This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft File: G9LUY64VNG1e3Xk3uL-o4JsUN20.mft (raw, json) Hash identifier: 1GpFn4Ci1rwI4lS8+3AvixjMwgzGEcyHfMAKhyyGHio= Subject key identifier: 5E:23:D9:43:B1:F7:54:7F:4E:7D:04:38:B4:17:7B:2A:E5:24:EB:C9 Authority key identifier: 1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D Certificate issuer: /CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d Certificate serial: 019AF19B94E7FCA23A31B93011D8C4C39050 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft Manifest number: 1240 Signing time: Sat 06 Dec 2025 03:01:36 +0000 Manifest this update: Sat 06 Dec 2025 03:01:36 +0000 Manifest next update: Sun 07 Dec 2025 03:01:36 +0000 Files and hashes: 1: 61pqBezJLAJE5VLA7yrYYgA1x4Q.roa (hash: wkbkRNJ1tewUM/PlCjzz6x80lWa3MJj4NI3f+PnCsBo=) 2: EpJyeK5l3AFsANhOcZBiUOqM9nk.roa (hash: jEvX43x9SqA5MKvP91NPr1LUmWhpxkfIrUnmrmVabWE=) 3: G9LUY64VNG1e3Xk3uL-o4JsUN20.crl (hash: ujwdyPWSeSYJjD/WuXa2ChBAHQg8cHMwhG34BFAenb0=) 4: XyfRuc4kupwWuvivIxyG_eB9gmg.roa (hash: KYzWwUCDT/C8f7tzUEGe7k72yVFrK9hL5A1TsIJ1sdw=) 5: jLqRq9df1G6zlawXTbhxNybx_aU.roa (hash: U7jgU6c2HeS0w5bhwmU3yd/cT+TakYFUUagP3qrZf9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:94:e7:fc:a2:3a:31:b9:30:11:d8:c4:c3:90:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d Validity Not Before: Dec 6 03:01:36 2025 GMT Not After : Dec 7 03:01:36 2025 GMT Subject: CN=5e23d943b1f7547f4e7d0438b4177b2ae524ebc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e7:17:41:71:7c:0e:60:a4:be:ef:6d:69:7c: 7c:38:a9:3b:56:b6:cf:95:8a:48:b3:9f:6b:07:3e: 88:3b:61:65:2a:94:5c:f5:7f:ff:77:7e:73:d6:d4: 8a:6c:9c:c8:a7:07:70:74:c7:fb:3c:ae:a0:2d:2b: c1:5f:7a:ea:66:57:a4:fb:48:b1:5b:68:fd:da:8e: 47:a1:b4:1f:46:cf:66:2c:b9:b9:a3:fd:92:de:1e: 12:6f:18:2a:30:37:3e:b6:23:18:47:08:d8:93:49: c8:dc:39:d1:48:92:cf:f5:54:3a:f0:69:2a:c3:92: d3:6e:34:17:5b:9a:dc:37:48:fe:f8:1e:45:2f:91: 9d:2f:dc:5f:30:2a:8a:2a:c8:98:08:a8:42:65:65: e1:75:0c:cf:1a:b0:af:f9:b3:ae:09:e8:5c:f9:f5: 98:80:f9:78:aa:51:d7:ef:d3:32:d3:02:b7:d6:2a: 94:b2:86:f9:73:2e:94:29:fc:76:ff:74:47:da:08: 8c:44:f1:d0:25:79:ff:5a:0a:62:89:19:8c:a6:8e: e2:14:4c:b2:e6:e6:9f:20:a3:c0:e6:37:47:07:bd: 70:56:75:ea:27:db:f6:88:d5:d3:b5:50:19:51:ed: 9c:b3:2f:e4:49:46:48:ca:7b:e5:ed:2c:7f:fd:aa: e9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:23:D9:43:B1:F7:54:7F:4E:7D:04:38:B4:17:7B:2A:E5:24:EB:C9 X509v3 Authority Key Identifier: