This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft File: G9JpBH0C_otaKsnrjV_sB7GH7aE.mft (raw, json) Hash identifier: ilrD+DDO25WGUibx7OQ5jj5yy+FBwK3Zq99pEguH80s= Subject key identifier: EA:92:9D:EE:96:55:B9:BA:E1:B8:31:70:63:E5:A9:54:83:F3:94:0F Authority key identifier: 1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1 Certificate issuer: /CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1 Certificate serial: 019B5A5186B0875FADF25CA3B4419260E161 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft Manifest number: 04C7 Signing time: Fri 26 Dec 2025 11:00:50 +0000 Manifest this update: Fri 26 Dec 2025 11:00:50 +0000 Manifest next update: Sat 27 Dec 2025 11:00:50 +0000 Files and hashes: 1: G9JpBH0C_otaKsnrjV_sB7GH7aE.crl (hash: hj58dQFSTMBU6q35oXzUusF/aTyqnnf9+DGgUoIezQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:86:b0:87:5f:ad:f2:5c:a3:b4:41:92:60:e1:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1 Validity Not Before: Dec 26 11:00:50 2025 GMT Not After : Dec 27 11:00:50 2025 GMT Subject: CN=ea929dee9655b9bae1b8317063e5a95483f3940f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:71:44:36:6c:6c:13:df:10:34:c2:e4:e4:29: c1:54:6d:ff:17:0e:51:e9:a2:f0:b1:c5:51:58:dd: 58:6c:35:18:77:86:25:a8:3a:be:92:ad:fd:73:39: 50:5d:6d:45:99:64:ff:3e:14:42:39:50:42:b3:f2: d0:ce:2e:81:ec:d9:08:c2:12:91:f8:80:39:3a:f4: d4:30:b3:d5:6c:47:7b:54:1d:9b:14:2a:50:37:f2: a4:ca:2d:b1:36:aa:bb:40:1a:ca:01:f8:68:71:46: 1c:ae:e7:c4:a6:ab:89:52:a0:fa:df:db:b4:e3:07: d8:cf:8a:f6:b4:9d:5d:43:06:bc:5c:67:da:b1:8a: 6c:3f:a8:d7:f7:88:4b:22:14:40:a5:fc:a1:f7:b2: 57:c7:64:a8:1b:e3:c2:a7:d9:f5:a6:0a:ab:1f:0a: 99:8b:f1:41:5e:9c:1b:c5:72:6b:76:9c:29:e4:f8: 6e:60:0a:47:17:08:a5:e4:80:a3:44:0d:93:88:18: 3a:0e:47:88:9c:3e:dc:74:bf:19:60:47:85:7f:7d: 01:27:3f:32:45:85:d6:ca:7b:d0:d4:95:bc:86:4c: eb:f1:ed:18:6e:47:fa:d0:34:9f:85:b9:c6:f2:c2: cb:17:0f:ba:c5:2b:8c:6b:d2:35:70:f0:22:59:04: a5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:92:9D:EE:96:55:B9:BA:E1:B8:31:70:63:E5:A9:54:83:F3:94:0F X509v3 Authority Key Identifier: keyid:1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a8:d3:2c:26:19:48:ad:38:d7:07:5e:03:88:f5:df:fd:b8: d0:43:85:8f:8a:6d:8f:20:e2:eb:ff:2c:21:0f:0a:c0:e1:32: dc:40:bd:6d:12:35:a0:e4:32:78:ca:b2:f2:a9:3b:a0:42:2a: 35:ce:f2:d5:e2:78:1e:c6:87:d6:68:58:b7:fe:50:c1:ff:fa: a4:81:1d:c7:e3:66:8d:f3:a5:37:90:94:bf:73:e9:ea:7e:91: ca:52:62:4a:1f:d7:14:5d:c3:7e:8d:06:f4:c7:26:11:69:98: f1:4f:d0:77:f4:7c:5b:83:12:e6:1a:36:75:08:b9:7c:fb:98: 0b:2a:b8:7c:14:ef:eb:89:48:23:70:09:4a:be:6d:2f:83:42: 08:13:5b:80:cd:06:c6:6f:bf:fd:49:e7:35:f0:35:57:bb:c4: 0f:ce:16:b3:c4:c4:29:c8:63:bf:4b:8c:7a:60:75:95:10:3e: 97:86:a1:49:1f:b4:85:f4:7a:2b:87:b6:2a:f5:7a:0a:b1:90: 35:f2:17:f0:db:1e:75:4b:63:74:ee:4b:d4:eb:89:92:be:81: 35:ae:a0:fe:42:38:73:8f:c5:f0:4d:c6:ab:c1:cb:2d:bb:39: c5:0e:f3:54:db:b9:cb:22:3c:66:c7:1f:33:01:2d:67:fb:9d: 36:d4:ad:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUYawh1+t8lyjtEGSYOFhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZDI2OTA0N2QwMmZlOGI1YTJhYzllYjhkNWZlYzA3YjE4 N2VkYTEwHhcNMjUxMjI2MTEwMDUwWhcNMjUxMjI3MTEwMDUwWjAzMTEwLwYDVQQD EyhlYTkyOWRlZTk2NTViOWJhZTFiODMxNzA2M2U1YTk1NDgzZjM5NDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXFENmxsE98QNMLk5CnBVG3/Fw5R 6aLwscVRWN1YbDUYd4YlqDq+kq39czlQXW1FmWT/PhRCOVBCs/LQzi6B7NkIwhKR +IA5OvTUMLPVbEd7VB2bFCpQN/Kkyi2xNqq7QBrKAfhocUYcrufEpquJUqD639u0 4wfYz4r2tJ1dQwa8XGfasYpsP6jX94hLIhRApfyh97JXx2SoG+PCp9n1pgqrHwqZ i/FBXpwbxXJrdpwp5PhuYApHFwil5ICjRA2TiBg6DkeInD7cdL8ZYEeFf30BJz8y RYXWynvQ1JW8hkzr8e0Ybkf60DSfhbnG8sLLFw+6xSuMa9I1cPAiWQSl9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqSne6WVbm64bgxcGPlqVSD85QPMB8GA1UdIwQY MBaAFBvSaQR9Av6LWirJ641f7Aexh+2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzlKcEJIMENfb3RhS3NucmpWX3NCN0dIN2FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84YzZlOTYtZDc3OC00OWRkLTllNWUt M2NmMmI4MDAyMDMxLzEvRzlKcEJIMENfb3RhS3NucmpWX3NCN0dIN2FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi84YzZlOTYtZDc3OC00OWRkLTllNWUtM2NmMmI4MDAyMDMx LzEvRzlKcEJIMENfb3RhS3NucmpWX3NCN0dIN2FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnajTLCYZ SK041wdeA4j13/240EOFj4ptjyDi6/8sIQ8KwOEy3EC9bRI1oOQyeMqy8qk7oEIq Nc7y1eJ4HsaH1mhYt/5Qwf/6pIEdx+NmjfOlN5CUv3Pp6n6RylJiSh/XFF3Dfo0G 9McmEWmY8U/Qd/R8W4MS5ho2dQi5fPuYCyq4fBTv64lII3AJSr5tL4NCCBNbgM0G xm+//UnnNfA1V7vED84Ws8TEKchjv0uMemB1lRA+l4ahSR+0hfR6K4e2KvV6CrGQ NfIX8NsedUtjdO5L1OuJkr6BNa6g/kI4c4/F8E3Gq8HLLbs5xQ7zVNu5yyI8Zscf MwEtZ/udNtStDg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:57:04 2025 by rpki-client