This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft File: G57Ppx7--bsb_nsuQCFc2lsjHl0.mft (raw, json) Hash identifier: 4wTDPrBJqAsjuOF3ksSDtODsDA1WO2yL6Lxp0njedkI= Subject key identifier: B0:42:FE:B5:A4:08:64:3D:46:AD:FA:79:97:47:05:F0:7A:37:1F:A8 Authority key identifier: 1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D Certificate issuer: /CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d Certificate serial: 019B8195BAFE5C9D4A708E84FD449A24A105 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft Manifest number: 17AD Signing time: Sat 03 Jan 2026 02:00:32 +0000 Manifest this update: Sat 03 Jan 2026 02:00:32 +0000 Manifest next update: Sun 04 Jan 2026 02:00:32 +0000 Files and hashes: 1: G57Ppx7--bsb_nsuQCFc2lsjHl0.crl (hash: H/l23m66arT/z+oNxgNu1f/l1fU2JiYAh+qNkaChETE=) 2: cTo7aISO84nOHKaRVBLYx28LK0A.roa (hash: LEsXVf9msfVX9j57PmDwNgO8xzpz3g9TuIibghpJUtc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 23:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:95:ba:fe:5c:9d:4a:70:8e:84:fd:44:9a:24:a1:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d Validity Not Before: Jan 3 02:00:32 2026 GMT Not After : Jan 4 02:00:32 2026 GMT Subject: CN=b042feb5a408643d46adfa79974705f07a371fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f0:38:8d:1a:01:dd:a5:bd:a9:cb:48:45:7f: 3a:b1:6c:84:23:76:2a:1e:65:6d:7a:50:4f:20:57: f6:85:fd:97:fa:95:e8:62:d7:dd:32:ca:e4:3a:05: ca:e1:28:0f:e2:62:a5:e3:d4:12:5c:ea:7c:f5:4d: 7c:47:18:8e:f9:61:b0:fa:86:6a:f6:98:56:57:12: 86:9c:ff:b5:13:46:eb:51:5e:b1:27:f8:84:19:13: 2b:80:9c:e9:36:2a:31:5a:9d:7f:25:4e:cc:7d:00: 66:2d:7b:d1:f1:d7:75:95:04:f2:19:7b:37:7f:ac: eb:8b:44:d9:33:ae:66:47:bc:31:8a:0b:ff:d7:3d: c1:cf:a5:53:78:b4:ac:d8:71:27:d4:b5:08:2a:cb: 13:f5:8e:93:79:49:6f:c2:ea:1e:88:6d:af:07:14: 67:d4:3b:79:0d:a1:a3:8e:fb:79:66:4a:6f:2e:56: 52:f1:9f:ab:e3:c2:0c:cb:44:0e:b4:b9:7b:22:c6: da:b9:ea:c8:a5:0d:7d:43:a8:7f:9b:3a:1d:41:aa: e9:66:f3:c2:c8:c1:3c:d7:4c:1d:94:bf:21:48:a2: fc:f3:be:6a:9b:62:f5:98:e0:bd:51:ac:ce:f1:5c: 79:07:87:41:04:2b:18:9b:da:ee:ad:1c:8a:5e:69: 7c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:42:FE:B5:A4:08:64:3D:46:AD:FA:79:97:47:05:F0:7A:37:1F:A8 X509v3 Authority Key Identifier: keyid:1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:cb:8f:42:43:d8:64:1b:68:ad:27:33:36:2c:84:d1:96:32: f1:7a:f7:72:f1:28:77:ab:17:b1:58:a7:fc:e3:e4:6b:d8:6f: 