This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json) Hash identifier: udyj2Kd5tzFQZ6/pJP6dnf10A3HmJe8ksD7lyC5B3aw= Subject key identifier: DD:D9:EA:02:50:D0:BF:96:33:A4:A3:B0:52:85:23:53:B9:AC:9E:08 Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2 Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2 Certificate serial: 019AF16420E4A4425B448D15FB2DA07914FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft Manifest number: 0F88 Signing time: Sat 06 Dec 2025 02:01:02 +0000 Manifest this update: Sat 06 Dec 2025 02:01:02 +0000 Manifest next update: Sun 07 Dec 2025 02:01:02 +0000 Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: 0ZtvyBPBmoPcAp+IxPRk6DVrzlWlFBO26fmY+cAq9ic=) 2: fCpGf801cfDHze74QhXzgzMLUwE.roa (hash: BwtWyFu9Dt2iFCFGI4JjDsN2ooEJ/qDRF3vXF+9EsfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:20:e4:a4:42:5b:44:8d:15:fb:2d:a0:79:14:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2 Validity Not Before: Dec 6 02:01:02 2025 GMT Not After : Dec 7 02:01:02 2025 GMT Subject: CN=ddd9ea0250d0bf9633a4a3b052852353b9ac9e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:4f:82:61:cb:c1:40:30:99:73:53:04:f0:b0: ed:c7:27:2f:80:92:f1:15:a9:d0:38:4b:e3:af:9b: cb:cd:e7:01:03:0f:ca:54:a6:40:02:8d:9b:84:1f: fe:1c:5b:ef:db:cb:d9:61:d2:de:b0:2a:a1:5b:81: ae:71:05:1c:42:9b:2b:ee:8b:0f:98:23:b4:c7:82: 0e:8a:0e:a3:b7:fa:fa:16:e0:2e:f8:86:65:43:96: 93:2e:24:fd:77:2b:fc:9f:da:5f:61:54:b3:b7:2f: f9:33:06:5a:00:13:16:e0:54:46:3e:64:e6:ec:47: a5:0c:91:31:c0:e5:8c:9e:fb:4d:6a:19:ec:68:e9: fb:e2:f1:0f:9c:49:82:b0:88:18:3a:bb:0f:14:2b: f3:21:dd:50:76:fd:43:b4:9a:42:77:c6:d1:95:b3: 55:a8:0b:d0:7b:df:04:95:e2:b1:71:90:be:ac:29: 03:1d:ce:5a:57:70:44:8b:cf:1d:ed:1a:29:35:dc: c5:df:b7:a6:47:bf:38:d6:d8:1c:c5:41:24:8b:3b: 37:c3:a6:fc:84:70:ed:f5:48:d6:a7:8a:5b:4b:f7: 02:cb:ba:38:b8:86:9f:e8:6a:34:af:23:5e:20:7f: 90:c9:9e:de:2a:3c:bc:4c:c0:a6:08:ad:b2:6d:fd: 9f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D9:EA:02:50:D0:BF:96:33:A4:A3:B0:52:85:23:53:B9:AC:9E:08 X509v3 Authority Key Identifier: keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:79:b4:83:6f:c8:31:e4:4e:17:49:5e:df:42:60:29:11:dd: ba:6c:e9:2c:57:83:64:2b:a7:53:4f:a8:e3:31:51:91:f7:e7: 11:61:28:ac:78:69:fb:ab:cd:9e:61:e7:a2:74:d4:7e:62:35: 22:b7:60:d3:39:b3:71:0e:af:9b:69:b5:5d:79:46:4b:38:81: 3d:a6:e6:df:17:e4:ce:6b:5d:38:1b:93:2a:d1:86:19:e4:68: 3b:e9:7d:0d:e2:40:ac:6c:25:9a:1c:ba:6e:62:7b:2c:82:5e: d3:32:10:bb:d8:4a:b9:6a:51:cd:25:c3:9e:f6:6a:65:5c:9c: f6:c6:0c:a0:df:42:29:60:8d:1b:d5:ad:c3:47:af:64:52:f5: 14:26:8f:90:c1:c1:ce:2d:f9:65:57:ba:e1:a9:6c:58:01:15: 51:dd:54:83:a5:e9:66:a1:9e:87:7c:88:73:7d:58:8d:2c:d5: ff:c7:02:9d:5f:46:b9:50:ce:13:1b:c2:e7:e3:01:e4:1c:1f: df:c8:cb:78:46:46:9b:5c:4d:41:d5:f0:e3:09:65:42:6a:d4: d4:b9:68:49:56:af:ba:12:67:36:49:63:ba:dd:b1:fc:9e:c0: 1a:70:04:58:50:d0:ef:ca:40:3c:1c:d8:0f:e6:0a:69:86:67: bd:21:5e:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCDkpEJbRI0V+y2geRT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNjQ2ZDQyY2U4OWQ0MDkzZTRhYzkyN2E3ZjIzNmYzN2E1 MWFiZTIwHhcNMjUxMjA2MDIwMTAyWhcNMjUxMjA3MDIwMTAyWjAzMTEwLwYDVQQD EyhkZGQ5ZWEwMjUwZDBiZjk2MzNhNGEzYjA1Mjg1MjM1M2I5YWM5ZTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9k+CYcvBQDCZc1ME8LDtxycvgJLx FanQOEvjr5vLzecBAw/KVKZAAo2bhB/+HFvv28vZYdLesCqhW4GucQUcQpsr7osP mCO0x4IOig6jt/r6FuAu+IZlQ5aTLiT9dyv8n9pfYVSzty/5MwZaABMW4FRGPmTm 7EelDJExwOWMnvtNahnsaOn74vEPnEmCsIgYOrsPFCvzId1Qdv1DtJpCd8bRlbNV qAvQe98EleKxcZC+rCkDHc5aV3BEi88d7RopNdzF37emR7841tgcxUEkizs3w6b8 hHDt9UjWp4pbS/cCy7o4uIaf6Go0ryNeIH+QyZ7eKjy8TMCmCK2ybf2fTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3Z6gJQ0L+WM6SjsFKFI1O5rJ4IMB8GA1UdIwQY MBaAFBtkbULOidQJPkrJJ6fyNvN6UaviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMt NjYzNDBiYmZmMGI5LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMtNjYzNDBiYmZmMGI5 LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnm0g2/I MeROF0le30JgKRHdumzpLFeDZCunU0+o4zFRkffnEWEorHhp+6vNnmHnonTUfmI1 Irdg0zmzcQ6vm2m1XXlGSziBPabm3xfkzmtdOBuTKtGGGeRoO+l9DeJArGwlmhy6 bmJ7LIJe0zIQu9hKuWpRzSXDnvZqZVyc9sYMoN9CKWCNG9Wtw0evZFL1FCaPkMHB zi35ZVe64alsWAEVUd1Ug6XpZqGeh3yIc31YjSzV/8cCnV9GuVDOExvC5+MB5Bwf 38jLeEZGm1xNQdXw4wllQmrU1LloSVavuhJnNkljut2x/J7AGnAEWFDQ78pAPBzY D+YKaYZnvSFeuA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:44:45 2025 by rpki-client