This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft File: G57Ppx7--bsb_nsuQCFc2lsjHl0.mft (raw, json) Hash identifier: j/ZuqzjHASIe7zvAnMm7btXAXU8ilCswx8fagSTTCiI= Subject key identifier: FC:27:2B:86:CE:D3:F1:5E:3F:18:C0:9B:FA:3B:E8:0A:E8:4A:F5:3B Authority key identifier: 1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D Certificate issuer: /CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d Certificate serial: 019AFC559BE156653ED09992CD1B07600807 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft Manifest number: 1767 Signing time: Mon 08 Dec 2025 05:01:00 +0000 Manifest this update: Mon 08 Dec 2025 05:01:00 +0000 Manifest next update: Tue 09 Dec 2025 05:01:00 +0000 Files and hashes: 1: G57Ppx7--bsb_nsuQCFc2lsjHl0.crl (hash: x+EnftsdgzMNXUFfGw95dET+UAJJHifOBL06ubCcGQ4=) 2: lxlrJ6zUgWTjPJVPagQ8_bikf3Y.roa (hash: ohk+IdQW1buST7Ifi9lGkmLrZs39V2tT52pS0ULxhf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:55:9b:e1:56:65:3e:d0:99:92:cd:1b:07:60:08:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d Validity Not Before: Dec 8 05:01:00 2025 GMT Not After : Dec 9 05:01:00 2025 GMT Subject: CN=fc272b86ced3f15e3f18c09bfa3be80ae84af53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:18:d5:e4:cd:92:43:df:13:91:bd:d3:67:da: e3:08:9d:fd:05:5c:1d:93:b4:b9:4f:03:49:20:28: 97:37:44:0b:3b:54:e9:b2:b7:79:41:04:d6:dd:58: a9:cd:6b:cc:86:49:59:f5:71:2d:0a:5c:ff:35:6c: d5:b1:04:a4:75:08:16:ee:10:78:c3:4a:48:dc:d9: 91:12:59:31:6f:d0:f8:58:6c:e9:26:22:3a:67:a2: 1b:4e:33:b7:da:f3:7c:6b:b1:b5:e5:f7:47:a9:b8: 2a:c9:2f:b9:d1:7c:74:5a:54:c7:45:5d:c7:1e:2e: ed:a9:53:6b:c8:12:11:c1:8f:62:cc:bc:a3:7d:00: 24:b2:b6:4e:b3:de:4f:4c:26:76:b9:1a:92:6a:68: ff:6b:3f:a5:2c:03:29:96:20:b1:9b:d4:bc:12:a4: 85:95:43:fb:9c:64:66:96:7d:ec:f8:e1:0b:5b:ea: 7e:a0:8e:ba:f9:ba:92:c2:2b:6d:84:9d:d5:47:fd: 6c:65:e4:9a:cb:81:4f:95:f2:24:62:6a:83:98:0c: 0a:44:84:38:69:c1:d0:e0:57:f5:e2:20:de:0f:9f: b0:7f:70:fd:d3:3e:aa:40:d0:4c:ec:b1:71:65:8a: 15:64:ba:bd:d2:d2:fc:a4:e5:f1:07:76:1d:9d:f1: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:27:2B:86:CE:D3:F1:5E:3F:18:C0:9B:FA:3B:E8:0A:E8:4A:F5:3B X509v3 Authority Key Identifier: keyid:1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:19:2b:55:ae:1f:66:35:27:e8:e9:76:bb:34:55:b1:79:95: 09:2d:aa:cf:e3:74:8f:2e:96:a6:01:9c:c2:78:6f:eb:71:8e: 