This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft File: G0ILeZxSBqGe93F-48cxL9iDMK4.mft (raw, json) Hash identifier: 1R1NCOO82Pl47Nw5NuIIySjn35FDh0/e+MrFf5ifTOs= Subject key identifier: CC:D6:0E:67:5D:1E:B6:D1:FE:2E:0E:20:36:46:F0:FC:68:8E:C4:11 Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE Certificate issuer: /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae Certificate serial: 019AF1648012CB3801F0B0FDA87DFF8C3891 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft Manifest number: 0963 Signing time: Sat 06 Dec 2025 02:01:26 +0000 Manifest this update: Sat 06 Dec 2025 02:01:26 +0000 Manifest next update: Sun 07 Dec 2025 02:01:26 +0000 Files and hashes: 1: G0ILeZxSBqGe93F-48cxL9iDMK4.crl (hash: lQyK15LvDv/hQ+pEMfjY1XoVER9v7Uoe/q+vJ66IFXI=) 2: j-WhBxG3kTQ9qzGT3Um24_lMcSk.roa (hash: qcMICYRSrbrQRjk9ZR+9VL6T/3wI6mHE1uL2fvOP8p0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:80:12:cb:38:01:f0:b0:fd:a8:7d:ff:8c:38:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae Validity Not Before: Dec 6 02:01:26 2025 GMT Not After : Dec 7 02:01:26 2025 GMT Subject: CN=ccd60e675d1eb6d1fe2e0e203646f0fc688ec411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:21:14:0a:6d:c0:3c:c7:18:43:b2:c5:76:e5: ea:45:3a:75:93:49:8c:fc:88:ca:1c:19:02:f0:3a: 69:b7:52:ea:1d:ff:67:fa:8f:2f:5b:ba:32:b8:6c: 25:5b:cd:db:d7:5f:91:5b:71:3d:f0:de:13:15:c0: 24:69:cb:d4:b2:09:4d:f5:15:77:41:aa:c8:a2:08: d5:46:2c:bd:a5:35:a0:2b:c8:23:15:eb:9f:e7:d0: 19:75:88:91:59:d6:d4:cd:78:43:f3:c8:8b:9d:e6: 3f:a0:ed:bf:8e:28:a4:06:b4:69:66:12:cd:1c:60: 7d:a9:e1:d8:28:25:8d:d2:b0:76:7e:0f:9d:dd:f8: 0f:dc:0f:d8:4e:ba:6d:3f:fb:8e:bf:46:1e:ae:49: 26:07:98:5f:4b:f3:04:b0:cd:ab:88:73:1b:6b:32: ee:03:e0:c0:f1:e2:e3:4c:ea:ae:bd:e1:1a:7c:da: aa:5d:71:88:68:6e:9d:08:67:53:f2:04:ca:ab:d9: b9:75:3f:19:3c:f1:f1:c5:31:4d:34:53:4d:bf:a2: f9:eb:5f:69:77:d8:7a:cc:d0:da:bf:35:4f:27:1b: 90:e9:79:00:04:da:69:07:2e:eb:fd:05:8b:84:31: 0c:6c:13:cb:28:18:ef:7d:3a:36:36:23:9a:72:73: 97:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D6:0E:67:5D:1E:B6:D1:FE:2E:0E:20:36:46:F0:FC:68:8E:C4:11 X509v3 Authority Key Identifier: keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:33:01:02:ae:75:a9:2a:7d:e5:b0:7c:aa:96:72:8b:9e:94: 7c:63:74:c9:50:9c:6b:00:f8:56:f4:2e:01:69:77:23:df:e4: 