This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft File: 1GbRcMgQujTELpIOhNQmKEWXf4U.mft (raw, json) Hash identifier: zVFacUBg+GXlF51CDMTyn8R8C3EC/I1SNFtyArho8zA= Subject key identifier: 7A:76:CA:D7:3F:51:00:E1:38:61:C8:FB:99:08:2E:55:A3:40:DC:97 Authority key identifier: D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85 Certificate issuer: /CN=d466d170c810ba34c42e920e84d4262845977f85 Certificate serial: 019B3DFE726B31B681384159651B729E9C2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft Manifest number: 069C Signing time: Sat 20 Dec 2025 23:00:44 +0000 Manifest this update: Sat 20 Dec 2025 23:00:44 +0000 Manifest next update: Sun 21 Dec 2025 23:00:44 +0000 Files and hashes: 1: 1GbRcMgQujTELpIOhNQmKEWXf4U.crl (hash: ReNMu5vepJuAVmM7RoX+MTgHVcte+UBddRamTcHknp4=) 2: r0qME3D6vnHPgW7FfIJR7qyiR6U.roa (hash: +N7ZuBvhriEjaq14DPYwTSmD1pr2ezeFoDJODymMVSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:72:6b:31:b6:81:38:41:59:65:1b:72:9e:9c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d466d170c810ba34c42e920e84d4262845977f85 Validity Not Before: Dec 20 23:00:44 2025 GMT Not After : Dec 21 23:00:44 2025 GMT Subject: CN=7a76cad73f5100e13861c8fb99082e55a340dc97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:68:a1:eb:bd:11:57:45:f8:54:9f:f1:a6: bb:07:2e:60:92:9d:df:19:07:de:79:fb:1a:18:02: cc:bd:68:02:d8:a1:bb:96:c2:b6:50:da:8f:0b:5e: ef:aa:35:c7:83:b8:75:68:a8:6a:a6:b4:62:48:9d: 98:9f:ce:2c:b4:a7:ff:e3:71:cc:6b:cc:92:ad:23: b1:42:03:d1:4c:c7:15:db:16:79:84:a3:72:cb:3d: 8f:f7:c3:2f:7f:7f:20:08:24:f9:dd:0e:2e:1c:9d: cf:6c:00:d6:70:42:cf:c0:c4:25:1d:4b:3e:a5:21: 10:ff:a4:39:92:07:e3:72:f2:52:b5:1e:d0:27:f6: b7:04:18:19:dc:99:96:5d:e7:91:2c:88:7b:9f:f0: 64:ed:fd:ff:cf:88:b9:0c:aa:c0:3d:a9:00:68:e8: 1e:bb:a6:60:49:40:64:e7:e5:f0:d9:f2:08:ae:9c: 0f:97:91:c1:ab:f5:00:49:62:3a:69:43:8b:ff:b6: 62:15:cd:60:f5:00:c4:c0:d7:92:1d:0b:43:48:da: 57:a8:47:fd:34:f2:d9:a2:d7:f4:16:c5:47:2c:ba: f2:63:29:db:1c:6b:56:5b:4c:44:78:06:33:9a:69: a2:fa:91:75:38:3c:6b:a3:7c:31:23:55:77:40:42: 7a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:76:CA:D7:3F:51:00:E1:38:61:C8:FB:99:08:2E:55:A3:40:DC:97 X509v3 Authority Key Identifier: keyid:D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:cb:ef:37:55:8c:9a:e5:9c:05:6a:60:8e:e2:26:62:ca:5e: 9f:4c:0f:50:74:bf:6f:da:fa:f9:e7:7e:44:8d:ea:c5:ff:f2: 