This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft File: G2t-l-0j1mqR-4qRv9nGdxEpsas.mft (raw, json) Hash identifier: loQ3GT6c7ftevN/NeyPs3pOzs29nIhKHfziamjjU29o= Subject key identifier: A7:9E:ED:69:0D:E1:07:91:7A:AD:00:F8:B1:A1:12:95:E0:2A:42:51 Authority key identifier: 1B:6B:7E:97:ED:23:D6:6A:91:FB:8A:91:BF:D9:C6:77:11:29:B1:AB Certificate issuer: /CN=1b6b7e97ed23d66a91fb8a91bfd9c6771129b1ab Certificate serial: 019AF19B70329A1AD8489D6B6E4A3D0B1339 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2t-l-0j1mqR-4qRv9nGdxEpsas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft Manifest number: 105A Signing time: Sat 06 Dec 2025 03:01:27 +0000 Manifest this update: Sat 06 Dec 2025 03:01:27 +0000 Manifest next update: Sun 07 Dec 2025 03:01:27 +0000 Files and hashes: 1: G2t-l-0j1mqR-4qRv9nGdxEpsas.crl (hash: WaUuGSrxfgWL2El/DAOSGQ2z7o+oCWaJhx16C851qE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.crl rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft rsync://rpki.ripe.net/repository/DEFAULT/G2t-l-0j1mqR-4qRv9nGdxEpsas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:70:32:9a:1a:d8:48:9d:6b:6e:4a:3d:0b:13:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b6b7e97ed23d66a91fb8a91bfd9c6771129b1ab Validity Not Before: Dec 6 03:01:27 2025 GMT Not After : Dec 7 03:01:27 2025 GMT Subject: CN=a79eed690de107917aad00f8b1a11295e02a4251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:8a:4e:93:88:e7:67:62:82:18:b5:51:46: 3b:84:4e:24:87:92:1e:25:e1:c3:63:1f:ee:8b:c4: bc:8a:03:44:b6:91:b8:ae:4b:54:df:81:b1:00:25: 04:55:c2:90:aa:54:83:17:ae:75:68:31:4b:ac:f8: be:ce:23:3d:35:6e:4c:fe:8c:dc:90:aa:78:60:48: 34:a8:55:1f:77:28:e8:e6:4c:29:a1:d3:45:3c:5b: 43:bc:ae:50:c6:82:80:6d:df:af:52:bc:91:79:0c: d6:42:ab:5b:24:94:cd:33:92:53:6d:7f:e5:35:39: 6f:45:54:c4:c5:59:25:c5:6c:96:dd:fd:3f:2d:87: d9:c6:9c:04:6c:f2:e3:de:06:48:fc:d3:d1:b3:21: 27:6b:83:96:eb:58:89:37:9f:5a:1b:cb:82:26:ca: 9b:38:6f:e3:0f:7d:c1:0c:d9:b0:eb:71:ab:e3:cb: 6b:61:79:b5:91:4d:62:90:51:b7:d6:73:04:6a:26: 55:89:1b:27:47:bb:a8:21:a5:b0:6b:c6:ee:ac:a3: ed:e2:e0:dd:cf:dd:c9:fd:b9:67:83:23:a2:a0:05: 0b:e1:c9:3b:58:b4:b8:fd:67:70:fa:25:ca:45:82: ad:fc:68:24:d3:1f:1d:d1:1e:9f:c2:15:a1:aa:01: 5c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9E:ED:69:0D:E1:07:91:7A:AD:00:F8:B1:A1:12:95:E0:2A:42:51 X509v3 Authority Key Identifier: keyid:1B:6B:7E:97:ED:23:D6:6A:91:FB:8A:91:BF:D9:C6:77:11:29:B1:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2t-l-0j1mqR-4qRv9nGdxEpsas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:9c:28:27:64:26:b7:d1:07:bc:d7:4d:6d:e4:49:1f:05:2a: 