This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json) Hash identifier: L3qckKVhrKp0yRU11O37Q7K+GANgT2cvfufBDe50Gx8= Subject key identifier: 59:76:35:01:9D:93:1C:9B:FF:EB:38:70:8C:BC:E4:97:F2:F0:43:71 Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1 Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1 Certificate serial: 019B1BA9FCC986062E1A51DF13F1D956233D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 07:01:23 +0000 Manifest this update: Sun 14 Dec 2025 07:01:23 +0000 Manifest next update: Mon 15 Dec 2025 07:01:23 +0000 Files and hashes: 1: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: AgIzhJNQa2+QDRNaGODBTAjVz0eLPmdw4AwTiX07+30=) 2: a6z9s2B5USpArv-yW1XShxJdtpo.roa (hash: hfVnswmh8KT0yGpguvtRDoEqQ95xhx5KsIsgaJn/9yM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:a9:fc:c9:86:06:2e:1a:51:df:13:f1:d9:56:23:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1 Validity Not Before: Dec 14 07:01:23 2025 GMT Not After : Dec 15 07:01:23 2025 GMT Subject: CN=597635019d931c9bffeb38708cbce497f2f04371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1e:ef:96:1b:80:3f:68:ca:bb:0c:ae:bc:8c: d9:d4:9b:33:a5:13:0c:a6:e0:88:e1:84:0b:94:c5: 9b:d4:53:29:92:b6:98:46:35:83:3e:4a:86:33:d4: 74:41:58:d1:6a:40:06:ea:29:5a:15:9e:c3:06:ae: 19:6e:6e:f2:be:fc:bb:21:38:8a:51:f1:28:ed:a0: 76:37:a4:32:c8:8b:ad:2c:60:27:cb:01:f9:eb:6a: 29:9c:30:5a:3e:0b:a0:ed:6d:18:2e:cc:df:4e:d6: fc:77:31:a2:86:8a:1f:f3:44:e8:93:7a:30:de:35: fd:d6:f8:86:4d:09:f3:0f:a4:10:34:f8:a4:b3:3f: 88:b2:ad:57:e7:70:3d:60:c0:e0:f0:b5:d3:37:5c: d5:a6:06:bc:c5:6f:67:31:98:b1:6f:05:c7:7d:c3: ee:38:0b:7a:46:f9:16:b1:e6:f0:44:8f:98:5b:3a: 37:55:5d:ca:47:c0:2e:3e:13:a9:de:cf:f3:86:88: 57:ab:9b:8c:74:41:fc:63:01:c4:41:b8:6b:6b:1b: ef:ab:95:29:8c:8d:fb:8c:28:22:27:b4:3e:3f:3f: a0:76:13:8f:47:91:74:08:48:73:f6:12:48:d0:62: 52:ab:cf:33:19:2c:a6:85:50:86:20:aa:61:cb:27: d7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:76:35:01:9D:93:1C:9B:FF:EB:38:70:8C:BC:E4:97:F2:F0:43:71 X509v3 Authority Key Identifier: keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4b:cb:55:5c:df:d0:6d:57:76:21:7f:c3:da:bc:de:0b:8a: cd:7c:ad:77:f8:46:43:ca:49:b0:ef:30:7c:a8:e7:33:64:45: 37:af:27:9a:4d:91:63:3a:36:9d:ae:30:17:ae:c9:23:99:81: 21:e5:c4:07:d6:55:70:72:f8:18:67:ad:9e:f1:81:15:64:0d: ad:04:02:3b:84:9d:da:d0:e8:3c:ad:1f:00:10:7f:9b:78:96: 8e:26:54:23:5d:70:51:7a:df:e4:9e:3d:c9:d1:25:39:26:27: e3:ac:31:e8:7e:f4:a6:38:eb:28:71:a9:9c:e4:8c:3d:49:66: c7:3f:8e:57:36:dd:d0:6b:2b:1f:c1:c5:a2:bc:df:0a:3b:1a: f2:39:0a:48:36:94:ed:a1:fe:36:64:c5:29:cf:03:56:dd:7b: 47:29:93:eb:b4:9c:ce:36:5e:81:34:fc:f3:14:06:3c:9b:e9: 7b:ee:3b:37:f2:00:14:1f:6e:ea:ca:c8:cc:c9:00:87:89:fd: 4c:f0:6c:41:96:f0:05:89:b6:86:49:7e:a5:d5:06:f1:92:cf: cf:74:9e:3d:1b:8f:25:dd:96:8f:d1:f3:b6:d0:64:84:10:ba: c6:ad:97:97:f5:73:08:cb:23:e0:2a:8c:62:06:e8:1d:b5:3f: 38:de:10:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqfzJhgYuGlHfE/HZViM9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZWY1YWExNGQzMTQwYzdjN2M0OTg4ZjE5ZGE5NDMxZWIx YTQwZjEwHhcNMjUxMjE0MDcwMTIzWhcNMjUxMjE1MDcwMTIzWjAzMTEwLwYDVQQD Eyg1OTc2MzUwMTlkOTMxYzliZmZlYjM4NzA4Y2JjZTQ5N2YyZjA0MzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh7vlhuAP2jKuwyuvIzZ1JszpRMM puCI4YQLlMWb1FMpkraYRjWDPkqGM9R0QVjRakAG6ilaFZ7DBq4Zbm7yvvy7ITiK UfEo7aB2N6QyyIutLGAnywH562opnDBaPgug7W0YLszfTtb8dzGihoof80Tok3ow 3jX91viGTQnzD6QQNPiksz+Isq1X53A9YMDg8LXTN1zVpga8xW9nMZixbwXHfcPu OAt6RvkWsebwRI+YWzo3VV3KR8AuPhOp3s/zhohXq5uMdEH8YwHEQbhraxvvq5Up jI37jCgiJ7Q+Pz+gdhOPR5F0CEhz9hJI0GJSq88zGSymhVCGIKphyyfXGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFl2NQGdkxyb/+s4cIy85Jfy8ENxMB8GA1UdIwQY MBaAFBvvWqFNMUDHx8SYjxnalDHrGkDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZDYxNjctZjAyYi00NGRiLWI1NjUt MGU0MzgyMzEwY2E1LzEvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC81ZDYxNjctZjAyYi00NGRiLWI1NjUtMGU0MzgyMzEwY2E1 LzEvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkvLVVzf 0G1XdiF/w9q83guKzXytd/hGQ8pJsO8wfKjnM2RFN68nmk2RYzo2na4wF67JI5mB IeXEB9ZVcHL4GGetnvGBFWQNrQQCO4Sd2tDoPK0fABB/m3iWjiZUI11wUXrf5J49 ydElOSYn46wx6H70pjjrKHGpnOSMPUlmxz+OVzbd0GsrH8HForzfCjsa8jkKSDaU 7aH+NmTFKc8DVt17RymT67SczjZegTT88xQGPJvpe+47N/IAFB9u6srIzMkAh4n9 TPBsQZbwBYm2hkl+pdUG8ZLPz3SePRuPJd2Wj9HzttBkhBC6xq2Xl/VzCMsj4CqM YgboHbU/ON4Qxg== -----END CERTIFICATE-----Generated at Sun Dec 14 16:56:45 2025 by rpki-client