This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft File: GiR0zlteIgufQxr8hq9OwUD18Ww.mft (raw, json) Hash identifier: pQLkOLoxXLemHPkxb4HC1rkpc4hOsNginTrLoXvXeyY= Subject key identifier: B1:6E:8C:5C:A8:F7:12:17:5C:BD:C5:0B:E7:EA:3E:85:9E:10:8D:4E Authority key identifier: 1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C Certificate issuer: /CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c Certificate serial: 019B217495493EBFD3A3AC7CCFBA84A71E88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft Manifest number: 0C57 Signing time: Mon 15 Dec 2025 10:00:47 +0000 Manifest this update: Mon 15 Dec 2025 10:00:47 +0000 Manifest next update: Tue 16 Dec 2025 10:00:47 +0000 Files and hashes: 1: GiR0zlteIgufQxr8hq9OwUD18Ww.crl (hash: dZPzzRTixckCpDF9bS5dm9uonpCLLf6dzIIN5miVJaU=) 2: xkDVDS74gDDghtjYO_lZo1jkZAw.roa (hash: U2DpQz2gMSrA9mkY42SKxIWprno9ie8cfBuo5TlCH84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:95:49:3e:bf:d3:a3:ac:7c:cf:ba:84:a7:1e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c Validity Not Before: Dec 15 10:00:47 2025 GMT Not After : Dec 16 10:00:47 2025 GMT Subject: CN=b16e8c5ca8f712175cbdc50be7ea3e859e108d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:ae:5c:9a:79:a4:49:50:c5:8c:66:45:8f: 80:e4:d7:42:54:0f:2c:17:95:83:5a:82:d4:0b:73: 32:76:03:d7:f9:04:a6:16:a4:d2:ca:4d:5e:77:3f: 17:30:bb:5c:6a:83:ce:03:bb:3b:39:59:77:68:8e: 72:60:06:74:0a:be:3c:a2:81:2f:21:49:2a:7d:0a: 3d:29:e8:a5:bc:f8:17:1d:6e:10:03:a2:d8:e1:c4: df:22:a4:30:76:99:fa:94:79:b9:05:2c:1c:90:d3: 04:af:86:be:4c:91:9c:88:5f:72:11:8d:44:b4:53: 62:fb:6a:01:a1:70:ff:5e:21:d6:85:c9:e7:79:10: db:17:91:e8:b3:64:9f:3b:cb:d4:10:39:dc:77:13: 51:01:8b:fa:dc:5a:f4:75:b3:54:15:30:e1:b9:0e: 5f:a7:5a:2f:d6:a7:7d:68:2b:7c:79:74:33:a2:ad: c1:ec:62:97:e3:22:2d:f5:66:17:9b:0a:54:1c:99: 3e:0b:42:69:e1:41:0d:d3:b9:21:6c:97:80:f2:6c: 13:b8:c9:74:40:94:a8:21:5d:66:27:61:e1:07:5a: 31:00:98:89:c2:ab:88:ad:7f:bc:df:9c:a7:f3:5f: d8:92:db:d2:a1:f1:b5:57:81:cc:6d:4d:93:99:d3: e9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6E:8C:5C:A8:F7:12:17:5C:BD:C5:0B:E7:EA:3E:85:9E:10:8D:4E X509v3 Authority Key Identifier: keyid:1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8f:d6:3c:6c:8e:54:18:6f:5a:e0:e3:ba:47:9e:68:80:66: 90:72:78:00:a2:ec:ff:8b:f2:05:cf:37:c3:df:58:f8:a3:b8: