This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft File: G9JpBH0C_otaKsnrjV_sB7GH7aE.mft (raw, json) Hash identifier: Ju4XIYBiw5+EQuRVv9yy/2G4qH+LgpE8r/Tsf5uHFvQ= Subject key identifier: 99:5F:FF:73:2D:4B:9F:95:B4:0C:92:18:0A:76:CF:9C:53:09:6A:2C Authority key identifier: 1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1 Certificate issuer: /CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1 Certificate serial: 019AF208ECCED937BBC83B815B3C6585EA4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft Manifest number: 0491 Signing time: Sat 06 Dec 2025 05:01:02 +0000 Manifest this update: Sat 06 Dec 2025 05:01:02 +0000 Manifest next update: Sun 07 Dec 2025 05:01:02 +0000 Files and hashes: 1: G9JpBH0C_otaKsnrjV_sB7GH7aE.crl (hash: qu/t9r7yuaaOvRzUvgeE+SGPUEtjPDKvQDQaq/ao0HQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ec:ce:d9:37:bb:c8:3b:81:5b:3c:65:85:ea:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1 Validity Not Before: Dec 6 05:01:02 2025 GMT Not After : Dec 7 05:01:02 2025 GMT Subject: CN=995fff732d4b9f95b40c92180a76cf9c53096a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c8:14:86:b0:7d:d9:81:5f:9f:fb:8c:7a:d2: ad:6f:0e:34:51:f6:61:78:73:a2:56:b7:47:a9:83: c7:59:6c:7b:9b:4a:af:dd:74:e3:6c:33:d3:55:55: 25:73:12:33:16:20:03:40:ee:15:31:24:5e:93:9e: dd:08:9b:a3:7a:d5:ea:97:7c:fc:15:f9:10:35:c7: e5:d4:71:c2:61:8e:ea:47:1f:81:77:c6:c6:55:46: f6:18:be:2b:ae:91:cf:9d:00:64:9c:eb:7d:da:14: 2f:fb:ed:1d:9b:a0:1d:88:69:3d:ab:47:33:73:81: cb:62:aa:6d:54:92:55:41:66:82:e6:7e:f0:b5:32: fd:b8:74:46:84:cc:6c:eb:f0:99:3d:93:1a:a4:9f: 3d:48:1e:be:d4:bb:25:2c:a6:c3:b3:8f:2f:37:ad: e1:9c:96:eb:9e:41:34:6a:21:8b:54:0a:cc:72:73: c8:e7:96:a5:61:01:1a:5a:55:d4:1a:7b:5b:85:3a: 2a:b9:24:f3:09:93:8f:8c:49:ae:2e:e7:36:43:7e: fa:4b:06:3d:42:5b:72:03:50:05:08:7e:6e:1c:04: ad:a4:96:84:7e:b1:58:17:36:51:09:24:e0:87:98: 4e:3e:85:5a:a9:b2:34:5b:2c:71:7b:9b:66:75:02: 38:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5F:FF:73:2D:4B:9F:95:B4:0C:92:18:0A:76:CF:9C:53:09:6A:2C X509v3 Authority Key Identifier: keyid:1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:03:5b:69:00:e8:a2:e0:79:9f:01:d6:48:11:3e:7d:a4:5d: 17:64:c3:2b:91:84:60:46:39:a0:66:37:1c:69:a8:45:2e:a6: c5:a4:ab:15:25:35:29:32:f4:92:d4:fd:14:65:3f:36:b7:db: 45:50:26:bf:5b:b6:0f:be:3b:70:4c:1d:93:05:e7:74:f5:66: 02:ac:3f:3b:0d:05:91:b4:49:d6:54:4c:9a:d7:5e:39:c2:8d: b2:20:17:0c:96:3a:64:cc:42:55:4d:a1:d1:6d:86:4b:55:5c: 91:db:67:e5:35:1f:fe:8f:a9:ce:f0:ad:50:55:bf:46:2d:88: 3b:be:e2:ae:a0:97:ec:89:48:bc:1c:10:20:d8:92:70:70:4d: 8b:1d:de:4c:4a:f0:f1:88:aa:19:89:71:1d:21:d7:e3:40:cb: a2:b9:3a:2f:35:30:3d:6a:4f:c5:47:57:fc:86:bd:e2:8e:fe: 3e:4f:19:c3:f3:33:d2:31:df:9d:c0:1f:c0:2f:ae:1a:c1:19: 3b:37:9e:d9:a1:58:a0:31:1a:3b:0b:bf:24:76:0e:e2:ce:a7: c4:48:4c:9e:01:7f:58:a6:a9:12:30:1e:69:e3:17:59:f7:d7: 09:55:59:f8:b6:d2:88:b6:f7:25:95:86:5a:a1:01:c1:b2:69: 72:d7:1f:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOzO2Te7yDuBWzxlhepOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZDI2OTA0N2QwMmZlOGI1YTJhYzllYjhkNWZlYzA3YjE4 N2VkYTEwHhcNMjUxMjA2MDUwMTAyWhcNMjUxMjA3MDUwMTAyWjAzMTEwLwYDVQQD Eyg5OTVmZmY3MzJkNGI5Zjk1YjQwYzkyMTgwYTc2Y2Y5YzUzMDk2YTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscgUhrB92YFfn/uMetKtbw40UfZh eHOiVrdHqYPHWWx7m0qv3XTjbDPTVVUlcxIzFiADQO4VMSRek57dCJujetXql3z8 FfkQNcfl1HHCYY7qRx+Bd8bGVUb2GL4rrpHPnQBknOt92hQv++0dm6AdiGk9q0cz c4HLYqptVJJVQWaC5n7wtTL9uHRGhMxs6/CZPZMapJ89SB6+1LslLKbDs48vN63h nJbrnkE0aiGLVArMcnPI55alYQEaWlXUGntbhToquSTzCZOPjEmuLuc2Q376SwY9 QltyA1AFCH5uHAStpJaEfrFYFzZRCSTgh5hOPoVaqbI0Wyxxe5tmdQI4zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlf/3MtS5+VtAySGAp2z5xTCWosMB8GA1UdIwQY MBaAFBvSaQR9Av6LWirJ641f7Aexh+2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzlKcEJIMENfb3RhS3NucmpWX3NCN0dIN2FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84YzZlOTYtZDc3OC00OWRkLTllNWUt M2NmMmI4MDAyMDMxLzEvRzlKcEJIMENfb3RhS3NucmpWX3NCN0dIN2FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi84YzZlOTYtZDc3OC00OWRkLTllNWUtM2NmMmI4MDAyMDMx LzEvRzlKcEJIMENfb3RhS3NucmpWX3NCN0dIN2FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQNbaQDo ouB5nwHWSBE+faRdF2TDK5GEYEY5oGY3HGmoRS6mxaSrFSU1KTL0ktT9FGU/Nrfb RVAmv1u2D747cEwdkwXndPVmAqw/Ow0FkbRJ1lRMmtdeOcKNsiAXDJY6ZMxCVU2h 0W2GS1Vckdtn5TUf/o+pzvCtUFW/Ri2IO77irqCX7IlIvBwQINiScHBNix3eTErw 8YiqGYlxHSHX40DLork6LzUwPWpPxUdX/Ia94o7+Pk8Zw/Mz0jHfncAfwC+uGsEZ Ozee2aFYoDEaOwu/JHYO4s6nxEhMngF/WKapEjAeaeMXWffXCVVZ+LbSiLb3JZWG WqEBwbJpctcf+A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:22 2025 by rpki-client