This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json) Hash identifier: nBJ3x4mb1xT1ofJsLE5Tixc6hVbtL9+kSwp9xpVOHTA= Subject key identifier: 32:D5:67:B9:14:EC:B5:48:EE:2D:EC:7D:E9:3E:DA:B4:08:CB:B2:C5 Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2 Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2 Certificate serial: 019B277714979A5FEFF990B529B5F2112909 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft Manifest number: 0FA4 Signing time: Tue 16 Dec 2025 14:01:14 +0000 Manifest this update: Tue 16 Dec 2025 14:01:14 +0000 Manifest next update: Wed 17 Dec 2025 14:01:14 +0000 Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: exYRXc2oMh10I84SE4sRD24U3X3VAGDNF7vzQw6FLzI=) 2: fCpGf801cfDHze74QhXzgzMLUwE.roa (hash: BwtWyFu9Dt2iFCFGI4JjDsN2ooEJ/qDRF3vXF+9EsfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:77:14:97:9a:5f:ef:f9:90:b5:29:b5:f2:11:29:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2 Validity Not Before: Dec 16 14:01:14 2025 GMT Not After : Dec 17 14:01:14 2025 GMT Subject: CN=32d567b914ecb548ee2dec7de93edab408cbb2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:23:29:e6:e6:36:ae:e0:49:da:24:6f:4a:5a: d4:9d:d8:cf:aa:83:f4:1b:00:67:fe:d8:f3:18:27: 0a:97:70:f4:b6:52:c0:f9:da:b4:e6:55:40:c8:29: a2:62:61:95:3a:3d:fe:06:e0:fd:f3:46:00:24:1d: 66:1b:a2:04:a8:1d:02:64:27:00:6f:a1:2d:b8:8c: 90:84:84:18:0b:d9:56:be:ec:a6:f0:50:e5:5d:e9: f0:f0:9c:74:bd:cc:2f:55:b2:63:70:46:ae:c7:89: bd:65:11:aa:68:82:60:ab:d0:f6:84:93:6b:8c:3a: af:fc:3d:e9:5d:98:9d:07:de:46:61:ff:89:73:43: c6:8c:ba:f4:f2:51:45:21:9c:bb:3a:94:0a:82:96: 2c:a7:35:05:cd:55:b4:0e:ba:26:62:f9:87:43:ea: ad:87:23:40:e5:b4:8b:aa:bb:b0:87:0b:05:c6:57: 39:8f:85:6d:c2:70:03:e6:da:c6:55:65:78:08:99: f2:6f:eb:cc:41:32:4b:f0:b1:6d:3b:35:0e:8e:d3: ac:19:23:55:bc:a8:dd:bc:e4:9f:2a:cf:49:c5:f6: d1:88:5b:3e:15:4d:a4:3d:12:6e:1e:65:b6:d7:17: 48:03:d4:ce:e4:4c:50:5e:fc:e1:6a:31:e2:5a:74: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D5:67:B9:14:EC:B5:48:EE:2D:EC:7D:E9:3E:DA:B4:08:CB:B2:C5 X509v3 Authority Key Identifier: keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:19:ed:42:9a:2a:2f:a9:6c:09:81:af:06:bd:5c:b3:fc:fb: 1b:2f:ba:e7:94:2e:c5:ef:60:49:9a:8e:0e:f9:31:86:26:c2: ab:18:a3:bf:d1:53:71:ef:eb:b2:59:34:53:60:93:19:f6:a4: ed:76:93:20:46:d3:bc:c9:34:62:49:ef:9c:e3:12:2a:22:07: 16:4a:de:9b:88:ff:bc:9e:6f:4b:bc:92:48:fb:9f:8f:17:13: 1f:45:3c:6f:74:c0:05:a2:f0:ed:36:84:53:ef:0c:09:2a:68: e5:a3:fe:b9:25:57:b7:93:59:e7:42:98:fc:35:25:65:61:a9: 00:96:72:34:1a:1e:c4:12:d3:f3:27:84:cb:3f:68:c8:ac:dc: 4f:18:73:fb:4d:bd:de:08:92:9c:98:ad:f9:f0:01:a6:e5:cc: 5c:58:89:1b:e6:38:2b:a0:e2:1a:0f:53:77:ea:30:d6:82:db: 8a:4f:9e:7d:08:48:4c:ad:d0:57:b3:b6:33:eb:12:6e:c2:96: 4e:34:3c:a9:0f:bf:0f:c4:57:34:ac:1b:01:42:47:cc:9f:44: 4c:c8:df:97:d6:3f:83:31:04:34:a0:8f:6f:a2:2e:c1:72:d2: 13:04:97:ca:28:e7:a3:90:9d:2d:a1:16:c1:bc:12:da:02:32: 0b:bc:ff:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsndxSXml/v+ZC1KbXyESkJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNjQ2ZDQyY2U4OWQ0MDkzZTRhYzkyN2E3ZjIzNmYzN2E1 MWFiZTIwHhcNMjUxMjE2MTQwMTE0WhcNMjUxMjE3MTQwMTE0WjAzMTEwLwYDVQQD EygzMmQ1NjdiOTE0ZWNiNTQ4ZWUyZGVjN2RlOTNlZGFiNDA4Y2JiMmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCMp5uY2ruBJ2iRvSlrUndjPqoP0 GwBn/tjzGCcKl3D0tlLA+dq05lVAyCmiYmGVOj3+BuD980YAJB1mG6IEqB0CZCcA b6EtuIyQhIQYC9lWvuym8FDlXenw8Jx0vcwvVbJjcEaux4m9ZRGqaIJgq9D2hJNr jDqv/D3pXZidB95GYf+Jc0PGjLr08lFFIZy7OpQKgpYspzUFzVW0DromYvmHQ+qt hyNA5bSLqruwhwsFxlc5j4VtwnAD5trGVWV4CJnyb+vMQTJL8LFtOzUOjtOsGSNV vKjdvOSfKs9JxfbRiFs+FU2kPRJuHmW21xdIA9TO5ExQXvzhajHiWnTF8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLVZ7kU7LVI7i3sfek+2rQIy7LFMB8GA1UdIwQY MBaAFBtkbULOidQJPkrJJ6fyNvN6UaviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMt NjYzNDBiYmZmMGI5LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMtNjYzNDBiYmZmMGI5 LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxntQpoq L6lsCYGvBr1cs/z7Gy+655Quxe9gSZqODvkxhibCqxijv9FTce/rslk0U2CTGfak 7XaTIEbTvMk0YknvnOMSKiIHFkrem4j/vJ5vS7ySSPufjxcTH0U8b3TABaLw7TaE U+8MCSpo5aP+uSVXt5NZ50KY/DUlZWGpAJZyNBoexBLT8yeEyz9oyKzcTxhz+029 3giSnJit+fABpuXMXFiJG+Y4K6DiGg9Td+ow1oLbik+efQhITK3QV7O2M+sSbsKW TjQ8qQ+/D8RXNKwbAUJHzJ9ETMjfl9Y/gzEENKCPb6IuwXLSEwSXyijno5CdLaEW wbwS2gIyC7z/Qw== -----END CERTIFICATE-----Generated at Tue Dec 16 19:46:56 2025 by rpki-client