This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft File: g8t2BW38QWNCZu0C0GkCA6dUoXs.mft (raw, json) Hash identifier: QIKegXuxTxESwmr1HZ80hnfWmcBqz6O3/akPSYthLB8= Subject key identifier: 71:1D:89:04:0E:F4:83:CC:2E:6F:86:FC:AB:80:CF:49:E1:B3:81:33 Authority key identifier: 83:CB:76:05:6D:FC:41:63:42:66:ED:02:D0:69:02:03:A7:54:A1:7B Certificate issuer: /CN=83cb76056dfc41634266ed02d0690203a754a17b Certificate serial: 019AF12D5B40B8AC7C45730FA576B7C5D0C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8t2BW38QWNCZu0C0GkCA6dUoXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft Manifest number: 0215 Signing time: Sat 06 Dec 2025 01:01:12 +0000 Manifest this update: Sat 06 Dec 2025 01:01:12 +0000 Manifest next update: Sun 07 Dec 2025 01:01:12 +0000 Files and hashes: 1: g8t2BW38QWNCZu0C0GkCA6dUoXs.crl (hash: HMLitCAwBOkRhdpj02ocsUPyFTR3AUsO4aGqHIqvO2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft rsync://rpki.ripe.net/repository/DEFAULT/g8t2BW38QWNCZu0C0GkCA6dUoXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:5b:40:b8:ac:7c:45:73:0f:a5:76:b7:c5:d0:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83cb76056dfc41634266ed02d0690203a754a17b Validity Not Before: Dec 6 01:01:12 2025 GMT Not After : Dec 7 01:01:12 2025 GMT Subject: CN=711d89040ef483cc2e6f86fcab80cf49e1b38133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:89:d3:73:18:32:e4:a6:91:29:98:a1:72: 3e:3d:3e:2c:47:9a:34:ea:84:b5:c2:4e:a4:97:a5: d3:41:19:2e:a3:0d:72:ed:89:c3:ed:98:15:0b:62: 4f:ce:d3:92:6e:07:f6:1b:97:d7:6a:e8:9b:3a:c0: f6:56:3d:d7:0e:91:b4:00:ce:10:c8:c9:c9:6f:96: 20:2e:e0:8e:97:f6:21:66:97:47:8a:4b:0e:e5:5a: b7:67:a8:fd:e4:26:58:8b:82:4b:28:cc:f5:f8:90: dd:49:1e:a7:0c:f2:18:18:01:05:d9:f5:6f:29:7e: 6e:4a:3b:bb:94:db:b5:a1:ec:82:f9:a3:4d:0d:e1: 3c:e1:83:4c:28:75:41:24:38:1f:ea:86:62:65:bf: 05:23:e6:77:72:c8:fc:e6:d7:ef:d1:56:5e:2c:dd: f6:01:3c:6c:d4:37:f5:8c:64:10:7d:8e:4c:c0:9a: 26:e4:4b:60:02:69:37:43:e3:8a:7d:fc:02:2b:02: 42:54:66:ec:27:06:1e:8d:07:f0:ad:83:12:59:70: a6:46:a4:14:4b:05:0e:4e:0b:59:7f:c6:48:12:d4: dc:50:24:20:e3:be:1e:43:64:cd:af:7a:7a:bd:78: 4a:31:5c:89:09:42:3c:37:81:7e:8d:6d:30:f0:85: e2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1D:89:04:0E:F4:83:CC:2E:6F:86:FC:AB:80:CF:49:E1:B3:81:33 X509v3 Authority Key Identifier: keyid:83:CB:76:05:6D:FC:41:63:42:66:ED:02:D0:69:02:03:A7:54:A1:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8t2BW38QWNCZu0C0GkCA6dUoXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:93:09:0f:59:a3:4b:59:e2:92:22:2b:52:d8:2a:25:35:10: 