This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft File: G6IBGTlu61biTNCpsu4l-i2kteY.mft (raw, json) Hash identifier: IXlp+sqUalyOgXc3k4U/Aw7GT7j0r0Xa1BQZReM+U7I= Subject key identifier: D0:14:90:F0:66:C8:32:5F:4B:F5:DF:A8:DF:10:60:B3:A2:BF:56:E2 Authority key identifier: 1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6 Certificate issuer: /CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6 Certificate serial: 019B4DE0A692B0549F019362BBC3DE00E044 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft Manifest number: 0AF8 Signing time: Wed 24 Dec 2025 01:02:06 +0000 Manifest this update: Wed 24 Dec 2025 01:02:06 +0000 Manifest next update: Thu 25 Dec 2025 01:02:06 +0000 Files and hashes: 1: G6IBGTlu61biTNCpsu4l-i2kteY.crl (hash: yGM/8xk5iYU+j03T4wC8E1r6PQ5WrwGrVjy8eZfCh9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:a6:92:b0:54:9f:01:93:62:bb:c3:de:00:e0:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6 Validity Not Before: Dec 24 01:02:06 2025 GMT Not After : Dec 25 01:02:06 2025 GMT Subject: CN=d01490f066c8325f4bf5dfa8df1060b3a2bf56e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:95:e4:48:25:cb:ec:55:45:b6:ec:7f:53:a0: df:83:9f:f0:ba:d7:41:cb:62:69:7d:11:83:e8:03: 09:93:a6:9f:c7:02:7d:86:3f:19:79:4d:d2:01:18: a4:be:5e:3d:94:4f:6a:8b:55:97:4d:51:a3:8d:6a: b4:28:50:3c:12:10:1c:2a:75:2b:b9:c4:96:f2:f7: 7d:b2:ee:f6:72:01:28:53:d2:8e:2a:b0:90:b5:86: 9e:20:ae:cb:28:e5:cf:3f:e0:36:42:f7:2d:d5:d1: 5a:51:76:e5:0b:33:f8:64:28:60:88:28:ae:e6:b6: 17:3d:54:e9:c9:4c:c8:fc:29:f9:a0:27:55:bf:c8: f7:c5:f1:ce:30:61:9e:ed:b5:df:39:75:76:b8:5e: 17:f7:8e:f4:1e:35:4b:11:e8:be:45:8a:92:68:db: 80:0f:96:d5:a9:f7:bd:31:a5:01:e1:a0:e1:82:5a: 99:d0:02:85:63:3c:23:1e:17:df:9b:85:ad:e3:92: b3:d2:a5:d1:8d:b2:51:9c:a2:3e:d9:47:80:9d:fe: df:c5:3d:b6:d1:d5:a5:15:fe:e3:f1:92:8f:b2:2f: 47:66:76:d8:d9:79:76:0e:81:23:0a:76:80:33:b9: 15:53:83:4c:28:92:64:07:9b:c0:0e:40:3a:a2:3e: 23:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:14:90:F0:66:C8:32:5F:4B:F5:DF:A8:DF:10:60:B3:A2:BF:56:E2 X509v3 Authority Key Identifier: keyid:1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:78:a4:90:2d:b1:2f:5b:68:f8:33:4e:52:46:83:d5:78:b9: 64:a9:5e:72:51:0c:7b:34:bc:44:c1:49:8a:70:ad:ac:b5:cf: 4a:4d:a3:8e:17:f3:43:04:3a:cd:ba:a1:1e:d8:78:37:bb:e6: 12:c8:d9:d6:8c:9f:f5:7d:7a:32:6f:31:e3:f2:7d:96:01:29: ec:27:26:9d:1a:1c:b5:17:9c:49:f4:b1:ac:3d:91:fe:9f:fb: 0a:88:2d:94:e6:7e:ae:5c:a7:5f:b9:f7:58:83:05:b4:53:cb: 51:67:fc:4d:8b:8a:e0:c6:2e:72:5b:5c:cd:c0:d4:54:56:f7: 6a:bf:c6:df:5b:c9:0b:46:81:87:2f:fa:5f:d4:69:e5:92:96: ae:03:a6:83:d8:60:5d:fb:ca:af:24:96:e5:6f:1c:96:eb:c2: 9f:0f:6b:90:e2:ed:ce:83:5b:93:66:64:73:4c:ed:9e:01:e7: a0:8e:66:d0:0f:1f:4e:b0:61:f6:90:9e:2a:00:1b:25:1b:74: f6:75:18:f5:53:13:86:d6:23:e9:98:79:fa:0d:4b:73:43:28: 85:6a:7d:a2:95:ff:5a:d4:d4:5d:50:86:b5:7c:a1:4f:fa:56: 5a:01:9c:77:5e:33:2e:df:9d:a3:c2:31:2d:58:a9:bc:04:34: 19:79:ce:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4KaSsFSfAZNiu8PeAOBEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTIwMTE5Mzk2ZWViNTZlMjRjZDBhOWIyZWUyNWZhMmRh NGI1ZTYwHhcNMjUxMjI0MDEwMjA2WhcNMjUxMjI1MDEwMjA2WjAzMTEwLwYDVQQD EyhkMDE0OTBmMDY2YzgzMjVmNGJmNWRmYThkZjEwNjBiM2EyYmY1NmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZXkSCXL7FVFtux/U6Dfg5/wutdB y2JpfRGD6AMJk6afxwJ9hj8ZeU3SARikvl49lE9qi1WXTVGjjWq0KFA8EhAcKnUr ucSW8vd9su72cgEoU9KOKrCQtYaeIK7LKOXPP+A2Qvct1dFaUXblCzP4ZChgiCiu 5rYXPVTpyUzI/Cn5oCdVv8j3xfHOMGGe7bXfOXV2uF4X9470HjVLEei+RYqSaNuA D5bVqfe9MaUB4aDhglqZ0AKFYzwjHhffm4Wt45Kz0qXRjbJRnKI+2UeAnf7fxT22 0dWlFf7j8ZKPsi9HZnbY2Xl2DoEjCnaAM7kVU4NMKJJkB5vADkA6oj4jEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAUkPBmyDJfS/XfqN8QYLOiv1biMB8GA1UdIwQY MBaAFBuiARk5butW4kzQqbLuJfotpLXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNzcxNjAtNGE4NS00NzhkLWE1NDAt NTVhYzIwMjY2NTNiLzEvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jNzcxNjAtNGE4NS00NzhkLWE1NDAtNTVhYzIwMjY2NTNi LzEvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXikkC2x L1to+DNOUkaD1Xi5ZKleclEMezS8RMFJinCtrLXPSk2jjhfzQwQ6zbqhHth4N7vm EsjZ1oyf9X16Mm8x4/J9lgEp7CcmnRoctRecSfSxrD2R/p/7CogtlOZ+rlynX7n3 WIMFtFPLUWf8TYuK4MYucltczcDUVFb3ar/G31vJC0aBhy/6X9Rp5ZKWrgOmg9hg XfvKrySW5W8cluvCnw9rkOLtzoNbk2Zkc0ztngHnoI5m0A8fTrBh9pCeKgAbJRt0 9nUY9VMThtYj6Zh5+g1Lc0MohWp9opX/WtTUXVCGtXyhT/pWWgGcd14zLt+do8Ix LVipvAQ0GXnOqw== -----END CERTIFICATE-----Generated at Wed Dec 24 03:36:00 2025 by rpki-client