This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft File: RIGO8G79biLUcUBKtTikucgH7-A.mft (raw, json) Hash identifier: CF3Hku/S4UnOAL1o3V54bWJxJfSE4l4vgv4YTJUD/hQ= Subject key identifier: 06:F0:5C:0C:79:43:34:91:6D:96:51:E6:7A:34:95:BC:47:9D:08:E6 Authority key identifier: 44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0 Certificate issuer: /CN=44818ef06efd6e22d471404ab538a4b9c807efe0 Certificate serial: 019B37FC8ADE10FE61F24DC4BC9C9313B4CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 19:00:56 +0000 Manifest this update: Fri 19 Dec 2025 19:00:56 +0000 Manifest next update: Sat 20 Dec 2025 19:00:56 +0000 Files and hashes: 1: RIGO8G79biLUcUBKtTikucgH7-A.crl (hash: 9QS9LY0v0UbXWW15qUXkvLc5V9SKK1lyMJrLHB/sa3o=) 2: gVTOZDUERQqeJ1ADkfu8mZFQa3s.roa (hash: odk8IfZ2FDqkprFgoeInqeHkb7oDViev8pVCzwkhG+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:8a:de:10:fe:61:f2:4d:c4:bc:9c:93:13:b4:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44818ef06efd6e22d471404ab538a4b9c807efe0 Validity Not Before: Dec 19 19:00:56 2025 GMT Not After : Dec 20 19:00:56 2025 GMT Subject: CN=06f05c0c794334916d9651e67a3495bc479d08e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c7:99:1a:35:f7:01:3c:90:3c:cd:1e:90:24: 1f:a4:87:5f:64:be:ca:fd:ad:27:4b:84:c2:f3:24: 0d:c7:a1:db:4a:e0:0c:6e:2b:f0:35:49:df:dd:87: 4d:d5:7f:f2:35:5d:d8:52:13:12:08:91:13:b8:89: 30:42:e0:56:c6:5e:02:ba:a8:93:4a:fb:9d:97:0d: 00:06:ee:47:6f:af:55:da:86:ec:91:c6:52:dc:47: 2f:af:83:21:a9:d0:87:8e:c4:c4:b3:5d:9a:83:b6: 88:24:ec:d5:af:2e:99:eb:95:71:c9:71:b9:55:cf: 27:db:14:a8:a1:2b:6a:16:41:e3:4b:92:51:36:56: d3:d7:a0:06:46:d5:af:ab:f3:b7:9a:34:ec:dc:ed: 69:49:b9:44:be:c7:bb:ed:41:26:8b:ec:85:bd:b2: 5a:7f:2c:5f:f0:1c:e7:fb:cc:bd:f1:cf:f4:94:dc: 2c:2b:1a:c4:57:dd:06:c7:93:04:83:81:cb:9a:ff: 72:1a:48:f2:cd:da:e5:b2:bb:da:5d:45:07:8f:09: e1:d0:fb:bf:32:e8:8e:11:76:d7:5a:1d:31:ef:58: ef:71:e8:91:97:35:56:5b:fa:8e:e2:6e:f4:40:22: 44:ea:1e:bd:30:75:21:88:8b:72:c6:77:f7:c0:a6: 22:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F0:5C:0C:79:43:34:91:6D:96:51:E6:7A:34:95:BC:47:9D:08:E6 X509v3 Authority Key Identifier: keyid:44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:6f:b0:f8:5c:98:6a:aa:74:7a:b9:09:d8:5b:a4:be:e3:72: fe:c3:c5:23:73:49:79:66:92:f6:2e:a2:0a:18:af:f6:bd:13: 