This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft File: G7gLSjMnxYOuzbA87z9k8zvVmwg.mft (raw, json) Hash identifier: H5EuJT+YjATjH6355hUYDfnKfHsNEhlyY7hYZGe1wMU= Subject key identifier: 12:D0:61:76:7A:45:EB:B0:18:D7:1D:39:F6:71:B0:5C:C6:D5:77:3E Authority key identifier: 1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08 Certificate issuer: /CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08 Certificate serial: 019B360E80BACFA8B9861765E33C1C41220D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft Manifest number: 0CA8 Signing time: Fri 19 Dec 2025 10:01:18 +0000 Manifest this update: Fri 19 Dec 2025 10:01:18 +0000 Manifest next update: Sat 20 Dec 2025 10:01:18 +0000 Files and hashes: 1: G7gLSjMnxYOuzbA87z9k8zvVmwg.crl (hash: swQUK1S2IFkU1YkO4prEiVCsWbNZ3GJrbuTsn3kMSRM=) 2: f9_4yHGEiJhxZligkSR6T3R3EKU.roa (hash: zpcNNRByx6ZecO+EUAONqKSkYOomMoB7CmsUhShj7mY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:80:ba:cf:a8:b9:86:17:65:e3:3c:1c:41:22:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08 Validity Not Before: Dec 19 10:01:18 2025 GMT Not After : Dec 20 10:01:18 2025 GMT Subject: CN=12d061767a45ebb018d71d39f671b05cc6d5773e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f6:25:24:ce:31:35:7e:d2:e0:5b:68:ac:6e: 16:92:17:52:fa:f5:55:22:f2:90:02:8e:5c:64:b3: 90:23:28:62:4e:69:4d:b8:cd:85:f2:94:a7:ea:ed: 75:73:45:00:16:06:a1:5e:95:ce:f9:2b:27:a8:5d: da:1b:01:43:f9:8f:18:f4:46:0e:da:6a:a8:b1:5e: e7:ad:82:dd:85:6b:b5:59:f5:aa:80:26:a3:0d:09: 61:6b:3a:c3:f0:1b:2c:d5:0c:8b:97:30:e6:d0:4b: 37:a5:50:e5:ba:75:1c:18:ac:4d:4b:11:46:be:38: ae:6e:6b:25:d3:52:0a:51:b2:4a:ec:c7:50:84:c9: 2c:61:19:50:2e:b7:a9:0f:22:a4:f3:c2:70:f0:22: 9a:cd:b6:d0:86:44:b2:28:31:f0:0c:98:f9:d2:0f: fd:36:3f:f4:23:cd:31:18:f3:60:0c:99:19:a4:80: 42:db:af:8e:9a:61:15:6a:da:9b:17:45:32:a5:d4: ce:00:a6:e4:13:90:19:07:43:e4:2a:31:f9:89:c7: 04:a2:61:42:f8:80:d3:98:ad:73:01:e6:27:60:ee: b8:87:8a:f4:90:34:51:fa:62:da:31:60:7f:e6:32: bc:dd:b5:0d:89:10:29:d1:12:14:06:35:05:50:d4: e1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D0:61:76:7A:45:EB:B0:18:D7:1D:39:F6:71:B0:5C:C6:D5:77:3E X509v3 Authority Key Identifier: keyid:1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:88:7c:ed:fc:21:b7:b3:05:43:34:78:ca:10:24:7a:19:d0: 18:dc:c1:58:e2:11:a9:ce:b4:8d:c1:b6:07:b0:fc:ce:53:57: 