This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft File: G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json) Hash identifier: 0O6rINNjP1MS9QjUOCmwR0YUbyi3PLG6+emCgQdR2Yk= Subject key identifier: 7D:27:13:01:EF:8E:A9:96:D7:23:38:BD:7F:EA:F9:D1:30:0D:93:4F Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20 Certificate issuer: /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720 Certificate serial: 019B45B84E27AEEBC9DB05F7A62D5EE34C1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 11:01:05 +0000 Manifest this update: Mon 22 Dec 2025 11:01:05 +0000 Manifest next update: Tue 23 Dec 2025 11:01:05 +0000 Files and hashes: 1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: OU/GAzpL12M6vBItunEKvyWzO4kiI0hTospSdGj1wkk=) 2: PWeS-NKTh0dPX7EQagJN_UUuvpA.roa (hash: B0E7vLVtVMLANL6NGMEZXBlTrX+gpHtSfadbpxHmK4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:4e:27:ae:eb:c9:db:05:f7:a6:2d:5e:e3:4c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720 Validity Not Before: Dec 22 11:01:05 2025 GMT Not After : Dec 23 11:01:05 2025 GMT Subject: CN=7d271301ef8ea996d72338bd7feaf9d1300d934f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:03:52:82:7b:78:54:57:0b:77:d1:c3:c5:a2: 50:80:4f:a7:f4:cf:e6:49:5e:03:d7:61:88:21:22: 4b:90:c9:bd:44:77:63:ea:c2:dd:a7:41:b2:7d:af: 78:af:69:6a:36:30:5e:95:20:57:ff:02:36:88:aa: 59:40:ee:b5:37:1b:e2:8b:66:8a:9b:93:48:65:81: 58:a4:f0:4b:87:08:07:a2:26:80:47:9a:6c:e5:fd: 49:48:da:14:56:29:46:c5:5c:4b:38:2d:45:6f:7b: be:54:35:60:d0:38:96:58:6b:3a:88:09:a7:e0:a5: 88:0e:60:eb:76:d4:d5:b4:f5:af:0d:97:51:4a:00: d3:df:90:b8:9e:63:5e:07:45:51:c6:72:d7:e1:6a: a8:dc:21:d8:ae:8c:bb:65:24:42:04:e8:e3:38:23: e2:d4:67:87:ae:23:ce:01:5d:bf:00:28:36:5a:47: a2:7c:47:ab:0f:b3:d5:ee:34:df:7f:d4:1b:ad:a9: a0:ea:45:f8:1f:a6:17:d6:0c:9d:de:e7:22:22:d8: b6:09:f5:14:57:60:43:81:58:4c:0d:11:54:f3:ef: a1:13:ce:ec:29:85:7d:c6:d1:63:6e:4b:6f:05:40: aa:1b:45:b3:b4:33:f7:44:47:de:de:56:bf:ba:5c: 4e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:27:13:01:EF:8E:A9:96:D7:23:38:BD:7F:EA:F9:D1:30:0D:93:4F X509v3 Authority Key Identifier: keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:4f:f6:d5:3a:0c:13:3a:e1:86:69:70:34:5f:8b:54:70:df: 18:c1:2f:e0:98:c8:63:4e:52:e3:80:72:b8:9e:d4:dc:7c:5e: 34:2d:6a:a1:22:db:fa:a2:25:22:63:16:07:82:b5:10:6e:84: 8c:39:21:17:13:0e:9f:6a:b7:3b:f2:ad:54:0a:5b:f9:de:58: 60:31:2c:34:4b:a7:15:5d:c5:a5:68:84:e5:03:a2:4a:2f:71: e4:1a:dc:8e:69:ae:dc:d1:a9:64:60:93:39:fd:1e:1b:fa:25: 38:e9:fd:cb:46:fe:5d:0f:58:87:4d:39:36:10:43:53:35:af: 07:82:17:d5:f0:83:02:23:e9:a2:b1:75:d7:15:90:9b:33:4b: f0:2c:8c:be:df:9d:0b:16:58:53:3e:30:fd:9e:42:9e:3a:e8: 18:74:67:65:39:1b:5c:83:6d:fc:1e:25:ac:d8:1b:9c:15:39: 73:0f:12:48:90:a7:c0:de:19:83:b9:ac:de:49:fa:f0:d0:9a: dc:09:75:1f:fb:14:4d:68:91:01:3f:fe:1a:77:81:2c:f6:41: 40:6e:37:bd:bc:2d:a0:83:99:df:70:a2:13:fd:7a:41:78:1b: 52:b5:c4:0d:f0:e8:b8:5d:5a:49:11:0f:4d:3f:68:aa:e6:68: ca:ed:b9:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuE4nruvJ2wX3pi1e40wcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZGJjNDExNDQ0NDgwNjUzMTNlZjBiODJlMWNjZjdhZTZl YTU3MjAwHhcNMjUxMjIyMTEwMTA1WhcNMjUxMjIzMTEwMTA1WjAzMTEwLwYDVQQD Eyg3ZDI3MTMwMWVmOGVhOTk2ZDcyMzM4YmQ3ZmVhZjlkMTMwMGQ5MzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gNSgnt4VFcLd9HDxaJQgE+n9M/m SV4D12GIISJLkMm9RHdj6sLdp0Gyfa94r2lqNjBelSBX/wI2iKpZQO61Nxvii2aK m5NIZYFYpPBLhwgHoiaAR5ps5f1JSNoUVilGxVxLOC1Fb3u+VDVg0DiWWGs6iAmn 4KWIDmDrdtTVtPWvDZdRSgDT35C4nmNeB0VRxnLX4Wqo3CHYroy7ZSRCBOjjOCPi 1GeHriPOAV2/ACg2WkeifEerD7PV7jTff9Qbramg6kX4H6YX1gyd3uciIti2CfUU V2BDgVhMDRFU8++hE87sKYV9xtFjbktvBUCqG0WztDP3REfe3la/ulxOsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0nEwHvjqmW1yM4vX/q+dEwDZNPMB8GA1UdIwQY MBaAFBvbxBFERIBlMT7wuC4cz3rm6lcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80YTI5M2ItNGM0MS00MjhjLTkyODct YmQ5OGIzZTkwZTQzLzEvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80YTI5M2ItNGM0MS00MjhjLTkyODctYmQ5OGIzZTkwZTQz LzEvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKE/21ToM EzrhhmlwNF+LVHDfGMEv4JjIY05S44ByuJ7U3HxeNC1qoSLb+qIlImMWB4K1EG6E jDkhFxMOn2q3O/KtVApb+d5YYDEsNEunFV3FpWiE5QOiSi9x5Brcjmmu3NGpZGCT Of0eG/olOOn9y0b+XQ9Yh005NhBDUzWvB4IX1fCDAiPporF11xWQmzNL8CyMvt+d CxZYUz4w/Z5CnjroGHRnZTkbXINt/B4lrNgbnBU5cw8SSJCnwN4Zg7ms3kn68NCa 3Al1H/sUTWiRAT/+GneBLPZBQG43vbwtoIOZ33CiE/16QXgbUrXEDfDouF1aSREP TT9oquZoyu25WA== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:23 2025 by rpki-client