This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft File: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft (raw, json) Hash identifier: pGmng7yZMH9PlpM1m6dy2HqUn/sX33tE2vvjha9KdLo= Subject key identifier: 17:F7:E6:DD:E3:20:A9:92:16:7A:2B:B9:5B:B0:C6:EC:23:BB:87:F2 Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4 Certificate issuer: /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4 Certificate serial: 019AEBD0508B208C1248F7D936DD90F47C49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft Manifest number: 0BDD Signing time: Fri 05 Dec 2025 00:01:29 +0000 Manifest this update: Fri 05 Dec 2025 00:01:29 +0000 Manifest next update: Sat 06 Dec 2025 00:01:29 +0000 Files and hashes: 1: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl (hash: ZSXHYue+uxEkkO/xdjrGVdqbxcWFXR+lmafkSm5O36c=) 2: ogliIW3uJqaM5LS-fzkMZKt_cLk.roa (hash: LLZA+4CzPtqrtq7hIsuRZwdNW4zECVbIb6kWURR2Rw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:d0:50:8b:20:8c:12:48:f7:d9:36:dd:90:f4:7c:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4 Validity Not Before: Dec 5 00:01:29 2025 GMT Not After : Dec 6 00:01:29 2025 GMT Subject: CN=17f7e6dde320a992167a2bb95bb0c6ec23bb87f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:94:ce:de:91:2d:87:00:d3:a6:77:76:8c: 6d:0a:4a:d3:13:26:48:fb:26:f1:71:51:4f:31:88: f9:50:68:1d:6f:d4:58:7c:cc:3e:08:6f:8e:8c:a1: c6:ba:cc:b0:07:c9:7b:f7:be:1c:37:1e:01:c8:21: 4d:57:11:db:42:d8:d3:44:97:63:ea:01:fb:8e:40: 24:a7:9c:b7:3d:f4:83:bf:c2:67:09:45:59:92:bb: 2c:e7:1b:c2:77:6c:00:98:6d:37:42:da:36:e2:81: 94:f2:44:6c:c2:19:a8:7a:50:d7:ec:f4:e9:3e:20: d0:24:f5:9f:3b:17:c5:10:5b:0d:0a:09:eb:0f:14: 9b:2e:e0:5b:2b:4e:8b:e3:3f:d0:0e:8b:4c:cb:f8: f3:40:68:9a:da:c5:49:a7:39:18:45:b7:e0:c9:dd: 00:58:5c:e4:43:5c:ef:e3:f4:3b:ea:74:67:85:fb: bf:7f:e5:fd:33:d7:16:3b:8e:1b:48:2d:c8:c4:41: 46:5d:7c:40:58:55:99:9d:85:b9:45:72:95:07:c5: 29:f7:77:b8:ff:e6:d8:68:e3:67:d6:d0:5a:75:f9: 2e:69:53:a8:17:b1:ee:21:c5:43:9e:8e:0b:32:92: 59:6a:12:68:c4:e1:b2:1b:56:a0:ca:99:44:95:2a: ed:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F7:E6:DD:E3:20:A9:92:16:7A:2B:B9:5B:B0:C6:EC:23:BB:87:F2 X509v3 Authority Key Identifier: keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:65:cc:ba:94:b0:96:ee:fa:1f:fd:89:88:b3:f3:4e:0d:73: 91:8e:a9:51:61:bc:2c:48:d8:b1:78:12:9b:90:92:3d:97:c7: 83:ef:95:c8:66:b2:f2:e0:e8:02:07:96:a3:d5:00:bb:94:40: ec:19:27:44:22:4f:02:4e:71:2d:cb:09:30:49:3e:c3:ac:cd: 4a:80:69:e4:c6:3a:65:f6:99:21:2b:b8:3c:0a:65:9c:e1:c5: 16:b2:a9:1a:91:6c:cd:da:30:44:4d:88:0d:8f:81:b1:8f:a1: 05:29:e8:55:4c:b9:8e:71:d7:49:64:85:b0:9f:ee:3f:43:3f: d6:b9:ca:5f:63:59:03:31:3b:26:e7:2f:75:65:52:46:b2:de: 52:3e:5a:40:e9:21:b8:f7:56:fb:6c:ad:34:ee:5f:ea:5a:7f: c3:3f:66:36:41:a7:89:1e:02:70:82:5a:15:73:91:b7:53:87: 29:b0:da:26:e4:26:85:b1:38:86:cd:70:56:dc:f0:e8:ab:a8: a3:78:19:bd:23:e0:9c:b3:93:f4:60:ec:75:4d:0a:91:c9:00: 26:3b:ca:c5:cd:ec:05:f0:d8:54:51:9b:36:3a:40:94:5f:ea: f8:5a:13:4e:cb:33:3a:c2:4e:51:a0:66:79:ac:2d:e0:2a:17: 43:01:b8:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrr0FCLIIwSSPfZNt2Q9HxJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZTM2ZmNmYjA0N2I4YzY1M2ZmYTMyN2ZjMmNhNTExNjll OTQ3YTQwHhcNMjUxMjA1MDAwMTI5WhcNMjUxMjA2MDAwMTI5WjAzMTEwLwYDVQQD EygxN2Y3ZTZkZGUzMjBhOTkyMTY3YTJiYjk1YmIwYzZlYzIzYmI4N2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+GUzt6RLYcA06Z3doxtCkrTEyZI +ybxcVFPMYj5UGgdb9RYfMw+CG+OjKHGusywB8l7974cNx4ByCFNVxHbQtjTRJdj 6gH7jkAkp5y3PfSDv8JnCUVZkrss5xvCd2wAmG03Qto24oGU8kRswhmoelDX7PTp PiDQJPWfOxfFEFsNCgnrDxSbLuBbK06L4z/QDotMy/jzQGia2sVJpzkYRbfgyd0A WFzkQ1zv4/Q76nRnhfu/f+X9M9cWO44bSC3IxEFGXXxAWFWZnYW5RXKVB8Up93e4 /+bYaONn1tBadfkuaVOoF7HuIcVDno4LMpJZahJoxOGyG1agyplElSrtMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBf35t3jIKmSFnoruVuwxuwju4fyMB8GA1UdIwQY MBaAFBvjb8+wR7jGU/+jJ/wspRFp6UekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81ZGRkOTItNDFkNi00NjlmLTg5NmMt ZTBjOTY2YzE1ZDVmLzEvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS81ZGRkOTItNDFkNi00NjlmLTg5NmMtZTBjOTY2YzE1ZDVm LzEvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGXMupSw lu76H/2JiLPzTg1zkY6pUWG8LEjYsXgSm5CSPZfHg++VyGay8uDoAgeWo9UAu5RA 7BknRCJPAk5xLcsJMEk+w6zNSoBp5MY6ZfaZISu4PAplnOHFFrKpGpFszdowRE2I DY+BsY+hBSnoVUy5jnHXSWSFsJ/uP0M/1rnKX2NZAzE7JucvdWVSRrLeUj5aQOkh uPdW+2ytNO5f6lp/wz9mNkGniR4CcIJaFXORt1OHKbDaJuQmhbE4hs1wVtzw6Kuo o3gZvSPgnLOT9GDsdU0KkckAJjvKxc3sBfDYVFGbNjpAlF/q+FoTTsszOsJOUaBm eawt4CoXQwG49w== -----END CERTIFICATE-----Generated at Fri Dec 5 05:16:41 2025 by rpki-client