This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json) Hash identifier: 2IQ9djRauu+0SBqlvsLWm5aQzutko7G+qd1oK9JQe98= Subject key identifier: 70:17:D2:A4:18:BE:3F:A0:E4:58:43:76:89:DB:97:BC:23:67:2B:F6 Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53 Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53 Certificate serial: 019B36B3B16406CC9351F2ACFF0AE1B9AA2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 13:01:44 +0000 Manifest this update: Fri 19 Dec 2025 13:01:44 +0000 Manifest next update: Sat 20 Dec 2025 13:01:44 +0000 Files and hashes: 1: 2u65Jdfy1meP3-UzJxITH_HaB0I.roa (hash: GSn3vSNczK6ZpdwvGH948S/Jm3wgfMlxSG0nlQVl8dQ=) 2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: cGa8HkeDFCzy5fXmPoZYJgxVG7A5gIoqh3GCEE3Ox8E=) 3: dnna3QdlDeomv7D_EwLJ_fnfivI.roa (hash: MOBcHLr5lX2FtBzfiXULYdThQj8Ixa9C5j2SRENdgnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:b1:64:06:cc:93:51:f2:ac:ff:0a:e1:b9:aa:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53 Validity Not Before: Dec 19 13:01:44 2025 GMT Not After : Dec 20 13:01:44 2025 GMT Subject: CN=7017d2a418be3fa0e458437689db97bc23672bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:64:1a:97:fe:b0:10:e6:6e:e1:fb:3a:c3:41: 67:f2:69:15:e6:e2:5f:e9:39:ea:4e:b0:8a:81:40: e8:ac:9d:1a:a0:54:f2:0d:68:aa:cb:cb:59:5e:ff: 34:59:81:1a:3a:0e:f5:a1:68:63:cf:16:68:51:6a: 78:94:ba:6f:2b:46:58:87:37:ba:59:3e:33:01:60: 4f:92:38:f1:e0:78:ba:85:2d:0d:be:10:26:4d:08: d7:4e:ba:46:3a:89:36:8f:b9:53:ea:fc:80:46:f1: ba:8c:e0:b7:f6:0e:86:a0:c2:4e:9d:e7:1e:f1:5a: 4e:58:a2:ba:87:c9:27:17:3e:a5:ec:20:1e:df:de: 9c:7d:4c:05:93:d5:b9:80:59:f7:61:0d:bf:ec:33: 05:2a:48:93:f0:72:70:ed:21:92:8d:04:c9:1c:f6: 64:74:89:83:17:2e:de:80:f1:7e:88:6a:c1:d1:06: e9:58:fe:a7:08:98:e7:be:db:6d:a9:e9:5e:13:06: 21:1f:90:2c:b5:0b:48:10:7a:a2:d8:18:00:02:81: d6:ea:78:8f:98:6c:81:6e:52:58:2b:d5:50:b1:55: 63:2e:8f:d6:cb:f8:7e:c1:77:8d:2d:6b:cd:4c:88: b6:3f:ba:8b:37:75:bf:f0:d4:1a:39:d4:4f:76:ae: ce:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:17:D2:A4:18:BE:3F:A0:E4:58:43:76:89:DB:97:BC:23:67:2B:F6 X509v3 Authority Key Identifier: keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c8:44:66:06:6b:a1:7b:77:12:b8:0a:6a:af:ba:52:04:04: 24:62:62:2a:53:ab:f9:50:78:5f:77:0d:c3:cb:aa:06:ef:ad: 82:c6:19:15:23:e8:25:f4:49:11:5f:af:dc:72:37:c9:b9:a9: