This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft File: gIBkPxusC6RJkhdbr7bFlTxz3iw.mft (raw, json) Hash identifier: 6CxPb5r4BcEhTGsnvwkmjYwECYXxTxTkcGEeDtdOg44= Subject key identifier: 2E:DD:71:EA:F3:42:B1:93:AF:25:74:44:C5:F2:51:51:CA:12:C1:33 Authority key identifier: 80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C Certificate issuer: /CN=8080643f1bac0ba44992175bafb6c5953c73de2c Certificate serial: 019AF23FFD4A5725CCC77C795DFF96BE1241 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft Manifest number: 1E Signing time: Sat 06 Dec 2025 06:01:11 +0000 Manifest this update: Sat 06 Dec 2025 06:01:11 +0000 Manifest next update: Sun 07 Dec 2025 06:01:11 +0000 Files and hashes: 1: gIBkPxusC6RJkhdbr7bFlTxz3iw.crl (hash: TXWT6Y1Boo2qHL2DLP9sbRtqx7gD5WAco2bR/M+qZs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:fd:4a:57:25:cc:c7:7c:79:5d:ff:96:be:12:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8080643f1bac0ba44992175bafb6c5953c73de2c Validity Not Before: Dec 6 06:01:11 2025 GMT Not After : Dec 7 06:01:11 2025 GMT Subject: CN=2edd71eaf342b193af257444c5f25151ca12c133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:15:2a:12:85:48:62:55:e5:f5:d5:df:f2:cf: 14:3b:5c:4d:24:a2:d2:07:65:b2:72:4d:36:86:cf: ec:98:04:2f:4a:ee:61:d9:34:82:91:d5:19:dc:9d: 5d:5a:e9:f1:87:cf:1c:07:11:f5:1d:17:42:66:27: e2:cf:d3:6f:60:77:1b:34:6f:a9:9d:41:48:7d:47: 60:c7:70:d0:96:b7:b1:d3:73:d3:f0:ac:b1:db:76: c8:f4:4b:05:a5:9a:1f:a7:25:2b:58:da:4b:89:fa: cf:98:4e:94:07:d2:45:95:97:72:f3:30:eb:cd:ec: 13:4f:11:af:8d:10:43:b3:db:cb:6c:6b:8f:15:65: 3e:dd:e0:16:69:52:df:e3:ab:52:56:29:09:5b:af: 18:b7:00:5e:fc:7b:fb:ed:41:52:3d:89:52:37:f5: 85:6a:f6:e1:da:4d:c4:3f:20:a2:26:e4:3f:31:83: 3e:7e:da:85:3c:ce:5d:f6:6e:dd:b5:99:d3:6c:44: 81:7d:35:2f:d4:d8:0f:a0:65:86:39:2b:c4:c7:cb: 44:fd:b7:df:d5:87:e5:f7:6e:00:ac:93:de:b2:21: f9:57:c8:72:61:2e:ba:6b:0d:b3:3e:76:f8:17:7d: 58:34:fb:9b:3c:47:c4:07:fd:d6:91:59:91:e2:bc: b2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DD:71:EA:F3:42:B1:93:AF:25:74:44:C5:F2:51:51:CA:12:C1:33 X509v3 Authority Key Identifier: keyid:80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:90:76:ec:ed:dc:c7:71:b1:3a:21:08:ef:a1:49:7b:e9:c1: 20:ea:41:39:76:34:b7:83:14:ff:21:79:8b:10:cc:4a:40:0b: 82:fc:f3:4c:a8:4c:3b:4a:c2:ba:19:01:ed:ca:86:06:65:32: 10:73:ad:d7:8c:96:a6:7e:1c:71:07:ce:1c:52:7c:85:37:ea: 29:80:87:59:1d:fd:46:bb:a9:3c:84:77:fa:4a:89:ce:4b:3f: c1:48:b4:4c:36:18:52:8c:e9:49:69:43:b5:58:98:1f:50:1a: 74:02:2a:ba:6a:a0:0f:79:be:0e:74:b4:d7:02:d2:89:c7:a6: bd:9c:c5:8d:26:b0:3c:68:0e:92:7d:d4:77:87:0a:7f:6b:fa: c4:21:2e:7b:f0:51:4f:ec:1f:8a:bd:af:c0:c0:d9:81:c4:e9: f6:bf:b5:62:dd:a6:1a:15:b6:15:6b:3e:5d:84:e6:78:fd:68: 44:12:30:16:36:69:a0:fd:26:0c:5e:3f:b4:ea:1d:07:26:5e: a2:67:48:d9:10:41:a4:56:d0:a1:97:de:07:3d:60:26:f3:ea: 11:bc:56:73:30:aa:18:57:6e:3c:a0:a7:5f:18:f1:b5:c9:bf: 70:30:cc:34:9c:1a:44:ba:15:31:de:f4:fe:38:22:b5:23:d0: 63:76:e0:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/1KVyXMx3x5Xf+WvhJBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwODA2NDNmMWJhYzBiYTQ0OTkyMTc1YmFmYjZjNTk1M2M3 M2RlMmMwHhcNMjUxMjA2MDYwMTExWhcNMjUxMjA3MDYwMTExWjAzMTEwLwYDVQQD EygyZWRkNzFlYWYzNDJiMTkzYWYyNTc0NDRjNWYyNTE1MWNhMTJjMTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RUqEoVIYlXl9dXf8s8UO1xNJKLS B2Wyck02hs/smAQvSu5h2TSCkdUZ3J1dWunxh88cBxH1HRdCZifiz9NvYHcbNG+p nUFIfUdgx3DQlrex03PT8Kyx23bI9EsFpZofpyUrWNpLifrPmE6UB9JFlZdy8zDr zewTTxGvjRBDs9vLbGuPFWU+3eAWaVLf46tSVikJW68YtwBe/Hv77UFSPYlSN/WF avbh2k3EPyCiJuQ/MYM+ftqFPM5d9m7dtZnTbESBfTUv1NgPoGWGOSvEx8tE/bff 1Yfl924ArJPesiH5V8hyYS66aw2zPnb4F31YNPubPEfEB/3WkVmR4ryy0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7dcerzQrGTryV0RMXyUVHKEsEzMB8GA1UdIwQY MBaAFICAZD8brAukSZIXW6+2xZU8c94sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0lCa1B4dXNDNlJKa2hkYnI3YkZsVHh6M2l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85NjQxNzktYzVlOC00OGMwLThiNjkt MTQ5MmE1NzFjMWYzLzEvZ0lCa1B4dXNDNlJKa2hkYnI3YkZsVHh6M2l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85NjQxNzktYzVlOC00OGMwLThiNjktMTQ5MmE1NzFjMWYz LzEvZ0lCa1B4dXNDNlJKa2hkYnI3YkZsVHh6M2l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJB27O3c x3GxOiEI76FJe+nBIOpBOXY0t4MU/yF5ixDMSkALgvzzTKhMO0rCuhkB7cqGBmUy EHOt14yWpn4ccQfOHFJ8hTfqKYCHWR39RrupPIR3+kqJzks/wUi0TDYYUozpSWlD tViYH1AadAIqumqgD3m+DnS01wLSicemvZzFjSawPGgOkn3Ud4cKf2v6xCEue/BR T+wfir2vwMDZgcTp9r+1Yt2mGhW2FWs+XYTmeP1oRBIwFjZpoP0mDF4/tOodByZe omdI2RBBpFbQoZfeBz1gJvPqEbxWczCqGFduPKCnXxjxtcm/cDDMNJwaRLoVMd70 /jgitSPQY3bgbw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:19 2025 by rpki-client