This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json) Hash identifier: ycEQ2fbq+SHuS6ROqoOm5x8eGwRV1Mq+m9sn7zhuLtE= Subject key identifier: 33:C5:9D:79:87:5D:84:11:C0:03:BE:F0:71:41:56:6F:C2:D2:B5:AA Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53 Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53 Certificate serial: 019B3C7F428ED09CE624CED51EC881724D15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 16:02:11 +0000 Manifest this update: Sat 20 Dec 2025 16:02:11 +0000 Manifest next update: Sun 21 Dec 2025 16:02:11 +0000 Files and hashes: 1: 2u65Jdfy1meP3-UzJxITH_HaB0I.roa (hash: GSn3vSNczK6ZpdwvGH948S/Jm3wgfMlxSG0nlQVl8dQ=) 2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: IalL3k9KTsfhepVIR1WDeM+9Q953taQ3CvqiVfVCpuU=) 3: dnna3QdlDeomv7D_EwLJ_fnfivI.roa (hash: MOBcHLr5lX2FtBzfiXULYdThQj8Ixa9C5j2SRENdgnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:42:8e:d0:9c:e6:24:ce:d5:1e:c8:81:72:4d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53 Validity Not Before: Dec 20 16:02:11 2025 GMT Not After : Dec 21 16:02:11 2025 GMT Subject: CN=33c59d79875d8411c003bef07141566fc2d2b5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:49:d4:6f:df:65:31:67:c2:0d:fa:0e:9f:89: 5d:26:ca:dd:85:88:fa:7e:ce:e7:8d:b8:4e:b2:bc: f1:25:7c:b8:fa:e6:06:fc:cf:ba:e6:a0:7f:3a:72: 1c:f5:16:7a:fe:8f:29:f2:9b:f1:a3:47:fd:e6:f7: d9:ad:98:30:bf:8d:e8:6a:db:51:e2:14:4e:f6:b8: 86:0e:28:7a:6d:8d:a0:2a:70:e0:31:38:dd:be:c8: b5:90:e5:68:72:7e:af:b2:bf:a0:14:a4:84:25:03: 80:39:92:bf:6b:62:e9:1c:08:c0:67:c5:0e:af:16: 5a:82:09:5b:89:eb:d2:1d:e0:c7:35:eb:ce:56:02: 6c:58:ef:d3:3f:25:eb:37:ab:f4:63:ef:2a:ef:93: 2b:83:bb:a1:65:d7:ec:ce:8f:50:6f:3f:98:25:55: 54:e8:31:c5:41:34:2f:7a:3c:82:20:2e:d8:95:90: 22:f6:e0:f7:cb:26:67:40:a6:a4:3b:7b:7f:df:7b: 96:b4:d2:1a:03:db:ab:04:84:cb:7a:b6:71:19:49: dc:1e:a6:cf:3f:1a:12:1b:9b:20:94:90:53:0a:e2: 8f:e9:e0:9c:63:37:e1:90:75:e0:07:cb:be:b2:8c: 85:ef:87:aa:c4:66:52:7d:f4:19:0e:fb:90:1a:6a: f9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C5:9D:79:87:5D:84:11:C0:03:BE:F0:71:41:56:6F:C2:D2:B5:AA X509v3 Authority Key Identifier: keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:61:7c:3f:ea:09:50:3e:39:99:53:1f:31:7b:e7:8e:6f:78: ff:78:d6:d6:b7:10:62:48:ee:ff:f8:c8:a8:6c:10:c7:4b:ef: 24:67:6d:23:7e:96:18:a0:fe:88:d4:e5:56:d1:09:c5:74:98: