This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft File: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft (raw, json) Hash identifier: kJl67GwZeo5xkXAYsvWuYa9Yt4xZYo2T0nrSg6Z9KuU= Subject key identifier: 8C:7E:7F:03:04:A2:9E:35:DD:32:DE:7E:79:D1:57:B0:CE:37:B7:47 Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF Certificate issuer: /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af Certificate serial: 019B299C1B11C743B8D0F14470AE9D5354F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 00:00:54 +0000 Manifest this update: Wed 17 Dec 2025 00:00:54 +0000 Manifest next update: Thu 18 Dec 2025 00:00:54 +0000 Files and hashes: 1: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl (hash: ZtMz8DbWSs/TeKBX49pONnHNY9yciSw9SZX0JjYG6nw=) 2: S_yQLv48huAuIFJl3M3q9MKN7ww.roa (hash: BfPTYmIN4iY+2dpqgW32GYnFtvPimuKxK2FzlajUXYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:9c:1b:11:c7:43:b8:d0:f1:44:70:ae:9d:53:54:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af Validity Not Before: Dec 17 00:00:54 2025 GMT Not After : Dec 18 00:00:54 2025 GMT Subject: CN=8c7e7f0304a29e35dd32de7e79d157b0ce37b747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:61:fc:7e:d8:2f:a8:62:13:33:e5:c0:38:2c: cf:7c:8a:d1:f0:ab:9a:b9:b5:08:26:c5:e4:34:af: 71:51:cf:71:10:61:af:58:58:19:bc:61:ad:f2:73: 06:e5:49:40:37:43:3c:14:a2:fa:08:3a:c0:ca:ae: 5f:9d:9b:18:f4:d6:ae:ab:fe:9e:54:76:7e:55:ae: 0d:ee:b8:fc:14:ce:4a:a1:c4:0a:d2:dd:c9:bf:10: 2f:7b:97:37:d3:17:07:76:fe:3e:40:06:5b:d6:c3: fb:99:f5:fc:f4:4e:7d:05:c1:d8:a8:ed:43:b5:d3: 2b:61:2c:40:86:bd:4a:37:9c:a2:bc:af:5d:80:cf: e2:47:29:ae:23:91:92:57:21:07:d1:c9:0a:3c:ad: 76:9d:56:a8:09:65:5c:1b:45:e9:a3:0b:f3:8f:27: 29:f8:ee:c0:d3:dc:75:46:dc:57:33:ac:16:ef:d9: ef:74:59:ae:68:ae:1d:6e:6f:bb:51:23:45:01:a7: 0a:f9:fa:98:b8:6a:ea:31:b8:d2:07:62:4e:c0:13: c5:55:5b:d9:7d:cf:15:50:a9:52:7d:5d:05:ac:74: f9:dd:b8:f9:c6:3a:c4:42:4a:81:14:46:a0:f1:7b: 87:df:d1:28:1e:1f:cf:3f:08:ce:5f:90:79:87:19: 16:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7E:7F:03:04:A2:9E:35:DD:32:DE:7E:79:D1:57:B0:CE:37:B7:47 X509v3 Authority Key Identifier: keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e7:cb:e5:28:dd:82:92:54:bb:0d:b3:cb:45:a4:22:ac:2c: 47:7e:5d:39:82:ae:58:39:c0:ba:bb:2b:09:1b:03:e0:c2:49: 90:a9:52:ad:41:49:b0:cd:e3:3b:0d:52:83:a6:e7:ec:9f:e0: 14:20:dc:6f:2a:3c:db:c1:78:dd:09:e2:fa:79:d9:56:d8:1b: 8b:83:b6:d6:c2:94:2b:ac:fe:4f:9f:c7:4b:27:54:b1:7a:81: b0:9c:a1:6d:2a:0b:c4:b1:a8:d5:c1:34:fe:3b:31:ba:a8:85: 29:45:7d:db:74:b5:c1:c5:8f:cc:16:07:03:84:b6:5d:7b:08: 09:ae:a4:a2:9a:65:b0:2a:be:c9:0b:0e:5a:ff:7d:3a:53:15: 72:3d:4b:4b:14:b8:65:a0:b7:77:a0:ee:87:7e:5d:3f:81:d0: ce:44:ce:36:6f:f9:22:92:33:37:cf:8b:de:79:72:65:4f:fc: 97:8b:2f:ca:52:b1:94:a9:39:34:3c:fe:71:f5:9d:b9:8d:4f: 7d:14:c8:39:45:17:10:0d:84:25:5e:9d:70:1b:33:d3:99:79: d7:fb:07:6b:b4:cd:56:3e:94:04:68:62:50:1f:fd:69:02:98: 60:04:11:aa:ff:1d:10:68:3e:e6:66:fa:2e:2d:70:8f:95:6d: e9:ff:fe:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspnBsRx0O40PFEcK6dU1TwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhM2U5NzBlZDYyNzcxMzQzYTA5NmZmYjJlZmMyNmFiYjdl ZDY4YWYwHhcNMjUxMjE3MDAwMDU0WhcNMjUxMjE4MDAwMDU0WjAzMTEwLwYDVQQD Eyg4YzdlN2YwMzA0YTI5ZTM1ZGQzMmRlN2U3OWQxNTdiMGNlMzdiNzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GH8ftgvqGITM+XAOCzPfIrR8Kua ubUIJsXkNK9xUc9xEGGvWFgZvGGt8nMG5UlAN0M8FKL6CDrAyq5fnZsY9Nauq/6e VHZ+Va4N7rj8FM5KocQK0t3JvxAve5c30xcHdv4+QAZb1sP7mfX89E59BcHYqO1D tdMrYSxAhr1KN5yivK9dgM/iRymuI5GSVyEH0ckKPK12nVaoCWVcG0Xpowvzjycp +O7A09x1RtxXM6wW79nvdFmuaK4dbm+7USNFAacK+fqYuGrqMbjSB2JOwBPFVVvZ fc8VUKlSfV0FrHT53bj5xjrEQkqBFEag8XuH39EoHh/PPwjOX5B5hxkWZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIx+fwMEop413TLefnnRV7DON7dHMB8GA1UdIwQY MBaAFBo+lw7WJ3E0Oglv+y78Jqu37WivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUt ZDQ4OTA5NGM2NjA0LzEvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUtZDQ4OTA5NGM2NjA0 LzEvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+fL5Sjd gpJUuw2zy0WkIqwsR35dOYKuWDnAursrCRsD4MJJkKlSrUFJsM3jOw1Sg6bn7J/g FCDcbyo828F43Qni+nnZVtgbi4O21sKUK6z+T5/HSydUsXqBsJyhbSoLxLGo1cE0 /jsxuqiFKUV923S1wcWPzBYHA4S2XXsICa6kopplsCq+yQsOWv99OlMVcj1LSxS4 ZaC3d6Duh35dP4HQzkTONm/5IpIzN8+L3nlyZU/8l4svylKxlKk5NDz+cfWduY1P fRTIOUUXEA2EJV6dcBsz05l51/sHa7TNVj6UBGhiUB/9aQKYYAQRqv8dEGg+5mb6 Li1wj5Vt6f/+pw== -----END CERTIFICATE-----Generated at Wed Dec 17 07:57:35 2025 by rpki-client