This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft File: G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft (raw, json) Hash identifier: IoNVbd4RISBwfsQ1ZA7QwD6gPZTEmnWW+A7smi3YKgQ= Subject key identifier: 76:83:AC:57:C5:DB:D1:21:4F:7F:6F:64:D1:C7:8D:A0:61:AE:3C:F4 Authority key identifier: 1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29 Certificate issuer: /CN=1bb29b3f158fa80710c12a58b69fb926098d5129 Certificate serial: 019B3D5A0E9714343C8A1335B85881C7A56C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft Manifest number: 0E1D Signing time: Sat 20 Dec 2025 20:01:10 +0000 Manifest this update: Sat 20 Dec 2025 20:01:10 +0000 Manifest next update: Sun 21 Dec 2025 20:01:10 +0000 Files and hashes: 1: G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl (hash: /Q90S+V6xFB2n8B9L21ed3ZoE7Xxk2NyEoxviwgQ4a4=) 2: j_n9Kg39TCshbmu8W1dk2NVjcFI.roa (hash: 56S9svTLKP+1FymtE0skXNThCYHX7pM3o2tRL4nBuW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:0e:97:14:34:3c:8a:13:35:b8:58:81:c7:a5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bb29b3f158fa80710c12a58b69fb926098d5129 Validity Not Before: Dec 20 20:01:10 2025 GMT Not After : Dec 21 20:01:10 2025 GMT Subject: CN=7683ac57c5dbd1214f7f6f64d1c78da061ae3cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:42:f3:44:51:a9:c1:b5:15:dc:32:b5:85:ae: 0b:74:62:d1:ff:cd:93:2d:d9:24:ea:ad:c3:36:c4: 5e:96:54:ae:9d:0d:ac:f6:95:21:d6:f1:7f:62:98: 62:90:0c:a2:8e:c3:ee:89:4b:3f:58:8a:36:bd:7c: 4e:2e:b4:85:41:cc:b0:fd:1c:25:22:50:dc:16:8d: 29:a4:4a:d3:d6:49:b5:ee:de:d4:25:83:5f:27:ed: f4:01:f2:0f:d1:82:2a:70:f4:b9:3b:33:78:3f:27: e1:2a:82:e6:bd:97:c0:57:12:6a:45:1b:fa:83:4b: 1b:87:62:e7:11:3a:90:40:15:15:59:0b:88:43:9c: 4e:e0:fa:81:23:ec:97:1a:4d:c4:00:54:8e:b4:8e: 4d:07:ca:9c:d1:43:54:4b:3b:7b:03:29:52:11:68: 44:78:08:9e:29:bd:53:45:8a:3a:c0:86:ce:cb:c7: c3:3e:fb:00:5f:ab:4a:ee:43:66:f5:a5:0d:ba:a7: 7f:5d:78:c8:7d:07:e9:4d:57:47:bf:6f:c6:c7:87: 62:21:78:97:8a:62:9e:5f:c4:72:c0:6b:57:83:2d: 76:fa:28:63:af:26:97:b2:a3:47:4d:29:16:b3:de: fc:12:53:dd:24:9c:b1:7d:5f:b6:94:a3:e4:fd:5e: 0b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:83:AC:57:C5:DB:D1:21:4F:7F:6F:64:D1:C7:8D:A0:61:AE:3C:F4 X509v3 Authority Key Identifier: keyid:1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ed:b3:26:46:68:0b:64:f5:3b:55:ff:4a:32:5c:25:0e:6b: