This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft File: G-u7vrbpIjF2ylod8UmJhgF-jig.mft (raw, json) Hash identifier: u7N8xGIy6AdppikdjGV/VhW5lm97Rd2iCLeGmreGuV0= Subject key identifier: 35:01:A7:5B:CF:D6:51:FE:B8:EC:07:7C:15:90:66:0E:89:4A:F7:BC Authority key identifier: 1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28 Certificate issuer: /CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28 Certificate serial: 019AF12CCC8BCD040AB7E4629F2AB17F1AFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft Manifest number: 1641 Signing time: Sat 06 Dec 2025 01:00:36 +0000 Manifest this update: Sat 06 Dec 2025 01:00:36 +0000 Manifest next update: Sun 07 Dec 2025 01:00:36 +0000 Files and hashes: 1: G-u7vrbpIjF2ylod8UmJhgF-jig.crl (hash: EiCE0f6rFux9zr16sc5TArfyQT42XnGnIaoBDFkKq7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:cc:8b:cd:04:0a:b7:e4:62:9f:2a:b1:7f:1a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28 Validity Not Before: Dec 6 01:00:36 2025 GMT Not After : Dec 7 01:00:36 2025 GMT Subject: CN=3501a75bcfd651feb8ec077c1590660e894af7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2e:24:b0:69:9f:47:3d:db:4d:31:2b:a7:da: 82:59:b1:77:7b:89:05:68:35:92:9b:50:39:23:46: ef:f5:89:2f:e5:03:db:ab:2e:4a:23:f1:66:bb:64: f0:ef:3b:ce:96:80:17:9d:10:cd:b7:69:06:79:3c: d2:28:8b:2a:a0:24:8f:aa:c1:7e:1c:a2:b4:ad:c5: 45:0d:99:7b:be:cd:a1:1c:0c:d5:11:a7:8b:6a:37: 7a:98:63:2d:6a:7a:69:b7:65:cc:1a:10:ce:bc:ce: 48:d1:7f:79:46:c0:52:72:da:a8:f6:5e:cc:0a:aa: 8d:9d:10:3c:a3:e4:e8:6f:60:f3:4d:c0:f2:69:48: e1:14:a0:56:93:cc:17:46:e1:c3:14:98:1f:5a:c5: 12:23:2b:ea:87:c8:91:68:57:71:fb:4b:84:a2:3d: 3a:f7:c9:73:a5:99:0f:fb:f8:22:39:5d:fc:e5:bc: 0b:37:e4:15:01:b4:60:a5:07:82:bf:b3:79:18:19: d5:c9:04:31:c4:aa:92:4f:3a:cc:bc:8d:9f:84:4e: c9:5f:f7:f0:6c:c2:72:cd:22:61:4e:b1:b9:43:28: 8a:64:bc:5e:25:13:4c:4e:b4:25:bf:13:48:8b:6b: fd:98:8f:28:b3:4c:85:ce:38:05:95:af:ac:7e:88: c1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:01:A7:5B:CF:D6:51:FE:B8:EC:07:7C:15:90:66:0E:89:4A:F7:BC X509v3 Authority Key Identifier: keyid:1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:56:d4:99:22:18:7f:e2:a3:ef:a0:a2:d5:29:b6:87:49:25: 95:0b:1d:66:5c:8a:bb:82:23:94:ad:5e:68:b7:92:66:67:5a: e3:a5:78:95:73:78:83:7f:ab:03:c4:98:f9:31:da:9d:ad:dd: 8b:7d:e0:0d:7a:84:5e:0d:c5:45:50:ba:5d:c1:83:76:40:e0: 54:28:0d:50:bc:4c:98:99:8f:39:a8:86:22:a4:0a:6c:c9:0d: 22:ca:9a:29:47:41:1a:59:b3:4f:f9:3d:ad:1d:70:34:29:ae: b9:d3:2e:bc:34:f9:e4:23:5c:9a:09:0e:03:15:c5:a7:e5:27: 97:9f:db:ae:c2:61:68:31:6e:71:98:74:7c:2d:88:1d:0b:77: 01:7a:7a:a2:0c:f8:06:2a:09:39:d5:b1:61:3f:56:ae:a5:3a: 83:cf:05:bb:cd:af:af:5c:98:11:e2:4f:54:5a:8e:0a:55:0b: 22:bf:0c:e1:7e:83:2a:f8:8c:6d:96:96:67:1e:be:0e:94:4e: 65:02:cd:09:f1:8a:81:df:3a:af:18:b6:c8:16:43:bd:3c:f5: e0:ab:97:de:78:b6:46:1c:0e:d1:ef:ee:c7:57:79:b5:3c:f3: a8:98:69:11:46:c5:74:4b:9b:4c:52:50:74:fc:b3:04:05:cd: 9e:c6:ba:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMyLzQQKt+Rinyqxfxr7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZWJiYmJlYjZlOTIyMzE3NmNhNWExZGYxNDk4OTg2MDE3 ZThlMjgwHhcNMjUxMjA2MDEwMDM2WhcNMjUxMjA3MDEwMDM2WjAzMTEwLwYDVQQD EygzNTAxYTc1YmNmZDY1MWZlYjhlYzA3N2MxNTkwNjYwZTg5NGFmN2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC4ksGmfRz3bTTErp9qCWbF3e4kF aDWSm1A5I0bv9Ykv5QPbqy5KI/Fmu2Tw7zvOloAXnRDNt2kGeTzSKIsqoCSPqsF+ HKK0rcVFDZl7vs2hHAzVEaeLajd6mGMtanppt2XMGhDOvM5I0X95RsBSctqo9l7M CqqNnRA8o+Tob2DzTcDyaUjhFKBWk8wXRuHDFJgfWsUSIyvqh8iRaFdx+0uEoj06 98lzpZkP+/giOV385bwLN+QVAbRgpQeCv7N5GBnVyQQxxKqSTzrMvI2fhE7JX/fw bMJyzSJhTrG5QyiKZLxeJRNMTrQlvxNIi2v9mI8os0yFzjgFla+sfojBQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUBp1vP1lH+uOwHfBWQZg6JSve8MB8GA1UdIwQY MBaAFBvru7626SIxdspaHfFJiYYBfo4oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy11N3ZyYnBJakYyeWxvZDhVbUpoZ0YtamlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84MzlmZDgtYzI4Yy00MTEyLTk3OWEt N2VjNDAyZWNmYjVjLzEvRy11N3ZyYnBJakYyeWxvZDhVbUpoZ0YtamlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS84MzlmZDgtYzI4Yy00MTEyLTk3OWEtN2VjNDAyZWNmYjVj LzEvRy11N3ZyYnBJakYyeWxvZDhVbUpoZ0YtamlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1bUmSIY f+Kj76Ci1Sm2h0kllQsdZlyKu4IjlK1eaLeSZmda46V4lXN4g3+rA8SY+THana3d i33gDXqEXg3FRVC6XcGDdkDgVCgNULxMmJmPOaiGIqQKbMkNIsqaKUdBGlmzT/k9 rR1wNCmuudMuvDT55CNcmgkOAxXFp+Unl5/brsJhaDFucZh0fC2IHQt3AXp6ogz4 BioJOdWxYT9WrqU6g88Fu82vr1yYEeJPVFqOClULIr8M4X6DKviMbZaWZx6+DpRO ZQLNCfGKgd86rxi2yBZDvTz14KuX3ni2RhwO0e/ux1d5tTzzqJhpEUbFdEubTFJQ dPyzBAXNnsa6fA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:35 2025 by rpki-client