This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft File: RIGO8G79biLUcUBKtTikucgH7-A.mft (raw, json) Hash identifier: Hc0iIIGuxzvk0rN5vB3uXKK7hDTDdTRsEhSIdSS1fY4= Subject key identifier: 95:65:B5:4E:46:24:0C:C6:9A:18:D9:95:4B:77:A1:3C:DA:31:56:46 Authority key identifier: 44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0 Certificate issuer: /CN=44818ef06efd6e22d471404ab538a4b9c807efe0 Certificate serial: 019AF0881E6E62A22C212A64084F14BB7603 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 22:00:43 +0000 Manifest this update: Fri 05 Dec 2025 22:00:43 +0000 Manifest next update: Sat 06 Dec 2025 22:00:43 +0000 Files and hashes: 1: RIGO8G79biLUcUBKtTikucgH7-A.crl (hash: KI5pJeS2pwMXiIPp2T8X1FyM/MjrJ6j8VPp8w14lPC4=) 2: gVTOZDUERQqeJ1ADkfu8mZFQa3s.roa (hash: odk8IfZ2FDqkprFgoeInqeHkb7oDViev8pVCzwkhG+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:1e:6e:62:a2:2c:21:2a:64:08:4f:14:bb:76:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44818ef06efd6e22d471404ab538a4b9c807efe0 Validity Not Before: Dec 5 22:00:43 2025 GMT Not After : Dec 6 22:00:43 2025 GMT Subject: CN=9565b54e46240cc69a18d9954b77a13cda315646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e0:92:5b:25:b1:3b:de:ae:ef:49:6b:20:77: 79:94:b7:ef:14:77:96:a1:3a:fa:80:ea:e4:3a:e3: e6:cc:03:58:b5:7b:f4:b3:f7:f9:28:d3:66:b8:05: 74:72:c2:3d:e6:cc:05:22:8a:3e:bb:09:0e:5d:e6: 4a:e2:74:36:c7:3a:d3:aa:0d:91:0d:81:25:a5:7d: df:58:dc:58:9b:66:4e:63:37:f7:9b:d6:bf:63:b3: 96:5c:81:2d:9d:a8:dc:40:a3:3f:f8:d2:cc:f2:4f: e2:63:62:7d:fc:3d:0a:4a:22:01:87:66:ec:ff:ad: de:6e:08:75:88:9f:09:e1:fa:d8:e3:23:2d:de:66: 40:15:58:11:1f:95:b5:33:5f:d0:4d:66:2d:72:b4: 77:c0:5a:5e:50:8a:1b:e8:6c:70:f5:a0:d9:63:1b: 6e:8f:65:46:25:4c:00:72:bc:83:15:9b:48:68:c5: 33:20:04:ba:d0:a9:c0:b6:ca:83:83:be:4e:b4:b4: bf:d9:4e:a3:3e:20:7e:18:2e:f3:4b:7a:ca:30:93: ec:35:dc:b3:ec:af:41:28:42:9c:bd:3e:97:31:d1: 9c:63:a5:bc:29:26:ac:db:72:4c:d9:c6:72:24:a6: 2d:03:8b:8d:4e:9b:80:6b:93:90:f5:11:f4:9d:57: b9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:65:B5:4E:46:24:0C:C6:9A:18:D9:95:4B:77:A1:3C:DA:31:56:46 X509v3 Authority Key Identifier: keyid:44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:52:6d:4c:78:74:21:9b:4d:43:62:12:02:45:a6:d6:60:6b: 49:75:7b:cb:1f:ad:a2:67:c6:d6:02:da:0e:87:3c:86:6c:03: 