22:26:db:35:8b:3f:b3:05:4a:dd:ed:bb:98:7d:fb:4a:41:84: 01:8d:2a:22:6f:22:1c:e7:a5:0f:00:d5:2f:b2:dd:77:8c:b2: 06:94:79:c3:24:eb:76:da:94:25:e9:a2:83:f2:56:e3:6f:d3: 29:f4:10:6a:5c:62:67:98:3a:c1:76:b3:9c:ef:a6:76:a7:7a: 9f:64:1f:91:61:0c:e9:d9:48:06:4b:e9:27:c2:52:80:28:00: 9f:33:54:a4:b2:2f:06:b9:fa:0b:b8:e7:05:c4:3f:44:28:d8: 03:94:ae:64:c6:32:df:42:36:22:ef:26:8c:8e:b7:d3:a6:6d: 45:e7:97:56:bf:fa:fe:f9:07:c6:fa:80:11:fb:66:6e:37:5b: a8:e9:5c:83:38:c7:4e:73:5f:ae:ce:c7:f6:90:18:ef:d2:ba: d4:86:d3:f3:b3:e1:63:5d:ac:11:16:6b:2a:a7:20:7d:c6:46: 75:52:24:ef:65:ec:df:fb:1e:1f:48:9c:79:c5:07:34:e3:89: a0:5f:e2:dc:cb:03:e0:98:da:94:fa:ca:b8:f3:0a:38:13:d8: 0a:2a:2c:1d:5f:ef:78:57:da:7c:f3:1a:02:a0:46:9b:6b:6d: 72:a2:94:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVtAuKx8RXMPpXa3xdDDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzY2I3NjA1NmRmYzQxNjM0MjY2ZWQwMmQwNjkwMjAzYTc1 NGExN2IwHhcNMjUxMjA2MDEwMTEyWhcNMjUxMjA3MDEwMTEyWjAzMTEwLwYDVQQD Eyg3MTFkODkwNDBlZjQ4M2NjMmU2Zjg2ZmNhYjgwY2Y0OWUxYjM4MTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bWJ03MYMuSmkSmYoXI+PT4sR5o0 6oS1wk6kl6XTQRkuow1y7YnD7ZgVC2JPztOSbgf2G5fXauibOsD2Vj3XDpG0AM4Q yMnJb5YgLuCOl/YhZpdHiksO5Vq3Z6j95CZYi4JLKMz1+JDdSR6nDPIYGAEF2fVv KX5uSju7lNu1oeyC+aNNDeE84YNMKHVBJDgf6oZiZb8FI+Z3csj85tfv0VZeLN32 ATxs1Df1jGQQfY5MwJom5EtgAmk3Q+OKffwCKwJCVGbsJwYejQfwrYMSWXCmRqQU SwUOTgtZf8ZIEtTcUCQg474eQ2TNr3p6vXhKMVyJCUI8N4F+jW0w8IXiOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEdiQQO9IPMLm+G/KuAz0nhs4EzMB8GA1UdIwQY MBaAFIPLdgVt/EFjQmbtAtBpAgOnVKF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzh0MkJXMzhRV05DWnUwQzBHa0NBNmRVb1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81ZWJmNTAtZGVhMy00Nzc4LTg5MjMt ZGZlZjFkMmI2NjljLzEvZzh0MkJXMzhRV05DWnUwQzBHa0NBNmRVb1hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC81ZWJmNTAtZGVhMy00Nzc4LTg5MjMtZGZlZjFkMmI2Njlj LzEvZzh0MkJXMzhRV05DWnUwQzBHa0NBNmRVb1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJMJD1mj S1nikiIrUtgqJTUQIibbNYs/swVK3e27mH37SkGEAY0qIm8iHOelDwDVL7Ldd4yy BpR5wyTrdtqUJemig/JW42/TKfQQalxiZ5g6wXaznO+mdqd6n2QfkWEM6dlIBkvp J8JSgCgAnzNUpLIvBrn6C7jnBcQ/RCjYA5SuZMYy30I2Iu8mjI6306ZtReeXVr/6 /vkHxvqAEftmbjdbqOlcgzjHTnNfrs7H9pAY79K61IbT87PhY12sERZrKqcgfcZG dVIk72Xs3/seH0icecUHNOOJoF/i3MsD4JjalPrKuPMKOBPYCiosHV/veFfafPMa AqBGm2ttcqKUWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:18 2025 by rpki-client