This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json) Hash identifier: PsYU/8MRjJS6Mn7lV7jhhThBV++1e/HUOLi78uOnI9s= Subject key identifier: 48:FD:93:37:A1:62:48:27:AB:EB:D7:7D:41:2F:BA:9E:47:A9:26:04 Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80 Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780 Certificate serial: 019AF6F8A707A04CFE3780094AD3B172813F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft Manifest number: 1766 Signing time: Sun 07 Dec 2025 04:01:22 +0000 Manifest this update: Sun 07 Dec 2025 04:01:22 +0000 Manifest next update: Mon 08 Dec 2025 04:01:22 +0000 Files and hashes: 1: FseoG8adiLo0RLAf1UjvghOTljU.roa (hash: KjYrZHqJ+HstyQr/uUASJXDHhJKgj2NLAuGOtjEwvqg=) 2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: B20dFqFhd0pSqv30XNFD3VqbEkUZjQWv+bLTu1+Mc94=) 3: HZwokTuDHsI8h-fzTOEC6oBOUUI.roa (hash: WM7QJ6OQyLcuKoO0U9leXRvAuei8nXuZdEOZY6w3qXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:a7:07:a0:4c:fe:37:80:09:4a:d3:b1:72:81:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780 Validity Not Before: Dec 7 04:01:22 2025 GMT Not After : Dec 8 04:01:22 2025 GMT Subject: CN=48fd9337a1624827abebd77d412fba9e47a92604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ab:2c:11:65:50:f4:7d:9c:52:89:0b:98:3d: 64:3b:28:67:27:ee:9d:1c:49:d1:ae:37:59:0a:05: e9:2a:ea:cc:1d:53:34:48:7a:6b:22:7a:a9:1d:c7: 6a:32:29:c1:20:68:92:4e:3e:fa:ab:1e:9c:fe:8a: 64:57:5c:c3:45:bc:c1:3c:ec:4e:37:68:f0:c4:0d: 18:1e:94:70:20:d0:e7:91:1d:03:93:cc:5b:2d:aa: c9:8a:9d:23:8c:60:5f:ff:27:2e:cf:e0:db:63:4e: 59:ec:eb:bc:a0:e4:6b:96:34:5e:07:ca:8e:f7:f8: 95:91:7c:42:a8:a8:39:9d:4c:d0:5b:56:fe:1b:62: 94:22:c8:1e:6e:5d:de:97:10:e4:4b:96:53:37:5f: 2b:3a:37:30:e3:7e:0d:26:7a:88:2c:c3:4e:dc:67: 38:db:6c:dd:65:fb:c5:2d:95:cf:a2:fb:68:a3:ad: f1:11:2a:1b:e7:25:37:40:66:a9:42:11:30:fd:77: 5f:14:73:7d:da:c2:ab:4d:b2:ab:2c:f9:d0:05:3d: b0:28:e1:85:44:9f:e7:c9:29:10:e6:9a:8a:27:a5: 51:90:13:de:cc:23:3e:98:c7:42:95:09:85:14:a1: 70:15:5e:8e:c4:ae:c8:91:1e:95:38:e1:bc:6a:54: 2a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FD:93:37:A1:62:48:27:AB:EB:D7:7D:41:2F:BA:9E:47:A9:26:04 X509v3 Authority Key Identifier: keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:c2:dc:52:d2:e5:1a:7d:f0:45:65:a9:6f:61:87:f3:5b:7c: e7:6f:34:0e:cc:d7:02:1c:dc:f0:10:03:01:fa:23:42:01:22: 2f:9e:37:63:a9:5d:bb:f7:b8:88:56:72:4a:0a:1a:1f:27:2d: ca:9f:d9:3d:76:33:a6:f1:b9:3b:78:21:c5:3e:29:fa:55:97: c3:f7:f7:e0:ef:18:6f:43:f4:e1:98:fc:ca:63:c8:e4:fc:8a: a7:82:79:91:65:57:ca:c6:ce:39:fb:b5:e3:ac:0f:d7:b7:fa: f2:af:dd:a4:5e:63:39:42:2d:6d:c7:7e:5a:4b:90:3a:a2:2a: 47:2f:32:b3:c5:12:0b:8c:0d:d3:1d:05:a8:54:ae:71:b8:52: b6:c8:cc:95:50:17:c4:86:81:d2:5e:8b:0b:27:d8:79:90:d2: 88:de:d8:42:2b:5a:47:b5:61:bc:75:0a:02:30:98:22:b4:8c: 7a:2b:01:22:ee:a9:c4:ea:cf:1a:d5:88:d4:42:16:20:58:25: 36:76:a5:ef:c8:e2:79:64:c1:9a:35:83:45:32:3e:e9:f5:b4: 8f:e0:1f:06:c1:e1:1e:ba:6b:8d:d6:88:5c:7d:f1:92:51:df: c2:8f:68:b6:80:73:3a:f9:ac:87:40:b7:09:63:b6:62:ee:d7: c3:d9:b8:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+KcHoEz+N4AJStOxcoE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNjg2NTYxMjYxOTgzNzNkMDc4ODZiZjRhYjhmYjA2Yjkw MDY3ODAwHhcNMjUxMjA3MDQwMTIyWhcNMjUxMjA4MDQwMTIyWjAzMTEwLwYDVQQD Eyg0OGZkOTMzN2ExNjI0ODI3YWJlYmQ3N2Q0MTJmYmE5ZTQ3YTkyNjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6ssEWVQ9H2cUokLmD1kOyhnJ+6d HEnRrjdZCgXpKurMHVM0SHprInqpHcdqMinBIGiSTj76qx6c/opkV1zDRbzBPOxO N2jwxA0YHpRwINDnkR0Dk8xbLarJip0jjGBf/ycuz+DbY05Z7Ou8oORrljReB8qO 9/iVkXxCqKg5nUzQW1b+G2KUIsgebl3elxDkS5ZTN18rOjcw434NJnqILMNO3Gc4 22zdZfvFLZXPovtoo63xESob5yU3QGapQhEw/XdfFHN92sKrTbKrLPnQBT2wKOGF RJ/nySkQ5pqKJ6VRkBPezCM+mMdClQmFFKFwFV6OxK7IkR6VOOG8alQqPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEj9kzehYkgnq+vXfUEvup5HqSYEMB8GA1UdIwQY MBaAFBtoZWEmGYNz0HiGv0q4+wa5AGeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81MzEwMGYtMWJiMy00MjE5LTljODIt MjM5ODcwNGFiNTBjLzEvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81MzEwMGYtMWJiMy00MjE5LTljODItMjM5ODcwNGFiNTBj LzEvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8LcUtLl Gn3wRWWpb2GH81t85280DszXAhzc8BADAfojQgEiL543Y6ldu/e4iFZySgoaHyct yp/ZPXYzpvG5O3ghxT4p+lWXw/f34O8Yb0P04Zj8ymPI5PyKp4J5kWVXysbOOfu1 46wP17f68q/dpF5jOUItbcd+WkuQOqIqRy8ys8USC4wN0x0FqFSucbhStsjMlVAX xIaB0l6LCyfYeZDSiN7YQitaR7VhvHUKAjCYIrSMeisBIu6pxOrPGtWI1EIWIFgl Nnal78jieWTBmjWDRTI+6fW0j+AfBsHhHrprjdaIXH3xklHfwo9otoBzOvmsh0C3 CWO2Yu7Xw9m4FQ== -----END CERTIFICATE-----Generated at Sun Dec 7 07:26:06 2025 by rpki-client