This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft File: G_GA7KTkQF6Heotjkjp1iNd-OdI.mft (raw, json) Hash identifier: PGEJr2wpTwDUbxGJk7mj8eXBUrPyjV63693IIBt/CVw= Subject key identifier: C5:45:0D:B9:E7:FB:55:C0:24:13:E8:D8:E5:AD:32:73:66:F0:19:63 Authority key identifier: 1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2 Certificate issuer: /CN=1bf180eca4e4405e877a8b63923a7588d77e39d2 Certificate serial: 019B37578D52CE325CE888C56C9702732540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft Manifest number: 06DC Signing time: Fri 19 Dec 2025 16:00:43 +0000 Manifest this update: Fri 19 Dec 2025 16:00:43 +0000 Manifest next update: Sat 20 Dec 2025 16:00:43 +0000 Files and hashes: 1: G_GA7KTkQF6Heotjkjp1iNd-OdI.crl (hash: 2VlzN8ZRddjPHpvD5A1wx+B0itlWTR/rd0GtFKU2w4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:8d:52:ce:32:5c:e8:88:c5:6c:97:02:73:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bf180eca4e4405e877a8b63923a7588d77e39d2 Validity Not Before: Dec 19 16:00:43 2025 GMT Not After : Dec 20 16:00:43 2025 GMT Subject: CN=c5450db9e7fb55c02413e8d8e5ad327366f01963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dc:73:f3:83:35:6b:5d:9e:2c:5a:3a:f8:a1: df:cd:39:73:64:52:c1:3f:50:4a:a5:8d:0c:c3:3f: 11:8b:c5:67:66:ed:95:56:91:49:75:95:ea:e6:3b: 39:11:fd:c0:65:ee:5d:1b:b9:31:f0:72:f7:a9:a7: 4b:3f:f3:99:ef:fc:27:d0:bf:14:79:c5:8c:d5:b9: e7:89:0f:c1:17:7a:17:6a:be:16:2e:b8:e9:2d:31: 0e:c3:9b:64:c0:85:95:45:b9:69:51:14:21:c2:d0: f7:38:1f:cd:5f:b7:9b:08:5e:b6:ed:83:55:a9:73: 72:bc:93:15:f0:15:86:b6:c9:85:07:c7:29:8e:eb: a1:ce:0f:27:8b:9e:d5:6f:73:21:99:ff:2d:45:ad: c7:df:52:63:66:57:b6:af:9a:a9:76:f5:31:36:9b: 45:5f:f5:c0:50:71:10:7b:28:cd:d7:6b:e8:b8:9e: b5:7d:6a:30:52:e8:ac:d1:0d:11:6f:10:1f:2b:35: ed:c7:39:a6:1a:94:e0:ad:89:d7:e8:2b:c3:fe:b4: bc:c7:bd:f7:31:7c:12:ba:6e:af:64:27:8e:13:86: 89:90:a1:58:b6:17:41:ea:50:69:87:cb:6a:a8:18: 11:50:c8:f8:4e:62:3f:46:85:4e:8c:da:7d:03:a1: a6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:45:0D:B9:E7:FB:55:C0:24:13:E8:D8:E5:AD:32:73:66:F0:19:63 X509v3 Authority Key Identifier: keyid:1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e9:59:df:ec:9d:b6:dc:4e:74:50:86:c6:7f:65:4e:ea:13: 41:95:bb:5a:f1:d8:6e:1e:a5:18:e3:15:6c:33:a5:59:0f:16: 00:16:5a:f1:fa:5a:e2:a0:a4:dd:15:a2:e5:d7:ff:d4:06:9c: 