This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json) Hash identifier: skjpdtVn8+GnY5jp5LidobunCr35sFHUUKoFWu+Lisk= Subject key identifier: BE:0C:6E:BC:32:D5:58:91:8C:9D:37:79:1F:50:6B:A0:64:2A:76:F2 Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6 Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6 Certificate serial: 019B3E6CB0726E133629B22078ABD5FABA08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft Manifest number: 0F0D Signing time: Sun 21 Dec 2025 01:01:08 +0000 Manifest this update: Sun 21 Dec 2025 01:01:08 +0000 Manifest next update: Mon 22 Dec 2025 01:01:08 +0000 Files and hashes: 1: 1-6tgApGzi84jUfnnO4hR3VcZnhw.roa (hash: HVjUDSjbZacQo7V9+9zKGEkK9aQQLCss0l6qBdFGXKw=) 2: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: vg8EcL5E+G+nbv2c9xCzg8fEe+djRYq6bMztbJx8N0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:b0:72:6e:13:36:29:b2:20:78:ab:d5:fa:ba:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6 Validity Not Before: Dec 21 01:01:08 2025 GMT Not After : Dec 22 01:01:08 2025 GMT Subject: CN=be0c6ebc32d558918c9d37791f506ba0642a76f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1a:89:dd:2c:d2:a9:c9:71:ee:f5:46:45:5d: f2:4d:be:a3:8d:ed:4f:d4:28:7a:16:a6:b9:94:dc: 7b:a9:94:57:04:7b:1a:a4:05:7e:fb:de:1b:ec:cc: 99:b3:59:cf:31:09:56:d9:11:33:2d:26:f1:9a:a4: 19:b1:54:ad:f7:82:5a:f5:44:4e:3f:20:97:f5:8a: 63:74:e5:f9:28:b3:83:01:9f:7f:11:73:1d:fc:b0: 3c:2d:75:d8:59:0e:ed:01:49:d6:41:27:c7:5b:56: 09:97:6c:8c:de:20:14:57:48:bd:5f:1e:85:d0:75: 6f:d3:0a:8b:ad:5f:9e:0d:69:22:93:b6:a3:3d:39: 6c:02:d1:01:95:12:0b:a8:ef:ca:52:86:53:c7:32: 8e:62:41:08:59:b7:e1:bf:be:8d:a1:09:26:74:ad: c4:d4:21:b8:67:45:78:18:64:5b:9c:16:95:52:87: 6f:7c:d5:2e:9e:3a:02:1c:d3:5c:c6:e9:51:97:f6: 14:47:aa:62:7f:7c:34:fe:a3:ff:2d:6f:a7:1d:45: 55:d8:9a:ca:10:d8:6a:f4:2c:c3:78:8d:ee:20:53: d7:48:75:f5:98:50:af:19:e2:90:bb:b4:b2:ec:11: c8:0c:ed:29:a0:dd:09:3a:92:49:48:0f:f7:a0:af: 24:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0C:6E:BC:32:D5:58:91:8C:9D:37:79:1F:50:6B:A0:64:2A:76:F2 X509v3 Authority Key Identifier: keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:c7:c1:52:b0:3b:83:85:a9:fb:b6:b2:2b:f1:a6:fe:74:59: 16:44:f3:6f:4c:b5:91:36:f6:60:7d:f3:de:6e:6b:91:1b:87: 1d:a8:0c:8b:75:98:95:d9:4f:25:6c:e2:72:3a:79:56:4f:90: cf:52:b3:21:f5:30:48:ba:6d:c8:ea:3d:b2:45:e9:b4:77:e8: 02:12:1b:17:19:84:df:12:b3:82:07:0f:ea:28:71:6c:7e:36: ba:7f:8c:e3:e1:c5:55:7d:56:0f:c6:25:de:99:35:21:cb:57: 6f:16:9c:a6:a5:40:5a:74:3a:29:49:97:40:3a:07:1e:e2:bb: 18:93:b7:f5:57:7c:14:a0:22:1c:86:5f:29:bb:bf:55:2c:85: 66:e0:e7:25:80:9a:60:31:a9:93:80:80:0a:3b:08:2c:00:c6: f1:00:1d:e8:cc:b1:9f:5a:2a:a4:f2:77:e0:1a:0e:22:16:3f: 6a:65:9a:bf:b4:49:1c:c2:e5:10:92:b3:ec:4b:b8:31:19:07: a6:ad:5d:ba:37:09:69:e5:a1:10:a6:8e:1d:44:e5:67:06:d1: 89:ad:05:f5:25:6b:62:55:8b:9b:a4:d0:1d:93:8b:aa:1c:81: a0:7e:e5:a6:60:0e:af:08:f1:89:02:01:19:22:4e:32:ca:67: 79:d7:f5:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bLBybhM2KbIgeKvV+roIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNjIzZGJhNjJiODU3Y2E3M2Q4YTgwYTExOTkwZjcxZTA0 ZTdkYjYwHhcNMjUxMjIxMDEwMTA4WhcNMjUxMjIyMDEwMTA4WjAzMTEwLwYDVQQD EyhiZTBjNmViYzMyZDU1ODkxOGM5ZDM3NzkxZjUwNmJhMDY0MmE3NmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRqJ3SzSqclx7vVGRV3yTb6jje1P 1Ch6Fqa5lNx7qZRXBHsapAV++94b7MyZs1nPMQlW2REzLSbxmqQZsVSt94Ja9URO PyCX9YpjdOX5KLODAZ9/EXMd/LA8LXXYWQ7tAUnWQSfHW1YJl2yM3iAUV0i9Xx6F 0HVv0wqLrV+eDWkik7ajPTlsAtEBlRILqO/KUoZTxzKOYkEIWbfhv76NoQkmdK3E 1CG4Z0V4GGRbnBaVUodvfNUunjoCHNNcxulRl/YUR6pif3w0/qP/LW+nHUVV2JrK ENhq9CzDeI3uIFPXSHX1mFCvGeKQu7Sy7BHIDO0poN0JOpJJSA/3oK8k3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4Mbrwy1ViRjJ03eR9Qa6BkKnbyMB8GA1UdIwQY MBaAFBtiPbpiuFfKc9ioChGZD3HgTn22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMt MWE1Yzc2MzU1ODhiLzEvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMtMWE1Yzc2MzU1ODhi LzEvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtcfBUrA7 g4Wp+7ayK/Gm/nRZFkTzb0y1kTb2YH3z3m5rkRuHHagMi3WYldlPJWzicjp5Vk+Q z1KzIfUwSLptyOo9skXptHfoAhIbFxmE3xKzggcP6ihxbH42un+M4+HFVX1WD8Yl 3pk1IctXbxacpqVAWnQ6KUmXQDoHHuK7GJO39Vd8FKAiHIZfKbu/VSyFZuDnJYCa YDGpk4CACjsILADG8QAd6Myxn1oqpPJ34BoOIhY/amWav7RJHMLlEJKz7Eu4MRkH pq1dujcJaeWhEKaOHUTlZwbRia0F9SVrYlWLm6TQHZOLqhyBoH7lpmAOrwjxiQIB GSJOMspnedf1YA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:59:31 2025 by rpki-client