This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft File: G1WOmRP2tWzD1WD5T_E38s1vSGI.mft (raw, json) Hash identifier: A4XgW+d4lJIMcmw3+z9a/S6cdJtwAYoShbPZRxnuWFI= Subject key identifier: 2F:60:E9:08:46:3B:6C:CC:4C:FB:3B:5D:46:8C:EA:73:D9:90:4D:0E Authority key identifier: 1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62 Certificate issuer: /CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862 Certificate serial: 019B300BFC13D366662EAA8DB12885B1A0FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft Manifest number: 0799 Signing time: Thu 18 Dec 2025 06:00:50 +0000 Manifest this update: Thu 18 Dec 2025 06:00:50 +0000 Manifest next update: Fri 19 Dec 2025 06:00:50 +0000 Files and hashes: 1: G1WOmRP2tWzD1WD5T_E38s1vSGI.crl (hash: Bup5QcUYvNiCmythZgO+f7Ydf/N0HKT/5RhzukvIORc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0b:fc:13:d3:66:66:2e:aa:8d:b1:28:85:b1:a0:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862 Validity Not Before: Dec 18 06:00:50 2025 GMT Not After : Dec 19 06:00:50 2025 GMT Subject: CN=2f60e908463b6ccc4cfb3b5d468cea73d9904d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:72:a9:dc:6b:44:a2:98:9b:cc:61:dc:4f:c0: 0c:ba:fc:2b:b9:69:24:eb:4c:d1:05:e5:96:64:69: d1:de:be:e7:18:ef:73:c4:c5:f1:54:70:ac:61:0c: bb:9e:9a:4d:da:03:65:c4:56:27:d6:a2:ab:4d:84: 77:3c:e2:3c:84:4c:bf:a4:c7:13:e6:aa:ba:a9:78: a8:dd:93:dd:96:a5:5a:26:f4:12:7b:9b:cb:f2:e8: 88:e4:9c:ad:ef:a6:12:2b:19:ae:19:ac:e1:08:20: d7:cf:fb:55:b3:d6:93:b0:7e:45:b4:dc:f3:1a:29: e2:30:c1:75:57:ab:e1:ba:1e:74:85:64:0f:17:2b: 01:42:2d:ea:58:92:e8:0c:65:96:53:66:01:2a:0b: c3:cd:fc:46:a5:4e:8a:67:bc:91:32:d1:ba:d6:89: 37:e9:94:40:fb:a4:a4:c1:0b:88:3b:19:89:9e:31: 4c:51:c9:d5:06:a6:0d:df:2f:57:f1:d4:d5:33:e6: d0:a6:e4:71:53:1f:08:cf:9a:73:54:39:6d:20:64: b1:87:fa:4c:21:ff:ac:0e:49:be:6a:53:5e:dd:b7: b4:c5:f9:01:bb:9c:be:20:94:49:14:20:1b:da:7b: 37:b9:65:88:83:80:63:30:f5:5a:9a:db:42:d0:9f: fe:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:60:E9:08:46:3B:6C:CC:4C:FB:3B:5D:46:8C:EA:73:D9:90:4D:0E X509v3 Authority Key Identifier: keyid:1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:74:0f:dc:7e:45:35:aa:37:83:0c:c6:e1:90:fe:ad:b1:12: c4:41:63:d5:15:11:d1:ba:04:b9:e6:ce:1c:df:0e:13:4f:48: 8e:bf:8c:38:3a:db:a1:25:ba:b3:b0:00:ce:a1:64:6d:fa:80: 