This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json) Hash identifier: OASbW1JxG1i3rXcVmkvy+kXDuVwdyu9EHD8hO9HQaRM= Subject key identifier: C1:5A:68:DB:A0:FF:1D:2F:A1:ED:DE:2B:30:D9:96:0F:90:77:55:09 Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6 Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6 Certificate serial: 019AF31CD2283956A5220D16A9A66606EDD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft Manifest number: 0EE6 Signing time: Sat 06 Dec 2025 10:02:23 +0000 Manifest this update: Sat 06 Dec 2025 10:02:23 +0000 Manifest next update: Sun 07 Dec 2025 10:02:23 +0000 Files and hashes: 1: 1-6tgApGzi84jUfnnO4hR3VcZnhw.roa (hash: HVjUDSjbZacQo7V9+9zKGEkK9aQQLCss0l6qBdFGXKw=) 2: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: xPcaCTLKogcTMnB2lbssNWUfQDuIarNnSUmHBzHhOqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d2:28:39:56:a5:22:0d:16:a9:a6:66:06:ed:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6 Validity Not Before: Dec 6 10:02:23 2025 GMT Not After : Dec 7 10:02:23 2025 GMT Subject: CN=c15a68dba0ff1d2fa1edde2b30d9960f90775509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e1:71:2c:ab:3a:c0:56:12:db:0b:a1:83:11: e7:7c:e6:41:70:78:95:96:7d:71:73:4c:04:c6:f8: 52:56:7e:7b:61:65:54:ed:e9:3c:6c:c9:e1:e8:bc: 08:ba:ba:1a:19:6f:e9:10:1d:3e:3b:35:21:04:5a: 7a:25:c9:1d:c8:66:05:c9:49:36:95:3f:07:1d:5e: 75:85:53:b0:5c:fe:e2:71:9d:dc:4a:eb:b7:c5:e5: 34:a3:ed:41:40:6e:77:d7:0c:df:f7:97:ce:4a:ba: 5e:6f:38:6a:ae:5a:7b:4a:58:9f:8b:e4:14:da:91: 13:7a:6a:b0:b9:d3:d4:73:b2:98:0b:7a:40:54:a4: fb:bc:56:9e:d2:9b:7f:9a:44:5b:e9:6b:c1:80:1d: 65:ca:fc:1f:a2:65:0e:6e:10:54:f7:4f:0c:a0:54: 8e:4a:03:ba:86:b0:ce:a4:83:eb:2f:28:9d:5c:63: 4e:ac:d8:c9:0b:15:63:5c:cb:da:32:8b:59:2e:00: 61:6c:6a:31:59:82:74:62:30:73:4e:84:e6:2b:cd: 62:f6:d6:b7:f3:ab:2a:dd:c4:ef:5d:0b:a5:0c:ea: 13:41:6b:93:cb:05:09:d1:6f:0c:26:37:4d:fc:23: 62:f4:ca:99:88:70:b8:9a:5f:19:76:41:16:a6:65: df:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5A:68:DB:A0:FF:1D:2F:A1:ED:DE:2B:30:D9:96:0F:90:77:55:09 X509v3 Authority Key Identifier: keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:1d:92:7d:ce:a0:49:e5:7c:ec:28:6a:c8:90:9b:2f:bc:40: 65:d1:52:ec:54:e0:9d:b3:5b:0b:04:6b:ac:c2:c7:f3:3e:b0: 4d:c9:26:ff:57:fd:15:d8:0d:4a:6b:38:a0:ff:75:34:87:7f: a2:4c:f4:a7:43:3d:c3:a8:03:d2:f7:13:51:68:08:48:99:3f: ee:3e:de:7d:f5:f6:33:c3:d5:cc:ee:c3:33:c7:8d:cc:b7:04: 52:03:90:df:b1:9b:dc:97:2b:3f:53:8f:fc:99:48:59:03:63: 30:c9:03:2d:1d:93:79:04:bd:e2:a5:38:19:14:fa:8a:01:32: 27:97:c2:b8:17:f9:a8:23:64:8a:aa:da:d7:0d:86:a2:61:d2: 98:cb:ad:22:6c:55:55:c3:57:f6:d5:35:87:a3:c4:d5:14:77: b3:a7:2e:cb:ac:ad:05:a8:41:ba:b9:46:42:a0:4b:87:9d:c2: 9c:7a:16:79:34:09:31:eb:5a:f4:e3:c0:6f:91:ff:45:94:5f: 63:29:ea:37:fd:f1:c9:94:a1:fd:a0:96:36:55:8d:0b:37:32: d1:b6:40:3b:31:b8:8e:10:67:57:5c:08:ef:a8:b0:88:cb:4b: 4d:8f:e4:6c:2a:07:ab:54:da:d7:8d:ee:3c:e7:42:be:4d:d0: 64:05:58:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNIoOValIg0WqaZmBu3UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNjIzZGJhNjJiODU3Y2E3M2Q4YTgwYTExOTkwZjcxZTA0 ZTdkYjYwHhcNMjUxMjA2MTAwMjIzWhcNMjUxMjA3MTAwMjIzWjAzMTEwLwYDVQQD EyhjMTVhNjhkYmEwZmYxZDJmYTFlZGRlMmIzMGQ5OTYwZjkwNzc1NTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOFxLKs6wFYS2wuhgxHnfOZBcHiV ln1xc0wExvhSVn57YWVU7ek8bMnh6LwIuroaGW/pEB0+OzUhBFp6JckdyGYFyUk2 lT8HHV51hVOwXP7icZ3cSuu3xeU0o+1BQG531wzf95fOSrpebzhqrlp7Slifi+QU 2pETemqwudPUc7KYC3pAVKT7vFae0pt/mkRb6WvBgB1lyvwfomUObhBU908MoFSO SgO6hrDOpIPrLyidXGNOrNjJCxVjXMvaMotZLgBhbGoxWYJ0YjBzToTmK81i9ta3 86sq3cTvXQulDOoTQWuTywUJ0W8MJjdN/CNi9MqZiHC4ml8ZdkEWpmXfSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFaaNug/x0voe3eKzDZlg+Qd1UJMB8GA1UdIwQY MBaAFBtiPbpiuFfKc9ioChGZD3HgTn22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMt MWE1Yzc2MzU1ODhiLzEvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMtMWE1Yzc2MzU1ODhi LzEvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmR2Sfc6g SeV87ChqyJCbL7xAZdFS7FTgnbNbCwRrrMLH8z6wTckm/1f9FdgNSms4oP91NId/ okz0p0M9w6gD0vcTUWgISJk/7j7effX2M8PVzO7DM8eNzLcEUgOQ37Gb3JcrP1OP /JlIWQNjMMkDLR2TeQS94qU4GRT6igEyJ5fCuBf5qCNkiqra1w2GomHSmMutImxV VcNX9tU1h6PE1RR3s6cuy6ytBahBurlGQqBLh53CnHoWeTQJMeta9OPAb5H/RZRf YynqN/3xyZSh/aCWNlWNCzcy0bZAOzG4jhBnV1wI76iwiMtLTY/kbCoHq1Ta143u POdCvk3QZAVYeA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:30:38 2025 by rpki-client