5b:24:a2:57:15:4b:30:e2:e2:35:72:e9:25:2d:85:82:48:9f: 22:74:14:98:f1:fc:ef:07:eb:65:f4:de:85:a4:ca:c5:4a:02: df:0c:fb:51:3e:39:4f:8a:05:5e:ac:5c:6c:80:b2:51:71:72: d5:e0:df:d6:a5:10:80:fd:01:01:5e:ce:35:3b:02:9a:5a:f2: 0a:ff:1c:b5:83:3d:d4:3f:65:d1:68:d2:3e:9d:c0:0b:5a:29: 58:2b:ef:02:47:ba:77:91:b4:c5:ef:72:e2:eb:b1:f0:69:45: 13:f7:ba:00:11:9e:f3:b8:d2:85:c0:a3:59:46:67:1e:66:c1: 73:e9:57:dc:c9:55:1c:63:b9:13:60:a3:fc:3a:a8:36:b6:20: 9f:8d:64:9b:67:dd:cb:a9:44:06:fd:74:e3:45:8a:2b:74:df: 35:bd:2d:0a:e7:44:c1:68:ab:5f:75:bd:1c:35:b7:bf:04:ca: ee:8e:0e:c2:0c:88:8c:dd:00:2d:98:f0:9f:45:b8:bf:25:14: 5e:1d:6f:01:94:1a:b0:df:39:2e:04:34:10:af:95:ad:91:e7: b4:7c:22:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/IreEP5h8k3EvJyTE7TPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ODE4ZWYwNmVmZDZlMjJkNDcxNDA0YWI1MzhhNGI5Yzgw N2VmZTAwHhcNMjUxMjE5MTkwMDU2WhcNMjUxMjIwMTkwMDU2WjAzMTEwLwYDVQQD EygwNmYwNWMwYzc5NDMzNDkxNmQ5NjUxZTY3YTM0OTViYzQ3OWQwOGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8eZGjX3ATyQPM0ekCQfpIdfZL7K /a0nS4TC8yQNx6HbSuAMbivwNUnf3YdN1X/yNV3YUhMSCJETuIkwQuBWxl4CuqiT Svudlw0ABu5Hb69V2obskcZS3Ecvr4MhqdCHjsTEs12ag7aIJOzVry6Z65VxyXG5 Vc8n2xSooStqFkHjS5JRNlbT16AGRtWvq/O3mjTs3O1pSblEvse77UEmi+yFvbJa fyxf8Bzn+8y98c/0lNwsKxrEV90Gx5MEg4HLmv9yGkjyzdrlsrvaXUUHjwnh0Pu/ MuiOEXbXWh0x71jvceiRlzVWW/qO4m70QCJE6h69MHUhiItyxnf3wKYiBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbwXAx5QzSRbZZR5no0lbxHnQjmMB8GA1UdIwQY MBaAFESBjvBu/W4i1HFASrU4pLnIB+/gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUklHTzhHNzliaUxVY1VCS3RUaWt1Y2dINy1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iYTZiMGItMzgyZS00NDBmLThkYjkt MzVhZmI1YzI0OGI2LzEvUklHTzhHNzliaUxVY1VCS3RUaWt1Y2dINy1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9iYTZiMGItMzgyZS00NDBmLThkYjktMzVhZmI1YzI0OGI2 LzEvUklHTzhHNzliaUxVY1VCS3RUaWt1Y2dINy1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGG+w+FyY aqp0erkJ2FukvuNy/sPFI3NJeWaS9i6iChiv9r0TWySiVxVLMOLiNXLpJS2Fgkif InQUmPH87wfrZfTehaTKxUoC3wz7UT45T4oFXqxcbICyUXFy1eDf1qUQgP0BAV7O NTsCmlryCv8ctYM91D9l0WjSPp3AC1opWCvvAke6d5G0xe9y4uux8GlFE/e6ABGe 87jShcCjWUZnHmbBc+lX3MlVHGO5E2Cj/DqoNrYgn41km2fdy6lEBv1040WKK3Tf Nb0tCudEwWirX3W9HDW3vwTK7o4OwgyIjN0ALZjwn0W4vyUUXh1vAZQasN85LgQ0 EK+VrZHntHwivQ== -----END CERTIFICATE-----Generated at Fri Dec 19 21:08:29 2025 by rpki-client