This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft File: G23wvAk_KYsENSLr1O3hl5MIGik.mft (raw, json) Hash identifier: ng4i5Z/0n8uZqGaV2vmhm66JGplGeyOvLZapAJbcQpg= Subject key identifier: A6:A5:7B:6E:45:35:EE:FC:C1:7B:9C:C2:82:E3:D3:CC:48:CB:30:D1 Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29 Certificate issuer: /CN=1b6df0bc093f298b043522ebd4ede19793081a29 Certificate serial: 019B3E6D9BCBE81F5661F0AB5407DAAA1C89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 01:02:09 +0000 Manifest this update: Sun 21 Dec 2025 01:02:09 +0000 Manifest next update: Mon 22 Dec 2025 01:02:09 +0000 Files and hashes: 1: G23wvAk_KYsENSLr1O3hl5MIGik.crl (hash: DlhDpgdGVa65rH0bnh+46G5/1f4masgFl4d9hgWmrxw=) 2: YJHXZeNag-cu70_fJht-ZOpxnGk.roa (hash: 2m1tn0x6o3pfXUEVzS2q6AJtU601h1r6TeqXWLsErHU=) 3: lYiKNcoH_WfqIMOCgQv0TYn2rKE.roa (hash: jZwRIN2ogKpi/MzaP8NmIeUVW4yffrhHB5Fsd5XJEE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:9b:cb:e8:1f:56:61:f0:ab:54:07:da:aa:1c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29 Validity Not Before: Dec 21 01:02:09 2025 GMT Not After : Dec 22 01:02:09 2025 GMT Subject: CN=a6a57b6e4535eefcc17b9cc282e3d3cc48cb30d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:03:e6:5c:91:cd:84:df:f8:3b:f2:47:85:b5: d0:f3:1a:86:b2:34:57:79:ae:2b:c8:4f:e9:25:d1: 37:5d:48:ec:dc:1e:fc:51:70:5e:c9:f6:87:9a:40: 2f:f6:b1:4c:b4:6a:0f:a7:22:5f:40:87:1f:2b:2e: b6:8c:bb:cc:73:d5:93:1c:7b:67:2b:a4:fc:df:e2: 97:f8:86:2f:71:d2:e0:d7:6a:10:27:10:08:b2:3f: c1:6e:51:49:07:fb:3e:fe:a3:00:b4:22:76:d2:5d: 87:cb:3d:d3:6c:bd:dd:94:14:45:37:c5:fd:b0:c3: 0b:e4:45:7e:cd:cd:ba:77:e3:f2:92:15:df:93:3a: 4f:69:c9:a7:b6:94:bc:2b:e2:4b:0e:90:70:66:22: 53:f8:d0:08:f7:07:93:57:bf:91:14:0b:bf:69:8c: 8f:1a:2a:d3:e6:85:f1:08:be:7a:55:e9:35:73:37: 06:5a:7f:b6:d6:1f:a0:89:a7:58:71:4f:95:5c:bb: f2:0c:de:ce:19:60:8e:3d:30:82:5a:36:33:bc:94: d1:a2:19:19:60:d0:66:ba:ab:0c:1a:74:9a:16:59: 0e:76:4b:05:06:c4:22:cc:4d:98:c0:39:4e:4f:10: e5:f2:f1:8c:84:29:f6:e3:2c:3f:f8:55:60:d1:8a: 52:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A5:7B:6E:45:35:EE:FC:C1:7B:9C:C2:82:E3:D3:CC:48:CB:30:D1 X509v3 Authority Key Identifier: keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:2e:b4:0d:a0:13:b0:47:10:f0:4a:b9:3f:f0:0e:37:ad:94: 