This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft File: G3573I4VumsubQlVJHa7G1WxWcM.mft (raw, json) Hash identifier: DDnsMOHU7qZhm6+Jp8Y8K3zy7iWCNw6q7Ue4j55h8qw= Subject key identifier: ED:8F:D6:02:7E:51:38:5F:B6:F3:7B:FD:EC:80:8D:53:E2:34:A0:42 Authority key identifier: 1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3 Certificate issuer: /CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3 Certificate serial: 019B4C5EF38A1274507F6BD58B5E57C47808 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft Manifest number: 110B Signing time: Tue 23 Dec 2025 18:00:49 +0000 Manifest this update: Tue 23 Dec 2025 18:00:49 +0000 Manifest next update: Wed 24 Dec 2025 18:00:49 +0000 Files and hashes: 1: G3573I4VumsubQlVJHa7G1WxWcM.crl (hash: czndLEOT4B892oLAJbNMj58zTMN9Jf0FzdDzjMp9wU4=) 2: hH7p55BYalQ3lSf5_ESdyJOLa1g.roa (hash: CwjN/ntMIQN6pGzj4DyEYFD1soFJfMvM2aBgkytuAgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5e:f3:8a:12:74:50:7f:6b:d5:8b:5e:57:c4:78:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3 Validity Not Before: Dec 23 18:00:49 2025 GMT Not After : Dec 24 18:00:49 2025 GMT Subject: CN=ed8fd6027e51385fb6f37bfdec808d53e234a042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:17:ef:92:e5:fd:b6:2a:c6:4d:1e:f3:a6:5e: c2:4f:19:b9:f8:6c:0b:9e:38:db:ad:22:a3:e8:31: 51:7d:d3:1e:a5:36:1a:5f:f2:d4:ad:d1:55:88:70: fa:72:8b:b2:5d:96:d5:0f:9a:8d:a2:64:bb:e6:aa: 83:97:8d:71:4e:ba:04:60:98:31:d3:a1:fd:cf:66: 89:ac:a9:17:41:0c:05:23:dc:fd:2a:54:42:69:8b: ea:01:d6:2a:ff:40:4f:22:50:0d:05:67:96:35:30: 98:50:d4:4f:20:8a:08:2f:af:94:25:dd:78:21:a8: 22:75:e4:b5:ee:2a:24:08:86:8f:30:9d:96:6c:45: 6b:68:04:95:06:f7:98:6d:87:35:5c:e7:21:50:5c: e7:71:65:f3:88:70:d8:a1:56:ec:bd:75:71:87:03: a1:79:15:d3:1a:52:c5:b2:b7:11:c6:42:a3:73:f1: eb:2e:57:3c:ea:dc:bb:87:c6:88:9c:47:63:c4:16: d3:f0:0d:67:1c:ac:9a:76:ca:55:ec:ad:92:e2:32: bf:a7:9e:32:a7:16:33:26:b8:9f:85:1f:58:50:50: 23:94:4c:df:af:bf:c2:4d:61:f6:44:de:21:e4:03: cd:9f:e8:55:11:c6:af:0f:a4:c4:b0:ac:b9:f6:19: 49:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8F:D6:02:7E:51:38:5F:B6:F3:7B:FD:EC:80:8D:53:E2:34:A0:42 X509v3 Authority Key Identifier: keyid:1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:3b:43:72:49:ba:7c:a0:ea:cc:b5:0a:6d:b3:d4:bf:fb:65: 49:33:66:e1:d4:0c:8d:9b:f4:e9:aa:73:f5:b4:24:c4:80:31: 