This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft File: G8PBvvFfS8zE50jAiVfswimg8e8.mft (raw, json) Hash identifier: 4vGA2RvgSf7qWVLJeWozr74ztcp/P9TqnUwb0c+ge+o= Subject key identifier: 15:A3:27:8C:96:63:19:F5:B9:1D:4B:CE:85:14:40:B5:77:66:49:96 Authority key identifier: 1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF Certificate issuer: /CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef Certificate serial: 019AF12D81EFB8BFB055114A5E2029A252D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:22 +0000 Manifest this update: Sat 06 Dec 2025 01:01:22 +0000 Manifest next update: Sun 07 Dec 2025 01:01:22 +0000 Files and hashes: 1: G8PBvvFfS8zE50jAiVfswimg8e8.crl (hash: gwwCmBWdtbU1wFRg0OaiV46SQomy3U5jsDy70Z2/Urg=) 2: hwl_pJftKoYgWaDLkyi1NUP4Iqo.roa (hash: zD6uA78lx0+tAtyuIqfvTt4SALf3UDD47V0kgwtFI/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:81:ef:b8:bf:b0:55:11:4a:5e:20:29:a2:52:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef Validity Not Before: Dec 6 01:01:22 2025 GMT Not After : Dec 7 01:01:22 2025 GMT Subject: CN=15a3278c966319f5b91d4bce851440b577664996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:80:13:eb:be:e5:49:ca:80:80:ca:0f:6d:5a: 5c:b5:37:cf:41:0c:da:42:99:60:0a:e2:b1:5f:8e: 9a:35:f0:62:9b:42:53:4b:f7:8b:0c:e5:bf:16:7e: 3d:be:01:69:e7:53:6a:fb:2f:ad:66:51:06:19:c5: fd:51:85:57:9d:f1:dc:fb:60:59:c9:ce:ed:29:db: 37:5e:cf:e8:90:da:1b:f8:d3:39:98:4f:65:e6:f1: 7c:75:60:96:0d:62:c5:f0:10:a3:d7:ff:67:59:94: 34:46:c8:e8:6f:0b:37:f0:9e:e5:a1:0b:5f:8c:f4: 45:7f:b7:4a:ac:e6:d1:0a:a2:a4:7a:fb:7b:81:a8: f3:6e:cb:d1:12:81:d1:05:5d:82:b7:be:90:f7:aa: c2:47:cc:30:94:af:a4:c3:da:d9:2a:61:42:bc:1d: 98:68:3d:96:dc:15:b3:73:ad:2b:74:7f:b8:39:94: 2b:97:64:99:05:5c:e5:f5:99:76:a8:c2:d5:a8:2d: 9a:e8:f7:54:43:f0:72:df:f5:d1:63:a7:93:dd:0b: f9:2f:f5:8b:2b:9f:52:ff:9d:82:ef:2f:1d:96:ec: 1a:33:ab:93:6a:d6:1c:80:e0:ea:4c:b0:85:b4:9f: ee:5a:4c:ff:4a:f6:b0:96:5e:7b:e4:68:27:56:05: c5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A3:27:8C:96:63:19:F5:B9:1D:4B:CE:85:14:40:B5:77:66:49:96 X509v3 Authority Key Identifier: keyid:1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:59:c1:5f:40:ae:a7:8c:f5:5e:3f:de:b4:56:c6:72:f4:3e: e6:14:bc:84:ef:08:e3:c1:c0:40:4c:7b:d1:37:14:a1:4f:d9: f1:f8:22:39:24:d7:9f:af:f5:3e:6e:61:db:21:fa:e7:d5:00: 27:53:98:4e:6a:56:44:ee:59:1a:6a:a5:9b:7c:70:a0:f8:54: b0:65:d8:e3:ab:8c:41:8e:15:ba:a5:73:46:db:ea:bc:8d:39: 61:12:65:fc:45:55:b8:bb:f4:2c:32:30:ce:ed:34:ec:eb:60: a6:73:27:a2:1e:b3:2b:b4:02:33:1b:ff:55:2f:5d:15:1d:67: e4:39:94:91:ca:aa:04:93:6d:1e:3c:9b:5c:71:a6:d2:31:20: 76:81:b2:6e:a0:34:dc:87:33:41:df:f1:13:40:97:5b:19:cb: f0:90:fc:06:2c:3c:ba:57:53:24:d7:d4:35:53:b6:d0:c3:5c: a8:be:76:8e:3d:19:63:88:78:5d:1e:85:46:48:ca:cb:f1:96: 9a:15:44:be:4d:d8:1e:78:36:3b:29:f0:38:19:f2:d3:34:0d: 3c:81:65:94:9b:d0:6d:04:b6:a2:99:af:de:37:e3:bc:71:88: 83:cf:29:18:95:89:27:d5:37:6f:35:bd:0e:93:ae:05:1f:1f: 06:0b:24:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYHvuL+wVRFKXiApolLWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYzNjMWJlZjE1ZjRiY2NjNGU3NDhjMDg5NTdlY2MyMjlh MGYxZWYwHhcNMjUxMjA2MDEwMTIyWhcNMjUxMjA3MDEwMTIyWjAzMTEwLwYDVQQD EygxNWEzMjc4Yzk2NjMxOWY1YjkxZDRiY2U4NTE0NDBiNTc3NjY0OTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoAT677lScqAgMoPbVpctTfPQQza QplgCuKxX46aNfBim0JTS/eLDOW/Fn49vgFp51Nq+y+tZlEGGcX9UYVXnfHc+2BZ yc7tKds3Xs/okNob+NM5mE9l5vF8dWCWDWLF8BCj1/9nWZQ0Rsjobws38J7loQtf jPRFf7dKrObRCqKkevt7gajzbsvREoHRBV2Ct76Q96rCR8wwlK+kw9rZKmFCvB2Y aD2W3BWzc60rdH+4OZQrl2SZBVzl9Zl2qMLVqC2a6PdUQ/By3/XRY6eT3Qv5L/WL K59S/52C7y8dluwaM6uTatYcgODqTLCFtJ/uWkz/Svawll575GgnVgXFJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWjJ4yWYxn1uR1LzoUUQLV3ZkmWMB8GA1UdIwQY MBaAFBvDwb7xX0vMxOdIwIlX7MIpoPHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzhQQnZ2RmZTOHpFNTBqQWlWZnN3aW1nOGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iYzk0ZGYtNzI1OS00MmQxLTgyMmEt M2Q5ODEwMDk4NzAzLzEvRzhQQnZ2RmZTOHpFNTBqQWlWZnN3aW1nOGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9iYzk0ZGYtNzI1OS00MmQxLTgyMmEtM2Q5ODEwMDk4NzAz LzEvRzhQQnZ2RmZTOHpFNTBqQWlWZnN3aW1nOGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArlnBX0Cu p4z1Xj/etFbGcvQ+5hS8hO8I48HAQEx70TcUoU/Z8fgiOSTXn6/1Pm5h2yH659UA J1OYTmpWRO5ZGmqlm3xwoPhUsGXY46uMQY4VuqVzRtvqvI05YRJl/EVVuLv0LDIw zu007OtgpnMnoh6zK7QCMxv/VS9dFR1n5DmUkcqqBJNtHjybXHGm0jEgdoGybqA0 3IczQd/xE0CXWxnL8JD8Biw8uldTJNfUNVO20MNcqL52jj0ZY4h4XR6FRkjKy/GW mhVEvk3YHng2OynwOBny0zQNPIFllJvQbQS2opmv3jfjvHGIg88pGJWJJ9U3bzW9 DpOuBR8fBgsk/g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:14 2025 by rpki-client