This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft File: G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft (raw, json) Hash identifier: nSlWfXKnl3IOoDmSuOPoTfHZvwuXHA735n6cMjg8akI= Subject key identifier: 99:AB:F9:8C:84:FE:4B:DE:24:D0:FE:3B:38:66:1E:DF:62:85:F0:8B Authority key identifier: 1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29 Certificate issuer: /CN=1bb29b3f158fa80710c12a58b69fb926098d5129 Certificate serial: 019AF3F7A72B553242BE294A6380B695F41A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft Manifest number: 0DF7 Signing time: Sat 06 Dec 2025 14:01:24 +0000 Manifest this update: Sat 06 Dec 2025 14:01:24 +0000 Manifest next update: Sun 07 Dec 2025 14:01:24 +0000 Files and hashes: 1: G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl (hash: +3awqKwUqr3xD480goIsjc+tCwhvUT99dAzosFWYL9o=) 2: j_n9Kg39TCshbmu8W1dk2NVjcFI.roa (hash: 56S9svTLKP+1FymtE0skXNThCYHX7pM3o2tRL4nBuW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:a7:2b:55:32:42:be:29:4a:63:80:b6:95:f4:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bb29b3f158fa80710c12a58b69fb926098d5129 Validity Not Before: Dec 6 14:01:24 2025 GMT Not After : Dec 7 14:01:24 2025 GMT Subject: CN=99abf98c84fe4bde24d0fe3b38661edf6285f08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4b:16:10:ff:05:9e:fd:68:19:81:e4:c6:05: 28:75:81:48:5a:d5:65:52:57:ce:0c:8c:c3:95:41: 0e:2f:8e:a5:41:a3:c9:13:32:13:39:87:ee:6e:11: f3:b0:57:99:b0:c3:33:bc:b6:57:c7:f8:88:c8:9a: 2e:79:c4:24:b7:8e:59:93:55:0a:e9:84:3a:33:27: 45:9a:83:b6:a0:7e:75:27:16:7d:71:00:e6:27:25: 05:e5:39:8e:96:c6:65:1d:5c:2c:b1:87:24:a8:a7: 8d:2e:e7:e4:b5:76:0e:81:55:e6:3e:b4:de:38:b7: c1:a4:d4:a4:4d:d9:27:15:7c:1c:e8:ac:36:8e:9a: 9a:d4:01:89:f4:6c:d5:e9:ae:c7:a8:4e:cd:16:00: 7a:9a:e9:b9:76:a5:35:d4:f7:49:00:d8:e3:9d:ca: aa:26:84:73:c8:09:29:b5:cb:e7:c7:1d:45:35:75: e4:68:ea:9e:cc:85:22:c5:45:3b:49:86:57:fe:08: bb:a0:01:23:56:64:f3:60:f0:79:a5:83:e0:dc:3e: 60:c0:aa:51:22:1d:4f:27:1c:62:d3:67:67:5a:bc: f0:f0:cd:3c:2f:ca:f8:16:d2:ac:2c:5e:fc:22:9c: c8:99:d4:06:a9:4a:04:94:58:d4:71:c0:21:b3:8d: 8d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AB:F9:8C:84:FE:4B:DE:24:D0:FE:3B:38:66:1E:DF:62:85:F0:8B X509v3 Authority Key Identifier: keyid:1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:31:cc:35:28:43:b5:4f:95:07:dc:9c:34:79:b7:41:bc:2c: 