This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.mft File: G2kwH6jXiOAvfrL6iAIQkHQgbP4.mft (raw, json) Hash identifier: 3h+Zdscm/0oLhOO/kicn60/Mj35+rjgg8EcLEzJnLvY= Subject key identifier: D9:03:CB:18:31:DD:9C:47:96:B4:A3:2A:75:ED:3F:3A:96:E7:5A:20 Authority key identifier: 1B:69:30:1F:A8:D7:88:E0:2F:7E:B2:FA:88:02:10:90:74:20:6C:FE Certificate issuer: /CN=1b69301fa8d788e02f7eb2fa8802109074206cfe Certificate serial: 019B6CC5D1AB9F4F8490433B40ED4793F279 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2kwH6jXiOAvfrL6iAIQkHQgbP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.mft Manifest number: 0347 Signing time: Tue 30 Dec 2025 01:01:02 +0000 Manifest this update: Tue 30 Dec 2025 01:01:02 +0000 Manifest next update: Wed 31 Dec 2025 01:01:02 +0000 Files and hashes: 1: G2kwH6jXiOAvfrL6iAIQkHQgbP4.crl (hash: p6Udf+MQCKD5uSdB5MwlOMbOXmAUO+2Vm5NsRrMZs5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.mft rsync://rpki.ripe.net/repository/DEFAULT/G2kwH6jXiOAvfrL6iAIQkHQgbP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:d1:ab:9f:4f:84:90:43:3b:40:ed:47:93:f2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b69301fa8d788e02f7eb2fa8802109074206cfe Validity Not Before: Dec 30 01:01:02 2025 GMT Not After : Dec 31 01:01:02 2025 GMT Subject: CN=d903cb1831dd9c4796b4a32a75ed3f3a96e75a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f1:fd:51:6f:33:0b:22:eb:93:ee:0d:d7:2c: 2b:45:72:98:e7:4c:93:af:5d:da:1a:ef:e5:94:1f: 57:9b:3f:f9:23:95:77:af:5c:86:28:a9:a8:74:64: 92:14:bd:c2:8c:12:56:da:41:33:71:2f:4f:19:6b: 62:15:84:2c:4b:b5:bf:63:40:15:9e:30:79:9b:b4: f2:e6:ee:a8:4b:33:ee:ef:e4:8b:d2:64:fb:8b:34: ac:19:f6:38:48:63:68:da:7c:1d:26:7f:53:62:81: 34:ce:f9:c1:84:18:1f:61:e5:ea:61:42:98:8e:65: 57:f4:6e:2e:4c:dc:f1:ff:a4:2d:5d:70:0c:ac:04: ef:26:78:3d:ae:73:5a:35:c9:86:e7:ce:e7:32:e1: 58:82:41:fc:6d:3a:3d:e4:97:2a:60:03:f5:28:a9: 2b:4e:7c:eb:a4:5b:38:55:4f:bc:1d:d9:b5:38:b4: 4a:0b:b1:fb:a1:48:af:92:10:0c:f4:3f:80:fe:dc: 84:7d:9f:74:46:4f:e3:cf:29:1a:8f:48:86:d3:fb: 60:7d:58:16:27:30:fd:e5:25:a4:10:7b:1d:d9:a3: b2:e5:52:19:ad:a0:85:72:a5:02:34:87:fe:d5:c7: 4e:44:10:c4:87:3f:5e:24:f6:f5:47:18:44:aa:1f: 9e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:03:CB:18:31:DD:9C:47:96:B4:A3:2A:75:ED:3F:3A:96:E7:5A:20 X509v3 Authority Key Identifier: keyid:1B:69:30:1F:A8:D7:88:E0:2F:7E:B2:FA:88:02:10:90:74:20:6C:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2kwH6jXiOAvfrL6iAIQkHQgbP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e7:3d:78:c2:f5:8d:6e:68:b0:c8:e4:70:ad:7a:e7:a8:0d: 