This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft File: G8qoP8mkEL2z4P0thIcgE0dxvs8.mft (raw, json) Hash identifier: G9DeHGQKuWaF3IebC4lUIW8IFBYqooetzjnkgB18oC8= Subject key identifier: 0A:5C:C0:2B:8B:04:A6:F3:DF:BA:6D:FF:00:78:7D:5E:94:EF:10:93 Authority key identifier: 1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF Certificate issuer: /CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf Certificate serial: 019B47025EB0737D2BD3D66256E612C156C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft Manifest number: 171B Signing time: Mon 22 Dec 2025 17:01:35 +0000 Manifest this update: Mon 22 Dec 2025 17:01:35 +0000 Manifest next update: Tue 23 Dec 2025 17:01:35 +0000 Files and hashes: 1: G8qoP8mkEL2z4P0thIcgE0dxvs8.crl (hash: Z6YZ3I0vLbfJZ7zML5VfvRmKUkQrG1RgwDPP+5RI4jA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.crl rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:5e:b0:73:7d:2b:d3:d6:62:56:e6:12:c1:56:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf Validity Not Before: Dec 22 17:01:35 2025 GMT Not After : Dec 23 17:01:35 2025 GMT Subject: CN=0a5cc02b8b04a6f3dfba6dff00787d5e94ef1093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:78:3b:1f:4d:6e:ba:21:0d:f9:e7:0d:6f:9a: 8c:42:42:d9:8d:a8:0d:22:93:a1:a7:30:6b:0a:5c: ad:b2:32:b1:52:a0:3b:a8:37:91:46:25:2d:71:68: 2a:b8:38:c9:47:c9:03:a4:2e:1a:af:c6:6c:da:75: 21:31:ab:4f:69:44:e8:50:b1:d4:30:3c:dd:aa:92: 69:77:f2:c4:80:b3:d1:ab:7f:64:44:29:92:8f:17: 60:24:13:bc:77:38:dc:b9:c3:3c:70:29:b0:81:41: 03:dc:8f:e1:31:98:65:2a:a5:d0:8b:0f:30:9b:07: 2c:14:95:16:b8:3b:f8:35:55:64:dd:dd:5a:7b:89: 1e:89:f1:8c:b0:04:0a:73:b3:07:33:73:b4:c3:5d: 91:29:84:7a:9c:0a:32:5e:a4:bc:af:aa:0a:03:1e: 48:12:e2:d3:01:53:c6:10:7e:82:d4:ef:8b:37:b4: 7c:9f:95:93:bd:f8:cb:aa:54:68:89:e0:fc:b4:4b: d4:fb:33:00:c6:d1:71:98:bd:59:e8:7f:ae:df:c4: b9:95:0b:5a:89:65:35:a5:40:2d:b8:07:16:01:02: c9:86:e2:73:e8:9c:1b:93:6a:1e:e3:20:56:02:77: 54:b3:aa:c5:76:97:32:7a:5b:89:04:c6:a9:91:09: 41:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5C:C0:2B:8B:04:A6:F3:DF:BA:6D:FF:00:78:7D:5E:94:EF:10:93 X509v3 Authority Key Identifier: keyid:1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:90:b1:0a:da:45:02:1e:a6:d8:09:93:db:c5:00:ef:b1:17: 49:85:15:18:99:ec:ac:9e:76:5e:05:94:0e:d4:26:31:ca:fd: 