This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json) Hash identifier: /ZZ9+2KML3PsI8Lw/iL6XRq4SGEpXq4h+3c8DjZXYKg= Subject key identifier: FB:67:60:64:6B:52:53:38:E4:F2:FB:A6:38:80:5E:ED:9E:EB:B6:8D Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8 Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8 Certificate serial: 019B1FF43AE4D6B48FBE2C04E86E031CB338 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft Manifest number: 170C Signing time: Mon 15 Dec 2025 03:00:58 +0000 Manifest this update: Mon 15 Dec 2025 03:00:58 +0000 Manifest next update: Tue 16 Dec 2025 03:00:58 +0000 Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: T7h8Qc3F0r/2DSgqQVT/gkOKxKiBkO/i3kxwe+fRfEQ=) 2: g9iZztKhPBfdB3SMkUVgLaoGa6I.roa (hash: 3cdl1mhf1MuyZrBGoECoS2FydheWQgVhXvTorzFZles=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:3a:e4:d6:b4:8f:be:2c:04:e8:6e:03:1c:b3:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8 Validity Not Before: Dec 15 03:00:58 2025 GMT Not After : Dec 16 03:00:58 2025 GMT Subject: CN=fb6760646b525338e4f2fba638805eed9eebb68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:35:10:42:35:cd:58:40:0b:9f:a6:ff:52:c8: b6:4d:0b:4e:c0:13:93:d9:92:bc:9b:b0:93:46:63: 82:dd:6a:29:52:9b:5b:38:18:ea:49:5b:08:d8:90: b5:98:cf:c6:83:b2:bf:13:e5:45:2e:a4:5e:b4:93: 46:9f:0b:5e:59:bf:d7:07:2e:f6:d8:1d:5f:84:dc: cd:fc:aa:99:1f:d5:1a:2a:71:f4:94:e8:7c:27:96: 08:4e:e2:ac:a0:70:62:97:36:92:1d:3e:95:bc:c5: 4a:f5:10:8f:57:56:04:c6:92:c6:e9:de:17:2c:f3: 2a:f9:9c:ad:28:0d:16:f1:a4:3e:ee:b4:f9:33:d3: 00:a4:62:97:2d:f8:06:e0:36:4e:52:9c:f5:c8:8f: a5:cf:dd:85:ef:c6:e6:0e:22:34:f1:42:f4:05:cc: 54:d9:62:c4:f6:3d:f1:7e:85:9d:7d:1a:3f:b0:87: f8:fc:79:12:45:c6:66:0c:05:d2:74:d3:bd:56:ce: 60:96:e8:60:8f:fa:42:c5:96:97:53:66:18:7c:89: 60:ef:03:84:b4:f8:8e:57:e8:53:6f:83:05:e3:7f: 24:10:ac:c8:f8:e5:5c:c7:3c:3e:e7:d5:55:05:5f: b4:12:68:ac:4d:1d:77:9b:60:8d:e4:86:82:64:69: 66:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:67:60:64:6B:52:53:38:E4:F2:FB:A6:38:80:5E:ED:9E:EB:B6:8D X509v3 Authority Key Identifier: keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:6b:10:c2:e0:6b:71:ab:d3:a1:36:3b:11:0f:ec:38:74:6d: af:3e:1c:b1:a4:80:53:0b:b2:f6:96:dd:77:0d:99:69:81:c6: 9a:7e:90:3d:4b:0e:2a:5b:b7:bd:fb:ef:83:bb:aa:5c:40:d5: 58:b1:e5:95:d0:6b:02:20:23:c2:e4:9e:9d:46:d1:eb:4b:32: 96:d5:25:f6:6a:5a:ca:e0:9f:17:ff:c1:3b:98:1e:eb:d4:4e: 2e:43:63:c2:3c:bd:7f:3f:31:3b:7c:5c:93:b1:74:08:82:3b: a8:92:e2:99:ee:85:38:b7:30:dd:be:3c:05:a7:b5:0d:4c:53: 86:ac:e2:25:f6:66:1e:51:8b:c9:f6:dc:38:56:1d:29:80:60: 48:33:bf:b3:16:6e:a4:99:9a:70:c5:79:f1:24:16:d0:6f:44: 90:9e:29:e6:cc:a4:4c:fc:71:53:ce:00:97:37:bc:ca:6b:94: 89:3f:7c:1a:be:83:9e:70:2c:9c:af:8d:e9:c4:33:ca:6f:d7: 15:04:64:e9:4a:e6:fd:aa:46:f2:31:da:22:05:c2:b4:12:58: 71:8e:c4:dc:ad:b0:6c:ab:44:56:c6:7e:45:ae:50:59:a0:c4: 29:26:a7:0d:84:64:82:3e:c1:20:f3:f3:99:35:5b:dd:24:8b: fe:1d:78:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9Drk1rSPviwE6G4DHLM4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MDkwZWQwMDI3ZjBlMzNhNzU0YzI1OWY3ZGM4OGJiN2E3 MmZmYTgwHhcNMjUxMjE1MDMwMDU4WhcNMjUxMjE2MDMwMDU4WjAzMTEwLwYDVQQD EyhmYjY3NjA2NDZiNTI1MzM4ZTRmMmZiYTYzODgwNWVlZDllZWJiNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTUQQjXNWEALn6b/Usi2TQtOwBOT 2ZK8m7CTRmOC3WopUptbOBjqSVsI2JC1mM/Gg7K/E+VFLqRetJNGnwteWb/XBy72 2B1fhNzN/KqZH9UaKnH0lOh8J5YITuKsoHBilzaSHT6VvMVK9RCPV1YExpLG6d4X LPMq+ZytKA0W8aQ+7rT5M9MApGKXLfgG4DZOUpz1yI+lz92F78bmDiI08UL0BcxU 2WLE9j3xfoWdfRo/sIf4/HkSRcZmDAXSdNO9Vs5gluhgj/pCxZaXU2YYfIlg7wOE tPiOV+hTb4MF438kEKzI+OVcxzw+59VVBV+0EmisTR13m2CN5IaCZGlmYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtnYGRrUlM45PL7pjiAXu2e67aNMB8GA1UdIwQY MBaAFBgJDtACfw4zp1TCWffciLt6cv+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xMGRkN2YtNWVkNy00NGRkLWJlYjIt Y2ZmYWQ1MzI5MmNlLzEvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xMGRkN2YtNWVkNy00NGRkLWJlYjItY2ZmYWQ1MzI5MmNl LzEvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyWsQwuBr cavToTY7EQ/sOHRtrz4csaSAUwuy9pbddw2ZaYHGmn6QPUsOKlu3vfvvg7uqXEDV WLHlldBrAiAjwuSenUbR60syltUl9mpayuCfF//BO5ge69ROLkNjwjy9fz8xO3xc k7F0CII7qJLime6FOLcw3b48Bae1DUxThqziJfZmHlGLyfbcOFYdKYBgSDO/sxZu pJmacMV58SQW0G9EkJ4p5sykTPxxU84Alze8ymuUiT98Gr6DnnAsnK+N6cQzym/X FQRk6Urm/apG8jHaIgXCtBJYcY7E3K2wbKtEVsZ+Ra5QWaDEKSanDYRkgj7BIPPz mTVb3SSL/h14YQ== -----END CERTIFICATE-----Generated at Mon Dec 15 08:31:41 2025 by rpki-client