4c:25:27:d9:5c:73:3e:fd:ba:67:81:74:1b:89:77:30:4c:39: 52:7d:c0:f9:9d:e0:58:e7:7f:f0:52:6c:4c:ed:94:e6:5e:91: 0e:50:14:d5:3e:45:c3:6c:72:ae:b1:be:16:35:3c:29:74:95: 0b:28:8d:70:16:e2:9b:eb:7c:ba:9f:7e:ec:f9:35:8e:a1:88: 17:69:48:d4:e0:ae:3c:b5:90:e9:f5:e6:29:d7:c8:b0:42:3f: 1b:42:24:dd:d3:d7:39:ca:f7:0e:cd:e2:c7:16:81:32:fe:01: 1c:5b:9c:2a:b6:d2:7e:c1:1b:7b:0e:80:bd:51:47:4b:8e:2f: 97:dd:3c:f7:2f:84:b9:ea:cf:fb:7f:a6:72:6e:2e:da:83:de: e8:77:ad:00:2e:a6:48:3a:99:e0:f0:19:b4:2b:00:22:2a:10: de:95:2b:45:74:bb:de:57:fe:2a:a0:74:79:3b:92:c0:0e:bf: 13:c0:81:bf:d4:3a:49:0e:1b:80:59:1e:cd:5c:32:e5:e8:17: 6e:23:51:d8:ef:f1:a3:93:b7:3d:7c:28:71:ab:31:ff:1d:c0: 26:be:8f:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuBlbr+XJ1KcI6E/USaJKEFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOWVjZmE3MWVmZWY5YmIxYmZlN2IyZTQwMjE1Y2RhNWIy MzFlNWQwHhcNMjYwMTAzMDIwMDMyWhcNMjYwMTA0MDIwMDMyWjAzMTEwLwYDVQQD EyhiMDQyZmViNWE0MDg2NDNkNDZhZGZhNzk5NzQ3MDVmMDdhMzcxZmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvA4jRoB3aW9qctIRX86sWyEI3Yq HmVtelBPIFf2hf2X+pXoYtfdMsrkOgXK4SgP4mKl49QSXOp89U18RxiO+WGw+oZq 9phWVxKGnP+1E0brUV6xJ/iEGRMrgJzpNioxWp1/JU7MfQBmLXvR8dd1lQTyGXs3 f6zri0TZM65mR7wxigv/1z3Bz6VTeLSs2HEn1LUIKssT9Y6TeUlvwuoeiG2vBxRn 1Dt5DaGjjvt5ZkpvLlZS8Z+r48IMy0QOtLl7IsbauerIpQ19Q6h/mzodQarpZvPC yME810wdlL8hSKL8875qm2L1mOC9UazO8Vx5B4dBBCsYm9rurRyKXml8KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBC/rWkCGQ9Rq36eZdHBfB6Nx+oMB8GA1UdIwQY MBaAFBuez6ce/vm7G/57LkAhXNpbIx5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzU3UHB4Ny0tYnNiX25zdVFDRmMybHNqSGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lZDE2MDktMTA4Ni00N2I0LWE0OWQt ZjEwZDI2ZTNjM2RmLzEvRzU3UHB4Ny0tYnNiX25zdVFDRmMybHNqSGwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9lZDE2MDktMTA4Ni00N2I0LWE0OWQtZjEwZDI2ZTNjM2Rm LzEvRzU3UHB4Ny0tYnNiX25zdVFDRmMybHNqSGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecuPQkPY ZBtorSczNiyE0ZYy8Xr3cvEod6sXsVin/OPka9hvTCUn2VxzPv26Z4F0G4l3MEw5 Un3A+Z3gWOd/8FJsTO2U5l6RDlAU1T5Fw2xyrrG+FjU8KXSVCyiNcBbim+t8up9+ 7Pk1jqGIF2lI1OCuPLWQ6fXmKdfIsEI/G0Ik3dPXOcr3Ds3ixxaBMv4BHFucKrbS fsEbew6AvVFHS44vl9089y+EuerP+3+mcm4u2oPe6HetAC6mSDqZ4PAZtCsAIioQ 3pUrRXS73lf+KqB0eTuSwA6/E8CBv9Q6SQ4bgFkezVwy5egXbiNR2O/xo5O3PXwo casx/x3AJr6PaQ== -----END CERTIFICATE-----Generated at Sat Jan 3 08:21:14 2026 by rpki-client