5b:bb:7b:13:e1:59:ed:0e:02:68:1b:2f:75:2b:be:b9:a9:5b: 1a:ae:a8:c8:b9:ad:44:63:ca:48:4e:c7:23:8d:13:9a:dc:88: 57:43:4c:95:96:c0:27:84:7a:d4:60:0f:4b:54:f2:f5:75:bf: 20:ca:d1:15:bf:06:ff:68:e4:c3:24:12:da:df:ef:e8:1e:f3: 87:3a:5d:f4:80:16:be:42:85:47:b1:9c:d5:0c:58:5a:e3:77: 06:d8:6a:b1:8c:4b:69:56:56:44:05:78:ba:e4:8f:98:37:06: ce:1b:b2:ad:37:36:df:b7:31:03:a9:51:e7:94:80:a3:ea:25: 00:f5:a9:76:03:db:37:6a:18:5f:02:03:56:fe:57:eb:d7:26: 37:88:84:68:8f:7c:8c:b1:3c:27:e6:6b:2c:fe:c9:99:f8:33: 2e:21:93:f1:53:f0:18:a2:5a:4a:4d:aa:e2:e1:fb:09:50:fb: b9:db:45:6e:a9:18:8f:ca:73:19:d4:93:63:97:83:3f:11:e1: de:e0:d7:32:14:de:d7:97:fb:9d:2b:82:ce:b5:ac:b1:3f:eb: d3:1b:09:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DoC6z6i5hhdl4zwcQSINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYjgwYjRhMzMyN2M1ODNhZWNkYjAzY2VmM2Y2NGYzM2Jk NTliMDgwHhcNMjUxMjE5MTAwMTE4WhcNMjUxMjIwMTAwMTE4WjAzMTEwLwYDVQQD EygxMmQwNjE3NjdhNDVlYmIwMThkNzFkMzlmNjcxYjA1Y2M2ZDU3NzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/YlJM4xNX7S4FtorG4WkhdS+vVV IvKQAo5cZLOQIyhiTmlNuM2F8pSn6u11c0UAFgahXpXO+SsnqF3aGwFD+Y8Y9EYO 2mqosV7nrYLdhWu1WfWqgCajDQlhazrD8Bss1QyLlzDm0Es3pVDlunUcGKxNSxFG vjiubmsl01IKUbJK7MdQhMksYRlQLrepDyKk88Jw8CKazbbQhkSyKDHwDJj50g/9 Nj/0I80xGPNgDJkZpIBC26+OmmEVatqbF0UypdTOAKbkE5AZB0PkKjH5iccEomFC +IDTmK1zAeYnYO64h4r0kDRR+mLaMWB/5jK83bUNiRAp0RIUBjUFUNThWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLQYXZ6ReuwGNcdOfZxsFzG1Xc+MB8GA1UdIwQY MBaAFBu4C0ozJ8WDrs2wPO8/ZPM71ZsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzdnTFNqTW54WU91emJBODd6OWs4enZWbXdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS81ZmY4OWEtMmYxNS00MDkwLWJjYzIt ODA3YjdjMmQ2Mzg5LzEvRzdnTFNqTW54WU91emJBODd6OWs4enZWbXdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS81ZmY4OWEtMmYxNS00MDkwLWJjYzItODA3YjdjMmQ2Mzg5 LzEvRzdnTFNqTW54WU91emJBODd6OWs4enZWbXdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoIh87fwh t7MFQzR4yhAkehnQGNzBWOIRqc60jcG2B7D8zlNXW7t7E+FZ7Q4CaBsvdSu+ualb Gq6oyLmtRGPKSE7HI40TmtyIV0NMlZbAJ4R61GAPS1Ty9XW/IMrRFb8G/2jkwyQS 2t/v6B7zhzpd9IAWvkKFR7Gc1QxYWuN3BthqsYxLaVZWRAV4uuSPmDcGzhuyrTc2 37cxA6lR55SAo+olAPWpdgPbN2oYXwIDVv5X69cmN4iEaI98jLE8J+ZrLP7Jmfgz LiGT8VPwGKJaSk2q4uH7CVD7udtFbqkYj8pzGdSTY5eDPxHh3uDXMhTe15f7nSuC zrWssT/r0xsJIQ== -----END CERTIFICATE-----Generated at Fri Dec 19 15:06:07 2025 by rpki-client