keyid:1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:00:7f:f0:38:79:8a:49:b3:07:8a:8f:0a:80:7b:86:a2:d4: b4:cc:4b:09:5c:0e:48:ce:41:d0:9f:83:d9:07:aa:00:59:a8: e4:06:18:0e:45:b1:c2:9a:99:a6:81:18:a5:fa:2d:30:9d:c2: 3e:e7:1a:b5:2e:fe:2a:32:8e:f1:d7:bc:ee:e5:4a:de:60:96: 2c:a4:01:bc:f2:38:4d:91:b7:ad:41:b8:aa:9a:aa:3b:5a:83: 51:ea:6a:73:a4:7c:a6:25:74:c0:f3:5c:36:04:e1:46:d6:c0: 0f:29:17:de:44:e3:94:f1:4c:ed:f2:ea:b4:64:d0:c4:fb:44: ac:dc:5e:8b:05:e4:a3:19:98:34:3b:fb:6d:07:79:23:b9:f5: be:43:38:2a:b2:bf:88:50:89:3e:98:4e:66:f2:e4:d7:ed:63: de:e2:a6:d6:f2:d3:12:0f:3b:cb:32:42:80:8f:c6:30:5f:c7: 69:ff:86:9a:b0:e6:91:f2:96:92:c2:b9:08:0c:51:18:ce:36: 18:08:19:96:f8:d7:f2:47:23:39:ee:e8:bc:11:11:c8:7d:c0: 52:fb:c6:35:cf:4c:b9:58:93:ab:d5:3c:73:2c:e0:86:df:a4: 5e:e2:39:72:34:4a:20:3f:52:6e:c6:43:eb:8d:12:c5:03:57: dc:e8:da:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5Tn/KI6MbkwEdjEw5BQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZDJkNDYzYWUxNTM0NmQ1ZWRkNzkzN2I4YmZhOGUwOWIx NDM3NmQwHhcNMjUxMjA2MDMwMTM2WhcNMjUxMjA3MDMwMTM2WjAzMTEwLwYDVQQD Eyg1ZTIzZDk0M2IxZjc1NDdmNGU3ZDA0MzhiNDE3N2IyYWU1MjRlYmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiucXQXF8DmCkvu9taXx8OKk7VrbP lYpIs59rBz6IO2FlKpRc9X//d35z1tSKbJzIpwdwdMf7PK6gLSvBX3rqZlek+0ix W2j92o5HobQfRs9mLLm5o/2S3h4SbxgqMDc+tiMYRwjYk0nI3DnRSJLP9VQ68Gkq w5LTbjQXW5rcN0j++B5FL5GdL9xfMCqKKsiYCKhCZWXhdQzPGrCv+bOuCehc+fWY gPl4qlHX79My0wK31iqUsob5cy6UKfx2/3RH2giMRPHQJXn/WgpiiRmMpo7iFEyy 5uafIKPA5jdHB71wVnXqJ9v2iNXTtVAZUe2csy/kSUZIynvl7Sx//arpdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4j2UOx91R/Tn0EOLQXeyrlJOvJMB8GA1UdIwQY MBaAFBvS1GOuFTRtXt15N7i/qOCbFDdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzlMVVk2NFZORzFlM1hrM3VMLW80SnNVTjIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC83MGM0NzctYThjZC00YTcyLWI2Njkt MWY5M2MyMzlhMDEyLzEvRzlMVVk2NFZORzFlM1hrM3VMLW80SnNVTjIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC83MGM0NzctYThjZC00YTcyLWI2NjktMWY5M2MyMzlhMDEy LzEvRzlMVVk2NFZORzFlM1hrM3VMLW80SnNVTjIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQB/8Dh5 ikmzB4qPCoB7hqLUtMxLCVwOSM5B0J+D2QeqAFmo5AYYDkWxwpqZpoEYpfotMJ3C PucatS7+KjKO8de87uVK3mCWLKQBvPI4TZG3rUG4qpqqO1qDUepqc6R8piV0wPNc NgThRtbADykX3kTjlPFM7fLqtGTQxPtErNxeiwXkoxmYNDv7bQd5I7n1vkM4KrK/ iFCJPphOZvLk1+1j3uKm1vLTEg87yzJCgI/GMF/Haf+GmrDmkfKWksK5CAxRGM42 GAgZlvjX8kcjOe7ovBERyH3AUvvGNc9MuViTq9U8cyzght+kXuI5cjRKID9SbsZD 640SxQNX3OjaiA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:58 2025 by rpki-client