This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft File: G-u7vrbpIjF2ylod8UmJhgF-jig.mft (raw, json) Hash identifier: zfeJ3PDs5MRD5gvSxdZ1js+OkQD8ry6mfPZEHTBARo0= Subject key identifier: EA:B7:B3:C7:35:6D:E0:3F:4C:A7:37:4C:A3:C9:E7:3E:CC:87:17:A7 Authority key identifier: 1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28 Certificate issuer: /CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28 Certificate serial: 019B5975908978E1A1F878E41B5EE922E462 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft Manifest number: 1677 Signing time: Fri 26 Dec 2025 07:00:35 +0000 Manifest this update: Fri 26 Dec 2025 07:00:35 +0000 Manifest next update: Sat 27 Dec 2025 07:00:35 +0000 Files and hashes: 1: G-u7vrbpIjF2ylod8UmJhgF-jig.crl (hash: t/4rIEDByTjPhgp/b0syEvlZei6klNPGA2sKpCx1hOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:90:89:78:e1:a1:f8:78:e4:1b:5e:e9:22:e4:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28 Validity Not Before: Dec 26 07:00:35 2025 GMT Not After : Dec 27 07:00:35 2025 GMT Subject: CN=eab7b3c7356de03f4ca7374ca3c9e73ecc8717a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3e:41:d1:15:d5:6a:1a:05:9a:c6:6f:99:c1: 89:54:97:61:9f:ef:91:94:e2:60:4d:8f:2f:1e:1f: df:d6:66:1c:98:6e:96:fd:25:88:63:e5:45:3d:cd: 59:e9:63:cc:b0:26:85:cb:6c:9e:21:3f:e7:54:af: d7:17:b8:59:90:db:60:ae:65:3d:20:2a:ab:0f:b0: a2:3f:53:09:84:88:f4:68:43:2f:b8:f6:b9:2c:0b: 46:ee:2c:71:f3:25:c0:30:76:3b:48:b2:29:24:5d: 48:d5:6d:86:27:9e:2e:ff:28:a3:34:b6:4b:e1:5f: 31:4d:71:bb:6b:0a:a1:02:09:4b:62:38:33:27:83: 21:fc:a4:be:15:07:1e:70:81:8d:0e:2b:31:ee:fa: 5d:43:cd:e5:9d:01:e7:be:98:62:4b:74:74:09:52: 93:5a:87:b0:71:4e:06:92:53:71:cc:9b:ca:a0:5d: a9:12:26:a1:d5:73:81:74:53:10:f7:97:c5:6d:8f: 79:e4:9f:ec:43:bb:d0:10:f3:28:d7:48:8e:ad:42: 9b:30:59:01:6f:be:c9:8c:11:df:36:e9:6e:f4:75: 49:5b:09:75:2f:86:9b:ed:74:a3:a8:2b:65:1d:70: 2c:20:b3:3e:a1:d4:1a:b6:69:d9:d8:c8:c9:a0:49: 56:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B7:B3:C7:35:6D:E0:3F:4C:A7:37:4C:A3:C9:E7:3E:CC:87:17:A7 X509v3 Authority Key Identifier: keyid:1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:7d:bc:99:d0:51:d1:3a:3f:38:b4:10:99:56:a3:de:c4:e5: 5a:cc:7b:2f:7f:8d:20:7d:ca:30:1c:ca:6e:89:6f:44:57:eb: 61:4c:5c:77:fd:be:d3:85:92:d9:6a:4d:12:2c:ce:90:95:d9: d4:2d:67:b9:d6:90:df:b2:ff:ee:86:a3:f3:fc:1b:c6:a5:66: ad:23:ad:c2:bd:db:60:91:7b:42:eb:50:39:38:3c:45:89:62: 8d:54:d6:48:1a:58:8b:4b:8f:e5:53:91:a7:a2:47:62:d6:f8: 72:8c:5b:5e:5a:15:06:8a:af:9a:15:77:b1:10:ca:2c:5c:f0: b4:81:de:88:1c:a9:4e:81:84:41:83:93:4b:72:02:41:d5:86: d6:79:31:2b:77:ef:c7:86:a9:29:42:e7:84:63:92:5d:59:fb: ec:e2:b8:e5:4e:27:c4:01:9b:ca:fe:da:b0:16:ac:56:e7:d5: 4a:d5:b5:1f:ae:5c:d7:4a:76:ed:89:04:22:cb:42:6b:d4:22: 76:a1:00:0a:19:d4:4a:e5:be:10:80:4b:1e:47:3c:11:14:aa: 40:06:c3:76:81:52:4e:9e:3f:fe:e4:d7:aa:37:56:1c:8e:ba: 24:7e:39:ef:68:be:68:a5:6d:6f:f7:cd:e1:75:db:86:c8:a4: 48:8f:03:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdZCJeOGh+HjkG17pIuRiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZWJiYmJlYjZlOTIyMzE3NmNhNWExZGYxNDk4OTg2MDE3 ZThlMjgwHhcNMjUxMjI2MDcwMDM1WhcNMjUxMjI3MDcwMDM1WjAzMTEwLwYDVQQD EyhlYWI3YjNjNzM1NmRlMDNmNGNhNzM3NGNhM2M5ZTczZWNjODcxN2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj5B0RXVahoFmsZvmcGJVJdhn++R lOJgTY8vHh/f1mYcmG6W/SWIY+VFPc1Z6WPMsCaFy2yeIT/nVK/XF7hZkNtgrmU9 ICqrD7CiP1MJhIj0aEMvuPa5LAtG7ixx8yXAMHY7SLIpJF1I1W2GJ54u/yijNLZL 4V8xTXG7awqhAglLYjgzJ4Mh/KS+FQcecIGNDisx7vpdQ83lnQHnvphiS3R0CVKT WoewcU4GklNxzJvKoF2pEiah1XOBdFMQ95fFbY955J/sQ7vQEPMo10iOrUKbMFkB b77JjBHfNulu9HVJWwl1L4ab7XSjqCtlHXAsILM+odQatmnZ2MjJoElWEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOq3s8c1beA/TKc3TKPJ5z7MhxenMB8GA1UdIwQY MBaAFBvru7626SIxdspaHfFJiYYBfo4oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy11N3ZyYnBJakYyeWxvZDhVbUpoZ0YtamlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84MzlmZDgtYzI4Yy00MTEyLTk3OWEt N2VjNDAyZWNmYjVjLzEvRy11N3ZyYnBJakYyeWxvZDhVbUpoZ0YtamlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS84MzlmZDgtYzI4Yy00MTEyLTk3OWEtN2VjNDAyZWNmYjVj LzEvRy11N3ZyYnBJakYyeWxvZDhVbUpoZ0YtamlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApn28mdBR 0To/OLQQmVaj3sTlWsx7L3+NIH3KMBzKbolvRFfrYUxcd/2+04WS2WpNEizOkJXZ 1C1nudaQ37L/7oaj8/wbxqVmrSOtwr3bYJF7QutQOTg8RYlijVTWSBpYi0uP5VOR p6JHYtb4coxbXloVBoqvmhV3sRDKLFzwtIHeiBypToGEQYOTS3ICQdWG1nkxK3fv x4apKULnhGOSXVn77OK45U4nxAGbyv7asBasVufVStW1H65c10p27YkEIstCa9Qi dqEAChnUSuW+EIBLHkc8ERSqQAbDdoFSTp4//uTXqjdWHI66JH4572i+aKVtb/fN 4XXbhsikSI8D6Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:24 2025 by rpki-client