This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft File: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft (raw, json) Hash identifier: idsRmgh+RGwJ/cMDFxPjIre2n/8lBHS784nF1/fluzE= Subject key identifier: FB:6D:5C:71:FE:02:2F:3E:4F:A3:01:68:BF:73:60:91:98:8A:B6:3E Authority key identifier: 1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3 Certificate issuer: /CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3 Certificate serial: 019B4FCF9548E9ACFB649BD4245636ED888F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft Manifest number: 0C57 Signing time: Wed 24 Dec 2025 10:02:42 +0000 Manifest this update: Wed 24 Dec 2025 10:02:42 +0000 Manifest next update: Thu 25 Dec 2025 10:02:42 +0000 Files and hashes: 1: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl (hash: XLVuxPLYwq0pH1IkeMNtfzbWRQU7fhRRYtHriSn9Aog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:95:48:e9:ac:fb:64:9b:d4:24:56:36:ed:88:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3 Validity Not Before: Dec 24 10:02:42 2025 GMT Not After : Dec 25 10:02:42 2025 GMT Subject: CN=fb6d5c71fe022f3e4fa30168bf736091988ab63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:76:3f:36:cb:47:e0:0f:f6:b1:f6:9f:da:07: 71:52:1b:c0:16:02:32:49:34:72:71:1b:09:ef:6a: 4d:80:29:b5:3a:5f:f9:c7:f3:c4:a5:f0:0c:94:8e: 2f:90:dd:fa:18:91:35:c0:4f:79:4a:21:8e:96:c3: f4:2c:51:19:e4:43:81:0e:4a:b5:7e:ee:65:25:ff: 50:a0:a9:21:e9:2c:3f:15:9a:91:c1:ba:ec:72:24: 29:59:40:a2:5a:02:8d:77:d9:c0:fe:33:02:d7:9f: 55:74:65:5d:72:95:a8:2e:e2:36:92:c0:87:26:17: ee:44:c8:ab:76:b9:c4:51:d4:a6:aa:b4:2d:b1:32: 0d:c7:8b:d9:80:f8:90:6a:3c:fe:ee:2b:88:cd:5f: 7c:5e:ac:a2:86:1c:60:d9:bb:b8:63:b0:06:c7:b1: aa:58:f9:42:66:3f:5e:8a:84:67:82:97:85:85:5a: 2b:01:3f:99:f6:43:34:ad:02:27:2f:d0:c3:0e:c1: dc:8e:9a:8b:e2:43:b7:c8:8c:4d:ad:6f:94:38:85: 56:b2:c3:32:6e:24:42:e3:65:c5:98:99:cb:6c:57: 6e:d5:4d:1f:40:7c:fe:03:ed:34:0b:af:9f:52:c5: fc:5f:0b:0f:d9:f3:69:17:1b:c6:e4:99:69:4d:d9: 1e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6D:5C:71:FE:02:2F:3E:4F:A3:01:68:BF:73:60:91:98:8A:B6:3E X509v3 Authority Key Identifier: keyid:1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:38:31:c1:f3:02:f8:56:64:39:f6:fc:51:d4:93:2c:16:c1: 0e:01:f5:4c:42:79:3b:da:37:fb:9c:8f:ed:bb:63:55:36:a0: 84:f8:c8:cd:1e:b8:11:dd:d4:c6:b4:c7:18:8f:e3:1e:52:5f: 84:6f:f3:8d:b8:f0:16:67:32:b0:3a:e5:5e:f7:5b:6f:cb:f7: 5c:52:7e:c4:98:9a:11:b1:27:95:f6:d7:2b:ad:84:f4:9f:a4: 7c:96:31:1d:17:d9:23:7a:2d:8c:7c:56:ca:ce:c8:d0:29:71: 97:ff:6f:75:77:d5:0f:3d:dc:4a:e4:2c:2a:ce:8f:d9:68:60: 5d:95:03:91:37:ec:ed:5b:de:1e:f4:b7:84:2d:19:85:7f:37: 5b:eb:b4:a8:a8:25:c2:d5:4d:fa:77:a6:ed:b6:c6:7b:1e:e5: 55:04:38:4f:55:4b:9c:52:92:9c:fc:30:b3:73:3b:2c:19:28: ec:21:8e:5e:1b:b0:97:a0:8b:0c:32:dd:04:81:69:3a:22:74: bd:ea:b4:4f:78:f3:2b:a2:61:02:8c:84:bd:96:ae:58:93:56: 51:aa:12:19:3d:21:e3:9e:76:e6:ac:6e:d8:40:84:d6:a1:03: 47:74:ff:6f:a4:7e:ee:94:77:37:7b:33:4e:c4:d4:ef:98:47: 45:e0:d1:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPz5VI6az7ZJvUJFY27YiPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOTEzNjMyNjgwOWYwNjg3ZjdkN2Q0ZGMxYTgxYjdiOTlh M2Q3ZDMwHhcNMjUxMjI0MTAwMjQyWhcNMjUxMjI1MTAwMjQyWjAzMTEwLwYDVQQD EyhmYjZkNWM3MWZlMDIyZjNlNGZhMzAxNjhiZjczNjA5MTk4OGFiNjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHY/NstH4A/2sfaf2gdxUhvAFgIy STRycRsJ72pNgCm1Ol/5x/PEpfAMlI4vkN36GJE1wE95SiGOlsP0LFEZ5EOBDkq1 fu5lJf9QoKkh6Sw/FZqRwbrsciQpWUCiWgKNd9nA/jMC159VdGVdcpWoLuI2ksCH JhfuRMirdrnEUdSmqrQtsTINx4vZgPiQajz+7iuIzV98Xqyihhxg2bu4Y7AGx7Gq WPlCZj9eioRngpeFhVorAT+Z9kM0rQInL9DDDsHcjpqL4kO3yIxNrW+UOIVWssMy biRC42XFmJnLbFdu1U0fQHz+A+00C6+fUsX8XwsP2fNpFxvG5JlpTdkepwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPttXHH+Ai8+T6MBaL9zYJGYirY+MB8GA1UdIwQY MBaAFBuRNjJoCfBof319TcGoG3uZo9fTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzVFMk1tZ0o4R2hfZlgxTndhZ2JlNW1qMTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZjBjODItNjMzMC00OTcxLTk4YzAt NTliNTNiM2E2ZGExLzEvRzVFMk1tZ0o4R2hfZlgxTndhZ2JlNW1qMTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi83ZjBjODItNjMzMC00OTcxLTk4YzAtNTliNTNiM2E2ZGEx LzEvRzVFMk1tZ0o4R2hfZlgxTndhZ2JlNW1qMTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTgxwfMC +FZkOfb8UdSTLBbBDgH1TEJ5O9o3+5yP7btjVTaghPjIzR64Ed3UxrTHGI/jHlJf hG/zjbjwFmcysDrlXvdbb8v3XFJ+xJiaEbEnlfbXK62E9J+kfJYxHRfZI3otjHxW ys7I0Clxl/9vdXfVDz3cSuQsKs6P2WhgXZUDkTfs7VveHvS3hC0ZhX83W+u0qKgl wtVN+nem7bbGex7lVQQ4T1VLnFKSnPwws3M7LBko7CGOXhuwl6CLDDLdBIFpOiJ0 veq0T3jzK6JhAoyEvZauWJNWUaoSGT0h45525qxu2ECE1qEDR3T/b6R+7pR3N3sz TsTU75hHReDR+w== -----END CERTIFICATE-----Generated at Wed Dec 24 18:31:30 2025 by rpki-client