This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft File: G3jb8-hZWC_R7aLy3N5UIilRRvE.mft (raw, json) Hash identifier: ua+Nr0sQ3rPKaRzZAql6AdzQpNaoM9twBqcDgd9fYvo= Subject key identifier: 00:D5:D3:8C:EA:8B:AF:6C:0F:C1:49:D6:67:54:FA:83:17:5C:D8:EB Authority key identifier: 1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1 Certificate issuer: /CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1 Certificate serial: 019B35D70CB2CC9FFCC4C892BEA4C04CFCA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 09:00:44 +0000 Manifest this update: Fri 19 Dec 2025 09:00:44 +0000 Manifest next update: Sat 20 Dec 2025 09:00:44 +0000 Files and hashes: 1: Csk8FW5y7YJBzT_KmLLv1t_20_E.roa (hash: v8gWLbfcXD73mmO4K/7j3PoZmZQLB/oP8z7Xeflu12k=) 2: G3jb8-hZWC_R7aLy3N5UIilRRvE.crl (hash: Vc8jfIdV0NAq92YNxT4fCDM/OrXqjXnyTBGY5bZkKtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:0c:b2:cc:9f:fc:c4:c8:92:be:a4:c0:4c:fc:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1 Validity Not Before: Dec 19 09:00:44 2025 GMT Not After : Dec 20 09:00:44 2025 GMT Subject: CN=00d5d38cea8baf6c0fc149d66754fa83175cd8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a9:0d:bd:03:35:5d:fd:6d:a4:b2:8f:60:ad: 94:7a:c6:56:bd:2f:6b:2d:44:ae:19:9f:e5:04:bd: 2c:3f:46:42:f8:04:ac:81:09:b9:be:1b:7a:d1:27: d8:06:9b:2d:14:62:0a:95:78:2f:ab:ff:c6:33:27: f7:f5:22:36:8b:98:25:79:3f:5d:c7:dd:be:15:df: 26:98:cd:98:4f:6a:bf:32:93:db:12:86:9b:fd:32: dd:c7:6e:b1:34:62:28:00:60:34:cc:cb:63:40:95: d9:a8:ee:2b:d3:c0:39:2d:87:90:56:a5:4b:8c:d4: 2d:d6:fa:df:db:7a:40:1e:85:16:96:4f:b9:01:b0: d0:37:37:15:27:17:a2:03:68:c5:7a:8a:63:d7:c5: 28:87:24:c5:e9:49:cf:b8:27:f5:27:85:a7:dd:52: 97:0f:e1:1a:b6:f8:4f:14:e3:bb:97:57:0c:0b:8a: e9:be:8a:74:76:bd:dd:be:1f:e4:48:1d:f2:0f:ef: 9f:e9:82:5d:b5:ab:21:f8:2e:bc:46:08:26:05:95: 83:e8:a0:8e:b9:a7:1e:6c:a0:02:f2:99:62:dc:08: 1d:65:68:e9:7a:e6:76:c0:21:08:12:3d:7e:88:af: 3a:6a:95:8b:69:d5:fa:1d:ce:0f:b6:78:60:7d:2d: 63:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D5:D3:8C:EA:8B:AF:6C:0F:C1:49:D6:67:54:FA:83:17:5C:D8:EB X509v3 Authority Key Identifier: keyid:1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:73:3a:2b:e0:9d:ae:7c:4f:ec:33:83:50:eb:72:95:09:a8: bb:d4:70:c0:a3:a2:4c:b9:1e:62:b7:5d:83:62:47:b3:3d:d7: a9:e0:8b:08:60:e0:5c:b9:af:1b:20:1f:97:9a:b7:93:98:ff: