This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft File: GiR0zlteIgufQxr8hq9OwUD18Ww.mft (raw, json) Hash identifier: kllzgYGZJNamb4BdRptVNy8VaiAbm/7wRHRO8PBCWqo= Subject key identifier: 00:C1:37:80:29:23:08:60:50:BE:96:92:2D:4D:2E:24:13:E7:67:50 Authority key identifier: 1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C Certificate issuer: /CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c Certificate serial: 019AF31B783715B64F047853B7906E723764 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft Manifest number: 0C3F Signing time: Sat 06 Dec 2025 10:00:54 +0000 Manifest this update: Sat 06 Dec 2025 10:00:54 +0000 Manifest next update: Sun 07 Dec 2025 10:00:54 +0000 Files and hashes: 1: GiR0zlteIgufQxr8hq9OwUD18Ww.crl (hash: fMpd5n16G/iBfVzSB7JfhasQIVtNHGzHvEwhUgKC8bM=) 2: xkDVDS74gDDghtjYO_lZo1jkZAw.roa (hash: U2DpQz2gMSrA9mkY42SKxIWprno9ie8cfBuo5TlCH84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:78:37:15:b6:4f:04:78:53:b7:90:6e:72:37:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c Validity Not Before: Dec 6 10:00:54 2025 GMT Not After : Dec 7 10:00:54 2025 GMT Subject: CN=00c137802923086050be96922d4d2e2413e76750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:73:de:85:fc:de:82:1b:3d:ef:5d:6b:9d:01: 12:fb:31:89:cc:50:f2:f5:db:01:e7:2b:44:0a:7d: eb:b4:40:b5:f5:11:03:ae:36:f0:dc:46:f2:e2:54: af:e4:bc:65:60:f6:6e:f7:d9:b7:b4:38:5c:e6:91: 49:76:ce:5d:b8:ba:63:23:77:20:90:73:5d:b4:b5: 62:51:e3:12:d4:f0:63:a7:d4:af:91:b3:62:f9:8e: b3:6f:f4:27:e6:a3:30:13:31:13:0b:8a:99:8b:c4: 7e:b1:00:39:2d:fd:34:45:bb:e1:07:46:86:c9:c5: 03:23:bf:fc:55:95:44:71:aa:75:c9:17:ca:b6:d0: b8:ef:9d:91:d9:b6:01:b7:11:c5:c6:fc:ef:55:a1: 52:43:30:b3:14:89:2f:d5:93:75:8b:db:3e:cd:98: d7:0b:51:c6:e2:56:ad:e9:4a:55:4a:37:5d:42:57: 57:2f:3c:a1:f7:ac:2d:64:d0:ef:34:20:a3:82:85: bc:4c:23:fa:ba:d5:2c:6e:7c:16:ed:13:14:60:3c: a6:61:36:3b:de:27:44:a2:b6:c5:d8:19:18:f1:30: ab:e6:62:18:28:01:0f:f0:53:db:92:ed:a0:61:53: 06:30:53:ec:60:05:21:db:4e:9d:66:86:1f:b3:cc: 75:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C1:37:80:29:23:08:60:50:BE:96:92:2D:4D:2E:24:13:E7:67:50 X509v3 Authority Key Identifier: keyid:1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:7c:69:d5:02:fc:c8:32:64:8c:d1:2b:92:9a:0c:51:5b:d5: e9:01:f9:5c:1b:4f:80:da:6a:61:6f:ea:4c:3e:0e:15:2b:4d: