This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft File: G23wvAk_KYsENSLr1O3hl5MIGik.mft (raw, json) Hash identifier: HBBduNUD5TkOh5L8pOjDZ04/tjliUc+GQmQF46bTEAk= Subject key identifier: E6:65:26:CC:B7:49:2A:DE:10:BA:B3:34:28:17:AC:56:95:73:DD:DD Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29 Certificate issuer: /CN=1b6df0bc093f298b043522ebd4ede19793081a29 Certificate serial: 019B4FCF46F2413B125E9F38893FF04A61C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 10:02:22 +0000 Manifest this update: Wed 24 Dec 2025 10:02:22 +0000 Manifest next update: Thu 25 Dec 2025 10:02:22 +0000 Files and hashes: 1: G23wvAk_KYsENSLr1O3hl5MIGik.crl (hash: SXLRGJz26gvmnkByIThEwMK004NFDxsYvciDpctbv4k=) 2: YJHXZeNag-cu70_fJht-ZOpxnGk.roa (hash: 2m1tn0x6o3pfXUEVzS2q6AJtU601h1r6TeqXWLsErHU=) 3: lYiKNcoH_WfqIMOCgQv0TYn2rKE.roa (hash: jZwRIN2ogKpi/MzaP8NmIeUVW4yffrhHB5Fsd5XJEE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 10:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:46:f2:41:3b:12:5e:9f:38:89:3f:f0:4a:61:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29 Validity Not Before: Dec 24 10:02:22 2025 GMT Not After : Dec 25 10:02:22 2025 GMT Subject: CN=e66526ccb7492ade10bab3342817ac569573dddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:60:4e:28:3c:5d:06:6e:c0:b0:34:53:ea: c4:98:10:c4:ff:72:e1:75:86:24:11:a4:44:c0:e1: de:97:56:00:48:69:ab:b7:0e:59:be:8f:bb:b8:c7: 00:4c:29:ee:9b:9c:db:cb:4b:51:c2:09:1c:df:59: 62:71:cc:76:79:5f:76:3f:61:64:a8:56:5f:0e:c1: c4:8b:d8:fe:f0:98:91:3a:7d:57:4e:fc:c7:af:af: 14:03:12:b8:6c:a3:93:a5:ae:47:c9:17:2e:5d:65: ac:11:2e:61:7b:9a:0b:16:03:b5:ee:61:ab:47:8d: 02:87:58:1f:dc:f3:d0:43:5c:f9:05:81:f6:df:c8: 54:82:33:79:2b:a3:96:ac:55:67:b4:5d:dd:b9:fb: 1a:a9:7f:3c:a8:ea:43:70:5b:e8:17:01:0a:46:47: 69:1d:d0:b5:8c:5f:54:d4:2a:e8:ad:b5:65:4c:76: 9e:bc:4f:5d:51:29:8d:94:9b:15:98:8a:ce:54:48: 0b:c0:7b:b6:a5:94:63:62:55:a1:05:33:9d:d7:a9: 46:c5:7a:ce:93:b8:02:b4:bb:40:bf:d1:2d:a8:55: 5e:f4:d3:2f:b3:2e:02:e0:50:20:49:cb:bf:a7:a3: a7:ca:ea:1b:33:b4:03:1e:2d:d3:53:97:2f:bd:69: fe:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:65:26:CC:B7:49:2A:DE:10:BA:B3:34:28:17:AC:56:95:73:DD:DD X509v3 Authority Key Identifier: keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:03:39:83:8f:53:df:f2:ea:ff:7d:5d:9d:7b:ca:9a:a8:d7: 98:50:95:66:dc:cb:7e:a1:dc:85:07:e9:ee:06:8a:46:57:42: 79:bb:c4:d0:35:19:75:34:08:f8:10:10:6e:ba:1c:55:3a:0f: 50:35:62:7f:73:84:c0:0a:f5:ab:71:9f:1b:9a:ac:7f:83:0d: 5d:98:df:51:16:67:50:1a:3a:ac:cf:b6:c5:b2:2f:19:16:e7: b5:b7:df:f8:2e:8c:16:ab:10:cd:50:8f:20:a5:01:76:c3:a7: 88:63:71:e0:6c:49:ae:0c:13:86:f5:dc:07:28:23:a7:e3:ad: 3f:22:b0:f7:2c:68:13:a6:18:83:44:10:20:85:76:84:3a:70: 91:3d:00:ac:c5:6f:21:70:d6:cc:37:f9:d1:88:e9:d1:97:e9: 15:77:38:18:a4:88:32:d1:d7:a3:4b:e8:ad:d0:a0:b5:ce:8c: 29:23:fe:4f:34:75:ac:77:f5:a1:aa:71:42:63:9f:c3:75:11: 05:88:16:11:b2:43:7b:04:8c:32:97:93:99:ca:b6:10:1e:b5: c2:dd:0a:b0:8a:fa:4b:61:de:65:70:6e:e2:7d:9e:01:97:3e: d8:b6:42:91:fa:53:6d:ee:59:38:e9:d7:0a:98:10:2e:f1:94: 2e:2b:32:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPz0byQTsSXp84iT/wSmHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNmRmMGJjMDkzZjI5OGIwNDM1MjJlYmQ0ZWRlMTk3OTMw ODFhMjkwHhcNMjUxMjI0MTAwMjIyWhcNMjUxMjI1MTAwMjIyWjAzMTEwLwYDVQQD EyhlNjY1MjZjY2I3NDkyYWRlMTBiYWIzMzQyODE3YWM1Njk1NzNkZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSRgTig8XQZuwLA0U+rEmBDE/3Lh dYYkEaREwOHel1YASGmrtw5Zvo+7uMcATCnum5zby0tRwgkc31liccx2eV92P2Fk qFZfDsHEi9j+8JiROn1XTvzHr68UAxK4bKOTpa5HyRcuXWWsES5he5oLFgO17mGr R40Ch1gf3PPQQ1z5BYH238hUgjN5K6OWrFVntF3dufsaqX88qOpDcFvoFwEKRkdp HdC1jF9U1CrorbVlTHaevE9dUSmNlJsVmIrOVEgLwHu2pZRjYlWhBTOd16lGxXrO k7gCtLtAv9EtqFVe9NMvsy4C4FAgScu/p6OnyuobM7QDHi3TU5cvvWn+KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZlJsy3SSreELqzNCgXrFaVc93dMB8GA1UdIwQY MBaAFBtt8LwJPymLBDUi69Tt4ZeTCBopMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84M2NmMDEtNmNjYS00OGQxLTljYmYt NWFjNmZkZmRjMGNjLzEvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84M2NmMDEtNmNjYS00OGQxLTljYmYtNWFjNmZkZmRjMGNj LzEvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwM5g49T 3/Lq/31dnXvKmqjXmFCVZtzLfqHchQfp7gaKRldCebvE0DUZdTQI+BAQbrocVToP UDVif3OEwAr1q3GfG5qsf4MNXZjfURZnUBo6rM+2xbIvGRbntbff+C6MFqsQzVCP IKUBdsOniGNx4GxJrgwThvXcBygjp+OtPyKw9yxoE6YYg0QQIIV2hDpwkT0ArMVv IXDWzDf50Yjp0ZfpFXc4GKSIMtHXo0vordCgtc6MKSP+TzR1rHf1oapxQmOfw3UR BYgWEbJDewSMMpeTmcq2EB61wt0KsIr6S2HeZXBu4n2eAZc+2LZCkfpTbe5ZOOnX CpgQLvGULisyfg== -----END CERTIFICATE-----Generated at Wed Dec 24 19:51:06 2025 by rpki-client