This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft File: G1WOmRP2tWzD1WD5T_E38s1vSGI.mft (raw, json) Hash identifier: H2j25IfcJ6BN0QsdbZ8Ld547yKdHYmd1FQOxRWquffg= Subject key identifier: 90:DB:7D:76:F4:5C:12:6B:B6:C5:7B:E3:37:91:FD:0F:4A:AA:4D:BD Authority key identifier: 1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62 Certificate issuer: /CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862 Certificate serial: 019B2C2F15DCB20A9A2A2CB4764F38A6CE24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft Manifest number: 0797 Signing time: Wed 17 Dec 2025 12:00:41 +0000 Manifest this update: Wed 17 Dec 2025 12:00:41 +0000 Manifest next update: Thu 18 Dec 2025 12:00:41 +0000 Files and hashes: 1: G1WOmRP2tWzD1WD5T_E38s1vSGI.crl (hash: KH9Hqs1s3bVXVt/HiBiO4UX4mW5kxdLTqIqj0VWNEbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:15:dc:b2:0a:9a:2a:2c:b4:76:4f:38:a6:ce:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862 Validity Not Before: Dec 17 12:00:41 2025 GMT Not After : Dec 18 12:00:41 2025 GMT Subject: CN=90db7d76f45c126bb6c57be33791fd0f4aaa4dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:22:a6:b9:6f:f1:1a:24:97:ae:62:b5:1e:a6: 3b:e1:f3:47:09:88:5d:dd:ab:c1:ac:06:e1:90:32: bd:6e:4e:29:02:10:79:4c:4f:6a:e2:0c:3a:93:6e: 9e:c9:21:74:f7:81:d5:24:df:f4:30:f9:29:8a:45: 94:f9:be:2e:eb:2d:b3:d7:88:09:f2:c0:45:6a:c4: b6:90:cf:d4:19:03:43:28:9e:c6:18:30:fc:6f:09: 8e:bc:9c:fe:49:4d:ef:02:7b:88:70:ee:40:9c:a0: 64:70:fa:c4:d3:a5:81:91:8a:7d:fa:92:f1:21:bd: e2:82:ad:87:d0:1a:cc:ba:bc:c0:f9:28:14:cd:04: 7b:33:cc:1f:76:19:f9:3d:a1:54:ae:db:89:fe:9a: 49:0c:35:a0:ba:be:85:54:25:d9:ab:72:0f:0a:ea: c5:9d:4b:ba:fa:84:d4:4e:c1:21:ae:01:fb:cd:b0: 16:5d:b5:52:fc:92:06:5a:a8:3c:2c:57:1f:6c:85: b8:19:fd:b9:b8:f8:8f:1b:e5:99:32:62:c7:2d:72: cf:ef:be:ad:23:95:26:e6:35:f5:cd:db:83:22:f6: 4f:69:26:0d:dc:de:3b:43:97:0f:40:5c:83:dc:e3: c1:dd:b9:ab:fa:2a:f8:6b:90:ad:c0:7f:3d:c7:da: 40:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DB:7D:76:F4:5C:12:6B:B6:C5:7B:E3:37:91:FD:0F:4A:AA:4D:BD X509v3 Authority Key Identifier: keyid:1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:ea:ce:b1:75:f9:a7:79:e8:34:3f:af:d0:f4:3c:af:80:13: 7f:95:c8:5d:9f:4b:91:b3:0a:06:d8:ff:d3:4b:ed:70:5a:4d: a4:84:ba:17:d4:39:9a:70:d8:b5:9c:2e:b7:03:68:99:8d:1b: 