f9:6e:90:2c:8e:3e:d3:b3:ba:4f:02:74:3e:ca:cb:70:4a:25: 05:7f:96:7d:c8:b9:2c:75:7d:23:a6:41:be:a6:8b:08:13:5c: f1:58:88:a2:5d:0a:6d:eb:5a:b9:71:e0:5e:7f:37:90:57:41: 4b:fb:fa:01:02:9a:88:83:95:1e:c3:3d:1d:32:de:ef:6f:f1: 75:8c:f9:ee:6d:3b:ae:07:1e:e4:64:09:4d:0c:a2:48:91:2e: a2:b8:19:ef:ee:87:7f:c8:74:6c:3e:8d:28:6c:d6:d9:07:61: b4:a0:29:1e:df:19:c5:9c:3d:4d:c6:5c:be:8a:7e:59:d4:da: 18:da:0d:e9:15:b9:46:41:5e:e7:4a:24:da:25:0e:09:08:ef: 5b:49:f7:6f:5f:f1:0b:85:cf:5d:d7:5e:6b:7b:74:56:76:be: ec:91:5d:60:8d:49:f6:c8:3d:a7:30:74:a6:3b:59:e0:9e:f4: 90:e7:70:bb:5e:e0:37:26:c4:cd:d3:0d:3d:95:66:7d:37:b4: fe:db:4a:db:3c:16:58:fd:1b:52:43:8a:dc:ce:e9:ef:c9:f8: 15:d3:fa:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3g3FbZPBHhTt5BucjdkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMjQ3NGNlNWI1ZTIyMGI5ZjQzMWFmYzg2YWY0ZWMxNDBm NWYxNmMwHhcNMjUxMjA2MTAwMDU0WhcNMjUxMjA3MTAwMDU0WjAzMTEwLwYDVQQD EygwMGMxMzc4MDI5MjMwODYwNTBiZTk2OTIyZDRkMmUyNDEzZTc2NzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXPehfzeghs9711rnQES+zGJzFDy 9dsB5ytECn3rtEC19REDrjbw3Eby4lSv5LxlYPZu99m3tDhc5pFJds5duLpjI3cg kHNdtLViUeMS1PBjp9SvkbNi+Y6zb/Qn5qMwEzETC4qZi8R+sQA5Lf00RbvhB0aG ycUDI7/8VZVEcap1yRfKttC4752R2bYBtxHFxvzvVaFSQzCzFIkv1ZN1i9s+zZjX C1HG4lat6UpVSjddQldXLzyh96wtZNDvNCCjgoW8TCP6utUsbnwW7RMUYDymYTY7 3idEorbF2BkY8TCr5mIYKAEP8FPbku2gYVMGMFPsYAUh206dZoYfs8x1CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADBN4ApIwhgUL6Wki1NLiQT52dQMB8GA1UdIwQY MBaAFBokdM5bXiILn0Ma/IavTsFA9fFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2lSMHpsdGVJZ3VmUXhyOGhxOU93VUQxOFd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMDQzNTktNGFlNC00ZTQ3LTkxY2It ZDdkMDJlOTdlMjVkLzEvR2lSMHpsdGVJZ3VmUXhyOGhxOU93VUQxOFd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jMDQzNTktNGFlNC00ZTQ3LTkxY2ItZDdkMDJlOTdlMjVk LzEvR2lSMHpsdGVJZ3VmUXhyOGhxOU93VUQxOFd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHxp1QL8 yDJkjNErkpoMUVvV6QH5XBtPgNpqYW/qTD4OFStN+W6QLI4+07O6TwJ0PsrLcEol BX+Wfci5LHV9I6ZBvqaLCBNc8ViIol0KbetauXHgXn83kFdBS/v6AQKaiIOVHsM9 HTLe72/xdYz57m07rgce5GQJTQyiSJEuorgZ7+6Hf8h0bD6NKGzW2QdhtKApHt8Z xZw9TcZcvop+WdTaGNoN6RW5RkFe50ok2iUOCQjvW0n3b1/xC4XPXddea3t0Vna+ 7JFdYI1J9sg9pzB0pjtZ4J70kOdwu17gNybEzdMNPZVmfTe0/ttK2zwWWP0bUkOK 3M7p78n4FdP6jg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:42:28 2025 by rpki-client