This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft File: G1WOmRP2tWzD1WD5T_E38s1vSGI.mft (raw, json) Hash identifier: fxVtLQSNAeKbvzCzpGnC431UEirYCceqDBiarjRkol0= Subject key identifier: D8:C6:15:FF:B8:2E:20:E5:C6:F6:E2:EC:90:BE:DE:8D:E5:27:AA:5F Authority key identifier: 1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62 Certificate issuer: /CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862 Certificate serial: 019AF23F8D531768E8545C89B9B9DF3F2FE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft Manifest number: 0779 Signing time: Sat 06 Dec 2025 06:00:42 +0000 Manifest this update: Sat 06 Dec 2025 06:00:42 +0000 Manifest next update: Sun 07 Dec 2025 06:00:42 +0000 Files and hashes: 1: G1WOmRP2tWzD1WD5T_E38s1vSGI.crl (hash: b6dSsyLMJ6HPSosPNY0AjoM7PbYyMBd3myt47Gn9iRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:8d:53:17:68:e8:54:5c:89:b9:b9:df:3f:2f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862 Validity Not Before: Dec 6 06:00:42 2025 GMT Not After : Dec 7 06:00:42 2025 GMT Subject: CN=d8c615ffb82e20e5c6f6e2ec90bede8de527aa5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:58:cb:6f:05:4c:a3:8f:c0:c2:10:a0:5e:98: 7b:ef:04:8d:40:2d:4e:6f:15:5d:dd:21:e3:6e:5e: 1c:1b:9c:3f:5c:a5:2c:8e:fd:7b:8b:8e:92:16:26: 79:15:58:23:70:05:ff:37:4a:a4:5c:04:08:e8:f8: 02:53:ac:70:6f:ea:16:00:ab:19:40:78:ef:24:a9: 6f:1f:aa:4c:a9:b8:9a:13:1a:a8:2b:10:47:c8:81: 58:f3:92:b1:97:dc:f9:a1:1b:ee:6d:1d:ea:32:d6: fc:c9:9c:3d:ce:0b:bc:1d:34:13:c0:cc:95:0c:5e: 75:bf:16:83:52:84:0a:c2:42:34:e9:a5:4b:73:71: 92:8b:2e:e4:d9:30:63:43:d2:7c:f6:b9:e3:71:96: 28:0c:0b:1a:e4:6b:66:5b:d0:ef:f1:ef:1c:13:79: dc:d2:24:b5:97:35:ae:d1:9b:b8:85:4b:8e:74:52: ee:4a:25:05:8e:24:89:3b:80:f0:aa:41:05:71:c3: 66:5a:13:0f:ca:c4:4e:48:7a:98:b4:cf:ac:27:f3: 6c:f8:1b:14:66:d1:69:de:95:38:a5:61:6e:ab:05: 10:f4:2a:92:e4:86:92:c6:51:bc:2c:df:24:ab:0a: 6f:35:f5:8d:b0:e0:8a:31:80:84:f0:ff:c2:c7:56: 9b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C6:15:FF:B8:2E:20:E5:C6:F6:E2:EC:90:BE:DE:8D:E5:27:AA:5F X509v3 Authority Key Identifier: keyid:1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:71:a2:78:11:f5:ea:1d:79:7f:66:bd:68:cb:15:cf:e7:03: 96:b5:f2:6f:cf:4c:bb:9e:f8:1e:8a:cb:a5:60:ae:92:c0:ba: 1c:af:b4:74:14:28:ad:3e:6f:14:dd:80:f5:5f:58:b2:e7:48: