This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft File: G3NaOdmSptxEu-c6TZm-PIQvqWg.mft (raw, json) Hash identifier: H6IYt1zBIwuG/DqXG8qrSVMfhfvkpJDl2KOhSwJx1yk= Subject key identifier: C1:E7:DB:B1:7B:C8:AF:36:76:34:84:00:89:41:64:8B:ED:F8:44:00 Authority key identifier: 1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68 Certificate issuer: /CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968 Certificate serial: 019AF163F1ACD872B87F268113E0FEF9DAA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft Manifest number: 04F0 Signing time: Sat 06 Dec 2025 02:00:50 +0000 Manifest this update: Sat 06 Dec 2025 02:00:50 +0000 Manifest next update: Sun 07 Dec 2025 02:00:50 +0000 Files and hashes: 1: G3NaOdmSptxEu-c6TZm-PIQvqWg.crl (hash: OjazYZR1YGbz4EqZ8IxdzvSppKux1Wu1S8tRwTysYGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f1:ac:d8:72:b8:7f:26:81:13:e0:fe:f9:da:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968 Validity Not Before: Dec 6 02:00:50 2025 GMT Not After : Dec 7 02:00:50 2025 GMT Subject: CN=c1e7dbb17bc8af36763484008941648bedf84400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3e:56:b1:64:4c:b2:84:c4:61:ec:97:ff:a2: 32:d0:2d:d3:7e:25:89:56:7c:46:9d:4f:35:cd:dc: 87:81:a8:0c:6d:a9:52:79:17:a9:bb:4c:48:2d:a7: c1:52:03:2c:5c:e7:e9:49:eb:ba:0a:de:8f:1c:be: 14:fd:be:08:09:ce:54:1b:68:f5:3b:4f:9d:00:2b: 9a:63:d8:cf:a0:43:25:85:2c:c5:89:af:53:bb:60: f2:e5:35:bd:4c:38:90:93:35:5d:b1:41:a0:2d:e1: 9f:ed:5f:fc:9d:e3:82:80:59:d0:72:d6:9f:5f:6b: 2a:d3:a8:5e:59:b1:cb:f1:68:bd:e4:6f:4c:3f:69: d2:f0:28:95:7c:bc:c9:f9:7a:81:96:29:0a:ef:9b: 58:a1:73:65:c8:48:95:26:96:78:4c:56:8a:c2:30: b4:72:2b:32:1b:01:0b:f6:bf:64:a1:fd:24:df:66: 4d:7e:2d:dc:50:4d:61:c1:13:c9:da:bf:1b:94:de: ab:4b:27:fa:92:a3:e7:b8:13:fa:01:c7:74:40:28: 11:01:41:a3:26:55:26:c4:85:8e:25:cc:f8:c8:ee: 6f:78:9e:09:67:b2:48:ec:ad:c8:15:0d:c3:b1:32: bf:c8:59:21:31:48:68:e4:19:38:90:65:40:e4:e8: 7b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E7:DB:B1:7B:C8:AF:36:76:34:84:00:89:41:64:8B:ED:F8:44:00 X509v3 Authority Key Identifier: keyid:1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c0:1d:f7:cb:36:da:09:4b:71:44:18:6b:34:1c:40:28:05: 45:cc:30:73:7b:e2:3b:48:64:8a:de:87:f1:eb:bc:1b:17:f8: 3e:5b:08:cc:17:1e:81:af:a5:f8:f7:e0:9a:65:cb:05:9e:71: 61:00:e2:94:a2:c1:0f:48:e3:37:23:43:21:e1:4d:ae:04:70: fd:bd:e6:5d:55:47:47:87:72:c5:d1:b4:85:65:0d:c1:aa:8a: 84:b9:ef:4b:f9:d7:51:e0:82:b8:fe:37:a6:63:0d:8e:4b:c6: cf:a0:dc:e4:d6:19:af:1c:2f:33:28:32:cf:fe:9b:73:86:31: 6c:8c:52:f8:29:4a:9e:73:0d:0d:cb:d7:da:9b:4d:27:5e:f9: a6:82:fc:72:a9:1b:d4:24:0d:db:fc:ae:c1:69:12:e1:13:2b: ba:4d:d9:ad:63:8f:d4:4d:12:f3:72:4c:f8:98:2c:b8:ab:0f: b2:9c:bb:3f:68:47:d5:31:48:30:d6:4f:19:b3:bc:27:63:f2: 4b:4e:a7:16:1a:38:9d:98:3b:59:06:c3:67:3f:f7:42:d1:7a: db:02:4c:d6:c4:fa:13:b7:2f:a6:e7:54:d9:93:39:0a:1d:e4: 1c:af:0f:cb:35:13:ab:a0:c6:cc:30:44:67:4d:7e:90:99:9a: 55:af:d0:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/Gs2HK4fyaBE+D++dqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNzM1YTM5ZDk5MmE2ZGM0NGJiZTczYTRkOTliZTNjODQy ZmE5NjgwHhcNMjUxMjA2MDIwMDUwWhcNMjUxMjA3MDIwMDUwWjAzMTEwLwYDVQQD EyhjMWU3ZGJiMTdiYzhhZjM2NzYzNDg0MDA4OTQxNjQ4YmVkZjg0NDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT5WsWRMsoTEYeyX/6Iy0C3TfiWJ VnxGnU81zdyHgagMbalSeRepu0xILafBUgMsXOfpSeu6Ct6PHL4U/b4ICc5UG2j1 O0+dACuaY9jPoEMlhSzFia9Tu2Dy5TW9TDiQkzVdsUGgLeGf7V/8neOCgFnQctaf X2sq06heWbHL8Wi95G9MP2nS8CiVfLzJ+XqBlikK75tYoXNlyEiVJpZ4TFaKwjC0 cisyGwEL9r9kof0k32ZNfi3cUE1hwRPJ2r8blN6rSyf6kqPnuBP6Acd0QCgRAUGj JlUmxIWOJcz4yO5veJ4JZ7JI7K3IFQ3DsTK/yFkhMUho5Bk4kGVA5Oh7WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHn27F7yK82djSEAIlBZIvt+EQAMB8GA1UdIwQY MBaAFBtzWjnZkqbcRLvnOk2ZvjyEL6loMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzNOYU9kbVNwdHhFdS1jNlRabS1QSVF2cVdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wNmRhMGItNDVmYS00YmM5LTk3MTct NDAwMTM2OWJhMTFmLzEvRzNOYU9kbVNwdHhFdS1jNlRabS1QSVF2cVdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8wNmRhMGItNDVmYS00YmM5LTk3MTctNDAwMTM2OWJhMTFm LzEvRzNOYU9kbVNwdHhFdS1jNlRabS1QSVF2cVdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMAd98s2 2glLcUQYazQcQCgFRcwwc3viO0hkit6H8eu8Gxf4PlsIzBcega+l+PfgmmXLBZ5x YQDilKLBD0jjNyNDIeFNrgRw/b3mXVVHR4dyxdG0hWUNwaqKhLnvS/nXUeCCuP43 pmMNjkvGz6Dc5NYZrxwvMygyz/6bc4YxbIxS+ClKnnMNDcvX2ptNJ175poL8cqkb 1CQN2/yuwWkS4RMruk3ZrWOP1E0S83JM+JgsuKsPspy7P2hH1TFIMNZPGbO8J2Py S06nFho4nZg7WQbDZz/3QtF62wJM1sT6E7cvpudU2ZM5Ch3kHK8PyzUTq6DGzDBE Z01+kJmaVa/Q0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:50:57 2025 by rpki-client