53:9f:b9:4b:47:f9:a8:97:0d:6e:5a:31:38:bb:74:78:16:30: ed:26:f3:75:58:9e:61:90:09:68:36:6b:ec:d2:5e:7c:e0:62: 9d:a6:f8:e1:f5:fe:30:be:26:30:5d:89:d4:32:c5:e8:55:cb: d1:c6:c8:a1:36:dc:f5:e0:1b:8c:db:6f:8b:23:1b:2f:80:4d: af:d6:5c:e1:39:80:19:ef:82:b6:50:59:1b:e7:2f:68:6a:af: 9f:d2:2a:50:e1:9f:6b:c5:8c:a1:d2:cd:1f:79:fb:d3:1d:10: 7c:92:32:bf:a3:e3:fa:d2:e5:0c:9d:19:72:fe:36:fa:c7:f1: b7:ed:c3:c7:a6:c1:1f:1c:88:3f:a6:dd:4a:57:04:88:e0:cf: c5:1c:6b:6f:14:a9:2a:65:12:ca:d9:5e:dd:de:45:44:04:ec: 92:7d:06:23:43:59:2a:d5:19:17:05:4c:ad:d8:a4:88:c5:27: ee:73:59:c6:1d:4c:81:7a:a4:3a:ee:2a:fb:3b:51:38:1a:98: 6e:9d:0b:b7:05:ba:81:9e:af:5c:32:e2:5f:47:f4:0a:13:bd: 0c:3b:64:55:30:81:17:88:26:7d:ce:2f:00:e4:27:7f:91:f5: cb:6e:7f:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3AymhrYSJ1rbko9CxM5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNmI3ZTk3ZWQyM2Q2NmE5MWZiOGE5MWJmZDljNjc3MTEy OWIxYWIwHhcNMjUxMjA2MDMwMTI3WhcNMjUxMjA3MDMwMTI3WjAzMTEwLwYDVQQD EyhhNzllZWQ2OTBkZTEwNzkxN2FhZDAwZjhiMWExMTI5NWUwMmE0MjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyKKTpOI52dighi1UUY7hE4kh5Ie JeHDYx/ui8S8igNEtpG4rktU34GxACUEVcKQqlSDF651aDFLrPi+ziM9NW5M/ozc kKp4YEg0qFUfdyjo5kwpodNFPFtDvK5QxoKAbd+vUryReQzWQqtbJJTNM5JTbX/l NTlvRVTExVklxWyW3f0/LYfZxpwEbPLj3gZI/NPRsyEna4OW61iJN59aG8uCJsqb OG/jD33BDNmw63Gr48trYXm1kU1ikFG31nMEaiZViRsnR7uoIaWwa8burKPt4uDd z93J/blngyOioAUL4ck7WLS4/Wdw+iXKRYKt/Ggk0x8d0R6fwhWhqgFclQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKee7WkN4QeReq0A+LGhEpXgKkJRMB8GA1UdIwQY MBaAFBtrfpftI9ZqkfuKkb/ZxncRKbGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJ0LWwtMGoxbXFSLTRxUnY5bkdkeEVwc2FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iYjBlMDAtYTI0ZC00OTM1LThjMDct MTM2MTU1MGNiM2Q1LzEvRzJ0LWwtMGoxbXFSLTRxUnY5bkdkeEVwc2FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9iYjBlMDAtYTI0ZC00OTM1LThjMDctMTM2MTU1MGNiM2Q1 LzEvRzJ0LWwtMGoxbXFSLTRxUnY5bkdkeEVwc2FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpwoJ2Qm t9EHvNdNbeRJHwUqU5+5S0f5qJcNbloxOLt0eBYw7SbzdVieYZAJaDZr7NJefOBi nab44fX+ML4mMF2J1DLF6FXL0cbIoTbc9eAbjNtviyMbL4BNr9Zc4TmAGe+CtlBZ G+cvaGqvn9IqUOGfa8WModLNH3n70x0QfJIyv6Pj+tLlDJ0Zcv42+sfxt+3Dx6bB HxyIP6bdSlcEiODPxRxrbxSpKmUSytle3d5FRATskn0GI0NZKtUZFwVMrdikiMUn 7nNZxh1MgXqkOu4q+ztROBqYbp0LtwW6gZ6vXDLiX0f0ChO9DDtkVTCBF4gmfc4v AOQnf5H1y25/GA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:20 2025 by rpki-client