ac:0f:04:c2:e9:77:c3:98:12:8d:81:6d:fd:e7:47:cf:cc:e8: 75:1d:1b:cf:65:d2:d6:3c:36:b4:44:b6:b4:62:66:69:d6:fa: de:fc:8b:76:67:04:e2:c1:44:d7:e8:2e:f3:8a:51:28:fe:40: 7e:1a:5c:76:f2:f9:7a:91:11:4f:76:98:c1:d8:c7:7d:f1:63: b9:af:61:d1:f4:28:06:77:ae:56:cf:37:e7:1c:ce:62:2f:0a: c3:0b:0a:0d:b9:20:42:33:5c:bb:16:81:42:e2:b4:5e:58:91: b6:90:16:34:d0:df:a4:86:00:21:96:ac:38:85:c7:4e:25:a3: e5:46:f3:4a:5c:62:72:01:7e:57:ac:64:3c:d7:ae:36:0b:2e: 5b:06:bb:16:80:c9:8a:8c:c8:22:fb:fc:79:e4:b5:81:35:e8: 6b:c8:6e:20:9a:90:c9:05:2f:c2:b3:b2:35:e0:15:d5:dc:6c: ef:26:8e:fe:97:c4:60:44:66:0a:1f:54:07:c8:f6:ab:38:40: 8e:93:37:d6:77:e4:a8:0a:a9:5e:32:09:a8:b5:02:09:2e:1e: 69:41:a4:3a:0d:e7:13:98:d9:9d:73:b7:2c:50:3c:44:73:ba: f3:7e:e9:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wg6XFDQ8ihM1uFiBx6VsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYjI5YjNmMTU4ZmE4MDcxMGMxMmE1OGI2OWZiOTI2MDk4 ZDUxMjkwHhcNMjUxMjIwMjAwMTEwWhcNMjUxMjIxMjAwMTEwWjAzMTEwLwYDVQQD Eyg3NjgzYWM1N2M1ZGJkMTIxNGY3ZjZmNjRkMWM3OGRhMDYxYWUzY2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnULzRFGpwbUV3DK1ha4LdGLR/82T Ldkk6q3DNsRellSunQ2s9pUh1vF/YphikAyijsPuiUs/WIo2vXxOLrSFQcyw/Rwl IlDcFo0ppErT1km17t7UJYNfJ+30AfIP0YIqcPS5OzN4PyfhKoLmvZfAVxJqRRv6 g0sbh2LnETqQQBUVWQuIQ5xO4PqBI+yXGk3EAFSOtI5NB8qc0UNUSzt7AylSEWhE eAieKb1TRYo6wIbOy8fDPvsAX6tK7kNm9aUNuqd/XXjIfQfpTVdHv2/Gx4diIXiX imKeX8RywGtXgy12+ihjryaXsqNHTSkWs978ElPdJJyxfV+2lKPk/V4LPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaDrFfF29EhT39vZNHHjaBhrjz0MB8GA1UdIwQY MBaAFBuymz8Vj6gHEMEqWLafuSYJjVEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzdLYlB4V1BxQWNRd1NwWXRwLTVKZ21OVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi81NzNmMGItNTMyNS00MWQzLWI5ZmYt OGY3ZDU2YjdiNDE3LzEvRzdLYlB4V1BxQWNRd1NwWXRwLTVKZ21OVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi81NzNmMGItNTMyNS00MWQzLWI5ZmYtOGY3ZDU2YjdiNDE3 LzEvRzdLYlB4V1BxQWNRd1NwWXRwLTVKZ21OVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAae2zJkZo C2T1O1X/SjJcJQ5rrA8Ewul3w5gSjYFt/edHz8zodR0bz2XS1jw2tES2tGJmadb6 3vyLdmcE4sFE1+gu84pRKP5AfhpcdvL5epERT3aYwdjHffFjua9h0fQoBneuVs83 5xzOYi8KwwsKDbkgQjNcuxaBQuK0XliRtpAWNNDfpIYAIZasOIXHTiWj5UbzSlxi cgF+V6xkPNeuNgsuWwa7FoDJiozIIvv8eeS1gTXoa8huIJqQyQUvwrOyNeAV1dxs 7yaO/pfEYERmCh9UB8j2qzhAjpM31nfkqAqpXjIJqLUCCS4eaUGkOg3nE5jZnXO3 LFA8RHO6837pdg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:17:45 2025 by rpki-client