7e:b5:c4:24:6a:e6:de:0c:7d:6e:aa:df:07: 8e:6e:34:64:e3:18:bd:cd:34:8b:f1:6b:a5:22:e6:3a:13:16: 0d:19:de:00:7d:cf:be:31:48:37:8f:1c:e5:6b:b2:a1:9b:74: c2:7a:fb:9e:23:ff:90:08:42:ff:7b:60:ee:f5:7b:c2:a3:33: 08:a0:1b:89:f1:cd:b2:f0:b0:d9:b8:19:c8:d0:21:b0:81:88: 08:2e:38:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2VAKGiIhH7rVdxwYj4zjiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTZmNWQzMjQ3NGJlODZmNjMwNTg5NDQ1Mzc2MjkzNDRk NGYwMWEwHhcNMjUxMjA3MDEwMTMyWhcNMjUxMjA4MDEwMTMyWjAzMTEwLwYDVQQD EygwOGJhNzRlYzJmN2E5ZWFlYWIyNTAyYmY5YWI5MTgxZmEzYjdhNGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqCZUyPSfrSjBJo4gjbIuXxLb7tP GftDYZXRg4/bq2DAMtA3Rw1FmnSRMRbCgh/6Ku9esFh+A0nF60CV5sMgzXsCEOh1 xdpnjtOTiF/+aGZFj8nyQfsgV+J6MBws/4E9t1GbUcYYrL+hsKg/JHkTF40f9jYy oDRMM6/9eQXkDICfAOwzps/X0kEtA9NapS1kIFM7mSnoQeZAagus55BbcDixzKBU 9f0Zdk1AJ78p+pO4A/EweC7UBLvBaVPz/xW4qLHDvwGAifxJeTjeziUOMAPFVGcM g5MUPsziGbSc0MHWYxnDIMlpkn4wzvZjiZf882J4KRLjkIDHKeyclK0GDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAi6dOwvep6uqyUCv5q5GB+jt6TqMB8GA1UdIwQY MBaAFBum9dMkdL6G9jBYlEU3YpNE1PAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZiMTB5UjB2b2IyTUZpVVJUZGlrMFRVOEJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYmVlNTktOTlmNC00MTNjLWIwZDYt NTgwODFhMTZjYmRiLzEvRzZiMTB5UjB2b2IyTUZpVVJUZGlrMFRVOEJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYmVlNTktOTlmNC00MTNjLWIwZDYtNTgwODFhMTZjYmRi LzEvRzZiMTB5UjB2b2IyTUZpVVJUZGlrMFRVOEJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfHr/gTI kbIzVISz2PB4O3icHyfKV/GEpAau0LhvImOWmQFAZAkB2q6kNuS0KqpbyHuACX6N +kYBKVuovmcIkysH8Zl9d5h0+V+2Yq890jwb4j2g8msjbqSxfXfYsv7ADuKx9lEb 8pWBCo1+wITK/PE0Ha4OsIBzZFDEXClplWlsOrfW2Oxw/g1ynfSuV9ftb2SvBWWc Rd6PyyD57p8uU1df4AH40od+tcQkaubeDH1uqt8Hjm40ZOMYvc00i/FrpSLmOhMW DRneAH3PvjFIN48c5WuyoZt0wnr7niP/kAhC/3tg7vV7wqMzCKAbifHNsvCw2bgZ yNAhsIGICC443g== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:16 2025 by rpki-client