This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft File: G2goETu6NCPRVzGWT-V7XyUr_eY.mft (raw, json) Hash identifier: t0aVhn6Msn08pMGWgzzB/FZdAzKGVUrl03nO2d93I1g= Subject key identifier: 0B:46:5D:FA:7C:38:D3:F5:A5:D8:6D:F3:87:D5:E0:5C:21:5A:ED:D1 Authority key identifier: 1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6 Certificate issuer: /CN=1b6828113bba3423d15731964fe57b5f252bfde6 Certificate serial: 019AF0BF0E18209C2A91E37D3D8E622890E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft Manifest number: 1763 Signing time: Fri 05 Dec 2025 23:00:44 +0000 Manifest this update: Fri 05 Dec 2025 23:00:44 +0000 Manifest next update: Sat 06 Dec 2025 23:00:44 +0000 Files and hashes: 1: 2iBSszmMQqmiQ3uytPa6Rj5usVw.roa (hash: uKmKRGw9bMp+kTA7Ddvynf7WAl8sh27c2GAtM3UsdJQ=) 2: G2goETu6NCPRVzGWT-V7XyUr_eY.crl (hash: pq1H+lXI4YyD1cVBhEO5h4HCoeJKHJUN5qjKt1KWRIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:0e:18:20:9c:2a:91:e3:7d:3d:8e:62:28:90:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b6828113bba3423d15731964fe57b5f252bfde6 Validity Not Before: Dec 5 23:00:44 2025 GMT Not After : Dec 6 23:00:44 2025 GMT Subject: CN=0b465dfa7c38d3f5a5d86df387d5e05c215aedd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:24:8b:61:b0:1d:e6:66:50:50:81:19:d5:11: f6:0a:1f:d5:84:99:8b:f7:e2:e9:c8:df:b9:16:6f: 8f:b2:59:04:e5:ad:01:a5:81:de:7c:09:3a:19:01: 4a:e8:8c:22:1b:33:8a:87:b4:b3:92:2c:84:78:00: a5:5f:0f:c9:06:e7:2e:3e:0c:f9:34:91:a1:78:8f: 75:17:4b:1f:49:92:98:7f:ad:c4:ba:31:f4:33:cc: 38:b7:2f:ab:a8:96:d4:54:09:d8:0e:87:63:cc:d2: 6e:dc:f0:e9:e2:f3:80:8d:99:a3:b1:05:e5:b5:ae: 41:aa:1f:d9:2b:e9:51:a3:b0:1b:d8:e3:43:51:5e: 87:22:63:19:fd:48:58:22:b1:70:d5:44:b9:50:34: ed:36:77:c6:c5:15:c5:c1:cc:7f:9e:a4:4f:21:1e: c4:0b:95:23:4f:18:71:c3:50:70:3c:55:8d:07:a3: c5:7f:7e:78:78:87:d4:01:da:c2:68:ed:d6:28:76: 34:65:c2:3b:d2:8f:01:0e:d8:07:e5:70:e1:51:7d: 11:30:fe:08:83:76:25:7a:61:f2:6d:40:07:d2:79: b4:2e:27:fb:95:93:f7:53:41:07:22:2f:e3:f7:25: fe:7a:09:e8:c4:e6:87:6a:21:29:c3:ca:03:71:18: 15:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:46:5D:FA:7C:38:D3:F5:A5:D8:6D:F3:87:D5:E0:5C:21:5A:ED:D1 X509v3 Authority Key Identifier: keyid:1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:15:19:07:b1:ce:7e:07:83:bf:d0:d2:06:f6:a1:08:51:b9: