This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json) Hash identifier: SSl2Ccr7vDGX8rTN3JvNqv8isgK7l7YTKrqKusSWGio= Subject key identifier: A3:D7:49:11:30:2E:03:65:A2:82:07:F1:22:35:59:93:32:FA:64:A9 Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac Certificate serial: 019B3CB52C17F89D89A0C59B1D85DC0ED854 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 17:01:04 +0000 Manifest this update: Sat 20 Dec 2025 17:01:04 +0000 Manifest next update: Sun 21 Dec 2025 17:01:04 +0000 Files and hashes: 1: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: P1r9/VOUGJCRhuw7Q/KBR8mvcOaEhV1xvHdFzTAFP04=) 2: Ih31sg8uCJb_KbpSa1L6Oxmc4Z8.roa (hash: 9mQ/h5Y96VB7w3Lx8Rm2UMKZ49LCZfxek1bOiFzpcfE=) 3: Y2jaKnMLOg7L7yt3a5FoJKVZD9M.roa (hash: E77+sc63md8h3e/NARC1FrCtInem3ClY6WQ72Z8aT70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:2c:17:f8:9d:89:a0:c5:9b:1d:85:dc:0e:d8:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac Validity Not Before: Dec 20 17:01:04 2025 GMT Not After : Dec 21 17:01:04 2025 GMT Subject: CN=a3d74911302e0365a28207f12235599332fa64a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:60:7f:53:d9:06:c9:92:c0:9e:0b:46:57:04: 58:2f:71:f6:2c:2a:01:1c:45:ed:33:96:b5:96:2b: a0:71:36:07:46:b4:72:4f:79:b3:8d:eb:5d:cf:62: fb:4a:a3:20:bd:c1:e4:4c:f6:96:12:7d:2e:65:ee: 5e:d8:bf:ba:dc:b2:4a:c0:33:1b:5b:86:81:b6:fa: 92:76:15:e6:ee:7b:14:77:5e:fb:58:a5:2e:8e:5b: d8:c3:00:11:c2:25:e0:4f:f5:bb:ef:57:30:8f:da: fa:f0:24:33:64:98:1a:c4:b4:96:3e:95:79:76:14: 49:57:7f:43:59:a3:db:7a:f4:b7:84:a3:2e:6b:18: 66:bb:2e:08:72:54:a5:bb:72:8b:25:f9:87:6b:44: 3b:a4:4f:a8:73:74:bc:c7:d2:f1:88:a8:53:2f:43: 8b:80:5d:fe:1b:42:24:49:5d:a7:a8:2d:95:7e:2d: 92:0b:c5:0d:5e:2c:a4:f2:e9:ac:a8:f7:54:e5:6f: 50:47:59:41:b9:e1:98:3a:c6:47:ae:eb:e7:13:b8: 66:4a:fb:d5:54:3b:ca:8c:90:87:d6:16:48:65:73: 58:06:89:9a:d5:6b:b9:12:a8:f3:58:e8:4e:d1:f8: 78:49:bd:7f:da:10:c7:61:27:e9:5a:ac:2d:bb:93: 39:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D7:49:11:30:2E:03:65:A2:82:07:F1:22:35:59:93:32:FA:64:A9 X509v3 Authority Key Identifier: keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:34:d3:a8:d6:31:1a:88:b2:7f:f6:ec:a3:9f:2b:aa:41:a7: 69:83:b5:30:dc:f2:f0:80:2a:ea:1b:c8:5e:66:5e:dd:fb:aa: 54:9f:57:9f:c5:cd:95:da:5c:82:73:aa:fc:af:00:af:71:81: 4c:0c:f0:4f:fa:38:90:68:aa:bc:a3:01:78:49:22:46:a8:b2: a4:e1:8c:ea:a5:a3:a6:b8:b7:3d:4b:68:56:1e:74:fc:bf:b5: 21:c9:65:a4:80:68:ba:18:56:14:1d:21:8c:05:1e:48:ce:cc: 78:39:d4:92:ac:59:10:63:a0:43:29:db:98:a7:03:cd:74:95: a2:fe:c4:f0:62:14:0b:5f:40:33:ac:6d:6d:ce:06:98:db:26: 82:1a:eb:2e:ea:13:6c:36:fd:63:eb:6f:c5:6e:44:a5:3d:81: 50:38:d7:cf:30:a8:84:a9:b8:fe:31:3e:99:a9:7f:9b:4c:ec: b1:4a:c7:b7:63:92:e3:90:b3:cd:e1:40:06:e8:cd:6d:c9:f0: 7c:92:48:f1:a6:bb:d4:52:1d:e6:26:2e:69:39:dc:9e:19:10: 26:cb:7c:ad:1b:11:b6:5e:26:34:ef:3d:55:88:4b:03:f9:8a: d8:a1:8f:d3:3e:e8:e3:a5:d8:23:f1:a8:08:44:cf:f2:35:4c: d6:63:82:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tSwX+J2JoMWbHYXcDthUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZmM3NzM4Y2QwZmQwZTA0NDdmOWQ3NDljZTZhMzkwNDdm ZGNiYWMwHhcNMjUxMjIwMTcwMTA0WhcNMjUxMjIxMTcwMTA0WjAzMTEwLwYDVQQD EyhhM2Q3NDkxMTMwMmUwMzY1YTI4MjA3ZjEyMjM1NTk5MzMyZmE2NGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mB/U9kGyZLAngtGVwRYL3H2LCoB HEXtM5a1liugcTYHRrRyT3mzjetdz2L7SqMgvcHkTPaWEn0uZe5e2L+63LJKwDMb W4aBtvqSdhXm7nsUd177WKUujlvYwwARwiXgT/W771cwj9r68CQzZJgaxLSWPpV5 dhRJV39DWaPbevS3hKMuaxhmuy4IclSlu3KLJfmHa0Q7pE+oc3S8x9LxiKhTL0OL gF3+G0IkSV2nqC2Vfi2SC8UNXiyk8umsqPdU5W9QR1lBueGYOsZHruvnE7hmSvvV VDvKjJCH1hZIZXNYBoma1Wu5EqjzWOhO0fh4Sb1/2hDHYSfpWqwtu5M5mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPXSREwLgNlooIH8SI1WZMy+mSpMB8GA1UdIwQY MBaAFBv8dzjND9DgRH+ddJzmo5BH/cusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2Ut MTQ4YWJmZjkxOWFkLzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2UtMTQ4YWJmZjkxOWFk LzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijTTqNYx Goiyf/bso58rqkGnaYO1MNzy8IAq6hvIXmZe3fuqVJ9Xn8XNldpcgnOq/K8Ar3GB TAzwT/o4kGiqvKMBeEkiRqiypOGM6qWjpri3PUtoVh50/L+1IcllpIBouhhWFB0h jAUeSM7MeDnUkqxZEGOgQynbmKcDzXSVov7E8GIUC19AM6xtbc4GmNsmghrrLuoT bDb9Y+tvxW5EpT2BUDjXzzCohKm4/jE+mal/m0zssUrHt2OS45CzzeFABujNbcnw fJJI8aa71FId5iYuaTncnhkQJst8rRsRtl4mNO89VYhLA/mK2KGP0z7o46XYI/Go CETP8jVM1mOCUA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:30:19 2025 by rpki-client