24:97:fb:7d:af:04:cc:29:4f:c5:c2:9a:fb:e4:9a:d1:19:46: 81:7c:ac:62:d6:22:f6:fd:b4:3d:4f:16:ca:c1:71:4b:77:77: 49:d5:eb:ab:74:83:33:79:e1:b1:cb:dd:16:25:5c:f5:ad:36: d7:a0:a1:dd:3f:d0:b4:94:50:37:c4:73:01:f3:d9:9f:68:2e: 79:fa:d0:ea:c8:e6:61:c9:1c:4c:7a:7d:4e:2d:eb:12:6c:6b: 55:01:d4:0c:0b:b4:6b:c5:41:62:69:1b:9c:e7:34:b5:da:22: a3:de:0d:bc:ba:b2:d0:86:5f:ea:8a:3a:96:20:e7:6a:67:34: 60:f3:db:c8:17:01:0b:8e:0c:cf:3a:c3:e7:c3:b7:49:84:14: a6:b6:8f:79:40:1b:95:9c:e4:a4:5b:74:34:5f:c4:08:46:86: 30:e9:3c:86:4c:20:4e:cd:c8:7c:25:08:b1:22:7e:a1:f4:2a: 90:77:a4:b6:ba:08:31:d0:b5:2e:df:3a:d4:cc:d9:13:a1:74: f5:72:32:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswC/wT02ZmLqqNsSiFsaD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNTU4ZTk5MTNmNmI1NmNjM2Q1NjBmOTRmZjEzN2YyY2Q2 ZjQ4NjIwHhcNMjUxMjE4MDYwMDUwWhcNMjUxMjE5MDYwMDUwWjAzMTEwLwYDVQQD EygyZjYwZTkwODQ2M2I2Y2NjNGNmYjNiNWQ0NjhjZWE3M2Q5OTA0ZDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63Kp3GtEopibzGHcT8AMuvwruWkk 60zRBeWWZGnR3r7nGO9zxMXxVHCsYQy7nppN2gNlxFYn1qKrTYR3POI8hEy/pMcT 5qq6qXio3ZPdlqVaJvQSe5vL8uiI5Jyt76YSKxmuGazhCCDXz/tVs9aTsH5FtNzz GiniMMF1V6vhuh50hWQPFysBQi3qWJLoDGWWU2YBKgvDzfxGpU6KZ7yRMtG61ok3 6ZRA+6SkwQuIOxmJnjFMUcnVBqYN3y9X8dTVM+bQpuRxUx8Iz5pzVDltIGSxh/pM If+sDkm+alNe3be0xfkBu5y+IJRJFCAb2ns3uWWIg4BjMPVamttC0J/+MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9g6QhGO2zMTPs7XUaM6nPZkE0OMB8GA1UdIwQY MBaAFBtVjpkT9rVsw9Vg+U/xN/LNb0hiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzFXT21SUDJ0V3pEMVdENVRfRTM4czF2U0dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lNzY0Y2ItNDYzZC00MWFkLWE3ZWMt ZjU4MWY2ODFhMDA0LzEvRzFXT21SUDJ0V3pEMVdENVRfRTM4czF2U0dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lNzY0Y2ItNDYzZC00MWFkLWE3ZWMtZjU4MWY2ODFhMDA0 LzEvRzFXT21SUDJ0V3pEMVdENVRfRTM4czF2U0dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3QP3H5F Nao3gwzG4ZD+rbESxEFj1RUR0boEuebOHN8OE09Ijr+MODrboSW6s7AAzqFkbfqA JJf7fa8EzClPxcKa++Sa0RlGgXysYtYi9v20PU8WysFxS3d3SdXrq3SDM3nhscvd FiVc9a0216Ch3T/QtJRQN8RzAfPZn2guefrQ6sjmYckcTHp9Ti3rEmxrVQHUDAu0 a8VBYmkbnOc0tdoio94NvLqy0IZf6oo6liDnamc0YPPbyBcBC44MzzrD58O3SYQU praPeUAblZzkpFt0NF/ECEaGMOk8hkwgTs3IfCUIsSJ+ofQqkHektroIMdC1Lt86 1MzZE6F09XIyAQ== -----END CERTIFICATE-----Generated at Thu Dec 18 12:41:45 2025 by rpki-client