This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft File: G7yEG3eaK7LCio2u4rLRDVp8NNU.mft (raw, json) Hash identifier: jMM9rQiHVsD5xsHIqEzu02I+TPIe5/q9Ng6pmXJcEF4= Subject key identifier: A0:E1:AB:57:F1:FA:93:E8:F0:2D:B9:2C:64:F9:46:F1:21:A8:F7:62 Authority key identifier: 1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5 Certificate issuer: /CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5 Certificate serial: 019B50729CA040695E66D20F3E5C54249C9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 13:00:46 +0000 Manifest this update: Wed 24 Dec 2025 13:00:46 +0000 Manifest next update: Thu 25 Dec 2025 13:00:46 +0000 Files and hashes: 1: G7yEG3eaK7LCio2u4rLRDVp8NNU.crl (hash: /bGqYOcCTW19tPa6b/kaGgqZQjpROPvTeWQEniNd0Ys=) 2: VBl-ShtkY5AIJWsXxjtVR-loSP4.roa (hash: UuFGS1s0gPMKN8UjwJZO3gcLtja3SP+rxmHIDo2PFTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:9c:a0:40:69:5e:66:d2:0f:3e:5c:54:24:9c:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5 Validity Not Before: Dec 24 13:00:46 2025 GMT Not After : Dec 25 13:00:46 2025 GMT Subject: CN=a0e1ab57f1fa93e8f02db92c64f946f121a8f762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c6:9a:cc:34:ab:77:e5:d9:ee:fb:9e:09:bf: 09:8f:1d:15:69:b1:84:cd:1f:d3:6e:8c:8f:8b:da: 1e:fb:ba:1e:6b:52:fc:b3:4b:eb:f3:84:0e:b5:d3: d4:2b:51:6b:b8:2d:e6:d6:e7:5b:09:3e:ca:76:b0: a4:fb:c1:7b:cd:16:18:c3:ec:b6:24:80:d6:40:8c: 83:42:2f:eb:79:bf:12:37:08:9a:8d:84:67:cc:48: 3c:2d:62:9d:4c:f4:9b:a1:a0:bf:bd:ce:3f:ff:0c: 96:dc:08:e6:9f:c7:23:ed:c7:0e:62:2d:68:1b:c8: 31:d1:30:59:26:ec:ce:aa:17:fe:70:db:22:68:40: 03:e1:16:fd:d0:d7:0d:8b:63:13:9d:3e:95:06:89: 10:6b:af:c6:82:da:95:97:86:b0:81:0f:41:e7:c5: 73:30:e1:b7:d6:38:60:04:20:e8:ba:30:a7:8d:04: 91:db:e1:75:b4:49:2f:29:ce:3e:7a:49:5b:4f:05: 39:2c:4e:b4:e9:69:09:e6:00:4a:fc:ca:23:a3:69: c5:45:00:44:3d:d4:a8:5d:f0:3d:dc:8c:07:5d:8a: 8c:46:36:9a:a8:dc:7e:4d:05:be:9f:46:ca:7a:98: 5a:d6:0f:e0:91:81:d8:8b:87:8b:67:3a:93:4b:0a: 83:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E1:AB:57:F1:FA:93:E8:F0:2D:B9:2C:64:F9:46:F1:21:A8:F7:62 X509v3 Authority Key Identifier: keyid:1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:51:9b:c5:69:d6:8a:6b:47:f0:ed:48:23:cc:fc:49:46:80: 3a:56:cc:f6:00:0a:6e:19:b3:d4:44:fd:5f:34:37:b3:57:5d: 11:89:22:4a:24:8d:0f:97:2c:37:fe:2b:18:8c:db:11:a2:50: 