ac:34:e2:3d:38:0e:67:04:cd:f0:7c:2a:5b:74:58:a3:77:b4: 49:22:a0:21:aa:d1:3d:d2:e0:d3:93:90:2a:ee:40:9d:ee:a4: b1:41:ec:07:51:e2:5a:42:95:6e:9c:c2:7a:4b:b7:62:29:55: a0:58:2d:c8:45:5b:d6:73:dc:9c:bf:5e:45:14:39:24:df:19: b7:0d:0d:00:f0:8f:d6:b1:a5:01:17:83:4e:5f:56:a2:05:29: 91:4b:5e:bd:b9:38:e7:13:37:51:0d:12:84:af:40:ef:53:21: 0c:66:a5:63:29:45:8a:98:77:b1:9a:38:f1:0f:f6:55:3c:e6: cb:a2:0d:c9:a6:a1:31:aa:17:f6:56:f2:e3:f3:d9:fa:5c:d4: 19:32:8e:ec:36:12:27:d5:8c:f4:f7:06:b7:82:c1:6c:92:b3: dd:01:c2:36:da:92:e3:a5:b8:aa:32:af:71:6d:b6:b7:5e:9c: 13:4b:96:c9:e8:7a:ac:21:8b:2b:10:0a:1e:e4:ca:e3:f0:39: 65:2d:a2:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP41TF2joVFyJubnfPy/pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNTU4ZTk5MTNmNmI1NmNjM2Q1NjBmOTRmZjEzN2YyY2Q2 ZjQ4NjIwHhcNMjUxMjA2MDYwMDQyWhcNMjUxMjA3MDYwMDQyWjAzMTEwLwYDVQQD EyhkOGM2MTVmZmI4MmUyMGU1YzZmNmUyZWM5MGJlZGU4ZGU1MjdhYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoljLbwVMo4/AwhCgXph77wSNQC1O bxVd3SHjbl4cG5w/XKUsjv17i46SFiZ5FVgjcAX/N0qkXAQI6PgCU6xwb+oWAKsZ QHjvJKlvH6pMqbiaExqoKxBHyIFY85Kxl9z5oRvubR3qMtb8yZw9zgu8HTQTwMyV DF51vxaDUoQKwkI06aVLc3GSiy7k2TBjQ9J89rnjcZYoDAsa5GtmW9Dv8e8cE3nc 0iS1lzWu0Zu4hUuOdFLuSiUFjiSJO4DwqkEFccNmWhMPysROSHqYtM+sJ/Ns+BsU ZtFp3pU4pWFuqwUQ9CqS5IaSxlG8LN8kqwpvNfWNsOCKMYCE8P/Cx1ab9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjGFf+4LiDlxvbi7JC+3o3lJ6pfMB8GA1UdIwQY MBaAFBtVjpkT9rVsw9Vg+U/xN/LNb0hiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzFXT21SUDJ0V3pEMVdENVRfRTM4czF2U0dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lNzY0Y2ItNDYzZC00MWFkLWE3ZWMt ZjU4MWY2ODFhMDA0LzEvRzFXT21SUDJ0V3pEMVdENVRfRTM4czF2U0dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lNzY0Y2ItNDYzZC00MWFkLWE3ZWMtZjU4MWY2ODFhMDA0 LzEvRzFXT21SUDJ0V3pEMVdENVRfRTM4czF2U0dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3GieBH1 6h15f2a9aMsVz+cDlrXyb89Mu574HorLpWCuksC6HK+0dBQorT5vFN2A9V9YsudI rDTiPTgOZwTN8HwqW3RYo3e0SSKgIarRPdLg05OQKu5Ane6ksUHsB1HiWkKVbpzC eku3YilVoFgtyEVb1nPcnL9eRRQ5JN8Ztw0NAPCP1rGlAReDTl9WogUpkUtevbk4 5xM3UQ0ShK9A71MhDGalYylFiph3sZo48Q/2VTzmy6INyaahMaoX9lby4/PZ+lzU GTKO7DYSJ9WM9PcGt4LBbJKz3QHCNtqS46W4qjKvcW22t16cE0uWyeh6rCGLKxAK HuTK4/A5ZS2irQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:08 2025 by rpki-client