This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft File: G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft (raw, json) Hash identifier: UZb0LYTTMI7oU+skZ7Jd3WDHGLLBVct8aQfVYvCHRA8= Subject key identifier: 09:37:19:22:3E:6B:6D:3C:C7:12:1C:D4:A2:63:43:C0:25:1E:26:AD Authority key identifier: 1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38 Certificate issuer: /CN=1b54437c92c1e08b06e0776187c7884dd51c0e38 Certificate serial: 019B2407A0AE7A318C6F873BD4B71ADA577B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft Manifest number: 0861 Signing time: Mon 15 Dec 2025 22:00:38 +0000 Manifest this update: Mon 15 Dec 2025 22:00:38 +0000 Manifest next update: Tue 16 Dec 2025 22:00:38 +0000 Files and hashes: 1: G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl (hash: WGD/h8+WKm3LfyMw6+Str0CygMFH7dw+A1Mt29ig8Qo=) 2: m-RL63I77tnbUHaZReiKcRHtR58.roa (hash: VHqfyzr+g1S2KroF/o4QYcY/QOnFZTun+jLqscdqvBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:07:a0:ae:7a:31:8c:6f:87:3b:d4:b7:1a:da:57:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b54437c92c1e08b06e0776187c7884dd51c0e38 Validity Not Before: Dec 15 22:00:38 2025 GMT Not After : Dec 16 22:00:38 2025 GMT Subject: CN=093719223e6b6d3cc7121cd4a26343c0251e26ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:c3:2e:ad:42:e5:35:b8:dd:45:23:b9:77: ee:9a:76:06:d4:3c:10:ca:48:67:5b:29:36:c4:1b: bb:60:1e:a7:73:0f:21:46:36:53:4c:a3:f6:15:24: e2:34:5e:0f:b3:7a:1a:00:e7:fc:86:14:a4:b0:20: 9e:cb:58:61:ad:19:79:aa:ea:1c:3e:01:dd:e5:6c: 6c:2b:8d:0a:0b:89:41:5a:79:76:46:56:fc:2e:b4: a3:28:5e:ab:a5:28:9a:14:09:88:85:bc:7a:03:89: 27:93:a7:17:74:fe:46:07:ba:62:ff:2a:f8:cf:ee: 8b:4b:88:84:fa:5d:77:0f:f9:ee:2f:ea:fa:f0:4e: fa:a2:e4:b7:d2:1c:74:cd:72:5f:8c:e7:33:78:b4: 6c:3a:ef:58:d9:2b:10:76:5b:0d:52:c1:25:56:c7: 06:df:33:f0:6e:6c:30:86:a4:64:54:bc:8c:db:74: 41:f2:36:7c:02:15:76:ad:84:d4:44:60:9f:e5:de: 71:24:2b:da:9f:34:35:b5:61:81:8d:74:a6:6a:84: c3:b6:e0:59:11:5c:36:d2:96:44:db:63:30:b5:84: 6a:d6:9d:3d:58:73:9d:93:fc:59:73:69:a9:58:38: d2:e5:55:e6:38:90:0b:7e:c5:f5:10:ae:3a:71:e1: 7b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:37:19:22:3E:6B:6D:3C:C7:12:1C:D4:A2:63:43:C0:25:1E:26:AD X509v3 Authority Key Identifier: keyid:1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a2:6b:10:6e:df:ea:2f:e5:4d:90:70:b1:b9:bc:46:66:6a: 95:9d:55:e1:81:c3:62:66:67:f5:b9:18:ab:c5:75:95:3e:e0: 45:e9:8c:51:e1:05:3e:bf:c6:21:18:0a:cf:35:50:23:48:a7: 74:15:38:2c:2b:f7:9e:58:3a:aa:eb:a6:5c:51:be:07:8e:a8: 3f:f1:ab:c5:65:bd:c7:c6:1a:90:0a:8d:f4:7c:a8:88:d6:5c: 5e:6b:32:62:16:c0:2d:b8:09:a1:62:d6:c6:14:58:43:de:0a: 02:d1:6d:11:95:86:4f:59:65:f5:e6:57:7e:29:ba:80:ed:6a: 5d:45:ce:68:c9:8d:f8:c3:67:ea:0d:9d:53:4d:7d:61:43:c1: b1:7f:51:eb:07:87:30:28:9a:e4:9e:14:55:3c:1d:c0:fe:77: 99:8c:24:21:43:d7:9e:df:ae:61:df:6c:ba:2a:f4:b3:09:6c: 88:1b:87:07:bb:1c:3d:74:f4:4d:5b:1a:11:9b:a2:ce:06:cb: 5f:1f:8f:c6:5b:21:98:ff:64:f8:e9:f5:bb:eb:6e:d0:37:13: 79:d8:e5:7e:fe:2f:c4:66:9c:ea:e8:d8:bf:e9:bb:10:22:ee: 66:4d:26:f5:3f:e9:e5:c3:cd:b3:40:e1:69:b8:1b:88:06:c4: c6:e3:6f:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskB6CuejGMb4c71Lca2ld7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNTQ0MzdjOTJjMWUwOGIwNmUwNzc2MTg3Yzc4ODRkZDUx YzBlMzgwHhcNMjUxMjE1MjIwMDM4WhcNMjUxMjE2MjIwMDM4WjAzMTEwLwYDVQQD EygwOTM3MTkyMjNlNmI2ZDNjYzcxMjFjZDRhMjYzNDNjMDI1MWUyNmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu63DLq1C5TW43UUjuXfumnYG1DwQ ykhnWyk2xBu7YB6ncw8hRjZTTKP2FSTiNF4Ps3oaAOf8hhSksCCey1hhrRl5quoc PgHd5WxsK40KC4lBWnl2Rlb8LrSjKF6rpSiaFAmIhbx6A4knk6cXdP5GB7pi/yr4 z+6LS4iE+l13D/nuL+r68E76ouS30hx0zXJfjOczeLRsOu9Y2SsQdlsNUsElVscG 3zPwbmwwhqRkVLyM23RB8jZ8AhV2rYTURGCf5d5xJCvanzQ1tWGBjXSmaoTDtuBZ EVw20pZE22MwtYRq1p09WHOdk/xZc2mpWDjS5VXmOJALfsX1EK46ceF7eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAk3GSI+a208xxIc1KJjQ8AlHiatMB8GA1UdIwQY MBaAFBtUQ3ySweCLBuB3YYfHiE3VHA44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9mMWRiMzYtNjY1ZC00ZDgwLWExYjIt NTE1ZWUxNTcwMjU5LzEvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9mMWRiMzYtNjY1ZC00ZDgwLWExYjItNTE1ZWUxNTcwMjU5 LzEvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6JrEG7f 6i/lTZBwsbm8RmZqlZ1V4YHDYmZn9bkYq8V1lT7gRemMUeEFPr/GIRgKzzVQI0in dBU4LCv3nlg6quumXFG+B46oP/GrxWW9x8YakAqN9HyoiNZcXmsyYhbALbgJoWLW xhRYQ94KAtFtEZWGT1ll9eZXfim6gO1qXUXOaMmN+MNn6g2dU019YUPBsX9R6weH MCia5J4UVTwdwP53mYwkIUPXnt+uYd9suir0swlsiBuHB7scPXT0TVsaEZuizgbL Xx+PxlshmP9k+On1u+tu0DcTedjlfv4vxGac6ujYv+m7ECLuZk0m9T/p5cPNs0Dh abgbiAbExuNvLA== -----END CERTIFICATE-----Generated at Tue Dec 16 07:08:47 2025 by rpki-client