This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json) Hash identifier: K82gEtNM6CwS84qsPtLOMXkTwKLBXllPmrB+iUOG6pk= Subject key identifier: DC:DF:F0:3A:14:01:44:26:A1:61:39:50:90:46:63:2B:CB:65:69:78 Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac Certificate serial: 019B34FB3B9F31B2CFC71EBC11FFDBDC2A33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 05:00:38 +0000 Manifest this update: Fri 19 Dec 2025 05:00:38 +0000 Manifest next update: Sat 20 Dec 2025 05:00:38 +0000 Files and hashes: 1: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: hFJFtjFUHLlg4DK+tyrfIDctjlLnOD/GG6U8YOY/+/M=) 2: Ih31sg8uCJb_KbpSa1L6Oxmc4Z8.roa (hash: 9mQ/h5Y96VB7w3Lx8Rm2UMKZ49LCZfxek1bOiFzpcfE=) 3: Y2jaKnMLOg7L7yt3a5FoJKVZD9M.roa (hash: E77+sc63md8h3e/NARC1FrCtInem3ClY6WQ72Z8aT70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:3b:9f:31:b2:cf:c7:1e:bc:11:ff:db:dc:2a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac Validity Not Before: Dec 19 05:00:38 2025 GMT Not After : Dec 20 05:00:38 2025 GMT Subject: CN=dcdff03a14014426a16139509046632bcb656978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1e:fe:44:d9:65:da:71:80:94:7b:04:16:6e: a1:ec:b0:66:33:fd:1f:99:0c:cd:67:4d:44:03:d9: 20:32:1c:a1:b7:ba:77:c8:58:cc:60:1f:f6:22:34: 30:fa:5e:28:90:9e:70:ce:f0:1a:55:f4:51:ce:1c: 38:49:16:87:2f:c9:e3:de:a7:09:37:4d:90:be:a4: 06:c4:67:4b:2f:47:ff:21:f1:23:55:c0:4e:7b:a3: 97:56:17:d5:be:3e:a4:58:46:4e:d3:b5:3f:35:86: cb:0e:c9:e9:96:bd:fa:81:91:6c:2d:97:94:69:1d: 37:f8:db:b4:c3:d7:49:8e:48:c5:cf:e6:17:3d:03: 8d:c7:13:03:82:e9:c0:5d:ea:71:ec:21:03:b8:61: 16:74:ff:4a:39:f8:de:1b:fd:72:f0:87:55:85:d2: 7c:48:67:e8:27:32:9e:a9:6e:78:4e:66:65:82:fa: 38:36:2e:c1:f4:f3:e5:34:7a:2f:68:46:e1:81:0c: 53:e6:29:4a:6e:ca:c9:cb:12:c2:b7:53:4e:7c:8e: d2:92:a9:40:37:e7:bd:ab:fb:45:e8:c0:ff:8e:a2: 6b:38:b7:80:25:be:af:a0:4b:2a:ad:8b:de:88:e3: aa:b9:1e:5a:1a:d0:f7:7a:1f:26:5b:9a:53:b8:ea: c1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DF:F0:3A:14:01:44:26:A1:61:39:50:90:46:63:2B:CB:65:69:78 X509v3 Authority Key Identifier: keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:41:3d:73:6f:c7:75:b7:68:13:a3:8a:ac:31:b2:29:23:aa: ec:b3:b7:6a:6d:c0:8c:55:dc:fb:af:aa:15:76:2e:01:97:c1: 8e:96:61:94:1b:13:3a:d8:09:1f:78:0d:cd:39:cd:05:6a:f5: fb:fe:7c:8b:03:01:e9:eb:51:6d:7f:8e:34:28:89:3e:0d:da: 74:79:5c:dd:aa:bb:1b:21:79:b4:3e:e1:fa:d7:a6:2e:09:ca: 9b:00:74:42:50:b7:f9:1e:71:a0:d0:5c:e5:d1:49:2c:fe:d7: e7:27:c8:89:fb:16:62:6c:a0:52:d3:30:da:e2:f9:3a:6c:78: be:60:61:a7:e5:f6:7a:09:94:96:9e:75:07:ef:db:db:8e:80: f9:8e:51:fe:b9:ea:6f:87:ae:00:a1:4d:52:0d:32:e2:9f:0c: 00:31:bf:64:ae:7e:37:6f:4b:74:30:23:5e:0d:c4:9a:4d:6f: 8c:23:c3:72:3d:fa:23:c8:78:ca:e4:ff:02:1d:71:12:d2:c7: 6a:23:e0:24:06:95:ee:33:96:ca:99:38:b2:21:33:c9:78:19: 52:3d:05:28:71:74:ef:d3:1e:cd:bc:12:14:6e:63:8f:2f:69: 77:88:97:fc:e1:99:e5:eb:17:e5:1b:0e:cd:ea:33:1c:ba:e2: d5:7c:53:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+zufMbLPxx68Ef/b3CozMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZmM3NzM4Y2QwZmQwZTA0NDdmOWQ3NDljZTZhMzkwNDdm ZGNiYWMwHhcNMjUxMjE5MDUwMDM4WhcNMjUxMjIwMDUwMDM4WjAzMTEwLwYDVQQD EyhkY2RmZjAzYTE0MDE0NDI2YTE2MTM5NTA5MDQ2NjMyYmNiNjU2OTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR7+RNll2nGAlHsEFm6h7LBmM/0f mQzNZ01EA9kgMhyht7p3yFjMYB/2IjQw+l4okJ5wzvAaVfRRzhw4SRaHL8nj3qcJ N02QvqQGxGdLL0f/IfEjVcBOe6OXVhfVvj6kWEZO07U/NYbLDsnplr36gZFsLZeU aR03+Nu0w9dJjkjFz+YXPQONxxMDgunAXepx7CEDuGEWdP9KOfjeG/1y8IdVhdJ8 SGfoJzKeqW54TmZlgvo4Ni7B9PPlNHovaEbhgQxT5ilKbsrJyxLCt1NOfI7SkqlA N+e9q/tF6MD/jqJrOLeAJb6voEsqrYveiOOquR5aGtD3eh8mW5pTuOrBZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzf8DoUAUQmoWE5UJBGYyvLZWl4MB8GA1UdIwQY MBaAFBv8dzjND9DgRH+ddJzmo5BH/cusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2Ut MTQ4YWJmZjkxOWFkLzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2UtMTQ4YWJmZjkxOWFk LzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApEE9c2/H dbdoE6OKrDGyKSOq7LO3am3AjFXc+6+qFXYuAZfBjpZhlBsTOtgJH3gNzTnNBWr1 +/58iwMB6etRbX+ONCiJPg3adHlc3aq7GyF5tD7h+temLgnKmwB0QlC3+R5xoNBc 5dFJLP7X5yfIifsWYmygUtMw2uL5Omx4vmBhp+X2egmUlp51B+/b246A+Y5R/rnq b4euAKFNUg0y4p8MADG/ZK5+N29LdDAjXg3Emk1vjCPDcj36I8h4yuT/Ah1xEtLH aiPgJAaV7jOWypk4siEzyXgZUj0FKHF079MezbwSFG5jjy9pd4iX/OGZ5esX5RsO zeozHLri1XxTEQ== -----END CERTIFICATE-----Generated at Fri Dec 19 08:10:36 2025 by rpki-client