This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft File: G1NNR62NtYlKX8k0LkVY-U5PF_E.mft (raw, json) Hash identifier: gu1LoVSi6g86OMdL2WJ5qwZhtS1A189Xwbc8oC33oFA= Subject key identifier: EF:57:E4:07:FE:0F:35:95:34:2B:E2:40:C0:BE:2D:5E:AC:E0:EC:CB Authority key identifier: 1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1 Certificate issuer: /CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1 Certificate serial: 019AF12E5A85BE75192ECCFCDE3EF58BE999 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft Manifest number: 16B7 Signing time: Sat 06 Dec 2025 01:02:18 +0000 Manifest this update: Sat 06 Dec 2025 01:02:18 +0000 Manifest next update: Sun 07 Dec 2025 01:02:18 +0000 Files and hashes: 1: G1NNR62NtYlKX8k0LkVY-U5PF_E.crl (hash: xxAovwpT/Wc0S7Nbt5UpDYv5qgy85cmgRbdg/xFgHLI=) 2: tpcLfnSFe1LhX4JafoXime7wXxw.roa (hash: 5bEgNy5LIfp1SJAYM4F8oQrbGx7UDr0Zn6gyPZH4W9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:5a:85:be:75:19:2e:cc:fc:de:3e:f5:8b:e9:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1 Validity Not Before: Dec 6 01:02:18 2025 GMT Not After : Dec 7 01:02:18 2025 GMT Subject: CN=ef57e407fe0f3595342be240c0be2d5eace0eccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0e:34:2f:c5:09:6c:bc:89:05:3c:8f:19:76: a3:27:5a:38:58:00:9f:7f:6a:aa:12:1c:dc:f2:9c: 8c:6c:49:45:89:66:c1:ce:2c:b5:88:30:da:16:96: f4:9e:76:97:e9:53:c5:e6:05:b9:f0:8c:0c:e1:ca: b3:bf:2d:54:21:fa:4a:87:d0:0a:13:b6:f7:a3:90: a5:e9:fb:66:f2:7b:f4:65:3c:c1:d9:14:d5:64:57: c8:70:52:a7:08:4d:be:36:64:49:d9:b5:f5:92:56: bc:76:26:07:b2:3f:2c:ca:b9:e1:45:7f:d1:5c:96: 1c:5f:a9:b6:d7:f2:a1:05:bd:8d:37:7f:75:ca:90: 42:8f:f6:5e:95:99:ff:c8:70:2a:30:7c:0d:ee:fa: 81:b5:e1:f2:ea:19:74:42:68:2c:44:eb:14:1f:5d: 29:39:87:88:2f:1b:49:e4:72:68:3c:3b:6e:d0:97: b1:58:bc:93:01:2f:b3:a5:ad:ce:93:c7:86:7d:75: de:25:f6:04:86:11:2f:47:80:3a:01:37:73:68:9a: 25:80:91:0b:ee:50:bd:62:1e:02:8d:ce:66:b7:a7: 19:24:06:f3:c0:5f:bb:95:f8:3f:a6:39:00:70:f4: 54:6b:b8:ef:45:97:8f:20:fc:24:61:40:0e:74:2e: 1a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:57:E4:07:FE:0F:35:95:34:2B:E2:40:C0:BE:2D:5E:AC:E0:EC:CB X509v3 Authority Key Identifier: keyid:1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:59:1f:94:6a:d4:6b:60:e4:2f:c8:73:f5:df:3c:93:17:84: 27:d8:8b:73:6e:cd:b1:6b:db:1d:09:9d:7b:69:95:15:d0:e3: 