8b:15:35:f6:0a:a2:62:69:52:6d:f9:5f:92:17:e6:a0:1a:0b: 49:9e:ba:e1:a5:13:3c:84:ff:a1:2c:bf:9a:b7:8b:30:db:8d: b9:e1:28:09:1e:fb:46:81:84:06:7f:88:cd:77:63:e8:74:87: f9:19:49:de:57:60:4d:30:fe:91:ac:fd:24:d5:e1:99:58:d8: 0a:e1:aa:47:3b:eb:13:c9:63:18:5a:f3:95:ec:4a:c2:1d:bb: ab:29:0f:9f:fb:bc:8d:aa:02:0f:85:e4:ee:81:76:1e:67:a3: a8:9d:ab:b9:5c:7a:56:54:a0:e3:d5:a3:98:52:09:44:67:ca: 49:d5:b5:22:9c:c8:58:0c:f0:ed:2e:f7:73:60:d4:01:de:59: 52:98:ab:c0:cd:ae:05:1d:18:3f:1e:1b:a6:9e:45:ed:15:54: e4:0a:1d:d5:64:32:5a:73:29:f6:6d:7c:4e:d1:6b:64:18:d9: f5:fe:6a:e7:2d:11:65:78:a4:df:fd:df:a7:88:34:0d:17:ea: ec:df:8c:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLxXcsgqaKiy0dk84ps4kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNTU4ZTk5MTNmNmI1NmNjM2Q1NjBmOTRmZjEzN2YyY2Q2 ZjQ4NjIwHhcNMjUxMjE3MTIwMDQxWhcNMjUxMjE4MTIwMDQxWjAzMTEwLwYDVQQD Eyg5MGRiN2Q3NmY0NWMxMjZiYjZjNTdiZTMzNzkxZmQwZjRhYWE0ZGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviKmuW/xGiSXrmK1HqY74fNHCYhd 3avBrAbhkDK9bk4pAhB5TE9q4gw6k26eySF094HVJN/0MPkpikWU+b4u6y2z14gJ 8sBFasS2kM/UGQNDKJ7GGDD8bwmOvJz+SU3vAnuIcO5AnKBkcPrE06WBkYp9+pLx Ib3igq2H0BrMurzA+SgUzQR7M8wfdhn5PaFUrtuJ/ppJDDWgur6FVCXZq3IPCurF nUu6+oTUTsEhrgH7zbAWXbVS/JIGWqg8LFcfbIW4Gf25uPiPG+WZMmLHLXLP776t I5Um5jX1zduDIvZPaSYN3N47Q5cPQFyD3OPB3bmr+ir4a5CtwH89x9pADwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDbfXb0XBJrtsV74zeR/Q9Kqk29MB8GA1UdIwQY MBaAFBtVjpkT9rVsw9Vg+U/xN/LNb0hiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzFXT21SUDJ0V3pEMVdENVRfRTM4czF2U0dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lNzY0Y2ItNDYzZC00MWFkLWE3ZWMt ZjU4MWY2ODFhMDA0LzEvRzFXT21SUDJ0V3pEMVdENVRfRTM4czF2U0dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lNzY0Y2ItNDYzZC00MWFkLWE3ZWMtZjU4MWY2ODFhMDA0 LzEvRzFXT21SUDJ0V3pEMVdENVRfRTM4czF2U0dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuurOsXX5 p3noND+v0PQ8r4ATf5XIXZ9LkbMKBtj/00vtcFpNpIS6F9Q5mnDYtZwutwNomY0b ixU19gqiYmlSbflfkhfmoBoLSZ664aUTPIT/oSy/mreLMNuNueEoCR77RoGEBn+I zXdj6HSH+RlJ3ldgTTD+kaz9JNXhmVjYCuGqRzvrE8ljGFrzlexKwh27qykPn/u8 jaoCD4Xk7oF2HmejqJ2ruVx6VlSg49WjmFIJRGfKSdW1IpzIWAzw7S73c2DUAd5Z UpirwM2uBR0YPx4bpp5F7RVU5Aod1WQyWnMp9m18TtFrZBjZ9f5q5y0RZXik3/3f p4g0DRfq7N+M/g== -----END CERTIFICATE-----Generated at Wed Dec 17 20:47:58 2025 by rpki-client