d5:77:26:ac:49:4a:70:96:e0:95:e6:67:a3:fe:f6:b1:90:8f: 9a:c7:65:58:05:c5:f8:58:4d:fd:18:f9:6f:65:4e:6d:f1:7f: 8c:73:ab:bd:e3:38:3a:bd:5b:94:e6:be:be:2e:31:bd:7a:11: a6:e5:19:82:73:63:08:44:3d:f4:a3:69:8e:f5:fc:91:67:b6: 4d:ad:07:98:00:f2:66:40:73:56:c5:c3:2c:34:97:60:a8:66: 3e:39:b3:e2:3f:e0:46:ff:06:bd:f0:7b:84:79:9b:a1:00:49: 8a:95:85:62:52:5a:37:0e:9b:7f:45:ca:fe:c7:0a:8d:f7:f2: f8:02:83:c3:e4:41:8f:05:ec:05:0a:c9:c2:09:fd:80:b2:49: 4a:ec:e1:f6:a4:be:1c:b6:c9:a8:8d:6f:dd:de:ba:42:bd:57: b9:ca:0d:fc:55:d0:d1:a2:95:fc:91:ae:47:9c:a5:69:cc:b0: 0a:e9:f4:93:1a:6f:9f:1d:65:8a:3f:92:75:7d:05:1a:47:b8: bb:4e:35:30:19:6a:87:2e:26:84:fb:c5:9e:8f:ec:c8:5d:4c: 5b:f4:ad:4a:9b:aa:6b:d8:33:be:35:ef:d0:24:e2:7b:f5:76: 08:1d:f0:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvw4YIJwqkeN9PY5iKJDoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNjgyODExM2JiYTM0MjNkMTU3MzE5NjRmZTU3YjVmMjUy YmZkZTYwHhcNMjUxMjA1MjMwMDQ0WhcNMjUxMjA2MjMwMDQ0WjAzMTEwLwYDVQQD EygwYjQ2NWRmYTdjMzhkM2Y1YTVkODZkZjM4N2Q1ZTA1YzIxNWFlZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SSLYbAd5mZQUIEZ1RH2Ch/VhJmL 9+LpyN+5Fm+PslkE5a0BpYHefAk6GQFK6IwiGzOKh7SzkiyEeAClXw/JBucuPgz5 NJGheI91F0sfSZKYf63EujH0M8w4ty+rqJbUVAnYDodjzNJu3PDp4vOAjZmjsQXl ta5Bqh/ZK+lRo7Ab2ONDUV6HImMZ/UhYIrFw1US5UDTtNnfGxRXFwcx/nqRPIR7E C5UjTxhxw1BwPFWNB6PFf354eIfUAdrCaO3WKHY0ZcI70o8BDtgH5XDhUX0RMP4I g3YlemHybUAH0nm0Lif7lZP3U0EHIi/j9yX+egnoxOaHaiEpw8oDcRgV6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtGXfp8ONP1pdht84fV4FwhWu3RMB8GA1UdIwQY MBaAFBtoKBE7ujQj0Vcxlk/le18lK/3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80ZjU5NTEtMjA0Ny00NGJjLWI2OWEt MDNiYzYzY2EyNWEzLzEvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80ZjU5NTEtMjA0Ny00NGJjLWI2OWEtMDNiYzYzY2EyNWEz LzEvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhUZB7HO fgeDv9DSBvahCFG51XcmrElKcJbgleZno/72sZCPmsdlWAXF+FhN/Rj5b2VObfF/ jHOrveM4Or1blOa+vi4xvXoRpuUZgnNjCEQ99KNpjvX8kWe2Ta0HmADyZkBzVsXD LDSXYKhmPjmz4j/gRv8GvfB7hHmboQBJipWFYlJaNw6bf0XK/scKjffy+AKDw+RB jwXsBQrJwgn9gLJJSuzh9qS+HLbJqI1v3d66Qr1XucoN/FXQ0aKV/JGuR5ylacyw Cun0kxpvnx1lij+SdX0FGke4u041MBlqhy4mhPvFno/syF1MW/StSpuqa9gzvjXv 0CTie/V2CB3wJA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:26 2025 by rpki-client