This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft File: G_GA7KTkQF6Heotjkjp1iNd-OdI.mft (raw, json) Hash identifier: PSahccllLZOtM/Xc8PthV99WJE/RyQ42REe5UV/GpxQ= Subject key identifier: 1E:21:F3:91:94:C4:C6:3C:E8:B7:DB:17:53:62:00:9E:6C:2F:08:AD Authority key identifier: 1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2 Certificate issuer: /CN=1bf180eca4e4405e877a8b63923a7588d77e39d2 Certificate serial: 019AF1D201828FD7C12AAFC5A522423016C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft Manifest number: 06B8 Signing time: Sat 06 Dec 2025 04:01:03 +0000 Manifest this update: Sat 06 Dec 2025 04:01:03 +0000 Manifest next update: Sun 07 Dec 2025 04:01:03 +0000 Files and hashes: 1: G_GA7KTkQF6Heotjkjp1iNd-OdI.crl (hash: ODBdw/g1KINGhE7JcYBfzE1hD86XFigNdKHbFm6BeZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:01:82:8f:d7:c1:2a:af:c5:a5:22:42:30:16:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bf180eca4e4405e877a8b63923a7588d77e39d2 Validity Not Before: Dec 6 04:01:03 2025 GMT Not After : Dec 7 04:01:03 2025 GMT Subject: CN=1e21f39194c4c63ce8b7db175362009e6c2f08ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:28:a2:53:61:0f:01:fb:62:8f:fe:f7:b3:8a: be:a0:67:07:bd:71:e2:38:19:29:f7:0f:8b:a0:1a: cd:32:34:18:2d:20:91:36:c9:8c:2d:0c:4b:e3:a2: d9:d6:22:8b:1a:11:ef:ad:72:03:8f:e9:15:69:93: b1:c2:74:92:bd:f2:42:3e:bc:37:40:40:b3:b7:0d: 56:d3:a9:71:df:2f:42:fd:8c:41:eb:f7:a3:0f:d5: bd:0d:6c:b7:b1:07:71:17:7d:d3:14:43:f3:1e:6c: 82:4a:0f:76:d6:ff:50:64:c8:08:fc:7c:7b:de:32: df:23:50:ff:e0:c8:95:dc:35:c8:1f:07:ca:95:45: 46:c3:91:72:27:04:68:a0:dc:d8:12:c3:00:c4:85: f0:a6:ec:d3:12:2a:a9:c2:e0:73:d6:7c:79:bb:b1: 0b:de:87:13:dd:e5:97:b3:25:79:6d:08:ef:7e:14: 49:d1:1c:5d:dd:33:4a:5a:29:01:ff:5c:90:02:13: 59:2d:69:81:43:0e:5b:be:9e:d3:3f:0a:a6:2d:3f: 96:48:4d:ce:ff:bb:1c:4f:f2:a1:2a:b8:4a:4d:3d: 07:64:d5:6b:86:a6:08:98:f0:32:2a:4b:43:b7:19: 4e:b8:1e:90:85:a5:10:fe:26:91:b9:dd:46:4c:fa: 3c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:21:F3:91:94:C4:C6:3C:E8:B7:DB:17:53:62:00:9E:6C:2F:08:AD X509v3 Authority Key Identifier: keyid:1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:24:80:7d:4f:14:e5:f2:ad:0e:b8:3c:21:3e:bc:1d:2b:51: 47:dc:e0:bd:48:1e:86:23:9b:f6:28:73:e0:2e:81:8d:73:79: e7:cb:5d:65:db:5e:e7:c0:9d:66:62:04:39:40:b9:b7:44:3b: