This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft File: G23jwbDHn_sngi4JR_3DjlH8xco.mft (raw, json) Hash identifier: XqMgeLMG+upDghHUMqZJFcWnAx6/l7gHUHAnGwszFzY= Subject key identifier: BB:8C:67:F7:54:E9:12:F9:77:40:12:D6:70:2A:50:A8:7A:C0:83:AC Authority key identifier: 1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA Certificate issuer: /CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca Certificate serial: 019AF1D1F492CC8D6E3896F08FCC54AAECA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft Manifest number: 1201 Signing time: Sat 06 Dec 2025 04:00:59 +0000 Manifest this update: Sat 06 Dec 2025 04:00:59 +0000 Manifest next update: Sun 07 Dec 2025 04:00:59 +0000 Files and hashes: 1: BiAGFPvBaS-_3_T0Ap9b3JfJGCA.roa (hash: /0KB5Sq+IlIDTZoBY7qyhjJDP3PWs+GzGp/8C87RpPw=) 2: G23jwbDHn_sngi4JR_3DjlH8xco.crl (hash: 04tnki5zZt+hpFL8ZAx0up3P4wyGCmvUcSO1KAPiEms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f4:92:cc:8d:6e:38:96:f0:8f:cc:54:aa:ec:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca Validity Not Before: Dec 6 04:00:59 2025 GMT Not After : Dec 7 04:00:59 2025 GMT Subject: CN=bb8c67f754e912f9774012d6702a50a87ac083ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:92:05:dc:17:02:c2:30:fb:d8:eb:90:2e:ea: 27:cd:76:7e:51:17:20:67:40:a7:e1:63:b7:25:f6: eb:6e:d2:e2:c8:db:15:b9:a9:d3:97:fc:55:53:ce: f0:7e:87:d2:46:11:3f:81:e0:ba:c1:24:39:63:78: 20:b6:57:0c:20:81:6c:93:56:dd:6d:93:f8:4f:6a: 61:75:82:8d:59:ea:b0:ba:10:a0:e5:1b:30:28:68: 4b:76:44:d4:fc:19:1d:5b:55:8e:15:81:22:d9:6f: 2b:45:23:4f:94:61:78:d6:04:05:ca:7a:dc:92:de: 91:b9:75:59:07:13:4b:05:65:b6:b8:a2:d2:6f:9f: 33:1d:2f:68:30:25:80:e3:bc:12:b6:73:00:35:80: 17:e2:ae:9d:85:f2:f8:43:e2:4d:c0:c6:ec:dc:94: 50:44:df:f1:d9:c8:7f:98:83:8c:ee:3b:0e:3c:40: 71:a4:6f:c9:2b:24:49:59:2f:99:ec:9e:df:a2:10: 90:0f:e6:59:a3:33:22:fb:71:88:83:ab:83:cd:19: df:5c:ce:05:82:70:15:bd:6f:b9:87:9e:6b:f2:13: fa:91:3c:36:f5:bd:04:c1:25:19:f3:d0:82:de:6b: 4f:e7:6c:21:e5:35:ac:de:ff:f4:1b:bc:e1:85:0d: ce:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8C:67:F7:54:E9:12:F9:77:40:12:D6:70:2A:50:A8:7A:C0:83:AC X509v3 Authority Key Identifier: keyid:1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e8:d6:2a:6c:1b:68:d9:5c:1d:6d:99:a5:9a:eb:24:e0:21: 6a:33:50:4b:39:35:7d:e8:f2:d7:41:54:f9:0f:1b:f1:08:56: 