96:39:4d:28:05:57:5f:1a:9a:e2:2d:54:0d:00:bd:ef:a4:84: 2e:93:95:d4:d8:8c:db:d7:81:41:1e:6c:b2:1e:f3:19:c2:22: db:cb:be:ba:5b:f1:fb:26:8a:84:c8:2f:d3:24:58:7e:69:29: 8e:8e:ec:00:73:9a:41:24:01:dc:16:28:47:30:02:d7:aa:93: 64:c6:f2:c7:45:48:f1:84:b8:81:cb:62:0d:97:27:39:d7:3c: 30:f9:69:21:1d:77:14:9a:4f:ba:ec:25:fe:e9:26:51:be:f6: 24:7f:18:25:2b:61:f1:fe:47:98:a1:25:f1:db:e5:58:92:f1: dc:15:52:27:f7:ef:fb:c3:03:0a:f5:57:d1:49:63:c8:65:38: 81:be:99:50:1d:fd:b4:4f:a7:86:e6:8c:04:82:b9:df:43:8f: fc:ef:be:80:7e:55:08:6f:f7:e7:1c:e9:ae:11:63:a3:97:cb: 5d:8c:25:8e:a5:cd:b9:40:0e:4f:03:96:71:b1:32:69:d8:09: 01:52:ed:28:dd:0f:17:c5:a6:bc:64:21:66:58:66:ba:5f:71: 91:f5:41:1c:b8:96:ed:7d:94:49:23:74:c0:f0:4b:eb:b1:a5: 95:70:c6:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bZvL6B9WYfCrVAfaqhyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNmRmMGJjMDkzZjI5OGIwNDM1MjJlYmQ0ZWRlMTk3OTMw ODFhMjkwHhcNMjUxMjIxMDEwMjA5WhcNMjUxMjIyMDEwMjA5WjAzMTEwLwYDVQQD EyhhNmE1N2I2ZTQ1MzVlZWZjYzE3YjljYzI4MmUzZDNjYzQ4Y2IzMGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgPmXJHNhN/4O/JHhbXQ8xqGsjRX ea4ryE/pJdE3XUjs3B78UXBeyfaHmkAv9rFMtGoPpyJfQIcfKy62jLvMc9WTHHtn K6T83+KX+IYvcdLg12oQJxAIsj/BblFJB/s+/qMAtCJ20l2Hyz3TbL3dlBRFN8X9 sMML5EV+zc26d+PykhXfkzpPacmntpS8K+JLDpBwZiJT+NAI9weTV7+RFAu/aYyP GirT5oXxCL56Vek1czcGWn+21h+giadYcU+VXLvyDN7OGWCOPTCCWjYzvJTRohkZ YNBmuqsMGnSaFlkOdksFBsQizE2YwDlOTxDl8vGMhCn24yw/+FVg0YpSUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKale25FNe78wXucwoLj08xIyzDRMB8GA1UdIwQY MBaAFBtt8LwJPymLBDUi69Tt4ZeTCBopMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84M2NmMDEtNmNjYS00OGQxLTljYmYt NWFjNmZkZmRjMGNjLzEvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84M2NmMDEtNmNjYS00OGQxLTljYmYtNWFjNmZkZmRjMGNj LzEvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZC60DaAT sEcQ8Eq5P/AON62UljlNKAVXXxqa4i1UDQC976SELpOV1NiM29eBQR5ssh7zGcIi 28u+ulvx+yaKhMgv0yRYfmkpjo7sAHOaQSQB3BYoRzAC16qTZMbyx0VI8YS4gcti DZcnOdc8MPlpIR13FJpPuuwl/ukmUb72JH8YJSth8f5HmKEl8dvlWJLx3BVSJ/fv +8MDCvVX0UljyGU4gb6ZUB39tE+nhuaMBIK530OP/O++gH5VCG/35xzprhFjo5fL XYwljqXNuUAOTwOWcbEyadgJAVLtKN0PF8WmvGQhZlhmul9xkfVBHLiW7X2USSN0 wPBL67GllXDG5Q== -----END CERTIFICATE-----Generated at Sun Dec 21 09:15:28 2025 by rpki-client