This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft File: G6IBGTlu61biTNCpsu4l-i2kteY.mft (raw, json) Hash identifier: qid35C8CwUAwql2pCT8dmpynJNpdOcwlSYjrWC4bqS0= Subject key identifier: FC:A6:2D:A3:63:64:6C:B7:80:7E:86:99:E6:22:36:0A:5D:E4:1C:83 Authority key identifier: 1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6 Certificate issuer: /CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6 Certificate serial: 019B34C59938E2BC68055F7C699F6E8629B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft Manifest number: 0AEB Signing time: Fri 19 Dec 2025 04:02:03 +0000 Manifest this update: Fri 19 Dec 2025 04:02:03 +0000 Manifest next update: Sat 20 Dec 2025 04:02:03 +0000 Files and hashes: 1: G6IBGTlu61biTNCpsu4l-i2kteY.crl (hash: iHspOqYmNiddQTUpFy8n6KCkk2VMNIJpzNBzPMh4/9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:99:38:e2:bc:68:05:5f:7c:69:9f:6e:86:29:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6 Validity Not Before: Dec 19 04:02:03 2025 GMT Not After : Dec 20 04:02:03 2025 GMT Subject: CN=fca62da363646cb7807e8699e622360a5de41c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c7:36:47:b5:54:d1:84:f5:7d:6f:7f:e0:4d: cf:5a:f5:2a:67:ba:c9:31:16:c7:fb:51:ed:1c:04: ce:ce:ad:3b:c2:4d:73:a6:d9:8b:96:0a:04:f8:aa: 42:ba:33:d3:15:d8:69:e9:53:4f:2a:7d:11:f1:dd: 5b:10:db:a4:6c:ed:59:2f:c4:30:d3:9a:a7:72:52: 2e:03:77:06:c4:da:06:b0:83:4d:aa:4d:a3:25:54: 98:c7:96:61:a5:aa:60:97:bf:1d:87:1f:a6:b2:79: 77:f0:68:94:ce:5f:f9:1e:b1:bb:c4:4e:c9:e5:80: 9b:cb:b8:c3:07:26:42:cc:7c:a2:a5:8b:d9:cd:39: 56:1d:44:9c:1d:38:4c:84:d1:0a:53:00:38:ab:bc: b8:4b:f3:0e:ff:0f:a0:94:71:51:1d:90:da:64:e2: 0b:c5:59:f3:00:0f:cf:3f:95:64:2d:71:78:95:85: c4:b6:b2:86:b1:96:04:5a:0f:23:d1:e1:75:00:99: 97:45:6b:7a:71:86:3d:e8:63:1c:e5:54:47:7c:e5: 3c:74:9d:04:56:e5:88:19:c5:a2:17:6b:09:e5:25: 23:8a:ce:92:39:e0:1e:36:eb:e0:89:f8:25:30:c6: 4c:cb:91:82:a9:73:bd:8f:36:ba:56:93:77:80:15: 81:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A6:2D:A3:63:64:6C:B7:80:7E:86:99:E6:22:36:0A:5D:E4:1C:83 X509v3 Authority Key Identifier: keyid:1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:73:7c:b9:4e:13:ba:a5:de:25:82:99:c1:a9:22:21:2f:96: 7c:1a:91:ea:f2:03:9c:a3:18:c2:55:60:1d:7d:aa:55:7e:5a: ee:84:ba:75:17:36:fd:b2:aa:79:43:a0:98:62:4d:24:85:31: 32:c1:f6:fd:33:57:5e:d5:65:32:5e:4c:41:c4:05:45:eb:44: 33:72:38:f4:59:86:db:81:27:05:f1:fd:91:27:47:ec:e4:f6: 3c:d6:a4:cb:a5:f7:5f:42:51:10:90:e8:2a:6e:ba:77:65:98: 3c:27:c7:38:e7:06:0b:1e:04:1a:4b:b0:29:80:c8:9b:03:ee: 63:fa:07:71:53:54:c3:3a:dd:44:5e:40:c7:05:5b:29:07:df: 72:36:d1:b9:3c:0c:09:9b:28:50:92:e6:09:da:d2:d6:b9:52: b8:95:0c:f2:72:f3:9d:f5:f0:f9:56:99:58:50:c4:bd:be:8e: 47:e8:0d:ad:ef:64:3f:f7:53:7f:4e:1b:98:2d:7b:cc:ed:21: d0:ef:86:5e:83:bc:05:f0:45:09:0b:12:31:58:70:85:e0:77: 55:b9:61:31:51:3b:a0:47:90:22:c5:d0:db:d3:16:f0:12:20: 0e:d6:44:5e:ee:60:4f:3d:0e:05:6c:4a:ae:88:ce:2b:fb:b7: f6:7e:c4:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xZk44rxoBV98aZ9uhim0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTIwMTE5Mzk2ZWViNTZlMjRjZDBhOWIyZWUyNWZhMmRh NGI1ZTYwHhcNMjUxMjE5MDQwMjAzWhcNMjUxMjIwMDQwMjAzWjAzMTEwLwYDVQQD EyhmY2E2MmRhMzYzNjQ2Y2I3ODA3ZTg2OTllNjIyMzYwYTVkZTQxYzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8c2R7VU0YT1fW9/4E3PWvUqZ7rJ MRbH+1HtHATOzq07wk1zptmLlgoE+KpCujPTFdhp6VNPKn0R8d1bENukbO1ZL8Qw 05qnclIuA3cGxNoGsINNqk2jJVSYx5Zhpapgl78dhx+msnl38GiUzl/5HrG7xE7J 5YCby7jDByZCzHyipYvZzTlWHUScHThMhNEKUwA4q7y4S/MO/w+glHFRHZDaZOIL xVnzAA/PP5VkLXF4lYXEtrKGsZYEWg8j0eF1AJmXRWt6cYY96GMc5VRHfOU8dJ0E VuWIGcWiF2sJ5SUjis6SOeAeNuvgifglMMZMy5GCqXO9jza6VpN3gBWBYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPymLaNjZGy3gH6GmeYiNgpd5ByDMB8GA1UdIwQY MBaAFBuiARk5butW4kzQqbLuJfotpLXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNzcxNjAtNGE4NS00NzhkLWE1NDAt NTVhYzIwMjY2NTNiLzEvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jNzcxNjAtNGE4NS00NzhkLWE1NDAtNTVhYzIwMjY2NTNi LzEvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3N8uU4T uqXeJYKZwakiIS+WfBqR6vIDnKMYwlVgHX2qVX5a7oS6dRc2/bKqeUOgmGJNJIUx MsH2/TNXXtVlMl5MQcQFRetEM3I49FmG24EnBfH9kSdH7OT2PNaky6X3X0JREJDo Km66d2WYPCfHOOcGCx4EGkuwKYDImwPuY/oHcVNUwzrdRF5AxwVbKQffcjbRuTwM CZsoUJLmCdrS1rlSuJUM8nLznfXw+VaZWFDEvb6OR+gNre9kP/dTf04bmC17zO0h 0O+GXoO8BfBFCQsSMVhwheB3VblhMVE7oEeQIsXQ29MW8BIgDtZEXu5gTz0OBWxK rojOK/u39n7EIA== -----END CERTIFICATE-----Generated at Fri Dec 19 06:24:58 2025 by rpki-client