26:14:ac:2e:ec:0a:ba:06:3a:f9:14:13:11:4b:bd:91:15:d9: 90:18:20:f9:db:fd:ca:e9:c6:ea:e5:fa:9b:42:4c:10:4a:2d: 52:4b:75:9a:8d:97:2e:3c:23:fe:f7:46:52:4d:dd:8c:37:63: 2c:30:ea:f2:50:18:a4:77:d5:9c:76:14:64:75:b0:16:c2:96: 2f:dc:4c:98:8c:79:8f:15:22:4d:c5:27:13:29:17:0f:76:dc: 18:01:13:b5:3b:b8:44:3c:53:13:91:d8:5c:ec:13:c3:9b:16: ce:0c:16:dc:70:20:aa:ba:0f:6e:1f:ab:b9:0c:c6:96:37:c7: 74:22:d4:75:c3:42:11:7e:01:08:0a:6f:5e:08:49:c0:78:f5: 74:d1:62:3b:11:1c:5f:5f:b5:9b:be:8a:2c:4a:05:4a:15:81: 4d:1c:be:e0:86:70:3a:82:b6:c6:87:89:b6:39:2f:cc:59:af: 18:b3:a4:65:d8:05:d4:d5:b5:71:ec:54:a7:2b:c8:c6:af:e7: eb:d8:99:7b:70:d8:f9:ae:d0:7d:54:c3:83:05:7b:3b:46:09: e3:08:3d:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlqFvnUZLsz83j71i+mZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNTM0ZDQ3YWQ4ZGI1ODk0YTVmYzkzNDJlNDU1OGY5NGU0 ZjE3ZjEwHhcNMjUxMjA2MDEwMjE4WhcNMjUxMjA3MDEwMjE4WjAzMTEwLwYDVQQD EyhlZjU3ZTQwN2ZlMGYzNTk1MzQyYmUyNDBjMGJlMmQ1ZWFjZTBlY2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw40L8UJbLyJBTyPGXajJ1o4WACf f2qqEhzc8pyMbElFiWbBziy1iDDaFpb0nnaX6VPF5gW58IwM4cqzvy1UIfpKh9AK E7b3o5Cl6ftm8nv0ZTzB2RTVZFfIcFKnCE2+NmRJ2bX1kla8diYHsj8syrnhRX/R XJYcX6m21/KhBb2NN391ypBCj/ZelZn/yHAqMHwN7vqBteHy6hl0QmgsROsUH10p OYeILxtJ5HJoPDtu0JexWLyTAS+zpa3Ok8eGfXXeJfYEhhEvR4A6ATdzaJolgJEL 7lC9Yh4Cjc5mt6cZJAbzwF+7lfg/pjkAcPRUa7jvRZePIPwkYUAOdC4a3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9X5Af+DzWVNCviQMC+LV6s4OzLMB8GA1UdIwQY MBaAFBtTTUetjbWJSl/JNC5FWPlOTxfxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzFOTlI2Mk50WWxLWDhrMExrVlktVTVQRl9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82YjQwMjMtYWRlZi00ZTRkLThjZjYt MzI2Njk3MzdjNTE3LzEvRzFOTlI2Mk50WWxLWDhrMExrVlktVTVQRl9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82YjQwMjMtYWRlZi00ZTRkLThjZjYtMzI2Njk3MzdjNTE3 LzEvRzFOTlI2Mk50WWxLWDhrMExrVlktVTVQRl9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1kflGrU a2DkL8hz9d88kxeEJ9iLc27NsWvbHQmde2mVFdDjJhSsLuwKugY6+RQTEUu9kRXZ kBgg+dv9yunG6uX6m0JMEEotUkt1mo2XLjwj/vdGUk3djDdjLDDq8lAYpHfVnHYU ZHWwFsKWL9xMmIx5jxUiTcUnEykXD3bcGAETtTu4RDxTE5HYXOwTw5sWzgwW3HAg qroPbh+ruQzGljfHdCLUdcNCEX4BCApvXghJwHj1dNFiOxEcX1+1m76KLEoFShWB TRy+4IZwOoK2xoeJtjkvzFmvGLOkZdgF1NW1cexUpyvIxq/n69iZe3DY+a7QfVTD gwV7O0YJ4wg9+A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:27:45 2025 by rpki-client