75:50:92:25:f9:ff:8e:d3:c7:72:41:46:98:ba:e9:e0:df:88: 2f:e6:05:6f:23:f5:d3:02:4e:b4:32:5c:9c:7c:08:7c:53:00: c4:8c:b5:dc:c8:57:49:54:97:43:db:c4:7e:3f:d9:bb:3e:2e: 2f:9e:f9:1f:ea:7f:a2:0f:f7:2a:c0:50:5e:86:9d:2c:9e:cc: 99:2b:d3:aa:73:3f:24:47:49:05:ee:ae:16:74:73:30:c4:9b: 8a:11:3e:19:2c:f2:82:58:57:6d:2a:2c:ce:bd:75:9c:35:fa: 6b:f1:9f:be:83:a6:a0:90:a0:35:98:2c:29:b3:f5:bc:60:fd: 1e:ba:ff:20:e7:9e:0e:de:07:6b:00:7c:c1:24:04:9c:0e:b3: e5:28:8d:7c:1f:8b:bc:d6:00:d2:2d:77:0f:9b:e7:56:5f:26: e7:76:6b:8e:7d:05:62:3a:bf:4a:eb:45:12:89:a0:d1:c7:ae: 92:63:f3:56:e7:d4:98:cd:9b:e5:98:24:d3:e1:58:4d:6b:83: 79:7a:b8:2b:36:e4:68:2a:7c:e0:11:b8:d3:d0:78:1c:3b:6a: a1:52:05:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIASyzgB8LD9qH3/jDiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNDIwYjc5OWM1MjA2YTE5ZWY3NzE3ZWUzYzczMTJmZDg4 MzMwYWUwHhcNMjUxMjA2MDIwMTI2WhcNMjUxMjA3MDIwMTI2WjAzMTEwLwYDVQQD EyhjY2Q2MGU2NzVkMWViNmQxZmUyZTBlMjAzNjQ2ZjBmYzY4OGVjNDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iEUCm3APMcYQ7LFduXqRTp1k0mM /IjKHBkC8Dppt1LqHf9n+o8vW7oyuGwlW83b11+RW3E98N4TFcAkacvUsglN9RV3 QarIogjVRiy9pTWgK8gjFeuf59AZdYiRWdbUzXhD88iLneY/oO2/jiikBrRpZhLN HGB9qeHYKCWN0rB2fg+d3fgP3A/YTrptP/uOv0YerkkmB5hfS/MEsM2riHMbazLu A+DA8eLjTOquveEafNqqXXGIaG6dCGdT8gTKq9m5dT8ZPPHxxTFNNFNNv6L5619p d9h6zNDavzVPJxuQ6XkABNppBy7r/QWLhDEMbBPLKBjvfTo2NiOacnOXTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzWDmddHrbR/i4OIDZG8PxojsQRMB8GA1UdIwQY MBaAFBtCC3mcUgahnvdxfuPHMS/YgzCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzBJTGVaeFNCcUdlOTNGLTQ4Y3hMOWlETUs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80MTdkNzctMGU5ZS00MDkxLWI1MTAt OTQ2MDE4MjQxYzUxLzEvRzBJTGVaeFNCcUdlOTNGLTQ4Y3hMOWlETUs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi80MTdkNzctMGU5ZS00MDkxLWI1MTAtOTQ2MDE4MjQxYzUx LzEvRzBJTGVaeFNCcUdlOTNGLTQ4Y3hMOWlETUs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazMBAq51 qSp95bB8qpZyi56UfGN0yVCcawD4VvQuAWl3I9/kdVCSJfn/jtPHckFGmLrp4N+I L+YFbyP10wJOtDJcnHwIfFMAxIy13MhXSVSXQ9vEfj/Zuz4uL575H+p/og/3KsBQ XoadLJ7MmSvTqnM/JEdJBe6uFnRzMMSbihE+GSzyglhXbSoszr11nDX6a/GfvoOm oJCgNZgsKbP1vGD9Hrr/IOeeDt4HawB8wSQEnA6z5SiNfB+LvNYA0i13D5vnVl8m 53Zrjn0FYjq/SutFEomg0ceukmPzVufUmM2b5Zgk0+FYTWuDeXq4KzbkaCp84BG4 09B4HDtqoVIF5w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:37:45 2025 by rpki-client