This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft File: G6IBGTlu61biTNCpsu4l-i2kteY.mft (raw, json) Hash identifier: ekmvnIApADZ/18wRnRI/cvzxaOEpJxlQlJCdhHIU70E= Subject key identifier: 45:BA:C7:9A:1C:86:67:44:BB:63:74:EC:F3:3F:D7:A4:BC:60:C9:ED Authority key identifier: 1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6 Certificate issuer: /CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6 Certificate serial: 019AF12E0BF3C4213BE8C9EA64CC85367A15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft Manifest number: 0AC8 Signing time: Sat 06 Dec 2025 01:01:57 +0000 Manifest this update: Sat 06 Dec 2025 01:01:57 +0000 Manifest next update: Sun 07 Dec 2025 01:01:57 +0000 Files and hashes: 1: G6IBGTlu61biTNCpsu4l-i2kteY.crl (hash: HRztqxs96bYTvI+oG59ibDthV1uj58Ma7GGnoT3chng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:0b:f3:c4:21:3b:e8:c9:ea:64:cc:85:36:7a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6 Validity Not Before: Dec 6 01:01:57 2025 GMT Not After : Dec 7 01:01:57 2025 GMT Subject: CN=45bac79a1c866744bb6374ecf33fd7a4bc60c9ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:18:ba:68:57:6d:43:b7:95:45:8e:84:92:c4: bb:76:c6:fc:b9:10:de:46:6b:94:36:d1:f4:81:2d: 50:e1:af:4c:47:7e:ac:bb:22:ab:c0:44:38:c0:bd: a8:8d:29:4f:81:e6:d9:05:56:37:44:b4:4d:89:32: 4f:23:2a:55:fc:3d:8e:bb:b1:71:5b:07:1b:ca:c9: ca:78:f6:b9:55:8d:e5:65:8d:6b:26:67:b1:84:61: ff:bf:70:46:e7:f5:c7:6c:e6:6c:8b:87:52:35:03: 31:d0:cb:2c:a2:46:46:d7:ee:1c:75:45:32:28:da: 53:93:b4:d7:87:cd:fe:26:9d:6d:2b:20:e6:0c:04: 4b:3a:b8:99:9f:d0:2c:86:87:61:cc:97:09:7c:10: 16:ed:4b:c2:58:b1:f8:b7:f0:7c:b1:38:db:de:39: eb:ba:20:bf:67:1d:76:96:d1:35:ea:d9:e9:4b:25: 72:0c:17:16:a6:ea:20:4c:cd:e6:39:90:3a:39:15: f5:ac:96:0c:7b:5e:9b:ab:e0:09:3b:15:3c:08:11: 5c:04:3d:18:7e:3e:09:a9:32:25:41:46:1d:3f:d7: e7:32:7a:df:63:9e:f8:16:ee:58:38:2c:ec:4a:11: a3:09:ca:a6:dc:28:3a:98:9c:ec:a8:0d:61:c0:d7: a9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BA:C7:9A:1C:86:67:44:BB:63:74:EC:F3:3F:D7:A4:BC:60:C9:ED X509v3 Authority Key Identifier: keyid:1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:1d:5e:9a:2b:4a:9a:4e:ee:59:c3:32:7a:26:a2:99:9c:4f: 6d:e8:23:1f:2c:55:fb:bc:a5:ff:56:b1:ef:7a:5e:73:9d:0d: a2:68:f4:0a:61:4d:7e:cd:af:68:da:b6:a6:92:4b:8c:3f:b8: 51:b7:b8:af:c8:1b:3a:5f:46:c6:91:ff:0f:25:ee:26:28:dc: 15:e1:c3:c9:c4:33:ec:8a:b6:60:d2:97:2a:b2:5e:9d:ad:a4: 87:bd:02:9a:39:09:a1:d6:80:9c:5c:85:6d:d1:7c:1e:71:ee: 50:82:b1:0f:65:a2:e8:6c:23:7f:66:d8:e5:78:fe:b3:16:90: ae:97:05:0f:d5:d0:49:5f:d1:16:f1:6f:aa:a1:a7:01:c0:02: 46:0d:40:28:80:9a:f9:25:23:ff:ef:b9:ce:4d:82:78:cb:aa: ad:6e:ab:a5:ae:65:07:8b:37:d2:81:a0:38:99:24:06:e3:ae: 37:04:31:e1:8b:45:f4:c7:15:51:04:b7:ce:73:00:f0:4f:f2: 15:b3:61:ec:e6:3c:ae:ba:c9:63:a0:46:4d:23:45:d2:c8:42: dc:be:25:cf:c8:54:45:3f:cb:c2:6d:dc:d4:c2:8f:a1:a0:43: ec:24:58:c8:5e:c6:51:10:ba:f1:3b:1d:7d:b0:a7:0a:54:3a: 91:dc:51:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgvzxCE76MnqZMyFNnoVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTIwMTE5Mzk2ZWViNTZlMjRjZDBhOWIyZWUyNWZhMmRh NGI1ZTYwHhcNMjUxMjA2MDEwMTU3WhcNMjUxMjA3MDEwMTU3WjAzMTEwLwYDVQQD Eyg0NWJhYzc5YTFjODY2NzQ0YmI2Mzc0ZWNmMzNmZDdhNGJjNjBjOWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRi6aFdtQ7eVRY6EksS7dsb8uRDe RmuUNtH0gS1Q4a9MR36suyKrwEQ4wL2ojSlPgebZBVY3RLRNiTJPIypV/D2Ou7Fx WwcbysnKePa5VY3lZY1rJmexhGH/v3BG5/XHbOZsi4dSNQMx0MssokZG1+4cdUUy KNpTk7TXh83+Jp1tKyDmDARLOriZn9AshodhzJcJfBAW7UvCWLH4t/B8sTjb3jnr uiC/Zx12ltE16tnpSyVyDBcWpuogTM3mOZA6ORX1rJYMe16bq+AJOxU8CBFcBD0Y fj4JqTIlQUYdP9fnMnrfY574Fu5YOCzsShGjCcqm3Cg6mJzsqA1hwNepYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEW6x5ochmdEu2N07PM/16S8YMntMB8GA1UdIwQY MBaAFBuiARk5butW4kzQqbLuJfotpLXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNzcxNjAtNGE4NS00NzhkLWE1NDAt NTVhYzIwMjY2NTNiLzEvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jNzcxNjAtNGE4NS00NzhkLWE1NDAtNTVhYzIwMjY2NTNi LzEvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZR1emitK mk7uWcMyeiaimZxPbegjHyxV+7yl/1ax73pec50Nomj0CmFNfs2vaNq2ppJLjD+4 Ube4r8gbOl9GxpH/DyXuJijcFeHDycQz7Iq2YNKXKrJena2kh70CmjkJodaAnFyF bdF8HnHuUIKxD2Wi6Gwjf2bY5Xj+sxaQrpcFD9XQSV/RFvFvqqGnAcACRg1AKICa +SUj/++5zk2CeMuqrW6rpa5lB4s30oGgOJkkBuOuNwQx4YtF9McVUQS3znMA8E/y FbNh7OY8rrrJY6BGTSNF0shC3L4lz8hURT/Lwm3c1MKPoaBD7CRYyF7GURC68Tsd fbCnClQ6kdxRWA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:29:37 2025 by rpki-client