58:fa:92:0b:71:57:8c:57:9d:00:4f:3a:40:3e:68:f4:78:44: 31:df:e1:cc:7d:12:c2:aa:61:77:4e:68:7c:b5:91:13:a9:fc: 7b:dd:61:c2:cc:e3:bf:75:87:d8:ed:6e:e4:09:21:f6:3d:2f: f8:ac:ff:60:70:64:90:c5:23:ee:46:80:1f:19:27:c3:eb:fb: 23:54:68:ff:ea:62:7d:83:42:4e:ce:f4:74:e7:7a:c9:7a:f3: 3d:5f:b0:1b:63:1b:ac:4c:c7:6c:b9:e6:0a:15:77:a7:0a:f4: 83:d0:8b:38:48:ef:55:92:ad:dc:9d:67:d7:5c:c3:2f:cb:3e: 66:24:2a:b9:76:b2:08:1e:9b:fa:0a:45:b5:89:f7:1c:b0:41: f1:a9:bb:eb:b7:ae:39:8d:af:a2:17:e3:3e:96:f3:9a:30:20: 3f:5b:23:7f:2e:21:18:16:c2:d2:74:30:56:2e:57:62:77:90: b7:de:f0:e9:c6:46:07:3d:d2:dd:3f:52:63:68:a9:c4:90:1e: 1f:62:e3:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V41SzjJc6IjFbJcCcyVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZjE4MGVjYTRlNDQwNWU4NzdhOGI2MzkyM2E3NTg4ZDc3 ZTM5ZDIwHhcNMjUxMjE5MTYwMDQzWhcNMjUxMjIwMTYwMDQzWjAzMTEwLwYDVQQD EyhjNTQ1MGRiOWU3ZmI1NWMwMjQxM2U4ZDhlNWFkMzI3MzY2ZjAxOTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodxz84M1a12eLFo6+KHfzTlzZFLB P1BKpY0Mwz8Ri8VnZu2VVpFJdZXq5js5Ef3AZe5dG7kx8HL3qadLP/OZ7/wn0L8U ecWM1bnniQ/BF3oXar4WLrjpLTEOw5tkwIWVRblpURQhwtD3OB/NX7ebCF627YNV qXNyvJMV8BWGtsmFB8cpjuuhzg8ni57Vb3Mhmf8tRa3H31JjZle2r5qpdvUxNptF X/XAUHEQeyjN12vouJ61fWowUuis0Q0RbxAfKzXtxzmmGpTgrYnX6CvD/rS8x733 MXwSum6vZCeOE4aJkKFYthdB6lBph8tqqBgRUMj4TmI/RoVOjNp9A6GmcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVFDbnn+1XAJBPo2OWtMnNm8BljMB8GA1UdIwQY MBaAFBvxgOyk5EBeh3qLY5I6dYjXfjnSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR19HQTdLVGtRRjZIZW90amtqcDFpTmQtT2RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lODkyMmQtYjMwNC00MTg4LWJkYTYt ZGM2YjFmZjcyYzE4LzEvR19HQTdLVGtRRjZIZW90amtqcDFpTmQtT2RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lODkyMmQtYjMwNC00MTg4LWJkYTYtZGM2YjFmZjcyYzE4 LzEvR19HQTdLVGtRRjZIZW90amtqcDFpTmQtT2RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMelZ3+yd ttxOdFCGxn9lTuoTQZW7WvHYbh6lGOMVbDOlWQ8WABZa8fpa4qCk3RWi5df/1Aac WPqSC3FXjFedAE86QD5o9HhEMd/hzH0Swqphd05ofLWRE6n8e91hwszjv3WH2O1u 5Akh9j0v+Kz/YHBkkMUj7kaAHxknw+v7I1Ro/+pifYNCTs70dOd6yXrzPV+wG2Mb rEzHbLnmChV3pwr0g9CLOEjvVZKt3J1n11zDL8s+ZiQquXayCB6b+gpFtYn3HLBB 8am767euOY2vohfjPpbzmjAgP1sjfy4hGBbC0nQwVi5XYneQt97w6cZGBz3S3T9S Y2ipxJAeH2LjPA== -----END CERTIFICATE-----Generated at Sat Dec 20 02:03:33 2025 by rpki-client