cb:5b:9e:49:03:f1:af:1a:0c:2b:0d:b9:68:c9:1c:6f:ee:1d: 8e:87:37:1f:2c:bc:01:c3:15:9c:b9:26:d7:18:e6:37:a0:c5: 81:1f:32:af:71:26:e3:bd:09:41:02:d8:5c:b7:c6:5d:54:d7: 15:ee:df:9a:91:32:bc:09:4f:1b:f4:a2:ed:3b:d9:02:67:fd: d0:06:7d:72:2f:d1:ff:56:a2:02:91:79:53:f1:b3:ca:ee:6f: 0b:35:1f:24:30:21:76:8b:34:a5:43:f6:ba:19:c1:38:bf:49: 33:bf:4b:5e:fa:68:15:2e:b6:e0:59:b3:a0:43:03:8d:f6:f7: fe:e6:db:83:82:88:3b:b8:42:43:8e:91:ad:91:11:31:71:17: 2f:27:b9:44:e1:1b:c4:8d:a7:ae:4e:cb:f9:34:cf:3f:8f:8a: 98:b4:08:4b:3f:c7:b5:a3:96:de:ba:3b:cb:46:27:3e:1c:b3: a1:b0:bb:5e:8e:20:89:bf:87:c6:08:50:e0:45:cc:41:47:e4: b4:52:86:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11wyyzJ/8xMiSvqTATPykMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNzhkYmYzZTg1OTU4MmZkMWVkYTJmMmRjZGU1NDIyMjk1 MTQ2ZjEwHhcNMjUxMjE5MDkwMDQ0WhcNMjUxMjIwMDkwMDQ0WjAzMTEwLwYDVQQD EygwMGQ1ZDM4Y2VhOGJhZjZjMGZjMTQ5ZDY2NzU0ZmE4MzE3NWNkOGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KkNvQM1Xf1tpLKPYK2UesZWvS9r LUSuGZ/lBL0sP0ZC+ASsgQm5vht60SfYBpstFGIKlXgvq//GMyf39SI2i5gleT9d x92+Fd8mmM2YT2q/MpPbEoab/TLdx26xNGIoAGA0zMtjQJXZqO4r08A5LYeQVqVL jNQt1vrf23pAHoUWlk+5AbDQNzcVJxeiA2jFeopj18UohyTF6UnPuCf1J4Wn3VKX D+EatvhPFOO7l1cMC4rpvop0dr3dvh/kSB3yD++f6YJdtash+C68RggmBZWD6KCO uacebKAC8pli3AgdZWjpeuZ2wCEIEj1+iK86apWLadX6Hc4PtnhgfS1jdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADV04zqi69sD8FJ1mdU+oMXXNjrMB8GA1UdIwQY MBaAFBt42/PoWVgv0e2i8tzeVCIpUUbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzNqYjgtaFpXQ19SN2FMeTNONVVJaWxSUnZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85OWI1MzUtYzQyYi00ZTAxLTg3OTMt NzIyMjk0NzgzZTllLzEvRzNqYjgtaFpXQ19SN2FMeTNONVVJaWxSUnZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC85OWI1MzUtYzQyYi00ZTAxLTg3OTMtNzIyMjk0NzgzZTll LzEvRzNqYjgtaFpXQ19SN2FMeTNONVVJaWxSUnZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3M6K+Cd rnxP7DODUOtylQmou9RwwKOiTLkeYrddg2JHsz3XqeCLCGDgXLmvGyAfl5q3k5j/ y1ueSQPxrxoMKw25aMkcb+4djoc3Hyy8AcMVnLkm1xjmN6DFgR8yr3Em470JQQLY XLfGXVTXFe7fmpEyvAlPG/Si7TvZAmf90AZ9ci/R/1aiApF5U/Gzyu5vCzUfJDAh dos0pUP2uhnBOL9JM79LXvpoFS624FmzoEMDjfb3/ubbg4KIO7hCQ46RrZERMXEX Lye5ROEbxI2nrk7L+TTPP4+KmLQISz/HtaOW3ro7y0YnPhyzobC7Xo4gib+HxghQ 4EXMQUfktFKGaQ== -----END CERTIFICATE-----Generated at Fri Dec 19 11:58:54 2025 by rpki-client