This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json) Hash identifier: ysCXQN27/Fhg55SR9gCSRjP5XMxg8ChTD2mk3XGE6rs= Subject key identifier: 1D:09:5C:A9:02:33:76:73:0A:D9:E9:F1:95:A1:68:FA:73:D2:D1:82 Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b Certificate serial: 019B35D6FB05591F981962776A48DD2DDA5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft Manifest number: 0B27 Signing time: Fri 19 Dec 2025 09:00:39 +0000 Manifest this update: Fri 19 Dec 2025 09:00:39 +0000 Manifest next update: Sat 20 Dec 2025 09:00:39 +0000 Files and hashes: 1: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: JQNwWA2vAmzvsWThlpbubUJNzX41ek0gp9D2NGzjOXg=) 2: m6ICGY8tDK8Q212zDiNB6cUKuGY.roa (hash: EJb3usFy++FqYT3SUw3jZOIZDnNXZwJojnoQ4titUsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d6:fb:05:59:1f:98:19:62:77:6a:48:dd:2d:da:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b Validity Not Before: Dec 19 09:00:39 2025 GMT Not After : Dec 20 09:00:39 2025 GMT Subject: CN=1d095ca9023376730ad9e9f195a168fa73d2d182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d2:9e:27:d4:a3:1e:98:f1:a8:d1:75:d4:d9: b6:13:31:7d:ba:c0:ec:b2:1d:9a:99:0c:e7:31:79: f9:24:43:e8:1f:83:41:73:ea:63:ae:27:19:de:d4: ba:69:10:9d:02:ab:07:b7:d0:94:bc:cf:78:4b:8d: 2d:7e:ad:92:72:9d:bc:80:dd:69:5e:82:e3:20:49: 10:15:14:ce:ca:8a:a7:12:fb:f5:4e:5d:e9:e3:99: 07:34:12:37:d3:cb:7b:ab:33:b5:81:e4:35:b2:f5: 68:fe:34:92:e6:ed:ca:40:df:24:33:22:84:4e:4f: ee:9b:62:62:41:fc:7f:5a:20:5e:e0:de:6a:b8:8c: 6d:95:36:2f:b2:88:d1:1c:2b:95:7e:6c:ad:57:61: f2:64:8e:c3:2c:12:38:6e:dc:ff:ad:20:98:ca:d9: c3:5b:11:b6:6c:cd:77:bc:84:98:7e:81:5a:04:31: d4:de:7e:8d:9d:47:44:b6:a4:a3:94:d0:27:9c:a8: e6:7f:86:ea:dd:e4:b8:62:02:2b:ad:05:18:c3:6d: 22:3b:34:36:e8:0e:a6:83:43:f2:ef:25:67:04:e2: 26:74:02:c8:de:da:62:f8:68:19:91:10:79:a6:e8: 27:7e:3d:39:bc:09:1f:49:99:f0:f6:a4:be:36:31: 9a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:09:5C:A9:02:33:76:73:0A:D9:E9:F1:95:A1:68:FA:73:D2:D1:82 X509v3 Authority Key Identifier: keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a4:4d:02:d0:1e:3c:01:4f:db:5b:b4:e1:09:19:61:30:00: fc:b4:bf:1c:45:29:66:7c:27:6d:56:2b:0e:3f:70:b1:f3:6d: 64:bb:aa:08:1c:1c:34:ba:a3:3f:e2:19:68:bd:a0:31:59:24: 8b:86:fb:ad:ac:bf:ca:79:08:39:27:14:39:b1:7f:d7:b8:e6: 5e:eb:d8:d2:f9:ab:ea:fb:29:93:88:59:ea:a0:56:d6:e3:fa: 7c:6b:3a:58:70:e2:40:7e:5b:d1:44:ec:85:76:85:9f:ac:4c: b1:bf:e4:42:b2:3e:23:39:59:15:98:4f:65:28:60:5b:43:54: 4a:d2:f7:0f:ad:72:f8:78:e9:08:ad:44:73:c9:b4:c7:81:04: 6a:0c:ae:54:83:3b:0d:e0:52:49:29:ba:46:f0:4a:31:83:ae: 57:ac:6d:6b:55:16:71:b1:f2:e2:ac:cc:43:8a:bb:72:f8:46: 3c:7e:0e:36:3a:6c:39:d4:19:94:f2:21:13:15:83:85:38:c1: b2:8e:8c:8c:54:ce:99:0f:47:f4:5b:43:e6:f8:8d:e0:cb:55: cf:92:fb:54:a7:7e:52:a2:97:cb:34:f0:9d:71:80:a2:99:e1: 98:6c:c2:94:59:89:2d:49:00:f2:1c:6e:70:36:69:3b:db:29: be:cc:be:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11vsFWR+YGWJ3akjdLdpdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZjI2ODE3NWM1YTA5YTdhZmQwZDg3ODUxODI0ZTFkYjcz ZjdlN2IwHhcNMjUxMjE5MDkwMDM5WhcNMjUxMjIwMDkwMDM5WjAzMTEwLwYDVQQD EygxZDA5NWNhOTAyMzM3NjczMGFkOWU5ZjE5NWExNjhmYTczZDJkMTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNKeJ9SjHpjxqNF11Nm2EzF9usDs sh2amQznMXn5JEPoH4NBc+pjricZ3tS6aRCdAqsHt9CUvM94S40tfq2Scp28gN1p XoLjIEkQFRTOyoqnEvv1Tl3p45kHNBI308t7qzO1geQ1svVo/jSS5u3KQN8kMyKE Tk/um2JiQfx/WiBe4N5quIxtlTYvsojRHCuVfmytV2HyZI7DLBI4btz/rSCYytnD WxG2bM13vISYfoFaBDHU3n6NnUdEtqSjlNAnnKjmf4bq3eS4YgIrrQUYw20iOzQ2 6A6mg0Py7yVnBOImdALI3tpi+GgZkRB5pugnfj05vAkfSZnw9qS+NjGaOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0JXKkCM3ZzCtnp8ZWhaPpz0tGCMB8GA1UdIwQY MBaAFBvyaBdcWgmnr9DYeFGCTh23P357MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NjY1MGEtNTk4YS00Mzg5LTk0MWYt NTM0YjhjZDY1MmU5LzEvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni82NjY1MGEtNTk4YS00Mzg5LTk0MWYtNTM0YjhjZDY1MmU5 LzEvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6RNAtAe PAFP21u04QkZYTAA/LS/HEUpZnwnbVYrDj9wsfNtZLuqCBwcNLqjP+IZaL2gMVkk i4b7ray/ynkIOScUObF/17jmXuvY0vmr6vspk4hZ6qBW1uP6fGs6WHDiQH5b0UTs hXaFn6xMsb/kQrI+IzlZFZhPZShgW0NUStL3D61y+HjpCK1Ec8m0x4EEagyuVIM7 DeBSSSm6RvBKMYOuV6xta1UWcbHy4qzMQ4q7cvhGPH4ONjpsOdQZlPIhExWDhTjB so6MjFTOmQ9H9FtD5viN4MtVz5L7VKd+UqKXyzTwnXGAopnhmGzClFmJLUkA8hxu cDZpO9spvsy+JQ== -----END CERTIFICATE-----Generated at Fri Dec 19 16:39:28 2025 by rpki-client