This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft File: G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft (raw, json) Hash identifier: aG0bWtm5JyWCU8LirvjRWl718sZyRGclYhphRgGJNAk= Subject key identifier: E0:A7:51:07:7D:D5:11:37:7D:55:8E:51:C4:8E:7B:65:B6:32:85:51 Authority key identifier: 1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC Certificate issuer: /CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc Certificate serial: 019AF464F0E7BFB5602F6C27D984EFB495FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft Manifest number: 1099 Signing time: Sat 06 Dec 2025 16:00:47 +0000 Manifest this update: Sat 06 Dec 2025 16:00:47 +0000 Manifest next update: Sun 07 Dec 2025 16:00:47 +0000 Files and hashes: 1: G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl (hash: wOFqtuW5UVBuuvWfukW0OLiAv6I/28Aqav86rpStKYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:f0:e7:bf:b5:60:2f:6c:27:d9:84:ef:b4:95:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc Validity Not Before: Dec 6 16:00:47 2025 GMT Not After : Dec 7 16:00:47 2025 GMT Subject: CN=e0a751077dd511377d558e51c48e7b65b6328551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f5:18:2c:08:40:49:2c:14:6d:7c:72:ba:5c: e8:97:33:28:4e:d5:ef:d9:17:58:fd:7d:f0:d1:fc: 20:bb:3e:32:d2:0a:d8:80:d6:81:54:b8:5c:31:8c: 07:90:0d:0c:64:51:9e:20:31:35:91:a0:5f:24:89: 72:4e:15:61:57:db:ae:6c:32:ba:ac:19:1a:f8:f9: 15:b9:9d:88:7e:b1:30:08:42:07:05:f5:87:18:75: c9:91:3e:f8:04:5b:aa:9b:27:98:db:14:18:34:37: 19:9c:e4:c7:55:72:f6:82:75:e9:4d:51:f4:19:30: 15:10:23:d9:c8:d4:55:76:29:9e:e7:6f:86:ec:83: 21:1a:8d:5e:0b:c0:c6:f0:1e:f7:f3:ef:6e:d1:07: a5:ab:45:cc:ca:56:24:e9:ec:f2:5d:71:b6:8b:58: f3:79:da:06:c6:7e:b7:c1:e7:a6:16:d6:71:74:cb: ee:b6:e5:02:5b:9b:69:42:ff:59:b3:e5:04:37:83: a3:4d:2f:aa:22:40:7c:af:2d:20:45:30:9a:c4:6d: 89:8e:5f:5d:1d:05:d2:f9:6b:50:ac:c1:90:16:89: a2:ca:92:41:5f:c0:a2:2a:c6:3a:39:15:a3:74:4b: c3:fa:3e:88:66:9c:dd:03:b3:e3:b9:51:48:c4:f7: 98:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A7:51:07:7D:D5:11:37:7D:55:8E:51:C4:8E:7B:65:B6:32:85:51 X509v3 Authority Key Identifier: keyid:1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:e6:a7:ec:5a:3b:b8:00:f0:8c:2c:e4:99:0f:fa:2b:37:72: 22:f2:9d:17:33:5c:2d:37:81:99:83:e8:d0:9d:99:9d:97:51: 2f:ec:b8:73:cf:73:df:bd:84:09:b8:da:ac:c8:81:fd:5e:f6: ed:dd:98:ed:a9:60:58:4c:40:90:dc:1d:e3:8d:bd:ce:d8:35: fb:56:31:3a:6f:bd:d4:bd:d2:2d:e8:ab:06:c6:77:4a:63:96: 7e:92:01:e4:46:df:0b:a3:1e:0c:9e:70:dc:0e:ca:7e:65:c6: 26:90:72:6e:ce:8a:4d:fd:d6:4a:e0:61:a2:65:28:27:8f:00: 09:e6:f3:ee:74:fe:01:e6:70:a0:f9:cc:ad:00:8a:e2:35:29: c3:35:e8:c9:45:5d:a2:53:bf:b2:9d:e2:fa:fb:a7:eb:fa:63: 8a:a8:c4:d7:fe:da:fd:4b:f4:a9:c0:de:e7:0f:7e:2e:28:3c: 47:83:45:81:63:1a:4a:12:84:ac:d6:fd:59:23:37:f8:55:76: 34:dc:ec:aa:d3:f6:54:be:8c:65:ca:14:8b:07:27:d9:77:99: 9e:a4:03:75:a7:b7:be:7e:22:2f:d3:50:d0:32:ea:ba:24:b2: 9c:a6:17:c3:60:e2:5b:a1:af:b5:09:c2:54:16:a9:7b:35:32: 41:f5:e1:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZPDnv7VgL2wn2YTvtJX9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZTMzY2Y3YTZkMGYxOTM2M2JmZmQyYTZmMmU5ZmM0NzI3 OTAxZmMwHhcNMjUxMjA2MTYwMDQ3WhcNMjUxMjA3MTYwMDQ3WjAzMTEwLwYDVQQD EyhlMGE3NTEwNzdkZDUxMTM3N2Q1NThlNTFjNDhlN2I2NWI2MzI4NTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvUYLAhASSwUbXxyulzolzMoTtXv 2RdY/X3w0fwguz4y0grYgNaBVLhcMYwHkA0MZFGeIDE1kaBfJIlyThVhV9uubDK6 rBka+PkVuZ2IfrEwCEIHBfWHGHXJkT74BFuqmyeY2xQYNDcZnOTHVXL2gnXpTVH0 GTAVECPZyNRVdime52+G7IMhGo1eC8DG8B738+9u0Qelq0XMylYk6ezyXXG2i1jz edoGxn63weemFtZxdMvutuUCW5tpQv9Zs+UEN4OjTS+qIkB8ry0gRTCaxG2Jjl9d HQXS+WtQrMGQFomiypJBX8CiKsY6ORWjdEvD+j6IZpzdA7PjuVFIxPeYYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCnUQd91RE3fVWOUcSOe2W2MoVRMB8GA1UdIwQY MBaAFBvjPPem0PGTY7/9Km8un8RyeQH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy1NODk2YlE4Wk5qdl8wcWJ5NmZ4SEo1QWZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80NzQ5YjctY2U1ZS00NjIxLTk4Nzct MmZjYTY5ZDBmZGVjLzEvRy1NODk2YlE4Wk5qdl8wcWJ5NmZ4SEo1QWZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80NzQ5YjctY2U1ZS00NjIxLTk4NzctMmZjYTY5ZDBmZGVj LzEvRy1NODk2YlE4Wk5qdl8wcWJ5NmZ4SEo1QWZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+an7Fo7 uADwjCzkmQ/6KzdyIvKdFzNcLTeBmYPo0J2ZnZdRL+y4c89z372ECbjarMiB/V72 7d2Y7algWExAkNwd4429ztg1+1YxOm+91L3SLeirBsZ3SmOWfpIB5EbfC6MeDJ5w 3A7KfmXGJpBybs6KTf3WSuBhomUoJ48ACebz7nT+AeZwoPnMrQCK4jUpwzXoyUVd olO/sp3i+vun6/pjiqjE1/7a/Uv0qcDe5w9+Lig8R4NFgWMaShKErNb9WSM3+FV2 NNzsqtP2VL6MZcoUiwcn2XeZnqQDdae3vn4iL9NQ0DLquiSynKYXw2DiW6GvtQnC VBapezUyQfXhtg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:34:50 2025 by rpki-client