This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft File: G5gPIqWVKk75pOxKng0MNR_slFQ.mft (raw, json) Hash identifier: gNQFO3Pl1I5kexwwfSZ++w3HMcXMTYYa8fE4rDFd21I= Subject key identifier: A7:AF:81:5B:47:A8:A3:1C:47:AE:90:7A:7C:A0:CB:21:D9:8E:73:52 Authority key identifier: 1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54 Certificate issuer: /CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454 Certificate serial: 019AF465AA7A86C59DF54E9C07162F3147B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 16:01:34 +0000 Manifest this update: Sat 06 Dec 2025 16:01:34 +0000 Manifest next update: Sun 07 Dec 2025 16:01:34 +0000 Files and hashes: 1: G5gPIqWVKk75pOxKng0MNR_slFQ.crl (hash: CLbYht7pGCZLdfrwGEkKrP7Sf5eLccbf5MydriC81fQ=) 2: jFeXSLOcmKjdy19dvekbxvl1dmc.roa (hash: 52Ov8zQceO7HlblWWc/Kf8ebS6bj291XEV6Vi2okLGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:aa:7a:86:c5:9d:f5:4e:9c:07:16:2f:31:47:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454 Validity Not Before: Dec 6 16:01:34 2025 GMT Not After : Dec 7 16:01:34 2025 GMT Subject: CN=a7af815b47a8a31c47ae907a7ca0cb21d98e7352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1c:40:86:42:02:95:74:d8:23:fe:b9:0a:df: c0:6a:2d:ed:dc:f8:af:0d:2c:74:a3:7a:65:64:ea: 05:4b:9f:06:17:fb:e1:61:aa:0b:bc:46:15:40:e9: 0f:e9:e6:29:81:da:9f:b5:02:7a:70:56:ac:6a:57: ab:40:1f:fd:fc:3e:a9:e5:d7:0b:bc:34:2b:48:df: 69:de:35:67:ea:92:2e:ae:9b:e9:6c:e7:b8:31:2c: 26:78:0e:05:52:76:67:af:c4:45:d0:3c:19:cd:0d: 79:2f:a7:9d:b6:d9:6f:14:e4:51:ec:cb:42:78:2b: 10:e0:fe:1a:8f:09:26:2f:ef:d6:c9:fc:42:67:64: 88:86:16:3a:25:8d:ae:ec:ee:2e:90:6b:ba:0d:5d: cd:2a:47:93:9b:5c:51:1d:f8:60:7f:f0:eb:b9:ab: 12:e5:6e:d6:e1:e5:27:cf:ea:4b:d8:4b:6d:de:22: a7:dd:46:3b:49:d7:ef:5f:2f:f8:12:94:d1:e4:c5: 27:22:a2:c4:5f:6f:ff:78:17:6b:4d:13:f7:07:ba: 88:10:9d:e9:90:d2:68:08:ec:1f:96:59:ce:2f:1a: 0b:8f:09:94:49:ca:8a:e9:21:ba:a4:59:39:b0:5f: 56:c0:8f:c8:5b:3d:43:e4:0b:c0:8d:c7:87:2c:ee: a0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AF:81:5B:47:A8:A3:1C:47:AE:90:7A:7C:A0:CB:21:D9:8E:73:52 X509v3 Authority Key Identifier: keyid:1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d5:0b:67:1c:6e:86:33:e2:e3:e9:c2:a9:4f:50:33:63:93: 5c:b4:68:a6:b0:39:81:cc:72:bb:d8:08:78:72:eb:a1:ac:fd: d4:e0:8a:2f:56:83:8c:c7:1a:38:75:f2:c8:4b:dc:f6:0a:ac: 