This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json) Hash identifier: lVpbTgP3ZPY0JypiZXlsMGvkZkF2blrefOcK29Q8B2M= Subject key identifier: 15:37:C0:F9:00:F9:2B:E0:41:2C:73:09:0D:08:FA:66:AE:DE:57:8C Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d Certificate serial: 019B085A9A4C16C402CDB56D20153C86141A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft Manifest number: 0C78 Signing time: Wed 10 Dec 2025 13:01:53 +0000 Manifest this update: Wed 10 Dec 2025 13:01:53 +0000 Manifest next update: Thu 11 Dec 2025 13:01:53 +0000 Files and hashes: 1: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: TkRopth8LbW1uvsLlelMNEoVnUlLzlGJJbfCSVD6r50=) 2: TRfMCYgQom2qb1ltkPZ8pDFMPbw.roa (hash: B/bZzAE30Cbi1NKH6O3ZfRrv6UmAF6KTnp6VWp5movg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5a:9a:4c:16:c4:02:cd:b5:6d:20:15:3c:86:14:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bde70af153494354946648acd641163e2af1b1d Validity Not Before: Dec 10 13:01:53 2025 GMT Not After : Dec 11 13:01:53 2025 GMT Subject: CN=1537c0f900f92be0412c73090d08fa66aede578c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4a:6f:e7:da:b4:26:4e:ee:75:80:7d:bc:0c: ac:8a:0e:54:e3:f1:5c:15:a1:d9:51:6a:bf:9e:2b: 29:76:85:19:a7:32:2b:30:88:d5:9f:06:ac:aa:eb: 43:78:a2:dc:ee:b8:04:d9:57:83:64:00:48:00:ff: 60:9b:72:f9:91:c5:12:68:98:0a:da:85:93:80:8a: a2:8c:0f:76:d1:2e:8a:48:b0:da:dc:f6:23:b2:1f: 41:52:79:07:36:a0:c4:20:ef:4a:a9:9b:b5:41:30: d3:7c:2d:1a:a0:1a:75:d6:18:06:65:45:6a:67:00: 9c:57:79:43:5e:46:b2:5a:ed:a5:5b:5d:4b:cd:4b: ce:e1:7e:d0:bb:ad:94:c9:e8:15:ac:40:71:9b:c2: 13:3d:10:79:8d:bf:55:ef:7c:f4:55:51:ca:fb:93: a3:95:45:e0:07:65:46:e3:32:f3:31:da:81:5e:1b: d2:ab:15:06:4d:38:8e:b7:3b:2c:a2:fb:b1:ed:03: 17:a0:7d:64:82:75:28:82:33:75:97:e0:ba:cc:8a: 11:ce:1a:6f:90:6e:52:d2:c0:02:07:ef:3c:4a:15: 8b:b1:27:e5:b9:ba:7f:b4:23:25:f4:4e:e8:c6:7a: ae:eb:4f:2e:3e:4e:57:1d:53:89:81:90:67:a0:76: d5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:37:C0:F9:00:F9:2B:E0:41:2C:73:09:0D:08:FA:66:AE:DE:57:8C X509v3 Authority Key Identifier: keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ec:dc:7d:c6:dc:ef:85:1f:35:53:f4:d6:d2:78:11:5d:eb: 27:29:29:2a:96:3b:71:8c:ad:74:f8:1a:53:54:5b:a6:2d:cd: e5:6c:41:a2:8b:c0:d4:7d:a9:77:36:5d:c9:3e:13:a5:4b:1b: 0e:a6:59:8b:88:68:b2:01:d7:23:bc:ad:0e:0d:63:46:9b:bb: 90:21:c0:3b:b2:70:44:f8:0f:07:24:74:e6:c6:70:ff:ee:25: b4:2c:60:fa:37:6c:98:d7:d1:46:18:de:4f:e9:21:10:f4:63: e6:20:c0:68:9c:71:09:c3:5d:3e:69:72:7b:3a:f9:7a:7c:bb: 4e:db:fe:1a:f9:73:83:62:d6:4e:96:bb:4e:75:21:ab:d6:ab: 4b:bc:23:f5:27:78:17:28:1a:4d:7b:15:90:29:63:a9:18:e8: 20:6b:c3:99:0b:16:87:ed:d5:0f:02:d4:85:ec:d6:8c:2a:32: 67:3e:66:dd:5d:90:17:67:10:bc:f7:6c:36:62:11:b5:52:76: 16:ba:9c:6e:f7:a4:14:85:a5:a7:8a:3b:a1:5c:47:f4:ae:c5: 83:39:1b:52:79:83:82:0d:84:0d:64:cc:b8:dc:ce:5c:fe:36: df:f6:89:7a:4e:5a:c9:2b:a7:f0:57:cd:6e:ac:01:02:f1:b2: cd:ed:ae:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIWppMFsQCzbVtIBU8hhQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZGU3MGFmMTUzNDk0MzU0OTQ2NjQ4YWNkNjQxMTYzZTJh ZjFiMWQwHhcNMjUxMjEwMTMwMTUzWhcNMjUxMjExMTMwMTUzWjAzMTEwLwYDVQQD EygxNTM3YzBmOTAwZjkyYmUwNDEyYzczMDkwZDA4ZmE2NmFlZGU1NzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkpv59q0Jk7udYB9vAysig5U4/Fc FaHZUWq/nispdoUZpzIrMIjVnwasqutDeKLc7rgE2VeDZABIAP9gm3L5kcUSaJgK 2oWTgIqijA920S6KSLDa3PYjsh9BUnkHNqDEIO9KqZu1QTDTfC0aoBp11hgGZUVq ZwCcV3lDXkayWu2lW11LzUvO4X7Qu62UyegVrEBxm8ITPRB5jb9V73z0VVHK+5Oj lUXgB2VG4zLzMdqBXhvSqxUGTTiOtzssovux7QMXoH1kgnUogjN1l+C6zIoRzhpv kG5S0sACB+88ShWLsSflubp/tCMl9E7oxnqu608uPk5XHVOJgZBnoHbVlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBU3wPkA+SvgQSxzCQ0I+mau3leMMB8GA1UdIwQY MBaAFBvecK8VNJQ1SUZkis1kEWPirxsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzk1d3J4VTBsRFZKUm1TS3pXUVJZLUt2R3gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xNDhlY2EtYzM5Zi00NjczLTg4NmYt ZWNmODIzMDJmNzI2LzEvRzk1d3J4VTBsRFZKUm1TS3pXUVJZLUt2R3gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xNDhlY2EtYzM5Zi00NjczLTg4NmYtZWNmODIzMDJmNzI2 LzEvRzk1d3J4VTBsRFZKUm1TS3pXUVJZLUt2R3gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOzcfcbc 74UfNVP01tJ4EV3rJykpKpY7cYytdPgaU1Rbpi3N5WxBoovA1H2pdzZdyT4TpUsb DqZZi4hosgHXI7ytDg1jRpu7kCHAO7JwRPgPByR05sZw/+4ltCxg+jdsmNfRRhje T+khEPRj5iDAaJxxCcNdPmlyezr5eny7Ttv+Gvlzg2LWTpa7TnUhq9arS7wj9Sd4 FygaTXsVkCljqRjoIGvDmQsWh+3VDwLUhezWjCoyZz5m3V2QF2cQvPdsNmIRtVJ2 FrqcbvekFIWlp4o7oVxH9K7FgzkbUnmDgg2EDWTMuNzOXP423/aJek5aySun8FfN bqwBAvGyze2uFw== -----END CERTIFICATE-----Generated at Wed Dec 10 18:09:14 2025 by rpki-client