This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json) Hash identifier: 8eVoceKEsV8DCZuXFR5vDwV7n67RogtDc3ZP8xpUrvM= Subject key identifier: C9:42:EF:46:BD:3A:69:65:6D:4D:FB:F4:76:E9:1C:B1:41:76:A4:A9 Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b Certificate serial: 019AF23F8852207367A35562695E54DB4675 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft Manifest number: 0B04 Signing time: Sat 06 Dec 2025 06:00:41 +0000 Manifest this update: Sat 06 Dec 2025 06:00:41 +0000 Manifest next update: Sun 07 Dec 2025 06:00:41 +0000 Files and hashes: 1: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: 02TEu7v+TENL0D9nS9xPgryaTs0wjga4bW8P9o2sja4=) 2: m6ICGY8tDK8Q212zDiNB6cUKuGY.roa (hash: EJb3usFy++FqYT3SUw3jZOIZDnNXZwJojnoQ4titUsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:88:52:20:73:67:a3:55:62:69:5e:54:db:46:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b Validity Not Before: Dec 6 06:00:41 2025 GMT Not After : Dec 7 06:00:41 2025 GMT Subject: CN=c942ef46bd3a69656d4dfbf476e91cb14176a4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:21:d5:53:15:36:2d:f7:e3:d8:e5:64:64:f1: 7a:38:84:43:91:d5:36:c9:85:9c:50:3c:99:dc:69: 1a:e7:ae:1b:07:aa:4d:8c:ff:c5:e3:18:5f:6a:7e: e0:75:25:3d:4e:ab:58:66:68:23:86:0d:83:71:fa: 9f:08:e4:2b:03:1d:0f:bc:77:00:04:bb:53:6a:ca: dd:5b:41:ca:52:0c:9f:6d:39:9e:c0:9a:da:a3:b9: 59:73:3a:17:71:87:e8:cf:65:9d:69:7b:e7:3b:94: de:37:95:43:5c:31:eb:3e:e5:64:46:96:f8:3c:59: e4:05:41:3b:69:d1:d4:05:da:19:96:61:c6:89:62: a5:5c:4b:69:6c:42:c6:35:4e:21:64:98:7c:50:12: ea:c7:76:84:a5:0d:68:b4:b0:32:30:76:f1:93:11: 14:c3:33:64:35:4e:f1:04:65:90:d9:86:f3:01:71: 12:62:4e:4f:bc:2b:93:89:dd:b6:03:f1:c2:c6:51: 9a:0b:79:ac:36:fd:80:15:8e:3d:35:a7:6c:07:44: 23:b6:e8:49:e1:c9:d4:41:e7:ac:44:fd:80:2c:e2: 66:47:68:14:18:5d:52:1e:f1:dc:7d:27:75:be:f9: 7b:3f:29:73:36:0e:e3:8f:f8:38:8c:a1:b6:13:75: 74:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:42:EF:46:BD:3A:69:65:6D:4D:FB:F4:76:E9:1C:B1:41:76:A4:A9 X509v3 Authority Key Identifier: keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:5f:5e:53:f6:a2:7f:83:ad:5e:61:73:8f:a3:5e:ef:6c:fe: 35:bd:3d:59:66:52:d7:b5:ba:e6:29:8e:7d:d2:a8:9a:31:03: c7:15:0a:9b:9c:f3:50:fc:07:82:e9:5e:20:99:84:69:cc:5e: de:9a:26:fc:72:5b:92:f2:36:3a:27:0b:ad:0a:65:f9:37:68: ea:df:60:1b:e9:d0:eb:69:84:83:d3:2f:b3:f4:00:71:5b:f7: fa:25:31:9c:1a:f6:ce:dc:1c:9d:f5:ce:c1:2a:04:a0:cf:26: b0:7d:45:ef:bc:eb:a8:66:3f:32:9a:7c:e5:b2:54:49:84:8e: 48:fb:2c:27:9d:cb:11:fc:84:28:07:a1:ee:4e:12:4b:b2:11: 2c:74:11:28:71:40:67:5a:11:aa:89:39:68:76:d7:fc:b0:fc: d8:96:70:84:86:0a:49:e9:cf:ed:31:b0:4c:86:a3:88:a9:39: 7a:88:ca:ff:e2:92:73:ed:51:95:75:60:0b:de:d5:e8:87:b4: 1b:a4:74:dd:54:24:67:47:03:4d:48:ef:05:57:7d:8e:88:9f: 25:29:c1:f6:41:0e:9f:18:81:db:fb:17:a7:bd:27:0e:b8:84: 00:7b:e9:08:1f:e4:5b:49:26:b3:7b:de:be:87:6a:f4:e8:02: 8a:dc:c4:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4hSIHNno1ViaV5U20Z1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZjI2ODE3NWM1YTA5YTdhZmQwZDg3ODUxODI0ZTFkYjcz ZjdlN2IwHhcNMjUxMjA2MDYwMDQxWhcNMjUxMjA3MDYwMDQxWjAzMTEwLwYDVQQD EyhjOTQyZWY0NmJkM2E2OTY1NmQ0ZGZiZjQ3NmU5MWNiMTQxNzZhNGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliHVUxU2Lffj2OVkZPF6OIRDkdU2 yYWcUDyZ3Gka564bB6pNjP/F4xhfan7gdSU9TqtYZmgjhg2DcfqfCOQrAx0PvHcA BLtTasrdW0HKUgyfbTmewJrao7lZczoXcYfoz2WdaXvnO5TeN5VDXDHrPuVkRpb4 PFnkBUE7adHUBdoZlmHGiWKlXEtpbELGNU4hZJh8UBLqx3aEpQ1otLAyMHbxkxEU wzNkNU7xBGWQ2YbzAXESYk5PvCuTid22A/HCxlGaC3msNv2AFY49NadsB0QjtuhJ 4cnUQeesRP2ALOJmR2gUGF1SHvHcfSd1vvl7PylzNg7jj/g4jKG2E3V0BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlC70a9OmllbU379HbpHLFBdqSpMB8GA1UdIwQY MBaAFBvyaBdcWgmnr9DYeFGCTh23P357MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NjY1MGEtNTk4YS00Mzg5LTk0MWYt NTM0YjhjZDY1MmU5LzEvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni82NjY1MGEtNTk4YS00Mzg5LTk0MWYtNTM0YjhjZDY1MmU5 LzEvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANl9eU/ai f4OtXmFzj6Ne72z+Nb09WWZS17W65imOfdKomjEDxxUKm5zzUPwHguleIJmEacxe 3pom/HJbkvI2OicLrQpl+Tdo6t9gG+nQ62mEg9Mvs/QAcVv3+iUxnBr2ztwcnfXO wSoEoM8msH1F77zrqGY/Mpp85bJUSYSOSPssJ53LEfyEKAeh7k4SS7IRLHQRKHFA Z1oRqok5aHbX/LD82JZwhIYKSenP7TGwTIajiKk5eojK/+KSc+1RlXVgC97V6Ie0 G6R03VQkZ0cDTUjvBVd9joifJSnB9kEOnxiB2/sXp70nDriEAHvpCB/kW0kms3ve vodq9OgCitzEPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:19:52 2025 by rpki-client