This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft File: Rg7_G6LS91kqRNITPSB7KT4kGsI.mft (raw, json) Hash identifier: zTegl64XmvNi4mt/GgzytStbOAyLuIZBfLJxZdRHZ98= Subject key identifier: AE:70:5D:DF:7E:4F:95:9D:AF:1C:B5:17:D0:EB:6F:C5:79:CC:D9:90 Authority key identifier: 46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2 Certificate issuer: /CN=460eff1ba2d2f7592a44d2133d207b293e241ac2 Certificate serial: 019B397DAC16C20AC151E781A9D6D59175BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft Manifest number: 0C8D Signing time: Sat 20 Dec 2025 02:01:35 +0000 Manifest this update: Sat 20 Dec 2025 02:01:35 +0000 Manifest next update: Sun 21 Dec 2025 02:01:35 +0000 Files and hashes: 1: Rg7_G6LS91kqRNITPSB7KT4kGsI.crl (hash: GB7+nPZjO0LPzRgSOJ/SOt2/o0FnoCZ0K+g7QzPl8AQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:ac:16:c2:0a:c1:51:e7:81:a9:d6:d5:91:75:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=460eff1ba2d2f7592a44d2133d207b293e241ac2 Validity Not Before: Dec 20 02:01:35 2025 GMT Not After : Dec 21 02:01:35 2025 GMT Subject: CN=ae705ddf7e4f959daf1cb517d0eb6fc579ccd990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:75:bc:19:25:25:6e:48:63:20:94:6f:57:35: 13:a4:59:0b:65:83:e5:23:cc:97:4c:da:20:4f:d6: 0e:c0:d0:d0:54:47:18:a3:61:2c:38:ae:80:8d:c8: 47:b0:2d:07:80:ec:c5:0e:d7:6a:e5:86:54:a8:16: 7f:f9:46:60:af:57:89:fb:d3:ec:f0:97:36:71:a3: c8:b2:a1:cc:49:e4:12:81:72:fb:a3:90:29:d0:09: 88:e8:30:0f:e6:52:bb:63:a4:a0:3e:d6:b0:ca:64: e5:55:99:42:6a:1a:29:08:17:a6:26:59:3d:fd:f6: 17:b8:65:11:57:40:57:78:7e:72:15:09:e4:59:a4: ea:a7:60:b4:50:b6:37:b5:0d:47:24:c4:f9:00:9e: cd:c2:6d:06:c9:2a:88:16:f1:8a:2a:80:90:07:62: 5c:91:71:b2:0d:7c:96:31:c5:1d:80:9f:57:93:e2: 99:e0:df:02:82:b4:1d:31:63:a8:09:d4:55:70:fc: 50:b9:5e:80:50:b5:39:53:81:54:88:b1:a7:f7:4d: 59:7c:93:92:db:c2:8b:56:c8:e7:35:d9:66:4b:5a: 1a:cc:d8:a9:ce:61:74:df:27:8f:e8:55:3b:d2:f3: 4a:07:65:3d:4e:fc:ef:1d:0e:cf:7e:49:c4:26:4b: af:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:70:5D:DF:7E:4F:95:9D:AF:1C:B5:17:D0:EB:6F:C5:79:CC:D9:90 X509v3 Authority Key Identifier: keyid:46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:05:80:0e:de:3e:49:36:43:1e:5b:69:0a:6b:b1:89:51:d3: c2:c5:ec:80:0e:83:0e:d3:b0:0d:12:c3:29:5c:f0:26:5a:19: 3e:c8:21:2b:78:7d:d9:1d:fe:be:96:33:bd:8b:b3:86:24:96: 