This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft File: G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft (raw, json) Hash identifier: VweWzMYek7eSaSpvVOOI2GiVqN6Hj5FNWpIhWccCTVE= Subject key identifier: 5B:B1:F7:F6:3A:08:10:74:31:AA:AC:16:E2:57:01:0F:20:8E:AE:79 Authority key identifier: 1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38 Certificate issuer: /CN=1b54437c92c1e08b06e0776187c7884dd51c0e38 Certificate serial: 019AF1D208D91B88ECB03CE9698D5732B372 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft Manifest number: 0847 Signing time: Sat 06 Dec 2025 04:01:05 +0000 Manifest this update: Sat 06 Dec 2025 04:01:05 +0000 Manifest next update: Sun 07 Dec 2025 04:01:05 +0000 Files and hashes: 1: G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl (hash: rHOEPA0z/SE/d3vjKEUOkWWtSY7yYFbZKfnTbmjbaPs=) 2: m-RL63I77tnbUHaZReiKcRHtR58.roa (hash: VHqfyzr+g1S2KroF/o4QYcY/QOnFZTun+jLqscdqvBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:08:d9:1b:88:ec:b0:3c:e9:69:8d:57:32:b3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b54437c92c1e08b06e0776187c7884dd51c0e38 Validity Not Before: Dec 6 04:01:05 2025 GMT Not After : Dec 7 04:01:05 2025 GMT Subject: CN=5bb1f7f63a08107431aaac16e257010f208eae79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:22:7f:e3:4c:d8:97:35:29:3d:2a:11:2f:26: 65:85:e1:e3:e3:4d:6c:9d:a3:1b:4f:e2:02:4e:d5: a2:09:a5:15:78:46:5b:97:6a:f9:98:8a:dd:19:b9: ac:21:b3:b3:d7:17:ee:3c:59:dd:80:04:f1:81:f4: 83:29:3c:5a:2c:73:6c:20:de:d4:df:1a:d0:4f:6a: a6:30:ba:aa:fc:99:c7:4a:a0:db:0d:77:23:20:bf: 77:83:3a:2d:85:aa:20:9f:4f:c9:17:28:8a:4a:43: 10:19:af:d0:91:39:50:a8:12:c7:cf:30:eb:e6:53: 74:97:41:96:f2:2d:b4:68:40:2d:ff:ba:4b:4c:85: a0:b5:43:63:0e:91:8f:28:d0:88:b6:86:a3:01:74: 75:ee:fe:02:e4:0e:d9:20:6d:28:70:b9:ab:fb:a3: 1d:09:de:03:37:bf:3a:1c:a1:20:87:46:fe:fa:42: 9e:b9:5c:20:75:59:a4:98:48:98:cb:57:88:9d:d6: bf:a0:6f:8a:69:cd:69:54:60:9a:f4:f6:57:41:70: 47:9d:b8:50:4f:0a:5a:c9:82:1f:ae:7e:03:f9:c5: 34:8a:ec:35:59:33:90:1c:c3:8c:45:bd:3a:7e:63: 38:42:f5:6a:87:62:3f:0d:bc:00:81:99:4e:09:70: e5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B1:F7:F6:3A:08:10:74:31:AA:AC:16:E2:57:01:0F:20:8E:AE:79 X509v3 Authority Key Identifier: keyid:1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:47:20:be:e2:de:a1:dc:51:87:ec:79:24:60:a7:d8:a8:95: db:03:ca:79:bf:f1:66:48:9f:eb:cf:c3:03:59:83:45:30:e7: 7c:a0:6e:a1:e8:d4:91:ed:ff:b8:0b:27:c6:bc:67:bb:46:a6: 44:75:63:57:6c:78:a4:1a:27:0d:e0:ab:cb:f8:65:7b:c9:6d: 62:45:dc:f1:43:5a:40:1b:91:ee:6f:29:b5:ad:46:cd:26:e9: c6:ad:e8:ae:da:8e:c4:08:cb:e7:2c:c9:c9:c4:d9:26:1e:73: ef:e3:7b:8f:92:b6:3b:b2:60:b2:cf:82:0f:12:9e:28:bf:d9: 91:d6:dc:c5:7b:09:c5:67:98:be:ac:e9:fd:34:cb:e9:46:5a: 7a:b9:e2:18:89:52:64:a3:c9:7c:f9:8c:a6:9e:77:7c:7e:ce: a3:31:a9:d8:a4:29:24:78:ba:10:81:17:44:ef:2f:9a:2a:bd: 89:e9:95:89:9c:32:2a:56:be:b0:5a:cd:b5:64:e6:16:07:7f: 77:b5:bd:64:81:43:5c:3a:9c:6d:32:05:60:cc:cc:55:03:76: 45:5e:ef:da:9a:32:c0:f9:eb:39:90:31:a3:ba:ec:11:39:cd: ae:ae:f8:51:19:ff:21:13:c8:ee:31:a0:3e:58:d0:41:7e:8e: 41:39:22:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gjZG4jssDzpaY1XMrNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNTQ0MzdjOTJjMWUwOGIwNmUwNzc2MTg3Yzc4ODRkZDUx YzBlMzgwHhcNMjUxMjA2MDQwMTA1WhcNMjUxMjA3MDQwMTA1WjAzMTEwLwYDVQQD Eyg1YmIxZjdmNjNhMDgxMDc0MzFhYWFjMTZlMjU3MDEwZjIwOGVhZTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yJ/40zYlzUpPSoRLyZlheHj401s naMbT+ICTtWiCaUVeEZbl2r5mIrdGbmsIbOz1xfuPFndgATxgfSDKTxaLHNsIN7U 3xrQT2qmMLqq/JnHSqDbDXcjIL93gzothaogn0/JFyiKSkMQGa/QkTlQqBLHzzDr 5lN0l0GW8i20aEAt/7pLTIWgtUNjDpGPKNCItoajAXR17v4C5A7ZIG0ocLmr+6Md Cd4DN786HKEgh0b++kKeuVwgdVmkmEiYy1eInda/oG+Kac1pVGCa9PZXQXBHnbhQ TwpayYIfrn4D+cU0iuw1WTOQHMOMRb06fmM4QvVqh2I/DbwAgZlOCXDlVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFux9/Y6CBB0MaqsFuJXAQ8gjq55MB8GA1UdIwQY MBaAFBtUQ3ySweCLBuB3YYfHiE3VHA44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9mMWRiMzYtNjY1ZC00ZDgwLWExYjIt NTE1ZWUxNTcwMjU5LzEvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9mMWRiMzYtNjY1ZC00ZDgwLWExYjItNTE1ZWUxNTcwMjU5 LzEvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkcgvuLe odxRh+x5JGCn2KiV2wPKeb/xZkif68/DA1mDRTDnfKBuoejUke3/uAsnxrxnu0am RHVjV2x4pBonDeCry/hle8ltYkXc8UNaQBuR7m8pta1GzSbpxq3ortqOxAjL5yzJ ycTZJh5z7+N7j5K2O7Jgss+CDxKeKL/ZkdbcxXsJxWeYvqzp/TTL6UZaerniGIlS ZKPJfPmMpp53fH7OozGp2KQpJHi6EIEXRO8vmiq9iemViZwyKla+sFrNtWTmFgd/ d7W9ZIFDXDqcbTIFYMzMVQN2RV7v2poywPnrOZAxo7rsETnNrq74URn/IRPI7jGg PljQQX6OQTkiAA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:45 2025 by rpki-client