71:cf:20:e2:a0:bd:8b:80:0a:ba:03:64:57:c6:ff:c8:20:aa: 28:8e:a0:fd:b3:d4:cb:98:37:b2:df:2c:93:6f:b8:32:73:34: 27:20:b1:66:17:b3:4c:91:e0:c5:74:4c:50:3b:0e:6d:65:49: 23:d6:2a:12:8e:e3:bb:51:e1:b1:4e:4f:6f:df:33:5b:2d:48: 15:2b:4f:3d:23:6e:a1:38:52:9d:46:36:09:9b:44:5c:8a:8d: c7:22:66:5c:07:03:d2:03:69:50:c7:12:8c:63:ea:08:4c:8c: c4:2d:23:e4:c7:0b:56:8a:68:cc:be:68:d5:46:79:e1:c0:ea: 69:6b:df:9c:9a:4b:fd:b7:63:21:c5:53:37:04:f8:ee:9d:d3: 0b:cf:23:7b:57:3d:c5:86:a0:68:f0:43:53:ba:84:97:ac:ec: ba:27:74:fe:16:b8:02:33:34:00:11:b4:ff:64:0e:ef:cc:17: 40:32:29:84:6e:ec:3d:c2:cd:62:a2:15:92:d6:24:70:82:d4: e0:04:19:69:74:89:e2:66:a2:2f:53:e7:99:9e:13:92:99:85: 8a:8f:c9:38:75:30:db:fd:6b:4d:b5:0e:5b:4a:f6:ee:55:e4: 7d:d2:03:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxdGrn0+EkEM7QO1Hk/J5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNjkzMDFmYThkNzg4ZTAyZjdlYjJmYTg4MDIxMDkwNzQy MDZjZmUwHhcNMjUxMjMwMDEwMTAyWhcNMjUxMjMxMDEwMTAyWjAzMTEwLwYDVQQD EyhkOTAzY2IxODMxZGQ5YzQ3OTZiNGEzMmE3NWVkM2YzYTk2ZTc1YTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPH9UW8zCyLrk+4N1ywrRXKY50yT r13aGu/llB9Xmz/5I5V3r1yGKKmodGSSFL3CjBJW2kEzcS9PGWtiFYQsS7W/Y0AV njB5m7Ty5u6oSzPu7+SL0mT7izSsGfY4SGNo2nwdJn9TYoE0zvnBhBgfYeXqYUKY jmVX9G4uTNzx/6QtXXAMrATvJng9rnNaNcmG587nMuFYgkH8bTo95JcqYAP1KKkr TnzrpFs4VU+8Hdm1OLRKC7H7oUivkhAM9D+A/tyEfZ90Rk/jzykaj0iG0/tgfVgW JzD95SWkEHsd2aOy5VIZraCFcqUCNIf+1cdORBDEhz9eJPb1RxhEqh+epQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkDyxgx3ZxHlrSjKnXtPzqW51ogMB8GA1UdIwQY MBaAFBtpMB+o14jgL36y+ogCEJB0IGz+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJrd0g2alhpT0F2ZnJMNmlBSVFrSFFnYlA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81ZDcyOGEtOTNkYS00ODBiLWE3MzUt NDE2YzI4Nzk4ZmUyLzEvRzJrd0g2alhpT0F2ZnJMNmlBSVFrSFFnYlA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS81ZDcyOGEtOTNkYS00ODBiLWE3MzUtNDE2YzI4Nzk4ZmUy LzEvRzJrd0g2alhpT0F2ZnJMNmlBSVFrSFFnYlA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACec9eML1 jW5osMjkcK1656gNcc8g4qC9i4AKugNkV8b/yCCqKI6g/bPUy5g3st8sk2+4MnM0 JyCxZhezTJHgxXRMUDsObWVJI9YqEo7ju1HhsU5Pb98zWy1IFStPPSNuoThSnUY2 CZtEXIqNxyJmXAcD0gNpUMcSjGPqCEyMxC0j5McLVopozL5o1UZ54cDqaWvfnJpL /bdjIcVTNwT47p3TC88je1c9xYagaPBDU7qEl6zsuid0/ha4AjM0ABG0/2QO78wX QDIphG7sPcLNYqIVktYkcILU4AQZaXSJ4maiL1PnmZ4TkpmFio/JOHUw2/1rTbUO W0r27lXkfdIDGg== -----END CERTIFICATE-----Generated at Tue Dec 30 03:18:26 2025 by rpki-client