6a:3b:0b:4e:6c:d9:2f:12:52:21:37:13:8e:4c:65:5c:82:9f: 21:68:37:3a:b3:e8:9c:6b:4d:b5:e7:c2:0e:94:c7:af:0c:ff: fa:58:38:a9:90:da:63:09:b1:a5:fe:73:a3:f0:f3:18:af:26: d7:a1:ed:4e:25:88:26:f6:fd:2f:13:8e:3a:6b:77:9e:a2:40: 35:47:82:32:61:40:0f:6f:81:60:be:3e:37:42:e4:67:78:e5: a9:72:d6:35:8d:36:64:1b:06:03:f6:a7:e9:a0:92:0b:f8:ea: 2a:a3:5f:98:78:76:93:03:97:60:b0:b3:19:72:98:b7:a9:90: 6a:84:06:6c:28:c4:a9:01:89:3d:6f:77:8f:47:db:5e:4e:7f: 87:b3:51:3a:9c:3e:ee:ba:1f:24:d5:e0:e4:64:50:a0:a2:98: 71:3e:d1:03:3c:e7:b6:3a:d7:9d:21:d1:0c:00:c5:12:34:53: 3b:0d:ae:6e:a6:55:2c:b7:a1:06:bb:fc:bf:d9:98:e0:07:2f: 5f:21:37:fd:62:16:6b:8c:0c:20:51:5c:c3:9b:c0:52:6b:27: 71:a8:d0:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fSSzI1uOJbwj8xUquymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNmRlM2MxYjBjNzlmZmIyNzgyMmUwOTQ3ZmRjMzhlNTFm Y2M1Y2EwHhcNMjUxMjA2MDQwMDU5WhcNMjUxMjA3MDQwMDU5WjAzMTEwLwYDVQQD EyhiYjhjNjdmNzU0ZTkxMmY5Nzc0MDEyZDY3MDJhNTBhODdhYzA4M2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJIF3BcCwjD72OuQLuonzXZ+URcg Z0Cn4WO3JfbrbtLiyNsVuanTl/xVU87wfofSRhE/geC6wSQ5Y3ggtlcMIIFsk1bd bZP4T2phdYKNWeqwuhCg5RswKGhLdkTU/BkdW1WOFYEi2W8rRSNPlGF41gQFynrc kt6RuXVZBxNLBWW2uKLSb58zHS9oMCWA47wStnMANYAX4q6dhfL4Q+JNwMbs3JRQ RN/x2ch/mIOM7jsOPEBxpG/JKyRJWS+Z7J7fohCQD+ZZozMi+3GIg6uDzRnfXM4F gnAVvW+5h55r8hP6kTw29b0EwSUZ89CC3mtP52wh5TWs3v/0G7zhhQ3O4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuMZ/dU6RL5d0AS1nAqUKh6wIOsMB8GA1UdIwQY MBaAFBtt48Gwx5/7J4IuCUf9w45R/MXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzIzandiREhuX3NuZ2k0SlJfM0RqbEg4eGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jNWU1NTctOGJlNS00ZjM5LTk1NjUt ZDk5ZTA4Njg0NmI3LzEvRzIzandiREhuX3NuZ2k0SlJfM0RqbEg4eGNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9jNWU1NTctOGJlNS00ZjM5LTk1NjUtZDk5ZTA4Njg0NmI3 LzEvRzIzandiREhuX3NuZ2k0SlJfM0RqbEg4eGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIujWKmwb aNlcHW2ZpZrrJOAhajNQSzk1fejy10FU+Q8b8QhWajsLTmzZLxJSITcTjkxlXIKf IWg3OrPonGtNtefCDpTHrwz/+lg4qZDaYwmxpf5zo/DzGK8m16HtTiWIJvb9LxOO Omt3nqJANUeCMmFAD2+BYL4+N0LkZ3jlqXLWNY02ZBsGA/an6aCSC/jqKqNfmHh2 kwOXYLCzGXKYt6mQaoQGbCjEqQGJPW93j0fbXk5/h7NROpw+7rofJNXg5GRQoKKY cT7RAzzntjrXnSHRDADFEjRTOw2ubqZVLLehBrv8v9mY4AcvXyE3/WIWa4wMIFFc w5vAUmsncajQOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:57 2025 by rpki-client