This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json) Hash identifier: SmQzbGSOfklzF3Ukc/H6QWV6/0uFBWNzgBQp6IUDFN8= Subject key identifier: F2:0E:52:D0:9B:3C:EE:7E:77:CE:4B:A0:B6:6C:70:E7:14:92:57:F6 Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6 Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6 Certificate serial: 019B38A111E4B25FA097594C43D96AD2C0E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft Manifest number: 0F0A Signing time: Fri 19 Dec 2025 22:00:38 +0000 Manifest this update: Fri 19 Dec 2025 22:00:38 +0000 Manifest next update: Sat 20 Dec 2025 22:00:38 +0000 Files and hashes: 1: 1-6tgApGzi84jUfnnO4hR3VcZnhw.roa (hash: HVjUDSjbZacQo7V9+9zKGEkK9aQQLCss0l6qBdFGXKw=) 2: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: bNCl3hlrwOk9BY6SMpHma9qY6JnlgcrTD3lIjS0fNAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:11:e4:b2:5f:a0:97:59:4c:43:d9:6a:d2:c0:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6 Validity Not Before: Dec 19 22:00:38 2025 GMT Not After : Dec 20 22:00:38 2025 GMT Subject: CN=f20e52d09b3cee7e77ce4ba0b66c70e7149257f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d6:84:f1:f8:bd:a7:b3:e9:78:e1:56:bf:07: a7:b8:1e:bd:67:2c:93:eb:9a:b2:1a:9f:ce:e6:bf: 27:6d:5d:73:07:f7:52:a7:cb:dd:3b:18:37:a9:53: 66:8a:1e:62:f1:fc:c6:82:75:9e:37:f6:a3:7d:71: 53:f1:6b:14:88:62:93:f8:2d:cb:d0:9f:be:7b:4c: 25:d7:ed:51:76:f0:22:b7:04:01:8e:83:1b:3d:97: 00:e1:e7:95:e1:cd:77:9f:9f:7a:3d:b9:92:19:39: da:aa:8b:fd:59:79:40:16:72:66:ac:ce:ab:0f:86: 3c:08:6e:e5:77:d4:19:68:7e:e4:66:7b:f7:71:f5: 06:2e:f6:0d:58:16:78:c2:3c:ff:01:65:90:ae:6e: c8:df:78:7e:01:9a:0c:18:39:ed:8f:f0:22:84:02: 12:f4:1a:4e:65:0c:6a:4d:87:50:c3:c0:da:5a:eb: 37:10:8c:60:c5:be:1d:e4:ea:ad:f0:b0:6e:31:d1: 6a:0b:13:5b:a9:d2:a4:e9:61:4c:fa:f0:69:67:e6: 95:70:76:7e:d0:44:be:bd:a1:8f:1d:1f:5f:3a:a5: 31:33:2d:7b:59:f8:42:24:a3:0d:c5:95:48:8b:ee: 87:f7:97:77:f5:c2:ec:91:6a:0f:22:59:f6:a4:50: 4c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0E:52:D0:9B:3C:EE:7E:77:CE:4B:A0:B6:6C:70:E7:14:92:57:F6 X509v3 Authority Key Identifier: keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d1:ed:64:cf:89:96:bf:1c:a2:62:3b:ce:5f:ef:da:b8:d2: a4:c6:a2:3b:8b:33:cb:91:aa:cc:15:cd:ad:99:bf:04:77:1f: 16:a7:21:bd:d3:0f:d4:7b:04:6f:52:01:dd:6b:10:6a:ae:a9: b4:f5:a2:0b:8c:79:53:0b:22:83:83:1b:fa:b7:37:4c:6d:17: fd:b6:d9:2a:92:39:f4:46:08:a0:3a:8b:41:e8:b8:5c:61:92: 94:ea:02:1e:4b:f1:0b:13:4f:ff:84:b3:90:6a:b4:df:10:39: d0:30:3a:22:df:7b:6e:c4:67:ca:c1:e0:92:c1:4a:2a:f6:9c: fb:54:5e:0e:9e:52:8f:c2:bc:45:b7:5f:53:65:d2:36:44:1a: 78:c5:a6:a0:c4:13:32:34:18:9b:d4:6f:fb:5a:9d:a5:41:0f: 46:7f:dd:9d:1e:21:7d:89:1a:48:c8:71:a7:50:d6:46:49:7d: af:27:07:d6:6a:ed:61:5e:c5:26:3c:77:e3:93:5e:0e:4c:9d: 62:4e:71:40:72:a4:f8:ee:b5:d1:4c:b3:f3:75:7b:cc:d0:e3: a6:96:74:1e:33:39:21:5e:df:c4:03:e6:55:88:cf:14:22:2a: 15:bf:69:ba:20:a2:2b:74:d8:dc:fa:cf:eb:04:d7:7b:b6:7b: d3:06:6b:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oRHksl+gl1lMQ9lq0sDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNjIzZGJhNjJiODU3Y2E3M2Q4YTgwYTExOTkwZjcxZTA0 ZTdkYjYwHhcNMjUxMjE5MjIwMDM4WhcNMjUxMjIwMjIwMDM4WjAzMTEwLwYDVQQD EyhmMjBlNTJkMDliM2NlZTdlNzdjZTRiYTBiNjZjNzBlNzE0OTI1N2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotaE8fi9p7PpeOFWvwenuB69ZyyT 65qyGp/O5r8nbV1zB/dSp8vdOxg3qVNmih5i8fzGgnWeN/ajfXFT8WsUiGKT+C3L 0J++e0wl1+1RdvAitwQBjoMbPZcA4eeV4c13n596PbmSGTnaqov9WXlAFnJmrM6r D4Y8CG7ld9QZaH7kZnv3cfUGLvYNWBZ4wjz/AWWQrm7I33h+AZoMGDntj/AihAIS 9BpOZQxqTYdQw8DaWus3EIxgxb4d5Oqt8LBuMdFqCxNbqdKk6WFM+vBpZ+aVcHZ+ 0ES+vaGPHR9fOqUxMy17WfhCJKMNxZVIi+6H95d39cLskWoPIln2pFBMZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIOUtCbPO5+d85LoLZscOcUklf2MB8GA1UdIwQY MBaAFBtiPbpiuFfKc9ioChGZD3HgTn22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMt MWE1Yzc2MzU1ODhiLzEvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMtMWE1Yzc2MzU1ODhi LzEvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActHtZM+J lr8comI7zl/v2rjSpMaiO4szy5GqzBXNrZm/BHcfFqchvdMP1HsEb1IB3WsQaq6p tPWiC4x5Uwsig4Mb+rc3TG0X/bbZKpI59EYIoDqLQei4XGGSlOoCHkvxCxNP/4Sz kGq03xA50DA6It97bsRnysHgksFKKvac+1ReDp5Sj8K8RbdfU2XSNkQaeMWmoMQT MjQYm9Rv+1qdpUEPRn/dnR4hfYkaSMhxp1DWRkl9rycH1mrtYV7FJjx345NeDkyd Yk5xQHKk+O610Uyz83V7zNDjppZ0HjM5IV7fxAPmVYjPFCIqFb9puiCiK3TY3PrP 6wTXe7Z70wZrLA== -----END CERTIFICATE-----Generated at Sat Dec 20 01:48:57 2025 by rpki-client