This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json) Hash identifier: 7hHk1gV9ERVLD8Q+XzahHXV1u6pSma4RLlgWC5Gm2QQ= Subject key identifier: A5:1E:E3:A3:E9:18:AA:C8:B3:F2:15:53:59:6F:3A:07:E6:A4:0F:32 Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54 Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854 Certificate serial: 019B3FECAEEF8C56FDD989B4C6E2A9820389 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft Manifest number: 1663 Signing time: Sun 21 Dec 2025 08:00:34 +0000 Manifest this update: Sun 21 Dec 2025 08:00:34 +0000 Manifest next update: Mon 22 Dec 2025 08:00:34 +0000 Files and hashes: 1: Crf41pfcZmNKuDt4hymlQTfYG2U.roa (hash: c4qxY3jolPv2UXEdOnJwnhLS1Znb3vlJyUzlD0LFsHY=) 2: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: sVdzh8uRjduIJIFHm+1ogrSBIqzT9KM6H9FUNOWxxvQ=) 3: YCXRBD7Zei1Us8_1Zrh0WouSVoc.roa (hash: uf8QrvagAa32Z+Kqsvosmb8r/ocn/wRQquN7YdO8AOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:ae:ef:8c:56:fd:d9:89:b4:c6:e2:a9:82:03:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854 Validity Not Before: Dec 21 08:00:34 2025 GMT Not After : Dec 22 08:00:34 2025 GMT Subject: CN=a51ee3a3e918aac8b3f21553596f3a07e6a40f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:77:14:37:10:e5:90:48:ee:0c:c0:72:c3:a8: dd:8a:fd:16:2f:e4:26:4f:25:60:57:54:59:13:90: 2c:69:ab:d0:25:36:5d:8e:7e:6f:b1:c2:52:5b:20: e5:65:25:4b:8b:cb:12:67:72:7a:c0:c6:6b:af:e1: d2:d4:f2:bc:95:d5:07:c7:ae:7a:aa:df:3e:f1:3b: d1:8a:ec:41:84:76:6b:21:c8:db:b0:ef:bf:89:12: 20:ab:06:03:53:12:2f:40:1f:c9:f1:54:0e:76:5b: b2:8e:c0:9f:ea:11:1e:2d:3f:77:c6:c0:d8:ed:8a: 97:b1:42:94:2d:63:9d:12:18:e2:ab:f5:26:17:ff: dc:cc:e9:53:28:66:ee:4d:bb:b9:f5:3b:0d:65:1a: 85:a3:96:49:5b:cf:60:ee:02:27:09:c5:bb:c0:ea: 30:3d:41:7c:0b:05:aa:ea:8f:d2:13:a2:fe:f1:c9: 90:c0:ba:68:4a:12:c5:81:0f:37:7e:22:61:eb:cd: 0e:ef:42:ed:da:0a:81:4a:fd:a5:9d:0c:56:70:21: 11:b0:d4:0e:1c:a5:b8:d4:e8:f0:d6:59:67:f8:da: 8a:35:58:7f:62:ef:87:8f:b8:b9:04:65:91:c9:a9: 84:24:d7:46:83:6f:56:4e:a9:0d:87:bd:dd:19:92: 04:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1E:E3:A3:E9:18:AA:C8:B3:F2:15:53:59:6F:3A:07:E6:A4:0F:32 X509v3 Authority Key Identifier: keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:30:21:ab:9a:91:6e:0c:6d:b9:e9:8b:98:36:91:73:84:c4: d6:27:91:3b:00:de:17:bc:73:ac:17:16:17:9a:fb:f0:35:1e: 73:f6:86:eb:e2:23:63:e8:12:33:58:3b:9e:63:4d:c9:9e:65: 83:b5:43:c2:4f:0d:60:62:6f:b8:69:ff:82:f6:1b:c6:09:d5: 6d:d3:b6:ff:9c:2c:a1:15:7f:8d:44:56:c9:12:fb:58:f6:5e: 45:3f:d2:0f:c4:d4:b1:b7:0e:bf:f0:ac:a9:86:ce:65:fa:3f: 37:7f:4c:cd:4d:44:64:11:6a:4c:95:e3:f7:ee:85:e6:58:53: 40:46:f2:e4:ff:87:b3:3a:ff:12:0f:de:86:6d:1f:8b:e8:35: 51:a4:3d:9b:b1:fb:17:b4:8a:fd:77:56:e4:f4:40:0f:da:e2: b2:1b:ce:4d:69:f1:ca:12:43:32:9d:98:a2:62:02:41:dc:dd: a5:6b:bb:5a:f4:97:7d:17:08:df:80:01:ed:20:d6:9e:b0:a1: df:5c:13:e0:02:89:4c:7f:7f:67:a1:77:ec:ce:d0:63:84:b2: f1:31:93:9a:4b:84:63:89:de:a5:f4:c0:30:ed:0f:56:58:24: bb:1e:48:77:d0:c4:9f:98:64:90:af:cd:d3:6d:a2:43:fa:12: d7:1a:fd:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7K7vjFb92Ym0xuKpggOJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZGJhMDEzNjU1YjliYjBjYWEyODVkNzVjMTQyYzFlZTMw Zjg4NTQwHhcNMjUxMjIxMDgwMDM0WhcNMjUxMjIyMDgwMDM0WjAzMTEwLwYDVQQD EyhhNTFlZTNhM2U5MThhYWM4YjNmMjE1NTM1OTZmM2EwN2U2YTQwZjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXcUNxDlkEjuDMByw6jdiv0WL+Qm TyVgV1RZE5AsaavQJTZdjn5vscJSWyDlZSVLi8sSZ3J6wMZrr+HS1PK8ldUHx656 qt8+8TvRiuxBhHZrIcjbsO+/iRIgqwYDUxIvQB/J8VQOdluyjsCf6hEeLT93xsDY 7YqXsUKULWOdEhjiq/UmF//czOlTKGbuTbu59TsNZRqFo5ZJW89g7gInCcW7wOow PUF8CwWq6o/SE6L+8cmQwLpoShLFgQ83fiJh680O70Lt2gqBSv2lnQxWcCERsNQO HKW41Ojw1lln+NqKNVh/Yu+Hj7i5BGWRyamEJNdGg29WTqkNh73dGZIEBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUe46PpGKrIs/IVU1lvOgfmpA8yMB8GA1UdIwQY MBaAFBvboBNlW5uwyqKF11wULB7jD4hUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82YTI5NDYtZjBhNC00ZTg1LTkzMGUt ZDRlZGYxNmUwOTc4LzEvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi82YTI5NDYtZjBhNC00ZTg1LTkzMGUtZDRlZGYxNmUwOTc4 LzEvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTAhq5qR bgxtuemLmDaRc4TE1ieROwDeF7xzrBcWF5r78DUec/aG6+IjY+gSM1g7nmNNyZ5l g7VDwk8NYGJvuGn/gvYbxgnVbdO2/5wsoRV/jURWyRL7WPZeRT/SD8TUsbcOv/Cs qYbOZfo/N39MzU1EZBFqTJXj9+6F5lhTQEby5P+Hszr/Eg/ehm0fi+g1UaQ9m7H7 F7SK/XdW5PRAD9rishvOTWnxyhJDMp2YomICQdzdpWu7WvSXfRcI34AB7SDWnrCh 31wT4AKJTH9/Z6F37M7QY4Sy8TGTmkuEY4nepfTAMO0PVlgkux5Id9DEn5hkkK/N 022iQ/oS1xr9EQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:42:52 2025 by rpki-client