4b:a2:1a:87:f3:f0:7b:88:81:4e:dc:27:f1:7d:1d:9d:64:06: 35:22:90:dd:f8:b5:38:d6:39:b3:a8:0f:6b:46:ea:55:d7:72: 21:63:f6:9a:9b:7b:53:07:f2:69:12:10:bc:54:54:08:18:ac: 5a:e9:36:c3:db:7f:ab:50:8a:28:c7:ca:a8:5d:06:aa:ee:a3: 60:ad:13:32:c3:d6:7b:28:36:a2:00:71:2d:92:60:09:8c:14: b7:6c:48:7a:6d:d9:50:83:5b:d4:d0:ab:4a:2e:45:be:24:29: 05:b4:20:be:6b:5e:21:61:d2:c4:77:c7:7e:46:bd:fa:3a:b8: 45:af:e5:47:7d:17:0d:90:a4:5d:c6:19:e7:55:7a:34:20:be: 4f:f4:48:5d:87:bf:9b:cb:da:dc:79:42:74:e3:bf:ad:ed:df: 83:33:f0:f4:fc:ea:b0:83:13:e5:23:8d:82:ad:5e:6a:18:51: 87:ae:89:67:57:75:4a:8e:e0:31:c3:62:be:a7:3b:84:5f:90: 8b:68:24:69:d4:80:4c:42:e9:2c:81:c7:df:05:d9:4d:75:1d: 31:8c:7e:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAl6wc30r09ZiVuYSwVbCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiY2FhODNmYzlhNDEwYmRiM2UwZmQyZDg0ODcyMDEzNDc3 MWJlY2YwHhcNMjUxMjIyMTcwMTM1WhcNMjUxMjIzMTcwMTM1WjAzMTEwLwYDVQQD EygwYTVjYzAyYjhiMDRhNmYzZGZiYTZkZmYwMDc4N2Q1ZTk0ZWYxMDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhng7H01uuiEN+ecNb5qMQkLZjagN IpOhpzBrClytsjKxUqA7qDeRRiUtcWgquDjJR8kDpC4ar8Zs2nUhMatPaUToULHU MDzdqpJpd/LEgLPRq39kRCmSjxdgJBO8dzjcucM8cCmwgUED3I/hMZhlKqXQiw8w mwcsFJUWuDv4NVVk3d1ae4keifGMsAQKc7MHM3O0w12RKYR6nAoyXqS8r6oKAx5I EuLTAVPGEH6C1O+LN7R8n5WTvfjLqlRoieD8tEvU+zMAxtFxmL1Z6H+u38S5lQta iWU1pUAtuAcWAQLJhuJz6Jwbk2oe4yBWAndUs6rFdpcyeluJBMapkQlB6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApcwCuLBKbz37pt/wB4fV6U7xCTMB8GA1UdIwQY MBaAFBvKqD/JpBC9s+D9LYSHIBNHcb7PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzhxb1A4bWtFTDJ6NFAwdGhJY2dFMGR4dnM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lNTZmYmMtMThjZi00NzY1LThhNGMt Y2Q3MDEzOGU2MzgzLzEvRzhxb1A4bWtFTDJ6NFAwdGhJY2dFMGR4dnM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lNTZmYmMtMThjZi00NzY1LThhNGMtY2Q3MDEzOGU2Mzgz LzEvRzhxb1A4bWtFTDJ6NFAwdGhJY2dFMGR4dnM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5CxCtpF Ah6m2AmT28UA77EXSYUVGJnsrJ52XgWUDtQmMcr9S6Iah/Pwe4iBTtwn8X0dnWQG NSKQ3fi1ONY5s6gPa0bqVddyIWP2mpt7UwfyaRIQvFRUCBisWuk2w9t/q1CKKMfK qF0Gqu6jYK0TMsPWeyg2ogBxLZJgCYwUt2xIem3ZUINb1NCrSi5FviQpBbQgvmte IWHSxHfHfka9+jq4Ra/lR30XDZCkXcYZ51V6NCC+T/RIXYe/m8va3HlCdOO/re3f gzPw9PzqsIMT5SONgq1eahhRh66JZ1d1So7gMcNivqc7hF+Qi2gkadSATELpLIHH 3wXZTXUdMYx+fQ== -----END CERTIFICATE-----Generated at Mon Dec 22 22:22:03 2025 by rpki-client