75:1a:42:62:4f:4c:21:71:44:6d:ba:16:b5:f0:93:b3:95:3c: a0:c4:ad:b3:16:47:f1:fa:1f:39:f8:21:34:8e:2a:1e:e7:39: 7c:01:3b:c9:da:18:df:1c:a6:ae:81:a0:6c:0a:43:f8:27:ae: 29:11:05:21:e4:3f:8d:40:02:5e:89:2d:8e:35:bb:b7:1e:33: 84:7c:d4:75:5d:e1:53:8b:b0:f0:cd:81:fe:c6:33:34:da:97: 73:ca:3e:83:86:42:10:e2:d8:34:29:8d:7d:49:8b:7c:74:fb: b8:8d:cd:98:b8:b1:02:47:b8:e3:8c:18:c2:9c:09:b1:b8:68: 0d:37:13:1a:77:47:f4:92:e6:9a:58:39:44:63:84:91:a7:63: ac:f8:87:25:12:53:b6:19:f2:00:a2:00:c1:cc:b4:a4:69:28: ee:16:07:06:63:79:b9:54:95:51:4c:0d:30:c3:90:53:a6:90: e5:09:3b:63:e7:23:5e:f9:af:53:65:d4:d2:99:78:a5:40:c0: 8c:4d:a9:2c:60:ff:34:b1:8e:6a:f6:80:1e:44:82:4d:14:c9: 5d:04:25:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8VZvhVmU+0JmSzRsHYAgHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOWVjZmE3MWVmZWY5YmIxYmZlN2IyZTQwMjE1Y2RhNWIy MzFlNWQwHhcNMjUxMjA4MDUwMTAwWhcNMjUxMjA5MDUwMTAwWjAzMTEwLwYDVQQD EyhmYzI3MmI4NmNlZDNmMTVlM2YxOGMwOWJmYTNiZTgwYWU4NGFmNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhjV5M2SQ98Tkb3TZ9rjCJ39BVwd k7S5TwNJICiXN0QLO1Tpsrd5QQTW3VipzWvMhklZ9XEtClz/NWzVsQSkdQgW7hB4 w0pI3NmRElkxb9D4WGzpJiI6Z6IbTjO32vN8a7G15fdHqbgqyS+50Xx0WlTHRV3H Hi7tqVNryBIRwY9izLyjfQAksrZOs95PTCZ2uRqSamj/az+lLAMpliCxm9S8EqSF lUP7nGRmln3s+OELW+p+oI66+bqSwitthJ3VR/1sZeSay4FPlfIkYmqDmAwKRIQ4 acHQ4Ff14iDeD5+wf3D90z6qQNBM7LFxZYoVZLq90tL8pOXxB3YdnfHM6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwnK4bO0/FePxjAm/o76AroSvU7MB8GA1UdIwQY MBaAFBuez6ce/vm7G/57LkAhXNpbIx5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzU3UHB4Ny0tYnNiX25zdVFDRmMybHNqSGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lZDE2MDktMTA4Ni00N2I0LWE0OWQt ZjEwZDI2ZTNjM2RmLzEvRzU3UHB4Ny0tYnNiX25zdVFDRmMybHNqSGwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9lZDE2MDktMTA4Ni00N2I0LWE0OWQtZjEwZDI2ZTNjM2Rm LzEvRzU3UHB4Ny0tYnNiX25zdVFDRmMybHNqSGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRkrVa4f ZjUn6Ol2uzRVsXmVCS2qz+N0jy6WpgGcwnhv63GOdRpCYk9MIXFEbboWtfCTs5U8 oMStsxZH8fofOfghNI4qHuc5fAE7ydoY3xymroGgbApD+CeuKREFIeQ/jUACXokt jjW7tx4zhHzUdV3hU4uw8M2B/sYzNNqXc8o+g4ZCEOLYNCmNfUmLfHT7uI3NmLix Ake444wYwpwJsbhoDTcTGndH9JLmmlg5RGOEkadjrPiHJRJTthnyAKIAwcy0pGko 7hYHBmN5uVSVUUwNMMOQU6aQ5Qk7Y+cjXvmvU2XU0pl4pUDAjE2pLGD/NLGOavaA HkSCTRTJXQQlKw== -----END CERTIFICATE-----Generated at Mon Dec 8 11:28:20 2025 by rpki-client