82:73:30:bb:88:05:77:1f:e5:0c:7c:b1:43:67:a3:1b:e4:4f: a7:ed:d7:d4:f2:5e:fb:7d:05:22:48:cd:5c:58:1c:6e:d9:f4: d7:9a:ac:54:e5:c3:09:75:0b:8a:dc:b0:31:c8:f4:f9:64:1b: ee:1c:b5:cc:dd:99:27:49:3e:13:36:0d:43:d4:f0:9c:b6:ae: 76:11:44:43:09:1f:d9:3b:91:61:09:be:a6:2c:2a:3c:29:87: 67:b4:33:2d:26:36:6f:1e:e6:14:1a:29:57:9d:cd:59:34:8d: dc:2a:1c:13:01:e1:24:da:5f:40:72:fa:c0:56:e3:3f:25:0f: ea:6a:0e:d1:1d:7b:0e:54:53:df:14:ef:ea:2b:7f:70:94:71: 9a:29:0b:02:2d:30:8f:e3:6b:00:5b:3e:b1:33:44:4b:82:83: 12:8a:b1:b0:8c:38:e8:55:a3:7f:b3:a9:c8:0f:d6:dc:b6:0f: b1:71:03:4a:a8:9d:5c:a8:ff:2c:ef:75:51:93:47:85:a6:b5: 31:90:76:4f:9a:85:c4:6b:c8:f5:bb:ed:db:16:d6:dc:7e:d4: ed:0a:73:5f:cf:e9:a4:42:d2:64:6f:ea:95:c5:76:6f:c2:79: fb:56:a0:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz96crVTJCvilKY4C2lfQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYjI5YjNmMTU4ZmE4MDcxMGMxMmE1OGI2OWZiOTI2MDk4 ZDUxMjkwHhcNMjUxMjA2MTQwMTI0WhcNMjUxMjA3MTQwMTI0WjAzMTEwLwYDVQQD Eyg5OWFiZjk4Yzg0ZmU0YmRlMjRkMGZlM2IzODY2MWVkZjYyODVmMDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEsWEP8Fnv1oGYHkxgUodYFIWtVl UlfODIzDlUEOL46lQaPJEzITOYfubhHzsFeZsMMzvLZXx/iIyJouecQkt45Zk1UK 6YQ6MydFmoO2oH51JxZ9cQDmJyUF5TmOlsZlHVwssYckqKeNLufktXYOgVXmPrTe OLfBpNSkTdknFXwc6Kw2jpqa1AGJ9GzV6a7HqE7NFgB6mum5dqU11PdJANjjncqq JoRzyAkptcvnxx1FNXXkaOqezIUixUU7SYZX/gi7oAEjVmTzYPB5pYPg3D5gwKpR Ih1PJxxi02dnWrzw8M08L8r4FtKsLF78IpzImdQGqUoElFjUccAhs42NhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmr+YyE/kveJND+OzhmHt9ihfCLMB8GA1UdIwQY MBaAFBuymz8Vj6gHEMEqWLafuSYJjVEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzdLYlB4V1BxQWNRd1NwWXRwLTVKZ21OVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi81NzNmMGItNTMyNS00MWQzLWI5ZmYt OGY3ZDU2YjdiNDE3LzEvRzdLYlB4V1BxQWNRd1NwWXRwLTVKZ21OVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi81NzNmMGItNTMyNS00MWQzLWI5ZmYtOGY3ZDU2YjdiNDE3 LzEvRzdLYlB4V1BxQWNRd1NwWXRwLTVKZ21OVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzHMNShD tU+VB9ycNHm3QbwsgnMwu4gFdx/lDHyxQ2ejG+RPp+3X1PJe+30FIkjNXFgcbtn0 15qsVOXDCXULitywMcj0+WQb7hy1zN2ZJ0k+EzYNQ9TwnLaudhFEQwkf2TuRYQm+ piwqPCmHZ7QzLSY2bx7mFBopV53NWTSN3CocEwHhJNpfQHL6wFbjPyUP6moO0R17 DlRT3xTv6it/cJRxmikLAi0wj+NrAFs+sTNES4KDEoqxsIw46FWjf7OpyA/W3LYP sXEDSqidXKj/LO91UZNHhaa1MZB2T5qFxGvI9bvt2xbW3H7U7QpzX8/ppELSZG/q lcV2b8J5+1agsg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:41:28 2025 by rpki-client