This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json) Hash identifier: oJSfKwbnp8tm9I3Bb3pcnsyq7ikkMYQ1xNnpzTwzM5Q= Subject key identifier: FA:D4:A1:CD:70:18:11:0B:CC:F2:20:98:50:87:59:28:9B:7F:F4:05 Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d Certificate serial: 019B34C5FF33019845DA92AC98005BC1127A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft Manifest number: 0C8F Signing time: Fri 19 Dec 2025 04:02:29 +0000 Manifest this update: Fri 19 Dec 2025 04:02:29 +0000 Manifest next update: Sat 20 Dec 2025 04:02:29 +0000 Files and hashes: 1: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: d7o7SX6i3gyoJNRQbj4WNJBFl3yCAdEZ42gWV6O/4yE=) 2: TRfMCYgQom2qb1ltkPZ8pDFMPbw.roa (hash: B/bZzAE30Cbi1NKH6O3ZfRrv6UmAF6KTnp6VWp5movg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:ff:33:01:98:45:da:92:ac:98:00:5b:c1:12:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bde70af153494354946648acd641163e2af1b1d Validity Not Before: Dec 19 04:02:29 2025 GMT Not After : Dec 20 04:02:29 2025 GMT Subject: CN=fad4a1cd7018110bccf22098508759289b7ff405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3a:63:76:c6:a9:09:4b:66:93:eb:8f:53:3b: fc:3a:59:cb:75:0c:e1:9c:7f:42:30:f3:4c:09:07: 72:23:1e:55:5a:dd:9d:0e:29:59:92:40:29:c9:d4: e7:15:9f:56:db:08:35:5e:96:a9:50:ba:c3:7d:8f: 41:58:dc:0c:f1:e9:bb:a1:a2:89:1f:13:f6:4c:63: f4:6b:0e:52:76:92:63:c5:84:88:27:82:ce:f8:14: 5b:37:b0:15:7f:ef:f9:70:da:eb:86:b0:7c:e0:7b: 6f:af:7d:f7:34:dc:13:10:b7:f2:15:fc:61:cb:88: 31:1c:d6:3f:3a:49:0f:24:f1:e7:d6:68:42:8d:a1: 24:69:6a:10:ad:f0:eb:a5:a5:1b:fe:bc:5a:3c:13: ef:f7:e6:82:b4:e6:0c:fc:64:3f:35:b8:10:4f:14: 8d:59:02:3a:e5:f1:f9:80:d2:db:2d:9a:ec:6d:42: 7f:69:ab:db:99:34:d5:64:1f:e4:50:c2:e3:69:4e: af:17:22:f7:71:60:8a:fe:64:73:ce:8d:48:64:f9: 4f:02:c1:1c:70:aa:b9:b0:d4:53:14:e2:da:e8:c9: ee:c4:2d:6d:16:cd:75:e4:2f:dd:c6:45:45:df:79: 81:5b:f5:82:a4:9c:07:f6:5d:fe:8f:5c:50:a9:52: 85:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D4:A1:CD:70:18:11:0B:CC:F2:20:98:50:87:59:28:9B:7F:F4:05 X509v3 Authority Key Identifier: keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c9:6e:67:da:82:68:2a:d4:a3:14:17:95:d1:54:eb:97:ef: a0:fe:66:b5:52:55:3a:64:61:e3:be:21:56:c5:68:40:58:99: 39:f2:5f:9e:7e:89:ab:94:a5:16:43:59:3a:4e:99:3b:d8:6b: