This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft File: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft (raw, json) Hash identifier: YHuvQA0tsDGg5IJl/wU2v/XsxsXtDObSBSbLgW1SJIU= Subject key identifier: FB:F9:88:15:C0:D5:60:50:DF:C6:5E:D3:39:22:B0:A8:2F:EC:87:74 Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF Certificate issuer: /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af Certificate serial: 019B3CEBBC2C9AB19495C5046C394E9C0241 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 18:00:40 +0000 Manifest this update: Sat 20 Dec 2025 18:00:40 +0000 Manifest next update: Sun 21 Dec 2025 18:00:40 +0000 Files and hashes: 1: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl (hash: FqpC+rgY7ok0iKmME04nfEb1ZBcjvb+cWHlTCjNbxPc=) 2: S_yQLv48huAuIFJl3M3q9MKN7ww.roa (hash: BfPTYmIN4iY+2dpqgW32GYnFtvPimuKxK2FzlajUXYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:bc:2c:9a:b1:94:95:c5:04:6c:39:4e:9c:02:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af Validity Not Before: Dec 20 18:00:40 2025 GMT Not After : Dec 21 18:00:40 2025 GMT Subject: CN=fbf98815c0d56050dfc65ed33922b0a82fec8774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:07:a3:ae:c9:3e:4a:99:09:0f:c7:c8:f2:7b: f6:32:33:8f:d1:8c:57:4d:90:7c:84:40:88:85:92: db:ed:15:bf:bc:73:d0:29:37:f1:dc:99:39:7f:71: 9f:d3:de:34:15:8e:be:17:1f:c2:f3:12:d4:42:4a: 6b:5c:93:c7:47:be:1e:2e:33:c6:f0:de:74:69:ce: c7:89:23:1d:c9:4d:5f:04:e3:6b:a0:1e:22:e7:39: fc:13:da:a7:72:1e:3f:c6:0b:99:eb:14:1b:18:6a: ed:cc:1f:72:a5:1a:4b:ad:07:8a:96:3a:33:74:97: bc:fe:45:84:17:ce:3a:e1:59:47:6f:d2:1d:b0:53: 5c:fb:ea:fd:41:21:cf:8a:c4:54:c4:e2:df:cf:86: ee:98:2a:49:55:9d:b9:d8:4b:b8:82:7e:97:bf:e0: 1f:55:fa:d9:7f:5f:ba:fb:80:41:79:9d:48:f2:1c: d0:43:90:10:f8:36:e6:3a:96:fe:fc:e7:d6:e0:0e: fc:74:03:2a:ad:f5:18:b4:65:3a:44:e8:91:91:21: 8d:02:d4:a4:ce:5b:fd:0e:76:23:4a:fa:19:42:8f: 09:fb:f4:33:5d:1c:df:83:bc:b1:23:8a:a2:99:9d: 89:12:d3:f6:bf:c7:9d:fa:0b:63:aa:1d:97:48:3e: 38:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F9:88:15:C0:D5:60:50:DF:C6:5E:D3:39:22:B0:A8:2F:EC:87:74 X509v3 Authority Key Identifier: keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:e4:a2:d0:ff:4b:e5:29:fd:22:70:2e:03:55:16:f2:6e:b1: 6e:49:fb:e7:f0:ae:4b:ba:c3:37:c3:58:3c:e4:fc:f0:a5:74: 83:51:0b:62:69:54:9b:10:9b:30:a7:be:da:9c:19:f5:25:6d: d9:b9:b9:09:08:6b:76:40:a6:0e:59:52:fe:db:c5:b7:92:de: 51:1f:56:68:de:fb:22:70:81:cb:d4:49:85:ea:5f:9e:13:a3: 82:19:1f:d2:3f:a2:32:ee:76:ce:25:5d:ce:8c:ed:8b:f0:1b: f9:70:3a:f3:cc:d8:88:0e:47:14:4c:e0:44:76:64:84:98:bb: 68:99:80:d8:0b:82:01:b0:19:53:8b:89:ed:3d:1d:ac:10:4d: 68:4b:a4:68:06:8f:5b:bd:b9:a2:cb:11:2e:de:e9:7d:a0:a1: b5:9f:3b:c0:cf:cc:b7:99:66:0b:42:e9:f6:3e:91:72:37:bc: 65:ea:1e:21:88:e9:fb:11:a0:91:b9:26:a1:0b:b2:c3:fb:82: 4e:46:30:48:37:0c:52:e3:db:02:57:72:10:1e:d7:02:25:92: e2:ed:f5:a2:73:51:76:6e:5f:ff:cd:4d:e1:1b:da:84:a7:92: 5d:f1:0e:12:3a:92:c4:5d:3f:ca:be:42:99:ff:2f:11:0b:87: 3e:ea:c9:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs867wsmrGUlcUEbDlOnAJBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhM2U5NzBlZDYyNzcxMzQzYTA5NmZmYjJlZmMyNmFiYjdl ZDY4YWYwHhcNMjUxMjIwMTgwMDQwWhcNMjUxMjIxMTgwMDQwWjAzMTEwLwYDVQQD EyhmYmY5ODgxNWMwZDU2MDUwZGZjNjVlZDMzOTIyYjBhODJmZWM4Nzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wejrsk+SpkJD8fI8nv2MjOP0YxX TZB8hECIhZLb7RW/vHPQKTfx3Jk5f3Gf0940FY6+Fx/C8xLUQkprXJPHR74eLjPG 8N50ac7HiSMdyU1fBONroB4i5zn8E9qnch4/xguZ6xQbGGrtzB9ypRpLrQeKljoz dJe8/kWEF8464VlHb9IdsFNc++r9QSHPisRUxOLfz4bumCpJVZ252Eu4gn6Xv+Af VfrZf1+6+4BBeZ1I8hzQQ5AQ+DbmOpb+/OfW4A78dAMqrfUYtGU6ROiRkSGNAtSk zlv9DnYjSvoZQo8J+/QzXRzfg7yxI4qimZ2JEtP2v8ed+gtjqh2XSD44gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPv5iBXA1WBQ38Ze0zkisKgv7Id0MB8GA1UdIwQY MBaAFBo+lw7WJ3E0Oglv+y78Jqu37WivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUt ZDQ4OTA5NGM2NjA0LzEvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUtZDQ4OTA5NGM2NjA0 LzEvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+Si0P9L 5Sn9InAuA1UW8m6xbkn75/CuS7rDN8NYPOT88KV0g1ELYmlUmxCbMKe+2pwZ9SVt 2bm5CQhrdkCmDllS/tvFt5LeUR9WaN77InCBy9RJhepfnhOjghkf0j+iMu52ziVd zozti/Ab+XA688zYiA5HFEzgRHZkhJi7aJmA2AuCAbAZU4uJ7T0drBBNaEukaAaP W725ossRLt7pfaChtZ87wM/Mt5lmC0Lp9j6Rcje8ZeoeIYjp+xGgkbkmoQuyw/uC TkYwSDcMUuPbAldyEB7XAiWS4u31onNRdm5f/81N4RvahKeSXfEOEjqSxF0/yr5C mf8vEQuHPurJog== -----END CERTIFICATE-----Generated at Sun Dec 21 04:26:19 2025 by rpki-client