1e:ff:c8:4f:21:4a:08:95:7e:f7:53:8d:18:1d:ef:73:c1:b3: 88:4a:a4:18:66:8e:bc:77:f9:ea:3b:89:a8:fc:00:23:19:c5: 99:e0:4d:90:40:6e:09:9c:cd:96:5c:47:47:21:3b:23:c4:5c: 2e:91:35:40:d5:be:22:31:e6:a9:78:7c:05:ff:d8:cb:d6:bd: 30:c1:33:f9:81:44:d5:de:0a:8c:94:c1:c2:9f:2c:b8:1d:a0: 95:33:60:5a:38:96:49:72:75:b6:93:8f:12:34:cd:71:0f:68: f3:b5:cc:4b:dd:99:5a:9e:93:9a:93:95:bd:aa:60:21:b6:f3: 47:18:7d:af:29:0f:2e:29:0e:cb:b8:9b:cf:66:8f:6b:a1:26: 83:dc:1f:98:6a:cf:5e:74:c9:62:47:46:f1:9f:65:df:da:ad: 19:35:13:31:11:69:59:7d:fa:6e:f6:0d:b4:5a:7a:7f:58:28: a7:97:98:c0:11:c9:84:c0:85:c0:c0:e0:ba:c2:25:e7:94:9a: 3b:e0:ac:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcpygQGleZtIPPlxUJJydMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYmM4NDFiNzc5YTJiYjJjMjhhOGRhZWUyYjJkMTBkNWE3 YzM0ZDUwHhcNMjUxMjI0MTMwMDQ2WhcNMjUxMjI1MTMwMDQ2WjAzMTEwLwYDVQQD EyhhMGUxYWI1N2YxZmE5M2U4ZjAyZGI5MmM2NGY5NDZmMTIxYThmNzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8aazDSrd+XZ7vueCb8Jjx0VabGE zR/TboyPi9oe+7oea1L8s0vr84QOtdPUK1FruC3m1udbCT7KdrCk+8F7zRYYw+y2 JIDWQIyDQi/reb8SNwiajYRnzEg8LWKdTPSboaC/vc4//wyW3Ajmn8cj7ccOYi1o G8gx0TBZJuzOqhf+cNsiaEAD4Rb90NcNi2MTnT6VBokQa6/GgtqVl4awgQ9B58Vz MOG31jhgBCDoujCnjQSR2+F1tEkvKc4+eklbTwU5LE606WkJ5gBK/Mojo2nFRQBE PdSoXfA93IwHXYqMRjaaqNx+TQW+n0bKepha1g/gkYHYi4eLZzqTSwqDtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDhq1fx+pPo8C25LGT5RvEhqPdiMB8GA1UdIwQY MBaAFBu8hBt3miuywoqNruKy0Q1afDTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzd5RUczZWFLN0xDaW8ydTRyTFJEVnA4Tk5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82MDQ0N2QtZDMwNS00ZGVhLTlkYWEt MjY4MzcwMzhjNjg4LzEvRzd5RUczZWFLN0xDaW8ydTRyTFJEVnA4Tk5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82MDQ0N2QtZDMwNS00ZGVhLTlkYWEtMjY4MzcwMzhjNjg4 LzEvRzd5RUczZWFLN0xDaW8ydTRyTFJEVnA4Tk5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVGbxWnW imtH8O1II8z8SUaAOlbM9gAKbhmz1ET9XzQ3s1ddEYkiSiSND5csN/4rGIzbEaJQ Hv/ITyFKCJV+91ONGB3vc8GziEqkGGaOvHf56juJqPwAIxnFmeBNkEBuCZzNllxH RyE7I8RcLpE1QNW+IjHmqXh8Bf/Yy9a9MMEz+YFE1d4KjJTBwp8suB2glTNgWjiW SXJ1tpOPEjTNcQ9o87XMS92ZWp6TmpOVvapgIbbzRxh9rykPLikOy7ibz2aPa6Em g9wfmGrPXnTJYkdG8Z9l39qtGTUTMRFpWX36bvYNtFp6f1gop5eYwBHJhMCFwMDg usIl55SaO+CsGA== -----END CERTIFICATE-----Generated at Wed Dec 24 20:00:41 2025 by rpki-client