c1:fb:1b:cc:da:a4:4a:d5:6f:58:dd:2b:fe:37:65:31:0e:4a: 2d:a0:12:c6:a5:80:a2:ec:ba:db:7c:dd:8e:75:32:4e:1b:af: 3d:67:bf:19:20:a9:f6:be:27:60:81:2f:14:d0:86:0f:ba:f7: e6:6d:c9:7c:cf:e6:26:a3:a5:35:1e:89:40:1a:b0:88:d8:d7: e9:93:25:60:71:f5:70:f1:d9:ba:12:b4:b0:85:94:48:8b:a9: d4:19:fd:b1:4a:5a:ea:ea:fb:a6:31:54:80:98:1e:ab:16:f4: 90:b7:89:41:de:bd:92:8f:de:c1:fc:4e:c0:6b:c4:17:f5:ce: aa:92:a2:ac:6f:41:ed:9b:c0:08:ea:e1:b2:ee:99:87:1f:78: a6:ff:49:a8:7d:6c:0c:23:76:5e:f4:83:e4:c1:d6:27:d6:05: b0:e3:b4:a5:eb:04:72:07:d0:60:d2:00:60:a1:ae:b5:f9:0a: 85:59:a6:ea:a0:4a:3d:6a:10:42:68:8a:ef:67:90:33:a0:69: 30:1a:59:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xf8zAZhF2pKsmABbwRJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZGU3MGFmMTUzNDk0MzU0OTQ2NjQ4YWNkNjQxMTYzZTJh ZjFiMWQwHhcNMjUxMjE5MDQwMjI5WhcNMjUxMjIwMDQwMjI5WjAzMTEwLwYDVQQD EyhmYWQ0YTFjZDcwMTgxMTBiY2NmMjIwOTg1MDg3NTkyODliN2ZmNDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjpjdsapCUtmk+uPUzv8OlnLdQzh nH9CMPNMCQdyIx5VWt2dDilZkkApydTnFZ9W2wg1XpapULrDfY9BWNwM8em7oaKJ HxP2TGP0aw5SdpJjxYSIJ4LO+BRbN7AVf+/5cNrrhrB84Htvr333NNwTELfyFfxh y4gxHNY/OkkPJPHn1mhCjaEkaWoQrfDrpaUb/rxaPBPv9+aCtOYM/GQ/NbgQTxSN WQI65fH5gNLbLZrsbUJ/aavbmTTVZB/kUMLjaU6vFyL3cWCK/mRzzo1IZPlPAsEc cKq5sNRTFOLa6MnuxC1tFs115C/dxkVF33mBW/WCpJwH9l3+j1xQqVKFOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrUoc1wGBELzPIgmFCHWSibf/QFMB8GA1UdIwQY MBaAFBvecK8VNJQ1SUZkis1kEWPirxsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzk1d3J4VTBsRFZKUm1TS3pXUVJZLUt2R3gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xNDhlY2EtYzM5Zi00NjczLTg4NmYt ZWNmODIzMDJmNzI2LzEvRzk1d3J4VTBsRFZKUm1TS3pXUVJZLUt2R3gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xNDhlY2EtYzM5Zi00NjczLTg4NmYtZWNmODIzMDJmNzI2 LzEvRzk1d3J4VTBsRFZKUm1TS3pXUVJZLUt2R3gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcluZ9qC aCrUoxQXldFU65fvoP5mtVJVOmRh474hVsVoQFiZOfJfnn6Jq5SlFkNZOk6ZO9hr wfsbzNqkStVvWN0r/jdlMQ5KLaASxqWAouy623zdjnUyThuvPWe/GSCp9r4nYIEv FNCGD7r35m3JfM/mJqOlNR6JQBqwiNjX6ZMlYHH1cPHZuhK0sIWUSIup1Bn9sUpa 6ur7pjFUgJgeqxb0kLeJQd69ko/ewfxOwGvEF/XOqpKirG9B7ZvACOrhsu6Zhx94 pv9JqH1sDCN2XvSD5MHWJ9YFsOO0pesEcgfQYNIAYKGutfkKhVmm6qBKPWoQQmiK 72eQM6BpMBpZ7A== -----END CERTIFICATE-----Generated at Fri Dec 19 06:51:16 2025 by rpki-client