87:1a:aa:60:56:5a:c7:62:ff:66:0f:00:64:c6:43:f8:6e:c7: e3:03:9f:c7:7d:f5:12:c5:93:5e:fd:1a:d1:f1:ab:e4:c7:e6: 29:49:4f:5b:e9:82:3a:08:74:73:cd:19:c3:03:b2:fd:b1:56: f7:7f:bc:41:36:50:31:04:23:4f:35:ce:63:8b:35:25:2c:57: fd:3f:70:5c:08:01:d3:28:b7:91:4d:3a:ed:27:ab:64:e3:5c: 17:07:d7:4a:3e:23:ff:b9:29:07:d8:b0:ea:de:68:dd:8f:40: 3e:a4:8e:3b:b6:71:50:91:59:fa:ff:88:50:0f:fc:14:cc:60: f8:f7:89:15:e0:19:e3:ed:7b:d4:6f:82:c5:86:32:85:24:1f: f4:b6:c0:c3:43:a6:51:fa:c0:e8:5a:f3:e6:78:a3:60:d1:ef: 09:b7:cc:e2:bb:2e:a6:b1:1d:2e:79:b4:e9:a8:b1:47:5e:17: 2c:85:ae:d9:ff:ba:fb:06:44:ae:20:75:fb:f5:ec:2d:2a:8c: d8:c2:31:12:c5:8b:77:af:00:e4:76:e4:fc:67:3f:89:1d:58: 6b:74:95:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMXvOKEnRQf2vVi15XxHgIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiN2U3YmRjOGUxNWJhNmIyZTZkMDk1NTI0NzZiYjFiNTVi MTU5YzMwHhcNMjUxMjIzMTgwMDQ5WhcNMjUxMjI0MTgwMDQ5WjAzMTEwLwYDVQQD EyhlZDhmZDYwMjdlNTEzODVmYjZmMzdiZmRlYzgwOGQ1M2UyMzRhMDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hfvkuX9tirGTR7zpl7CTxm5+GwL njjbrSKj6DFRfdMepTYaX/LUrdFViHD6couyXZbVD5qNomS75qqDl41xTroEYJgx 06H9z2aJrKkXQQwFI9z9KlRCaYvqAdYq/0BPIlANBWeWNTCYUNRPIIoIL6+UJd14 IagideS17iokCIaPMJ2WbEVraASVBveYbYc1XOchUFzncWXziHDYoVbsvXVxhwOh eRXTGlLFsrcRxkKjc/HrLlc86ty7h8aInEdjxBbT8A1nHKyadspV7K2S4jK/p54y pxYzJrifhR9YUFAjlEzfr7/CTWH2RN4h5APNn+hVEcavD6TEsKy59hlJxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2P1gJ+UThftvN7/eyAjVPiNKBCMB8GA1UdIwQY MBaAFBt+e9yOFbprLm0JVSR2uxtVsVnDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzM1NzNJNFZ1bXN1YlFsVkpIYTdHMVd4V2NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yNDcyYTktZmY2Ni00ZGNmLWFjODIt MzBlNTQwZDVkM2E3LzEvRzM1NzNJNFZ1bXN1YlFsVkpIYTdHMVd4V2NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8yNDcyYTktZmY2Ni00ZGNmLWFjODItMzBlNTQwZDVkM2E3 LzEvRzM1NzNJNFZ1bXN1YlFsVkpIYTdHMVd4V2NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTtDckm6 fKDqzLUKbbPUv/tlSTNm4dQMjZv06apz9bQkxIAxhxqqYFZax2L/Zg8AZMZD+G7H 4wOfx331EsWTXv0a0fGr5MfmKUlPW+mCOgh0c80ZwwOy/bFW93+8QTZQMQQjTzXO Y4s1JSxX/T9wXAgB0yi3kU067SerZONcFwfXSj4j/7kpB9iw6t5o3Y9APqSOO7Zx UJFZ+v+IUA/8FMxg+PeJFeAZ4+171G+CxYYyhSQf9LbAw0OmUfrA6Frz5nijYNHv CbfM4rsuprEdLnm06aixR14XLIWu2f+6+wZEriB1+/XsLSqM2MIxEsWLd68A5Hbk /Gc/iR1Ya3SVEQ== -----END CERTIFICATE-----Generated at Tue Dec 23 20:52:54 2025 by rpki-client