This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft File: G2pafunSGn3UW7v_9DGzZN6gta4.mft (raw, json) Hash identifier: x1GKJCJv4GD7XSTDmrLrQgTyw+K2HkMbVD+QCABMNjA= Subject key identifier: 26:DE:17:1E:A5:72:DF:5D:B9:CE:E5:6F:E7:29:EA:6E:8E:AC:57:BB Authority key identifier: 1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE Certificate issuer: /CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae Certificate serial: 019B4E161E2131CBC96ED1536A9477046F5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft Manifest number: 09BD Signing time: Wed 24 Dec 2025 02:00:30 +0000 Manifest this update: Wed 24 Dec 2025 02:00:30 +0000 Manifest next update: Thu 25 Dec 2025 02:00:30 +0000 Files and hashes: 1: G2pafunSGn3UW7v_9DGzZN6gta4.crl (hash: erOIxrIURpsU1y1Oio5xCtVT34W06jJvUbsZsBkBIf0=) 2: sEHEZJdyZNM4H5KyWrunH6ae2rs.roa (hash: 2fdDOMvINX/MZk3ZnK4mtn0JneFrVoF0x/0pmTQHlWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:1e:21:31:cb:c9:6e:d1:53:6a:94:77:04:6f:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae Validity Not Before: Dec 24 02:00:30 2025 GMT Not After : Dec 25 02:00:30 2025 GMT Subject: CN=26de171ea572df5db9cee56fe729ea6e8eac57bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c5:f6:84:22:b7:96:a7:db:19:c3:8f:63:65: 1a:06:d6:5b:c8:2a:0b:98:07:07:7e:52:c8:39:9b: b0:f8:89:19:25:1b:2b:aa:ad:2d:1e:95:22:ea:2c: 96:3b:d6:d5:25:3e:3a:e4:39:4c:62:cd:f7:6c:d1: db:d0:b1:e7:0e:5d:1f:2e:5f:bf:c4:a6:3f:88:c5: 46:8e:f8:97:66:b3:46:9c:10:67:71:73:1a:fa:25: ba:1f:6c:34:92:9f:7a:cc:05:50:09:3c:e7:44:1e: 44:3f:e0:76:c0:30:ec:4a:d6:9a:fb:75:ce:16:3d: 9a:47:0f:47:b2:f5:c1:7d:60:5f:92:63:45:f7:f3: 1d:ae:f4:fe:17:53:55:ab:a3:58:d9:76:16:c3:b2: b4:9c:90:fa:3f:c1:33:dd:3f:ef:21:fb:2a:92:24: 1d:a6:c7:eb:5b:5b:a0:dd:63:22:14:f5:f4:ba:22: 02:c9:61:2f:13:c2:72:bc:b7:84:15:17:25:96:3d: 9c:df:f6:48:60:9d:a7:68:b8:14:fa:8b:8d:a1:76: de:97:2e:9e:a5:26:31:25:03:0a:44:65:f6:54:9a: fb:ef:2e:61:49:d8:7a:78:70:8f:9d:fb:f5:b3:4b: 25:01:cf:48:d0:b3:e1:14:c9:d5:ac:83:6c:a1:bb: 9a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DE:17:1E:A5:72:DF:5D:B9:CE:E5:6F:E7:29:EA:6E:8E:AC:57:BB X509v3 Authority Key Identifier: keyid:1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:22:1f:62:dd:b9:60:cc:d4:df:87:a6:ea:24:1f:02:2c:3f: 99:76:f1:6a:a1:32:6f:6d:1c:f9:65:52:0c:02:b3:61:92:56: c7:2e:a9:1e:e7:72:1e:1e:0b:57:49:11:43:2a:35:5a:11:21: e9:40:43:3a:10:6c:d8:65:67:32:29:ed:0f:64:80:cd:f1:15: b9:b3:7b:5e:98:6e:85:19:fe:38:a9:a6:53:26:2a:69:3a:a9: 8d:ce:86:b6:f9:93:f8:8a:78:29:0d:5e:66:b2:cd:0e:5b:fb: 49:65:41:f9:02:36:ce:30:6e:ed:f9:05:de:5d:58:6c:e0:6f: 6c:d4:d0:88:81:c0:cb:43:23:89:3d:77:95:6a:21:80:83:0a: bd:e5:dc:8c:c1:67:14:55:71:ff:7d:45:a4:b3:9b:05:5b:2e: a6:46:e5:6d:2c:aa:05:1d:6c:48:5b:95:d2:87:e4:0d:7f:5f: 48:50:56:2b:40:36:fc:5d:75:44:93:15:95:48:d8:f6:f4:ba: 39:35:de:c6:fc:e6:f2:ff:2d:51:a4:4d:09:07:c4:4c:99:3e: ab:3c:b5:f6:26:85:c2:28:5a:9c:8a:58:46:e2:2d:b2:64:66: 56:98:dd:ea:5d:84:c2:c5:40:43:a1:bd:2a:3c:9e:08:6f:cc: 1b:c3:cc:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFh4hMcvJbtFTapR3BG9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNmE1YTdlZTlkMjFhN2RkNDViYmJmZmY0MzFiMzY0ZGVh MGI1YWUwHhcNMjUxMjI0MDIwMDMwWhcNMjUxMjI1MDIwMDMwWjAzMTEwLwYDVQQD EygyNmRlMTcxZWE1NzJkZjVkYjljZWU1NmZlNzI5ZWE2ZThlYWM1N2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMX2hCK3lqfbGcOPY2UaBtZbyCoL mAcHflLIOZuw+IkZJRsrqq0tHpUi6iyWO9bVJT465DlMYs33bNHb0LHnDl0fLl+/ xKY/iMVGjviXZrNGnBBncXMa+iW6H2w0kp96zAVQCTznRB5EP+B2wDDsStaa+3XO Fj2aRw9HsvXBfWBfkmNF9/MdrvT+F1NVq6NY2XYWw7K0nJD6P8Ez3T/vIfsqkiQd psfrW1ug3WMiFPX0uiICyWEvE8JyvLeEFRcllj2c3/ZIYJ2naLgU+ouNoXbely6e pSYxJQMKRGX2VJr77y5hSdh6eHCPnfv1s0slAc9I0LPhFMnVrINsobuaoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbeFx6lct9duc7lb+cp6m6OrFe7MB8GA1UdIwQY MBaAFBtqWn7p0hp91Fu7//Qxs2TeoLWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kOGIwYzMtM2Y3MC00M2RiLTg1YTQt NWJlMTIwMjM2N2U5LzEvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kOGIwYzMtM2Y3MC00M2RiLTg1YTQtNWJlMTIwMjM2N2U5 LzEvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyIfYt25 YMzU34em6iQfAiw/mXbxaqEyb20c+WVSDAKzYZJWxy6pHudyHh4LV0kRQyo1WhEh 6UBDOhBs2GVnMintD2SAzfEVubN7XphuhRn+OKmmUyYqaTqpjc6GtvmT+Ip4KQ1e ZrLNDlv7SWVB+QI2zjBu7fkF3l1YbOBvbNTQiIHAy0MjiT13lWohgIMKveXcjMFn FFVx/31FpLObBVsupkblbSyqBR1sSFuV0ofkDX9fSFBWK0A2/F11RJMVlUjY9vS6 OTXexvzm8v8tUaRNCQfETJk+qzy19iaFwihanIpYRuItsmRmVpjd6l2EwsVAQ6G9 KjyeCG/MG8PMqw== -----END CERTIFICATE-----Generated at Wed Dec 24 11:43:58 2025 by rpki-client