This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft File: G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json) Hash identifier: UQxsAkWasAlUT5DNAIIrUtrTcpx+2YHSdVpz1WnaEY4= Subject key identifier: 6F:9C:05:9D:CA:FC:8F:3F:83:0F:D4:08:96:F8:1F:DA:4C:EE:50:F4 Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f Certificate serial: 019B2B8AD9FD4B8893C5A00CF1EE3F732BAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft Manifest number: 1403 Signing time: Wed 17 Dec 2025 09:01:18 +0000 Manifest this update: Wed 17 Dec 2025 09:01:18 +0000 Manifest next update: Thu 18 Dec 2025 09:01:18 +0000 Files and hashes: 1: FpKpXAvwQ5eTmnpDjAybF20U0r8.roa (hash: rDfC3vqrlhOzRgHniKHIntRfI5mc/vDS+DS8eZGWJuQ=) 2: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: tW886+WBrLvXrGg92Lp3RBzX2lLMSfWqWYE9KvPHCIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:d9:fd:4b:88:93:c5:a0:0c:f1:ee:3f:73:2b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f Validity Not Before: Dec 17 09:01:18 2025 GMT Not After : Dec 18 09:01:18 2025 GMT Subject: CN=6f9c059dcafc8f3f830fd40896f81fda4cee50f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:03:a5:1e:63:9f:cc:c7:05:38:21:e5:51:01: 53:6c:b5:46:43:51:a8:61:2f:df:be:90:6e:30:2a: 85:58:f9:70:2f:cb:f0:1a:5e:75:df:81:16:92:48: ad:5e:cf:7a:8b:8a:70:7f:30:ab:18:e6:99:5a:2e: 3d:a3:c3:ed:75:9b:6f:ea:3c:88:ec:b2:fb:fd:9e: c6:29:1c:0a:7c:79:13:67:7f:67:d3:e8:b4:88:21: 7b:33:4a:b5:4c:0d:78:1c:e7:f0:3e:77:f7:e3:39: ec:d0:4e:6b:17:33:85:09:5e:90:84:29:c2:f6:f4: 31:be:7b:eb:07:ec:de:f1:64:f2:9d:52:ad:22:21: a8:03:40:2c:b7:60:d0:65:37:57:d6:2e:6d:0f:89: d3:c2:e6:57:dd:75:4f:6d:e5:54:a6:18:5e:f6:a4: 55:fe:36:db:92:c2:39:aa:13:10:27:ac:0a:b6:d5: a6:91:04:62:8d:78:14:5a:21:d6:6d:5e:5c:02:4c: e1:b3:aa:04:ed:5b:0f:12:79:66:ea:eb:80:24:fa: c2:fb:d6:45:78:6a:5b:74:d8:72:dc:a3:11:bc:14: be:73:19:c0:72:f5:e4:b0:f4:86:8f:3b:89:33:18: 0d:bd:07:7f:bf:c6:b3:25:a7:6e:56:e1:ca:f4:36: a1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9C:05:9D:CA:FC:8F:3F:83:0F:D4:08:96:F8:1F:DA:4C:EE:50:F4 X509v3 Authority Key Identifier: keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:dc:bd:76:61:d2:66:da:20:d7:15:b9:73:2c:a1:b5:81:1c: 69:2b:51:a9:c2:6f:72:d9:c3:3a:cd:98:e2:af:1c:1d:0d:5b: aa:5d:1f:28:53:bb:cf:92:80:83:f1:6a:60:ba:dd:4c:e4:09: 30:85:8c:cb:db:99:b4:0c:50:8c:c7:1a:e0:4f:fc:2d:45:7d: 7f:97:f1:2c:9f:5f:3c:a6:31:70:db:1e:b4:28:d8:81:08:5a: cc:d2:59:7a:87:d9:30:a4:cb:07:69:74:fb:55:82:a8:11:68: 7a:73:38:76:6f:3f:b7:7b:98:c2:55:08:b5:b9:aa:2c:56:b5: 6f:b9:61:ca:76:3f:98:7c:0a:52:30:5a:6d:2a:71:21:4c:91: 7c:bc:66:50:5c:29:e6:12:3a:cb:6a:a5:b6:5c:8c:70:0a:94: e2:d5:58:43:fd:56:f9:6e:13:96:42:8f:7f:18:35:ec:5b:b1: 7e:83:83:18:4d:75:66:ee:3c:e6:ca:0a:9e:97:d3:c6:d6:f8: ee:4c:11:d3:96:bb:de:20:e4:71:20:5c:9f:fd:f7:aa:f1:50: 58:52:04:59:61:cf:c9:12:6b:dc:97:9e:55:5a:1c:f4:26:d1: 36:4c:82:3b:69:5f:f2:6c:96:4e:2a:40:0a:be:cf:3f:c3:62: 32:b7:e8:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsritn9S4iTxaAM8e4/cyusMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNmYwNzQ3NGYxMmY3YTMzZTVjMjFiYzJmZmJiMDc1YTE3 YmQxM2YwHhcNMjUxMjE3MDkwMTE4WhcNMjUxMjE4MDkwMTE4WjAzMTEwLwYDVQQD Eyg2ZjljMDU5ZGNhZmM4ZjNmODMwZmQ0MDg5NmY4MWZkYTRjZWU1MGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAOlHmOfzMcFOCHlUQFTbLVGQ1Go YS/fvpBuMCqFWPlwL8vwGl5134EWkkitXs96i4pwfzCrGOaZWi49o8PtdZtv6jyI 7LL7/Z7GKRwKfHkTZ39n0+i0iCF7M0q1TA14HOfwPnf34zns0E5rFzOFCV6QhCnC 9vQxvnvrB+ze8WTynVKtIiGoA0Ast2DQZTdX1i5tD4nTwuZX3XVPbeVUphhe9qRV /jbbksI5qhMQJ6wKttWmkQRijXgUWiHWbV5cAkzhs6oE7VsPEnlm6uuAJPrC+9ZF eGpbdNhy3KMRvBS+cxnAcvXksPSGjzuJMxgNvQd/v8azJaduVuHK9DahcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+cBZ3K/I8/gw/UCJb4H9pM7lD0MB8GA1UdIwQY MBaAFBtvB0dPEvejPlwhvC/7sHWhe9E/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzI4SFIwOFM5Nk0tWENHOExfdXdkYUY3MFQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82NTUwMDYtNjI3NS00ZDI0LWIzZGIt MDJjNDdiOWVhNDlkLzEvRzI4SFIwOFM5Nk0tWENHOExfdXdkYUY3MFQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC82NTUwMDYtNjI3NS00ZDI0LWIzZGItMDJjNDdiOWVhNDlk LzEvRzI4SFIwOFM5Nk0tWENHOExfdXdkYUY3MFQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNy9dmHS Ztog1xW5cyyhtYEcaStRqcJvctnDOs2Y4q8cHQ1bql0fKFO7z5KAg/FqYLrdTOQJ MIWMy9uZtAxQjMca4E/8LUV9f5fxLJ9fPKYxcNsetCjYgQhazNJZeofZMKTLB2l0 +1WCqBFoenM4dm8/t3uYwlUItbmqLFa1b7lhynY/mHwKUjBabSpxIUyRfLxmUFwp 5hI6y2qltlyMcAqU4tVYQ/1W+W4TlkKPfxg17FuxfoODGE11Zu485soKnpfTxtb4 7kwR05a73iDkcSBcn/33qvFQWFIEWWHPyRJr3JeeVVoc9CbRNkyCO2lf8myWTipA Cr7PP8NiMrfosA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:23:34 2025 by rpki-client