69:ac:d5:a7:c1:d7:d5:dc:10:df:55:74:ca:b9:e1:63:4f:f7: 81:80:7a:eb:9d:4d:31:18:9f:33:0c:a7:21:d8:5b:73:3d:0e: df:4e:7b:f9:4e:f8:70:1a:12:24:0f:6f:b4:9c:34:06:af:eb: 15:f8:c2:4a:7f:d6:28:30:3c:5d:e3:17:29:6e:28:85:d2:ce: 03:9e:e6:5d:d5:ec:64:66:48:ea:b3:a1:0c:e8:c6:64:45:44: 9e:18:68:8c:a8:36:de:83:84:f2:87:c6:96:d3:16:dc:8b:99: fe:47:03:e8:75:5e:3e:b6:81:5a:18:0b:c9:38:6d:31:88:45: 33:84:7b:1f:39:8e:61:43:20:58:5c:48:dd:71:d0:33:5f:1b: 10:66:41:84:e3:41:08:f7:b9:fa:20:dd:a9:5d:e4:ef:69:cd: 73:47:49:7b:80:f6:71:b7:ba:cd:a8:c4:40:57:a2:11:ce:c0: ca:f9:1d:f9:8a:df:ef:09:4f:35:26:66:50:69:67:0c:ed:b2: f1:45:d7:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fawWwgrBUeeBqdbVkXW7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MGVmZjFiYTJkMmY3NTkyYTQ0ZDIxMzNkMjA3YjI5M2Uy NDFhYzIwHhcNMjUxMjIwMDIwMTM1WhcNMjUxMjIxMDIwMTM1WjAzMTEwLwYDVQQD EyhhZTcwNWRkZjdlNGY5NTlkYWYxY2I1MTdkMGViNmZjNTc5Y2NkOTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HW8GSUlbkhjIJRvVzUTpFkLZYPl I8yXTNogT9YOwNDQVEcYo2EsOK6AjchHsC0HgOzFDtdq5YZUqBZ/+UZgr1eJ+9Ps 8Jc2caPIsqHMSeQSgXL7o5Ap0AmI6DAP5lK7Y6SgPtawymTlVZlCahopCBemJlk9 /fYXuGURV0BXeH5yFQnkWaTqp2C0ULY3tQ1HJMT5AJ7Nwm0GySqIFvGKKoCQB2Jc kXGyDXyWMcUdgJ9Xk+KZ4N8CgrQdMWOoCdRVcPxQuV6AULU5U4FUiLGn901ZfJOS 28KLVsjnNdlmS1oazNipzmF03yeP6FU70vNKB2U9TvzvHQ7PfknEJkuviQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5wXd9+T5Wdrxy1F9Drb8V5zNmQMB8GA1UdIwQY MBaAFEYO/xui0vdZKkTSEz0geyk+JBrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmc3X0c2TFM5MWtxUk5JVFBTQjdLVDRrR3NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yZWY3N2UtOTE5Zi00ODZjLTgxMjQt YTNiMTc5OGU0MTMxLzEvUmc3X0c2TFM5MWtxUk5JVFBTQjdLVDRrR3NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8yZWY3N2UtOTE5Zi00ODZjLTgxMjQtYTNiMTc5OGU0MTMx LzEvUmc3X0c2TFM5MWtxUk5JVFBTQjdLVDRrR3NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvQWADt4+ STZDHltpCmuxiVHTwsXsgA6DDtOwDRLDKVzwJloZPsghK3h92R3+vpYzvYuzhiSW aazVp8HX1dwQ31V0yrnhY0/3gYB6651NMRifMwynIdhbcz0O3057+U74cBoSJA9v tJw0Bq/rFfjCSn/WKDA8XeMXKW4ohdLOA57mXdXsZGZI6rOhDOjGZEVEnhhojKg2 3oOE8ofGltMW3IuZ/kcD6HVePraBWhgLyThtMYhFM4R7HzmOYUMgWFxI3XHQM18b EGZBhONBCPe5+iDdqV3k72nNc0dJe4D2cbe6zajEQFeiEc7Ayvkd+Yrf7wlPNSZm UGlnDO2y8UXXxQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:20:16 2025 by rpki-client