fb:64:ae:de:42:3b:8d:83:5f:5a:1d:20:4c:76:b0:7b:9b:97: 98:bc:ac:d2:91:09:60:bd:d3:46:ea:8e:9d:62:ad:b3:e6:49: bd:1c:3b:60:35:73:fd:86:03:b9:6a:23:75:8a:e5:b5:37:da: ab:5f:08:f0:79:56:7e:5b:54:9a:c5:24:32:ec:d5:72:fa:f5: b1:1b:22:09:4b:0d:e9:30:bd:d5:e2:f1:6d:fa:82:13:b9:80: 36:41:f6:95:40:0a:5a:3b:54:60:00:fa:ab:b3:b9:85:f4:cd: b3:37:b9:07:0a:7c:f7:7b:fa:e7:3a:f9:29:99:9a:50:80:42: 84:38:b1:ca:ad:97:23:7f:6e:c7:6f:34:47:2a:3a:f6:15:f8: a4:af:cb:94:cc:4e:e6:82:9e:31:ec:72:ce:3f:ec:a8:5a:ce: 13:46:5b:d6:6f:32:2d:d5:68:68:f3:e0:8c:69:00:5e:3b:b4: bb:6e:7a:77:d4:b0:9c:e0:5e:d8:7a:61:98:50:11:f5:59:cb: 55:1a:53:22:1a:78:38:8e:f7:08:ab:c3:cb:b7:4c:a6:16:c1: ca:da:85:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdJVJPr/To6x8z7qEpx6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMjQ3NGNlNWI1ZTIyMGI5ZjQzMWFmYzg2YWY0ZWMxNDBm NWYxNmMwHhcNMjUxMjE1MTAwMDQ3WhcNMjUxMjE2MTAwMDQ3WjAzMTEwLwYDVQQD EyhiMTZlOGM1Y2E4ZjcxMjE3NWNiZGM1MGJlN2VhM2U4NTllMTA4ZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+WuXJp5pElQxYxmRY+A5NdCVA8s F5WDWoLUC3MydgPX+QSmFqTSyk1edz8XMLtcaoPOA7s7OVl3aI5yYAZ0Cr48ooEv IUkqfQo9KeilvPgXHW4QA6LY4cTfIqQwdpn6lHm5BSwckNMEr4a+TJGciF9yEY1E tFNi+2oBoXD/XiHWhcnneRDbF5Hos2SfO8vUEDncdxNRAYv63Fr0dbNUFTDhuQ5f p1ov1qd9aCt8eXQzoq3B7GKX4yIt9WYXmwpUHJk+C0Jp4UEN07khbJeA8mwTuMl0 QJSoIV1mJ2HhB1oxAJiJwquIrX+835yn81/YktvSofG1V4HMbU2TmdPpkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFujFyo9xIXXL3FC+fqPoWeEI1OMB8GA1UdIwQY MBaAFBokdM5bXiILn0Ma/IavTsFA9fFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2lSMHpsdGVJZ3VmUXhyOGhxOU93VUQxOFd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMDQzNTktNGFlNC00ZTQ3LTkxY2It ZDdkMDJlOTdlMjVkLzEvR2lSMHpsdGVJZ3VmUXhyOGhxOU93VUQxOFd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jMDQzNTktNGFlNC00ZTQ3LTkxY2ItZDdkMDJlOTdlMjVk LzEvR2lSMHpsdGVJZ3VmUXhyOGhxOU93VUQxOFd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAao/WPGyO VBhvWuDjukeeaIBmkHJ4AKLs/4vyBc83w99Y+KO4+2Su3kI7jYNfWh0gTHawe5uX mLys0pEJYL3TRuqOnWKts+ZJvRw7YDVz/YYDuWojdYrltTfaq18I8HlWfltUmsUk MuzVcvr1sRsiCUsN6TC91eLxbfqCE7mANkH2lUAKWjtUYAD6q7O5hfTNsze5Bwp8 93v65zr5KZmaUIBChDixyq2XI39ux280Ryo69hX4pK/LlMxO5oKeMexyzj/sqFrO E0Zb1m8yLdVoaPPgjGkAXju0u256d9SwnOBe2HphmFAR9VnLVRpTIhp4OI73CKvD y7dMphbBytqFPw== -----END CERTIFICATE-----Generated at Mon Dec 15 20:44:40 2025 by rpki-client