This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json) Hash identifier: p/bRy/ylUm6S2e6jj5vQZlZMrMoGow1Dddb/8wMLHN0= Subject key identifier: 01:EE:1E:6E:AD:84:82:C1:2C:D3:D0:DD:DA:F0:CB:6E:80:1A:A5:94 Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b Certificate serial: 019AF1D1DC318F4EDA8FBF187C68B9B6958C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft Manifest number: 0A59 Signing time: Sat 06 Dec 2025 04:00:53 +0000 Manifest this update: Sat 06 Dec 2025 04:00:53 +0000 Manifest next update: Sun 07 Dec 2025 04:00:53 +0000 Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: QIGtFsiWyG0xaLyz0dlYbx53JC/JljW42AUYNsedRC4=) 2: zdCQl1i-ErF9ikcF1dvUnhiF3Xg.roa (hash: haMcqGD9VuWSxs2wPMo5yLhdGqSHCO1AnFtOfllpTYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:dc:31:8f:4e:da:8f:bf:18:7c:68:b9:b6:95:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b Validity Not Before: Dec 6 04:00:53 2025 GMT Not After : Dec 7 04:00:53 2025 GMT Subject: CN=01ee1e6ead8482c12cd3d0dddaf0cb6e801aa594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:b2:9c:c3:00:06:24:12:b7:cd:f0:e3:05: 07:cd:1b:ec:72:91:ed:3f:9f:64:2a:7c:7c:33:3d: ba:27:a1:a8:97:67:7f:23:89:fe:c9:57:4a:2c:6e: 09:c8:f8:b6:56:c7:a8:72:fd:ab:32:19:8c:90:bd: 0b:af:9d:e1:b2:09:e3:10:89:9b:5a:af:da:60:44: 92:8f:89:e2:9e:20:ce:a7:83:08:26:fb:01:c9:fc: d6:48:16:fc:11:c9:2f:00:4e:c7:78:69:98:3c:0d: e8:ea:aa:42:19:e0:7b:c5:c6:a1:7d:98:c0:74:58: d2:b6:ed:c6:1a:5f:f5:ef:00:3b:be:ad:8a:56:4a: b3:55:fd:0a:1d:5c:dc:e3:cf:e0:35:b6:93:8e:8e: 22:7d:27:1d:cb:2a:a5:38:14:b8:05:fd:ec:23:40: e7:ce:ad:4d:76:a6:7d:9e:ff:56:44:7e:fb:a2:ee: 40:78:de:38:51:af:26:6c:f4:c9:0f:39:c7:65:7e: 39:5b:10:de:67:3f:13:72:ef:29:15:2e:2b:3e:0f: d3:7e:f4:e7:cf:3a:37:c8:50:a4:2b:41:74:71:93: 31:0c:28:44:01:e6:96:f2:b2:5e:52:ec:34:f6:ca: 08:e2:a0:e9:eb:59:24:84:34:2e:3e:3a:57:aa:9c: d2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EE:1E:6E:AD:84:82:C1:2C:D3:D0:DD:DA:F0:CB:6E:80:1A:A5:94 X509v3 Authority Key Identifier: keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d9:6c:70:ec:29:d7:66:65:cb:f6:bb:e4:d1:22:6c:1c:a4: a8:78:ad:2f:e7:9a:d1:81:0e:87:94:86:f3:d9:fc:e1:14:52: 80:c1:a7:93:31:ae:64:f4:4a:b8:0e:38:0d:f1:ad:4f:00:5a: 2b:80:31:e6:f8:e0:65:c7:99:ea:70:e6:5f:7f:e7:66:a4:e8: 6f:4f:05:19:51:65:2f:e9:9d:23:19:68:96:36:db:06:98:a9: 74:45:4a:96:39:44:3b:67:df:e6:37:ad:83:ac:63:02:a7:b0: d4:26:4d:3d:1f:d8:ce:5f:ca:54:b7:b4:cc:1f:1e:6d:ce:79: 79:db:35:55:19:13:3f:18:78:58:7f:37:81:be:eb:f5:ad:f3: ed:38:7a:68:ab:8e:53:f9:12:84:3b:b8:20:87:3a:88:51:7e: 4e:31:9d:36:5f:54:67:da:8a:d0:d5:7b:c5:40:7f:0e:a2:ad: 88:96:63:1f:e7:29:43:dd:c3:11:71:55:2a:34:59:a7:33:63: 99:aa:eb:36:00:94:2e:c7:55:af:0a:c5:ac:e1:40:9c:b6:ba: 07:f7:f0:c8:e9:d6:ca:57:e7:2f:6a:e2:79:ab:76:b9:5d:bb: c5:be:ee:76:bc:24:10:d8:1c:ec:3a:75:01:d7:14:e9:64:41: f2:a5:fb:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dwxj07aj78YfGi5tpWMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZjE0ZThkMGIzZGVmYjAzMDQyNzAxMzBkMTE0N2FlMGRk OTJkOGIwHhcNMjUxMjA2MDQwMDUzWhcNMjUxMjA3MDQwMDUzWjAzMTEwLwYDVQQD EygwMWVlMWU2ZWFkODQ4MmMxMmNkM2QwZGRkYWYwY2I2ZTgwMWFhNTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcOynMMABiQSt83w4wUHzRvscpHt P59kKnx8Mz26J6Gol2d/I4n+yVdKLG4JyPi2Vseocv2rMhmMkL0Lr53hsgnjEImb Wq/aYESSj4niniDOp4MIJvsByfzWSBb8EckvAE7HeGmYPA3o6qpCGeB7xcahfZjA dFjStu3GGl/17wA7vq2KVkqzVf0KHVzc48/gNbaTjo4ifScdyyqlOBS4Bf3sI0Dn zq1NdqZ9nv9WRH77ou5AeN44Ua8mbPTJDznHZX45WxDeZz8Tcu8pFS4rPg/TfvTn zzo3yFCkK0F0cZMxDChEAeaW8rJeUuw09soI4qDp61kkhDQuPjpXqpzSGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHuHm6thILBLNPQ3drwy26AGqWUMB8GA1UdIwQY MBaAFBvxTo0LPe+wMEJwEw0RR64N2S2LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR19GT2pRczk3N0F3UW5BVERSRkhyZzNaTFlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYWRhZmUtNmM5ZC00YWUwLTg3MzMt ODE5YTI1MzIyNWNjLzEvR19GT2pRczk3N0F3UW5BVERSRkhyZzNaTFlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lYWRhZmUtNmM5ZC00YWUwLTg3MzMtODE5YTI1MzIyNWNj LzEvR19GT2pRczk3N0F3UW5BVERSRkhyZzNaTFlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9lscOwp 12Zly/a75NEibBykqHitL+ea0YEOh5SG89n84RRSgMGnkzGuZPRKuA44DfGtTwBa K4Ax5vjgZceZ6nDmX3/nZqTob08FGVFlL+mdIxloljbbBpipdEVKljlEO2ff5jet g6xjAqew1CZNPR/Yzl/KVLe0zB8ebc55eds1VRkTPxh4WH83gb7r9a3z7Th6aKuO U/kShDu4IIc6iFF+TjGdNl9UZ9qK0NV7xUB/DqKtiJZjH+cpQ93DEXFVKjRZpzNj marrNgCULsdVrwrFrOFAnLa6B/fwyOnWylfnL2rieat2uV27xb7udrwkENgc7Dp1 AdcU6WRB8qX7Gg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:00 2025 by rpki-client