This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json) Hash identifier: P5zgh+Q1dc0XTQFVb+dLtg/C9S1o2s7ryNSvJdT46QU= Subject key identifier: 7D:AB:3B:47:9B:98:BB:19:E6:A5:E9:D2:B3:2F:6F:AD:12:83:37:4B Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1 Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1 Certificate serial: 019AF50A6DC24500E750AAC04E71629D2E1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 19:01:32 +0000 Manifest this update: Sat 06 Dec 2025 19:01:32 +0000 Manifest next update: Sun 07 Dec 2025 19:01:32 +0000 Files and hashes: 1: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: D4xNwg9JLHuOg8n9c+cafI4O4uqRnkEByfwLJFEjMzo=) 2: a6z9s2B5USpArv-yW1XShxJdtpo.roa (hash: hfVnswmh8KT0yGpguvtRDoEqQ95xhx5KsIsgaJn/9yM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:6d:c2:45:00:e7:50:aa:c0:4e:71:62:9d:2e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1 Validity Not Before: Dec 6 19:01:32 2025 GMT Not After : Dec 7 19:01:32 2025 GMT Subject: CN=7dab3b479b98bb19e6a5e9d2b32f6fad1283374b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8f:af:41:70:34:84:09:4b:3c:d3:3b:8c:1d: 0f:49:41:69:4e:f9:72:4b:66:64:da:d2:ad:31:f0: 91:ba:43:5d:a7:00:1f:4a:39:6f:73:6d:be:b7:d0: e1:ba:db:e9:1f:37:1d:43:5a:0d:ea:2d:d4:d1:a6: 9d:c1:a9:48:c0:ac:21:17:40:3e:97:0a:72:98:a4: 99:d6:66:4f:7f:1d:dc:2b:03:ce:38:0a:be:32:13: ce:12:c1:4c:ec:61:d5:86:15:a6:4c:77:16:82:96: 40:6a:5f:16:d0:fc:a1:ec:da:a1:ab:d2:b2:fc:fa: 7b:6a:54:f2:52:26:a9:d8:95:20:09:67:fc:e2:3b: ec:36:b6:58:71:91:1a:9c:38:5d:ad:8a:99:ce:d2: 4b:8f:48:74:90:2a:f2:19:39:2b:88:9c:3b:3d:10: 5a:8f:64:30:64:c2:ae:2a:df:1f:62:f9:8c:3e:cf: 93:58:4f:02:05:bb:f1:da:e6:67:1d:ad:fc:5b:10: b0:a8:c6:43:9a:e2:66:9c:b9:1e:a3:9b:9c:51:d6: 65:a1:c2:92:66:95:16:02:49:14:84:83:68:23:23: 17:13:5a:71:aa:3d:a2:e5:41:40:53:b8:ae:de:b3: 34:7b:89:cd:50:d1:a9:06:54:6e:b6:a7:ee:ae:b7: 6f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AB:3B:47:9B:98:BB:19:E6:A5:E9:D2:B3:2F:6F:AD:12:83:37:4B X509v3 Authority Key Identifier: keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:9b:93:2f:6e:45:0a:73:ba:6e:d4:7c:e5:ab:ba:2c:b8:0e: 33:9f:40:10:dc:ef:bc:61:61:90:20:55:72:6f:55:b7:7b:72: da:81:df:62:24:28:01:04:c6:3c:d7:c1:ca:01:87:fa:53:06: 7f:58:49:ad:f4:9c:a7:16:c7:a4:ce:03:b4:ac:4a:db:27:b5: a0:59:f9:aa:32:df:18:6d:42:fb:bc:76:4c:d0:0a:b0:46:35: 23:ed:0d:9d:e1:b4:07:89:2c:83:1e:99:be:74:00:71:ce:ce: d8:bf:d7:e2:a3:1f:0a:39:d1:7a:2c:36:a3:fe:73:67:08:5e: 06:76:e6:46:67:f7:ba:55:b9:2d:6c:20:46:19:94:6a:08:08: 12:68:0b:2b:5e:59:20:fe:af:dd:0c:f1:cf:72:25:74:e5:17: 81:c2:6a:bc:9c:39:fe:cf:b1:4f:f0:be:6a:e5:80:77:54:99: f5:e5:68:77:e1:16:bb:75:57:9a:30:56:91:96:85:b5:75:58: 27:93:bb:f3:3e:1b:70:4b:57:9c:c2:85:cb:1f:2a:fc:c8:2b: 31:42:9c:4b:cf:f9:bf:46:bd:b5:2a:69:b5:ef:49:30:6e:12: 31:ed:d4:75:84:b6:5c:04:70:1c:e1:b2:56:64:21:c5:7f:47: b8:7f:d3:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cm3CRQDnUKrATnFinS4fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZWY1YWExNGQzMTQwYzdjN2M0OTg4ZjE5ZGE5NDMxZWIx YTQwZjEwHhcNMjUxMjA2MTkwMTMyWhcNMjUxMjA3MTkwMTMyWjAzMTEwLwYDVQQD Eyg3ZGFiM2I0NzliOThiYjE5ZTZhNWU5ZDJiMzJmNmZhZDEyODMzNzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4+vQXA0hAlLPNM7jB0PSUFpTvly S2Zk2tKtMfCRukNdpwAfSjlvc22+t9DhutvpHzcdQ1oN6i3U0aadwalIwKwhF0A+ lwpymKSZ1mZPfx3cKwPOOAq+MhPOEsFM7GHVhhWmTHcWgpZAal8W0Pyh7Nqhq9Ky /Pp7alTyUiap2JUgCWf84jvsNrZYcZEanDhdrYqZztJLj0h0kCryGTkriJw7PRBa j2QwZMKuKt8fYvmMPs+TWE8CBbvx2uZnHa38WxCwqMZDmuJmnLkeo5ucUdZlocKS ZpUWAkkUhINoIyMXE1pxqj2i5UFAU7iu3rM0e4nNUNGpBlRutqfurrdvOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2rO0ebmLsZ5qXp0rMvb60SgzdLMB8GA1UdIwQY MBaAFBvvWqFNMUDHx8SYjxnalDHrGkDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZDYxNjctZjAyYi00NGRiLWI1NjUt MGU0MzgyMzEwY2E1LzEvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC81ZDYxNjctZjAyYi00NGRiLWI1NjUtMGU0MzgyMzEwY2E1 LzEvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJuTL25F CnO6btR85au6LLgOM59AENzvvGFhkCBVcm9Vt3ty2oHfYiQoAQTGPNfBygGH+lMG f1hJrfScpxbHpM4DtKxK2ye1oFn5qjLfGG1C+7x2TNAKsEY1I+0NneG0B4ksgx6Z vnQAcc7O2L/X4qMfCjnReiw2o/5zZwheBnbmRmf3ulW5LWwgRhmUaggIEmgLK15Z IP6v3Qzxz3IldOUXgcJqvJw5/s+xT/C+auWAd1SZ9eVod+EWu3VXmjBWkZaFtXVY J5O78z4bcEtXnMKFyx8q/MgrMUKcS8/5v0a9tSppte9JMG4SMe3UdYS2XARwHOGy VmQhxX9HuH/Teg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:48:37 2025 by rpki-client