This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json) Hash identifier: o6qbk/3lo3e1zcw19elfihRtHWzxSOMxKFHVIsYNID4= Subject key identifier: 2C:64:92:B4:E3:AA:8E:14:5A:8B:B3:DD:C9:00:48:20:FB:63:25:D2 Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8 Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8 Certificate serial: 019AF19AB6A5AE81CEE7C006A75FD1126168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 03:00:39 +0000 Manifest this update: Sat 06 Dec 2025 03:00:39 +0000 Manifest next update: Sun 07 Dec 2025 03:00:39 +0000 Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: FA7XXXSPP9Lc0Q/4zFYuRkp/SsO4oW41P74oIFsGkYU=) 2: g9iZztKhPBfdB3SMkUVgLaoGa6I.roa (hash: 3cdl1mhf1MuyZrBGoECoS2FydheWQgVhXvTorzFZles=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b6:a5:ae:81:ce:e7:c0:06:a7:5f:d1:12:61:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8 Validity Not Before: Dec 6 03:00:39 2025 GMT Not After : Dec 7 03:00:39 2025 GMT Subject: CN=2c6492b4e3aa8e145a8bb3ddc9004820fb6325d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fc:ed:ed:1a:89:29:26:0a:7d:56:4a:49:4b: 6d:db:80:4f:a8:bd:b9:3b:b8:70:bd:30:62:3b:79: 98:70:2e:90:06:5a:ad:dc:9b:76:a0:9f:45:d3:d6: 5f:b7:bb:f8:43:16:cd:73:1a:6f:08:a9:53:50:c1: b2:41:f7:88:de:61:b9:a9:7a:1d:f2:6b:25:07:73: 27:28:b4:2a:26:e1:c8:f1:a5:b2:91:63:72:c0:c3: fe:06:c7:fe:cc:0d:39:6d:33:c7:00:1d:f0:e4:6d: 51:4c:60:2a:f7:bd:8b:5a:29:7e:9f:ed:2c:29:97: c0:bd:d0:2a:76:fb:e4:dd:bd:ec:63:54:28:5f:0f: 18:56:64:35:f7:07:0f:b7:ef:ef:a1:51:eb:dd:04: 18:0d:59:f2:56:94:7c:87:65:69:fc:27:5e:37:28: 7a:92:62:d0:3f:88:63:a5:67:eb:39:0b:17:5c:d9: 28:10:01:62:a8:71:a4:95:df:a0:a3:dd:07:1d:93: f3:8e:73:13:3b:df:f2:0e:e2:d1:79:42:de:d3:5e: f5:11:e7:a7:27:d3:49:f2:23:a7:0f:9e:d1:8b:63: c1:5a:54:12:32:3f:c6:c7:0e:c6:a1:f2:fb:7a:d4: 0d:0b:d6:4b:b3:76:52:b8:ed:71:12:91:65:c9:4d: c6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:64:92:B4:E3:AA:8E:14:5A:8B:B3:DD:C9:00:48:20:FB:63:25:D2 X509v3 Authority Key Identifier: keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:73:7a:45:17:7b:81:58:9e:d8:28:1d:82:f7:e2:e7:80:1a: 90:4d:03:9e:e8:66:b5:4b:15:0d:57:1f:7b:e4:b3:5f:a4:d3: 74:81:ad:24:80:88:97:fb:d7:46:0e:18:f9:af:a4:91:c9:f2: 32:15:9d:d1:a2:8f:e5:d2:29:a2:e9:e9:9a:00:6e:da:ef:14: e2:ea:a3:68:ac:78:17:63:c2:1a:81:84:e7:87:d7:35:7a:3d: e5:4c:c8:b8:21:ee:94:8f:91:fb:06:b6:6b:44:e5:e0:28:a5: 45:05:90:c8:b1:91:59:81:19:b3:96:01:71:77:04:09:7d:f3: 1d:4d:d0:e1:ea:aa:f5:d6:89:bb:1f:50:22:d8:31:18:0a:21: f7:c1:58:f0:32:20:5c:c7:a7:56:0d:91:ef:ae:36:93:f2:3d: 2b:b3:90:97:d9:59:d9:5d:86:58:ed:dd:55:a3:ce:11:1a:34: 91:0f:db:bc:3e:c9:6d:5a:26:f6:dc:9f:07:cc:7d:9f:f1:8f: d4:c0:ac:6d:d7:b8:48:2f:04:6c:19:36:45:fc:17:ff:d1:83: 9d:1f:30:51:9a:30:a0:c1:7a:5a:60:aa:3f:59:c5:22:e0:12: 56:ab:4a:2a:a3:0a:ad:f1:0e:b7:8f:c1:51:68:60:8c:1d:11: 59:82:70:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmralroHO58AGp1/REmFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MDkwZWQwMDI3ZjBlMzNhNzU0YzI1OWY3ZGM4OGJiN2E3 MmZmYTgwHhcNMjUxMjA2MDMwMDM5WhcNMjUxMjA3MDMwMDM5WjAzMTEwLwYDVQQD EygyYzY0OTJiNGUzYWE4ZTE0NWE4YmIzZGRjOTAwNDgyMGZiNjMyNWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPzt7RqJKSYKfVZKSUtt24BPqL25 O7hwvTBiO3mYcC6QBlqt3Jt2oJ9F09Zft7v4QxbNcxpvCKlTUMGyQfeI3mG5qXod 8mslB3MnKLQqJuHI8aWykWNywMP+Bsf+zA05bTPHAB3w5G1RTGAq972LWil+n+0s KZfAvdAqdvvk3b3sY1QoXw8YVmQ19wcPt+/voVHr3QQYDVnyVpR8h2Vp/CdeNyh6 kmLQP4hjpWfrOQsXXNkoEAFiqHGkld+go90HHZPzjnMTO9/yDuLReULe0171Eeen J9NJ8iOnD57Ri2PBWlQSMj/Gxw7GofL7etQNC9ZLs3ZSuO1xEpFlyU3G2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxkkrTjqo4UWouz3ckASCD7YyXSMB8GA1UdIwQY MBaAFBgJDtACfw4zp1TCWffciLt6cv+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xMGRkN2YtNWVkNy00NGRkLWJlYjIt Y2ZmYWQ1MzI5MmNlLzEvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xMGRkN2YtNWVkNy00NGRkLWJlYjItY2ZmYWQ1MzI5MmNl LzEvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHN6RRd7 gVie2Cgdgvfi54AakE0DnuhmtUsVDVcfe+SzX6TTdIGtJICIl/vXRg4Y+a+kkcny MhWd0aKP5dIpounpmgBu2u8U4uqjaKx4F2PCGoGE54fXNXo95UzIuCHulI+R+wa2 a0Tl4CilRQWQyLGRWYEZs5YBcXcECX3zHU3Q4eqq9daJux9QItgxGAoh98FY8DIg XMenVg2R7642k/I9K7OQl9lZ2V2GWO3dVaPOERo0kQ/bvD7JbVom9tyfB8x9n/GP 1MCsbde4SC8EbBk2RfwX/9GDnR8wUZowoMF6WmCqP1nFIuASVqtKKqMKrfEOt4/B UWhgjB0RWYJw3g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:24 2025 by rpki-client