e5:ed:52:a9:6b:ad:19:9b:5c:aa:9b:6d:2b:5d:f2:85:48:aa: 35:cf:9e:6b:28:49:cd:df:c7:0b:0d:ce:38:8e:7d:de:be:70: c5:a0:20:5c:e4:05:aa:e4:6b:4a:c6:8d:14:3b:b9:fb:19:d0: 53:64:f9:fa:ba:40:95:36:2c:1c:6e:09:1c:6e:d8:82:a3:da: d8:07:ce:83:df:76:07:c9:a1:fa:a2:62:54:f3:66:6f:6d:70: 9c:cb:74:8a:2d:f2:f5:64:d8:7e:94:47:3c:e8:ca:78:66:8d: 65:fa:b2:3a:ab:5e:e7:e4:6b:7e:fc:9b:a1:05:22:98:34:f8: e4:ba:9e:da:b6:b5:86:64:6f:3e:ca:30:a8:a6:4b:f5:fa:0a: 3e:72:69:a5:4f:6e:fe:fa:c9:2c:da:55:df:d1:0d:ea:c3:b2: e0:cb:7c:82:59:c5:be:8b:a4:24:cd:ae:f8:78:9d:8d:16:d6: 42:b7:45:42:0f:ba:bd:4d:f1:43:aa:fb:97:d6:d0:65:ee:18: f1:5a:69:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f0KO0JzmJM7VHsiBck0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYjQ1NzQ0YTU0MTI4NWVlYTBlNGUwNGU1ZGU3NjZhOWM4 MjNiNTMwHhcNMjUxMjIwMTYwMjExWhcNMjUxMjIxMTYwMjExWjAzMTEwLwYDVQQD EygzM2M1OWQ3OTg3NWQ4NDExYzAwM2JlZjA3MTQxNTY2ZmMyZDJiNWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUnUb99lMWfCDfoOn4ldJsrdhYj6 fs7njbhOsrzxJXy4+uYG/M+65qB/OnIc9RZ6/o8p8pvxo0f95vfZrZgwv43oattR 4hRO9riGDih6bY2gKnDgMTjdvsi1kOVocn6vsr+gFKSEJQOAOZK/a2LpHAjAZ8UO rxZagglbievSHeDHNevOVgJsWO/TPyXrN6v0Y+8q75Mrg7uhZdfszo9Qbz+YJVVU 6DHFQTQvejyCIC7YlZAi9uD3yyZnQKakO3t/33uWtNIaA9urBITLerZxGUncHqbP PxoSG5sglJBTCuKP6eCcYzfhkHXgB8u+soyF74eqxGZSffQZDvuQGmr5TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPFnXmHXYQRwAO+8HFBVm/C0rWqMB8GA1UdIwQY MBaAFBu0V0SlQShe6g5OBOXedmqcgjtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzdSWFJLVkJLRjdxRGs0RTVkNTJhcHlDTzFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jNjNmOWUtOWU3Yi00NmRjLWE0MDIt ODc5OTc5ZDI5ZTFlLzEvRzdSWFJLVkJLRjdxRGs0RTVkNTJhcHlDTzFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jNjNmOWUtOWU3Yi00NmRjLWE0MDItODc5OTc5ZDI5ZTFl LzEvRzdSWFJLVkJLRjdxRGs0RTVkNTJhcHlDTzFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2F8P+oJ UD45mVMfMXvnjm94/3jW1rcQYkju//jIqGwQx0vvJGdtI36WGKD+iNTlVtEJxXSY 5e1SqWutGZtcqpttK13yhUiqNc+eayhJzd/HCw3OOI593r5wxaAgXOQFquRrSsaN FDu5+xnQU2T5+rpAlTYsHG4JHG7YgqPa2AfOg992B8mh+qJiVPNmb21wnMt0ii3y 9WTYfpRHPOjKeGaNZfqyOqte5+RrfvyboQUimDT45Lqe2ra1hmRvPsowqKZL9foK PnJppU9u/vrJLNpV39EN6sOy4Mt8glnFvoukJM2u+HidjRbWQrdFQg+6vU3xQ6r7 l9bQZe4Y8Vpp+g== -----END CERTIFICATE-----Generated at Sat Dec 20 19:44:42 2025 by rpki-client