This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft File: G_5rmg5omKei6dhNPb9jJ7RT5mI.mft (raw, json) Hash identifier: TJkfTMHUGuys4VgDAlK9HWIynW6UZ4iUw7ozssUsqT8= Subject key identifier: BD:D2:46:E8:19:D0:6B:10:54:34:FF:76:E0:D1:CA:82:E4:54:2A:57 Authority key identifier: 1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62 Certificate issuer: /CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662 Certificate serial: 019B2D0AE48205933597DF5D135CAD9B9F2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 16:00:47 +0000 Manifest this update: Wed 17 Dec 2025 16:00:47 +0000 Manifest next update: Thu 18 Dec 2025 16:00:47 +0000 Files and hashes: 1: EWj-IKBdi-VQbg6FFbIiaaIj7UA.roa (hash: blruzwC9IPFb7cI8V12vzE/ugdCglrr9S2cLxCpCzJI=) 2: G_5rmg5omKei6dhNPb9jJ7RT5mI.crl (hash: EKVuzYm0mGB+Xm3w/UPOBm220ro4Hf85ySZ4j9jYIw8=) 3: l5yAXyPGwA9Y5lyLs2yb1MceJsY.roa (hash: AJ6lbq1xzcp35bTjVgiXhAuT5kBSyVNhwmMHHhgVeKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0a:e4:82:05:93:35:97:df:5d:13:5c:ad:9b:9f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662 Validity Not Before: Dec 17 16:00:47 2025 GMT Not After : Dec 18 16:00:47 2025 GMT Subject: CN=bdd246e819d06b105434ff76e0d1ca82e4542a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f5:bd:14:51:75:e4:3f:12:2c:c3:e3:27:16: 5a:1d:45:26:28:b1:5e:e0:18:db:fa:f8:8f:31:0c: 09:77:29:e1:2a:c3:9c:7c:25:d8:d9:46:29:90:7d: 2f:bf:07:5f:b1:6c:c2:02:49:40:6c:fd:3c:15:3b: df:ce:9f:0b:92:79:71:43:55:0f:79:9a:dd:b3:e9: 77:60:9e:2d:12:06:de:21:c4:aa:e9:3b:0c:e1:da: c9:e4:bb:e2:4c:00:76:3f:a2:a9:35:66:0f:39:97: 6a:ab:56:2c:a4:63:e4:ff:7a:5e:3b:22:56:7b:4f: c9:f4:fd:1d:76:ff:6f:43:12:31:f7:99:b6:b7:9c: 4b:4a:db:f2:40:fb:d2:38:4d:fe:97:91:6c:a9:bc: 04:bc:9d:2a:0f:d2:74:8a:9e:bc:13:7d:6c:d6:61: d8:67:af:f7:d4:40:f7:fc:87:af:c2:4b:69:2d:cd: 51:a2:d7:b7:13:ab:24:ff:e8:61:13:42:a8:c5:e7: ba:a5:80:77:9f:54:af:94:70:ca:c9:44:d6:ad:4a: 45:6e:97:33:ba:3b:c8:af:7b:47:37:fb:46:85:64: d5:91:ca:23:11:f0:95:04:7e:f6:5f:e9:0b:61:a3: 72:09:cc:d5:7c:c5:8c:e6:c3:cd:33:3e:e2:92:95: 43:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D2:46:E8:19:D0:6B:10:54:34:FF:76:E0:D1:CA:82:E4:54:2A:57 X509v3 Authority Key Identifier: keyid:1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:1d:38:0a:54:47:e8:80:c2:0e:8f:06:e3:be:bc:ec:55:27: 20:27:d6:a9:c7:0c:3d:3b:f2:88:60:91:15:74:bc:27:70:1e: 24:02:3a:d8:3c:ff:4a:84:5f:64:34:7d:5c:4f:bf:8a:f1:16: 97:90:9a:24:75:64:8a:24:b2:e3:c7:8c:dd:18:44:6f:da:7e: 47:97:a3:d2:df:94:44:d4:72:05:62:06:98:b7:ad:08:cc:ef: 02:53:05:84:6b:8f:f9:a9:d1:5e:08:93:1f:d3:34:5e:6a:cf: f7:4a:08:06:61:67:6d:c6:4b:83:06:b6:c9:7e:14:8a:23:1a: f4:00:05:84:92:5d:6d:d5:dc:3d:d9:f0:d5:a8:14:0a:2c:52: bb:94:72:0d:08:8d:62:9b:b3:84:12:dc:8f:b4:42:26:5c:d6: 99:3d:7e:fa:01:15:3b:a3:0c:5f:23:f3:75:99:25:7c:36:e9: 67:a7:97:92:32:1b:7a:54:bb:75:5a:9a:14:93:81:3a:db:34: 45:fb:e0:26:c9:f9:ac:53:53:30:22:5a:65:0f:26:6f:15:ea: 72:09:87:02:55:84:18:b9:57:70:d2:75:3a:ae:ee:5b:13:40: 12:a2:89:21:50:af:96:d2:9e:14:be:ac:63:7c:9d:d5:c9:3e: fd:db:a1:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCuSCBZM1l99dE1ytm58sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZmU2YjlhMGU2ODk4YTdhMmU5ZDg0ZDNkYmY2MzI3YjQ1 M2U2NjIwHhcNMjUxMjE3MTYwMDQ3WhcNMjUxMjE4MTYwMDQ3WjAzMTEwLwYDVQQD EyhiZGQyNDZlODE5ZDA2YjEwNTQzNGZmNzZlMGQxY2E4MmU0NTQyYTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvW9FFF15D8SLMPjJxZaHUUmKLFe 4Bjb+viPMQwJdynhKsOcfCXY2UYpkH0vvwdfsWzCAklAbP08FTvfzp8LknlxQ1UP eZrds+l3YJ4tEgbeIcSq6TsM4drJ5LviTAB2P6KpNWYPOZdqq1YspGPk/3peOyJW e0/J9P0ddv9vQxIx95m2t5xLStvyQPvSOE3+l5FsqbwEvJ0qD9J0ip68E31s1mHY Z6/31ED3/IevwktpLc1Rote3E6sk/+hhE0Koxee6pYB3n1SvlHDKyUTWrUpFbpcz ujvIr3tHN/tGhWTVkcojEfCVBH72X+kLYaNyCczVfMWM5sPNMz7ikpVDzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3SRugZ0GsQVDT/duDRyoLkVCpXMB8GA1UdIwQY MBaAFBv+a5oOaJinounYTT2/Yye0U+ZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hNTY3MjMtZDM3Yy00MTdiLWE4YTEt NmUyMmJmNDM2MzA0LzEvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hNTY3MjMtZDM3Yy00MTdiLWE4YTEtNmUyMmJmNDM2MzA0 LzEvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsB04ClRH 6IDCDo8G47687FUnICfWqccMPTvyiGCRFXS8J3AeJAI62Dz/SoRfZDR9XE+/ivEW l5CaJHVkiiSy48eM3RhEb9p+R5ej0t+URNRyBWIGmLetCMzvAlMFhGuP+anRXgiT H9M0XmrP90oIBmFnbcZLgwa2yX4UiiMa9AAFhJJdbdXcPdnw1agUCixSu5RyDQiN YpuzhBLcj7RCJlzWmT1++gEVO6MMXyPzdZklfDbpZ6eXkjIbelS7dVqaFJOBOts0 RfvgJsn5rFNTMCJaZQ8mbxXqcgmHAlWEGLlXcNJ1Oq7uWxNAEqKJIVCvltKeFL6s Y3yd1ck+/duhgg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:10:48 2025 by rpki-client