b9:10:ea:31:04:03:d1:9d:f6:80:8f:d1:50:71:41:ff:b4:42: fb:43:a0:ad:04:1d:48:cb:a1:8f:a8:dc:28:d8:c3:6e:25:10: e3:8f:b6:53:d6:49:a1:b6:28:e1:72:5a:5d:76:46:f8:04:e4: a4:f9:18:98:7f:e3:c6:a6:dc:8a:5e:31:9c:e6:8e:5b:3e:0c: 37:06:55:42:d7:8c:2e:1c:98:b0:82:21:91:ae:83:d9:34:c7: 76:6a:58:74:ce:9e:c6:01:f8:f6:71:45:1c:9b:6d:88:01:24: 98:df:0e:77:2f:f1:8b:b8:f2:ce:67:ec:d8:b3:75:4a:a3:db: ec:40:df:5c:25:3b:b1:ac:e1:a8:46:4c:2d:09:03:41:bc:8c: cd:f4:e8:5b:81:d0:be:93:ea:04:1d:5e:14:6a:51:9c:bf:c7: 2a:09:7c:75:32:b7:a9:cf:3a:5d:b0:1b:82:6d:26:02:09:7d: 83:fe:52:17:58:bc:b1:5f:f1:86:a7:9a:5e:8d:b0:91:d9:23: 30:43:aa:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s7FkBsyTUfKs/wrhuaotMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYjQ1NzQ0YTU0MTI4NWVlYTBlNGUwNGU1ZGU3NjZhOWM4 MjNiNTMwHhcNMjUxMjE5MTMwMTQ0WhcNMjUxMjIwMTMwMTQ0WjAzMTEwLwYDVQQD Eyg3MDE3ZDJhNDE4YmUzZmEwZTQ1ODQzNzY4OWRiOTdiYzIzNjcyYmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGQal/6wEOZu4fs6w0Fn8mkV5uJf 6TnqTrCKgUDorJ0aoFTyDWiqy8tZXv80WYEaOg71oWhjzxZoUWp4lLpvK0ZYhze6 WT4zAWBPkjjx4Hi6hS0NvhAmTQjXTrpGOok2j7lT6vyARvG6jOC39g6GoMJOnece 8VpOWKK6h8knFz6l7CAe396cfUwFk9W5gFn3YQ2/7DMFKkiT8HJw7SGSjQTJHPZk dImDFy7egPF+iGrB0QbpWP6nCJjnvtttqeleEwYhH5AstQtIEHqi2BgAAoHW6niP mGyBblJYK9VQsVVjLo/Wy/h+wXeNLWvNTIi2P7qLN3W/8NQaOdRPdq7OrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAX0qQYvj+g5FhDdonbl7wjZyv2MB8GA1UdIwQY MBaAFBu0V0SlQShe6g5OBOXedmqcgjtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzdSWFJLVkJLRjdxRGs0RTVkNTJhcHlDTzFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jNjNmOWUtOWU3Yi00NmRjLWE0MDIt ODc5OTc5ZDI5ZTFlLzEvRzdSWFJLVkJLRjdxRGs0RTVkNTJhcHlDTzFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jNjNmOWUtOWU3Yi00NmRjLWE0MDItODc5OTc5ZDI5ZTFl LzEvRzdSWFJLVkJLRjdxRGs0RTVkNTJhcHlDTzFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8hEZgZr oXt3ErgKaq+6UgQEJGJiKlOr+VB4X3cNw8uqBu+tgsYZFSPoJfRJEV+v3HI3ybmp uRDqMQQD0Z32gI/RUHFB/7RC+0OgrQQdSMuhj6jcKNjDbiUQ44+2U9ZJobYo4XJa XXZG+ATkpPkYmH/jxqbcil4xnOaOWz4MNwZVQteMLhyYsIIhka6D2TTHdmpYdM6e xgH49nFFHJttiAEkmN8Ody/xi7jyzmfs2LN1SqPb7EDfXCU7sazhqEZMLQkDQbyM zfToW4HQvpPqBB1eFGpRnL/HKgl8dTK3qc86XbAbgm0mAgl9g/5SF1i8sV/xhqea Xo2wkdkjMEOq9g== -----END CERTIFICATE-----Generated at Fri Dec 19 20:47:54 2025 by rpki-client