1f:45:ba:60:08:94:1a:bb:4f:49:65:af:35:40:98:17:61:8e: e8:6f:5f:c1:3a:d2:8c:03:3d:39:68:3f:38:91:25:91:fe:38: f3:a6:63:c8:c9:96:82:57:c8:70:78:f1:db:c6:80:1e:c2:fd: 81:0c:b5:b8:e6:6f:c5:52:1b:dd:ac:cb:94:12:40:47:54:82: a9:3a:1b:bd:9f:10:b7:68:eb:d7:26:7b:bb:3c:9f:33:f1:62: 8e:5c:8d:92:58:df:8b:d0:65:5d:50:4c:ab:a7:12:5a:a4:a3: b7:eb:66:1a:ac:97:f3:43:76:88:f5:01:24:48:b3:1d:ef:b2: 5e:d8:a4:b5:97:d1:a1:62:36:18:7c:2e:7a:66:f5:4e:0d:1d: 07:06:16:88:41:0f:37:c7:1f:29:86:f3:c0:f5:96:72:e9:52: a8:f1:5d:04:04:fa:60:04:fb:05:66:2f:63:8b:e9:5b:ea:99: 57:bf:0e:38:ca:f7:2c:c1:e5:a4:ce:5d:db:60:20:cf:0e:8e: 7c:3e:ba:72:a5:79:5b:d5:9e:b2:d0:b1:7b:91:c9:61:2f:27: 3c:91:c4:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiB5uYqIsISpkCE8Uu3YDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ODE4ZWYwNmVmZDZlMjJkNDcxNDA0YWI1MzhhNGI5Yzgw N2VmZTAwHhcNMjUxMjA1MjIwMDQzWhcNMjUxMjA2MjIwMDQzWjAzMTEwLwYDVQQD Eyg5NTY1YjU0ZTQ2MjQwY2M2OWExOGQ5OTU0Yjc3YTEzY2RhMzE1NjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eCSWyWxO96u70lrIHd5lLfvFHeW oTr6gOrkOuPmzANYtXv0s/f5KNNmuAV0csI95swFIoo+uwkOXeZK4nQ2xzrTqg2R DYElpX3fWNxYm2ZOYzf3m9a/Y7OWXIEtnajcQKM/+NLM8k/iY2J9/D0KSiIBh2bs /63ebgh1iJ8J4frY4yMt3mZAFVgRH5W1M1/QTWYtcrR3wFpeUIob6Gxw9aDZYxtu j2VGJUwAcryDFZtIaMUzIAS60KnAtsqDg75OtLS/2U6jPiB+GC7zS3rKMJPsNdyz 7K9BKEKcvT6XMdGcY6W8KSas23JM2cZyJKYtA4uNTpuAa5OQ9RH0nVe59wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVltU5GJAzGmhjZlUt3oTzaMVZGMB8GA1UdIwQY MBaAFESBjvBu/W4i1HFASrU4pLnIB+/gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUklHTzhHNzliaUxVY1VCS3RUaWt1Y2dINy1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iYTZiMGItMzgyZS00NDBmLThkYjkt MzVhZmI1YzI0OGI2LzEvUklHTzhHNzliaUxVY1VCS3RUaWt1Y2dINy1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9iYTZiMGItMzgyZS00NDBmLThkYjktMzVhZmI1YzI0OGI2 LzEvUklHTzhHNzliaUxVY1VCS3RUaWt1Y2dINy1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1JtTHh0 IZtNQ2ISAkWm1mBrSXV7yx+tomfG1gLaDoc8hmwDH0W6YAiUGrtPSWWvNUCYF2GO 6G9fwTrSjAM9OWg/OJElkf4486ZjyMmWglfIcHjx28aAHsL9gQy1uOZvxVIb3azL lBJAR1SCqTobvZ8Qt2jr1yZ7uzyfM/FijlyNkljfi9BlXVBMq6cSWqSjt+tmGqyX 80N2iPUBJEizHe+yXtiktZfRoWI2GHwuemb1Tg0dBwYWiEEPN8cfKYbzwPWWculS qPFdBAT6YAT7BWYvY4vpW+qZV78OOMr3LMHlpM5d22Agzw6OfD66cqV5W9WestCx e5HJYS8nPJHEqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:09 2025 by rpki-client