This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft File: G55Be7nssazpSR68KCO7eJNLLN8.mft (raw, json) Hash identifier: nH4LhcewRfzNZlL7pkrFbGw1JycxGUCms3sN0kcFlcs= Subject key identifier: F4:79:68:91:4D:72:70:5D:61:D3:8C:7E:51:0D:B5:58:55:7C:AE:F8 Authority key identifier: 1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF Certificate issuer: /CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf Certificate serial: 019AF19B508C86DCA6EECC6046831D21C655 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft Manifest number: 160F Signing time: Sat 06 Dec 2025 03:01:18 +0000 Manifest this update: Sat 06 Dec 2025 03:01:18 +0000 Manifest next update: Sun 07 Dec 2025 03:01:18 +0000 Files and hashes: 1: G55Be7nssazpSR68KCO7eJNLLN8.crl (hash: io6qAqyGb2/NQCzQIBiRl3agjpuP+ag+5MvuObpYvNc=) 2: uDXgZr4d7paw0tQnlQAuxTAiQJ4.roa (hash: ZLVG9qnKbapzUcUyG3vXPFRhsGi/6YqVmyuunmvWt4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:50:8c:86:dc:a6:ee:cc:60:46:83:1d:21:c6:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf Validity Not Before: Dec 6 03:01:18 2025 GMT Not After : Dec 7 03:01:18 2025 GMT Subject: CN=f47968914d72705d61d38c7e510db558557caef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:5e:b7:2f:6e:ec:a6:3e:c9:07:86:83:82: 95:55:fd:46:1a:67:fd:a4:6e:db:0d:2d:b6:c4:2e: 49:90:44:d3:43:02:c3:be:42:0e:e6:dc:0a:af:5c: 89:97:3d:32:f7:ee:27:03:17:53:d6:55:da:1a:91: e0:dd:1a:e6:b3:d6:d1:d3:3d:f7:1f:2e:1f:9c:db: 07:29:58:70:56:af:b3:f0:85:f2:34:74:fd:33:b8: f7:af:c1:12:71:27:8c:99:c8:e3:c3:dc:bb:1e:8b: 27:64:72:f5:b1:e8:15:44:1a:8e:08:3d:c0:a9:28: 5e:7a:8a:9a:84:b2:8f:42:14:aa:67:18:45:a9:db: aa:4f:94:59:10:f4:84:62:e0:81:4d:15:d7:66:3d: 3e:fb:46:73:7a:ee:c9:3a:a9:1e:13:07:d8:7b:19: 8d:97:b8:37:c5:ef:12:01:d2:a6:d7:29:26:32:93: 97:77:51:a0:a1:5d:79:0d:3e:99:69:3c:5b:29:f5: 98:2b:22:52:97:f2:5b:da:b9:aa:2e:bc:48:f5:1b: fe:06:9a:fa:6b:8f:35:34:f7:c2:e7:05:e8:88:66: ac:97:f7:9f:67:4c:2e:dc:6d:67:0e:ad:85:4d:e8: 14:3d:da:85:ab:1c:ac:56:c4:47:84:56:a8:aa:51: f9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:79:68:91:4D:72:70:5D:61:D3:8C:7E:51:0D:B5:58:55:7C:AE:F8 X509v3 Authority Key Identifier: keyid:1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:41:6e:01:30:17:89:c5:d9:1f:2a:8e:d5:ab:8d:21:95:92: 96:7c:2e:6c:d9:23:5b:12:55:92:a5:fd:45:ce:1f:50:47:a1: 86:b0:43:fb:0b:7c:ab:e6:c1:7c:8a:6a:19:8d:1b:24:f6:f8: 1c:c4:36:81:b4:25:13:94:5d:fe:8f:51:b4:c0:fe:e5:03:e4: d4:2f:44:93:fb:51:17:fc:38:5a:ee:f2:10:89:81:f1:c0:af: a3:69:aa:a2:63:30:5a:75:0b:97:c1:9b:ba:9c:b6:2e:d5:0a: aa:47:5c:70:9d:06:a0:56:22:a7:01:9d:ca:7d:cc:a7:35:58: 39:a8:d0:66:1c:a6:fc:79:0a:56:da:d0:ea:2c:77:00:ea:cf: 15:91:1a:ad:72:c9:9c:e7:64:bc:c9:50:b9:2e:eb:bc:4c:02: 6e:e9:ee:b7:1d:25:90:22:6b:c2:3b:5f:65:db:b1:18:15:ae: 05:7a:96:38:5a:29:96:d3:34:87:07:16:51:ac:62:c7:38:89: e5:34:e3:f5:cc:67:0e:ae:84:c0:7f:d6:6a:1d:cd:d0:08:ff: f7:34:de:2f:bb:a1:9b:e4:5c:4f:f8:db:fe:1c:1b:d8:22:35: f7:d8:ed:0b:f6:e1:a3:0c:b4:a8:c3:4d:68:86:8d:a4:8f:1a: 3c:52:d8:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1CMhtym7sxgRoMdIcZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOWU0MTdiYjllY2IxYWNlOTQ5MWViYzI4MjNiYjc4OTM0 YjJjZGYwHhcNMjUxMjA2MDMwMTE4WhcNMjUxMjA3MDMwMTE4WjAzMTEwLwYDVQQD EyhmNDc5Njg5MTRkNzI3MDVkNjFkMzhjN2U1MTBkYjU1ODU1N2NhZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpdety9u7KY+yQeGg4KVVf1GGmf9 pG7bDS22xC5JkETTQwLDvkIO5twKr1yJlz0y9+4nAxdT1lXaGpHg3Rrms9bR0z33 Hy4fnNsHKVhwVq+z8IXyNHT9M7j3r8EScSeMmcjjw9y7HosnZHL1segVRBqOCD3A qSheeoqahLKPQhSqZxhFqduqT5RZEPSEYuCBTRXXZj0++0Zzeu7JOqkeEwfYexmN l7g3xe8SAdKm1ykmMpOXd1GgoV15DT6ZaTxbKfWYKyJSl/Jb2rmqLrxI9Rv+Bpr6 a481NPfC5wXoiGasl/efZ0wu3G1nDq2FTegUPdqFqxysVsRHhFaoqlH5nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPR5aJFNcnBdYdOMflENtVhVfK74MB8GA1UdIwQY MBaAFBueQXu57LGs6UkevCgju3iTSyzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iZGZlMTctOTFhZC00ZjMxLWFlY2Qt ODFlZDEyZGRmMTc1LzEvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iZGZlMTctOTFhZC00ZjMxLWFlY2QtODFlZDEyZGRmMTc1 LzEvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUFuATAX icXZHyqO1auNIZWSlnwubNkjWxJVkqX9Rc4fUEehhrBD+wt8q+bBfIpqGY0bJPb4 HMQ2gbQlE5Rd/o9RtMD+5QPk1C9Ek/tRF/w4Wu7yEImB8cCvo2mqomMwWnULl8Gb upy2LtUKqkdccJ0GoFYipwGdyn3MpzVYOajQZhym/HkKVtrQ6ix3AOrPFZEarXLJ nOdkvMlQuS7rvEwCbunutx0lkCJrwjtfZduxGBWuBXqWOFopltM0hwcWUaxixziJ 5TTj9cxnDq6EwH/Wah3N0Aj/9zTeL7uhm+RcT/jb/hwb2CI199jtC/bhowy0qMNN aIaNpI8aPFLYvA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:13:47 2025 by rpki-client