ba:20:cc:60:c8:e9:8e:d2:5f:68:2f:16:04:a8:6c:ad:42:bd: 63:64:b2:e6:4f:bf:9d:1c:fe:65:2b:ef:a3:8a:17:cd:c3:16: cd:0e:8f:43:2c:38:48:52:27:dd:0a:36:2c:11:4d:22:89:4f: 79:0d:0d:33:11:e1:4a:b4:15:4c:68:be:49:77:38:5e:7c:c7: b4:d9:22:70:7d:68:d2:bf:57:8b:17:ee:0e:2e:2a:e4:e2:04: 89:4d:88:87:21:51:f1:70:eb:ee:85:01:65:75:3d:12:1d:e3: 8a:01:28:a4:b0:43:17:8a:86:b1:f0:2f:69:6d:5b:e8:d0:70: f9:21:88:25:b5:62:77:cb:36:ea:e6:88:6a:51:1a:db:60:96: cd:03:27:57:f0:b8:b3:17:95:8f:7a:ac:2f:0a:11:01:c8:fd: 3b:a0:13:80:99:fc:c3:66:2b:23:a5:0d:d0:c0:9a:b9:b2:92: 08:57:6c:82:a5:de:ab:e3:d1:d5:9f:f1:e8:4c:2f:23:f4:ea: 7e:6b:08:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gGCj9fBKq/FpSJCMBbDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZjE4MGVjYTRlNDQwNWU4NzdhOGI2MzkyM2E3NTg4ZDc3 ZTM5ZDIwHhcNMjUxMjA2MDQwMTAzWhcNMjUxMjA3MDQwMTAzWjAzMTEwLwYDVQQD EygxZTIxZjM5MTk0YzRjNjNjZThiN2RiMTc1MzYyMDA5ZTZjMmYwOGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyiiU2EPAftij/73s4q+oGcHvXHi OBkp9w+LoBrNMjQYLSCRNsmMLQxL46LZ1iKLGhHvrXIDj+kVaZOxwnSSvfJCPrw3 QECztw1W06lx3y9C/YxB6/ejD9W9DWy3sQdxF33TFEPzHmyCSg921v9QZMgI/Hx7 3jLfI1D/4MiV3DXIHwfKlUVGw5FyJwRooNzYEsMAxIXwpuzTEiqpwuBz1nx5u7EL 3ocT3eWXsyV5bQjvfhRJ0Rxd3TNKWikB/1yQAhNZLWmBQw5bvp7TPwqmLT+WSE3O /7scT/KhKrhKTT0HZNVrhqYImPAyKktDtxlOuB6QhaUQ/iaRud1GTPo8rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4h85GUxMY86LfbF1NiAJ5sLwitMB8GA1UdIwQY MBaAFBvxgOyk5EBeh3qLY5I6dYjXfjnSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR19HQTdLVGtRRjZIZW90amtqcDFpTmQtT2RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lODkyMmQtYjMwNC00MTg4LWJkYTYt ZGM2YjFmZjcyYzE4LzEvR19HQTdLVGtRRjZIZW90amtqcDFpTmQtT2RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lODkyMmQtYjMwNC00MTg4LWJkYTYtZGM2YjFmZjcyYzE4 LzEvR19HQTdLVGtRRjZIZW90amtqcDFpTmQtT2RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFySAfU8U 5fKtDrg8IT68HStRR9zgvUgehiOb9ihz4C6BjXN558tdZdte58CdZmIEOUC5t0Q7 uiDMYMjpjtJfaC8WBKhsrUK9Y2Sy5k+/nRz+ZSvvo4oXzcMWzQ6PQyw4SFIn3Qo2 LBFNIolPeQ0NMxHhSrQVTGi+SXc4XnzHtNkicH1o0r9XixfuDi4q5OIEiU2IhyFR 8XDr7oUBZXU9Eh3jigEopLBDF4qGsfAvaW1b6NBw+SGIJbVid8s26uaIalEa22CW zQMnV/C4sxeVj3qsLwoRAcj9O6ATgJn8w2YrI6UN0MCaubKSCFdsgqXeq+PR1Z/x 6EwvI/TqfmsI7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:47 2025 by rpki-client