64:74:5d:0f:39:86:a3:30:1f:43:22:2f:f6:40:52:18:18:f3: 85:13:db:a1:8c:f8:42:aa:42:16:38:be:0a:3c:6e:fa:38:e4: 9b:26:5c:34:12:0a:89:c0:6a:6c:4f:36:94:b8:e0:5e:52:fd: 02:9c:0c:c6:06:e2:28:73:4b:b9:32:e0:f9:fe:ba:d3:4b:65: 65:6a:b3:55:48:74:75:09:49:92:59:b2:46:c9:04:0a:d4:8d: 16:19:9c:16:21:10:5b:92:a3:7a:26:c8:86:0b:ed:69:67:d3: 59:24:cc:9d:32:06:62:60:42:b5:15:3e:d8:27:9d:b5:98:f1: 78:bb:ff:13:09:15:dd:39:e1:7f:c7:78:db:a8:3f:64:2c:eb: 24:fa:5c:95:72:51:ae:a9:ff:18:ad:22:d6:6e:54:4c:88:64: 6f:3a:24:8d:e5:a9:75:b3:68:af:54:43:ef:3e:72:53:b4:24: 68:41:62:f1:59:39:82:37:9e:9c:10:0b:15:f1:71:6c:a5:4b: 02:e3:45:a5:2f:c6:7b:e0:79:6e:f8:d6:dc:f5:9f:86:75:d5: f8:c6:7c:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/nJrMbaBOEFZZRtynpwtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NjZkMTcwYzgxMGJhMzRjNDJlOTIwZTg0ZDQyNjI4NDU5 NzdmODUwHhcNMjUxMjIwMjMwMDQ0WhcNMjUxMjIxMjMwMDQ0WjAzMTEwLwYDVQQD Eyg3YTc2Y2FkNzNmNTEwMGUxMzg2MWM4ZmI5OTA4MmU1NWEzNDBkYzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRpooeu9EVdF+FSf8aa7By5gkp3f GQfeefsaGALMvWgC2KG7lsK2UNqPC17vqjXHg7h1aKhqprRiSJ2Yn84stKf/43HM a8ySrSOxQgPRTMcV2xZ5hKNyyz2P98Mvf38gCCT53Q4uHJ3PbADWcELPwMQlHUs+ pSEQ/6Q5kgfjcvJStR7QJ/a3BBgZ3JmWXeeRLIh7n/Bk7f3/z4i5DKrAPakAaOge u6ZgSUBk5+Xw2fIIrpwPl5HBq/UASWI6aUOL/7ZiFc1g9QDEwNeSHQtDSNpXqEf9 NPLZotf0FsVHLLryYynbHGtWW0xEeAYzmmmi+pF1ODxro3wxI1V3QEJ6rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHp2ytc/UQDhOGHI+5kILlWjQNyXMB8GA1UdIwQY MBaAFNRm0XDIELo0xC6SDoTUJihFl3+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUdiUmNNZ1F1alRFTHBJT2hOUW1LRVdYZjRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yMzA2ZjYtNmNjMC00OTgyLWE1MjMt MTY4NDJiZGFkOTI1LzEvMUdiUmNNZ1F1alRFTHBJT2hOUW1LRVdYZjRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8yMzA2ZjYtNmNjMC00OTgyLWE1MjMtMTY4NDJiZGFkOTI1 LzEvMUdiUmNNZ1F1alRFTHBJT2hOUW1LRVdYZjRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsvvN1WM muWcBWpgjuImYspen0wPUHS/b9r6+ed+RI3qxf/yZHRdDzmGozAfQyIv9kBSGBjz hRPboYz4QqpCFji+Cjxu+jjkmyZcNBIKicBqbE82lLjgXlL9ApwMxgbiKHNLuTLg +f6600tlZWqzVUh0dQlJklmyRskECtSNFhmcFiEQW5KjeibIhgvtaWfTWSTMnTIG YmBCtRU+2CedtZjxeLv/EwkV3Tnhf8d426g/ZCzrJPpclXJRrqn/GK0i1m5UTIhk bzokjeWpdbNor1RD7z5yU7QkaEFi8Vk5gjeenBALFfFxbKVLAuNFpS/Ge+B5bvjW 3PWfhnXV+MZ8Uw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:54:39 2025 by rpki-client