1f:08:9c:5c:10:7b:bd:1b:0a:76:92:64:59:dc:b0:15:c6:e7: df:38:2f:ac:c0:85:06:d3:f7:4a:78:92:c9:5a:dd:ba:55:99: 28:0f:16:79:8c:71:3a:a9:05:6d:ee:ef:31:cd:c6:1f:d6:c2: 4b:1d:52:9d:e4:8a:ff:f7:9e:ac:55:90:09:22:7f:da:9c:32: d0:f4:f3:8e:85:12:cc:71:90:d7:78:02:f7:a4:07:ab:dd:c4: a4:1d:bd:61:e7:50:71:ef:7d:b3:30:15:f0:04:21:c0:08:c6: 6b:67:96:cf:32:60:7a:f5:ca:27:d2:16:b7:ff:df:69:8a:4b: ea:22:95:a2:bf:b4:a4:81:4f:80:bb:38:24:ee:aa:4a:c2:04: df:ba:e3:e7:36:e4:0e:0c:07:b4:e7:3d:4f:d2:a1:13:bb:04: bc:99:a6:f7:8f:b4:62:10:b8:0f:d4:3d:96:dc:43:24:8c:79: ab:84:b8:2c:f4:a4:1b:87:60:ae:28:10:2b:51:9f:5a:d1:25: 26:89:aa:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Zap6hsWd9U6cBxYvMUe0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOTgwZjIyYTU5NTJhNGVmOWE0ZWM0YTllMGQwYzM1MWZl Yzk0NTQwHhcNMjUxMjA2MTYwMTM0WhcNMjUxMjA3MTYwMTM0WjAzMTEwLwYDVQQD EyhhN2FmODE1YjQ3YThhMzFjNDdhZTkwN2E3Y2EwY2IyMWQ5OGU3MzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxxAhkIClXTYI/65Ct/Aai3t3Piv DSx0o3plZOoFS58GF/vhYaoLvEYVQOkP6eYpgdqftQJ6cFasalerQB/9/D6p5dcL vDQrSN9p3jVn6pIurpvpbOe4MSwmeA4FUnZnr8RF0DwZzQ15L6edttlvFORR7MtC eCsQ4P4ajwkmL+/WyfxCZ2SIhhY6JY2u7O4ukGu6DV3NKkeTm1xRHfhgf/DruasS 5W7W4eUnz+pL2Ett3iKn3UY7SdfvXy/4EpTR5MUnIqLEX2//eBdrTRP3B7qIEJ3p kNJoCOwfllnOLxoLjwmUScqK6SG6pFk5sF9WwI/IWz1D5AvAjceHLO6ghwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKevgVtHqKMcR66QenygyyHZjnNSMB8GA1UdIwQY MBaAFBuYDyKllSpO+aTsSp4NDDUf7JRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzVnUElxV1ZLazc1cE94S25nME1OUl9zbEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83NzRlMjYtZDA4Zi00NmQzLWFkMDYt MzQ3YjU2NmRkYmQxLzEvRzVnUElxV1ZLazc1cE94S25nME1OUl9zbEZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83NzRlMjYtZDA4Zi00NmQzLWFkMDYtMzQ3YjU2NmRkYmQx LzEvRzVnUElxV1ZLazc1cE94S25nME1OUl9zbEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNULZxxu hjPi4+nCqU9QM2OTXLRoprA5gcxyu9gIeHLroaz91OCKL1aDjMcaOHXyyEvc9gqs HwicXBB7vRsKdpJkWdywFcbn3zgvrMCFBtP3SniSyVrdulWZKA8WeYxxOqkFbe7v Mc3GH9bCSx1SneSK//eerFWQCSJ/2pwy0PTzjoUSzHGQ13gC96QHq93EpB29YedQ ce99szAV8AQhwAjGa2eWzzJgevXKJ9IWt//faYpL6iKVor+0pIFPgLs4JO6qSsIE 37rj5zbkDgwHtOc9T9KhE7sEvJmm94+0YhC4D9Q9ltxDJIx5q4S4LPSkG4dgrigQ K1GfWtElJomqmA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:02:37 2025 by rpki-client