This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft File: G6IBGTlu61biTNCpsu4l-i2kteY.mft (raw, json) Hash identifier: OkyPDDGQvsJ7Q5AYOGuaKlEwIzp2ntkdcUNnC+QqPFk= Subject key identifier: BE:D6:A9:89:16:83:15:42:A1:E0:2F:73:83:FA:79:D9:50:22:96:BF Authority key identifier: 1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6 Certificate issuer: /CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6 Certificate serial: 019B4437ADF2E5074511E738BD309B72222D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft Manifest number: 0AF3 Signing time: Mon 22 Dec 2025 04:00:58 +0000 Manifest this update: Mon 22 Dec 2025 04:00:58 +0000 Manifest next update: Tue 23 Dec 2025 04:00:58 +0000 Files and hashes: 1: G6IBGTlu61biTNCpsu4l-i2kteY.crl (hash: 1KXa0xv5TE4j7Gon4ICH7C+ytPdtjLGkr9fLZCN/A1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:ad:f2:e5:07:45:11:e7:38:bd:30:9b:72:22:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6 Validity Not Before: Dec 22 04:00:58 2025 GMT Not After : Dec 23 04:00:58 2025 GMT Subject: CN=bed6a98916831542a1e02f7383fa79d9502296bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c0:73:cf:7a:82:08:73:90:5e:79:33:ee:4f: 0f:02:ee:9f:a1:a6:f2:e2:90:5d:3e:c2:5f:b2:65: da:de:1c:57:dc:b9:44:01:ad:9b:53:d0:d5:fc:48: f3:aa:11:30:0f:be:06:27:65:08:4c:6d:48:af:b0: f3:6f:c3:e6:32:b9:bc:8d:c5:07:15:da:8f:7b:37: bd:fc:fc:b1:92:b2:d6:4e:1f:f0:f2:41:61:60:77: 11:fd:9e:62:e6:5c:0e:32:54:aa:2d:59:5a:82:b8: 14:c1:b5:12:5f:87:cd:0b:23:7c:8e:6e:63:99:33: 5b:5b:17:c3:df:24:36:34:ca:79:c9:45:68:74:eb: 5f:be:fa:c3:2e:4d:70:e7:82:90:d2:21:34:22:8a: 54:48:da:4f:b7:be:1a:de:4d:44:fc:23:d4:d4:18: 3b:ff:29:a7:97:7e:f0:1a:20:95:c9:80:8d:8a:c6: d7:26:f5:81:f3:66:3e:9f:f8:f4:21:bc:1c:44:f0: f7:81:9c:a7:83:05:64:5b:e4:28:b7:11:d3:7c:cc: 29:86:19:60:26:16:b5:a1:98:3f:78:b7:d6:3a:06: 34:72:45:da:2c:bb:e5:55:a0:0f:c7:9f:84:b3:d8: c3:e8:8b:8b:12:76:60:53:54:66:9e:b6:cc:51:e9: ab:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D6:A9:89:16:83:15:42:A1:E0:2F:73:83:FA:79:D9:50:22:96:BF X509v3 Authority Key Identifier: keyid:1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:b8:9d:3f:9d:c6:1e:83:30:65:53:3d:bc:36:c7:25:0d:80: d1:07:ed:37:fb:97:96:64:2e:8e:85:39:e0:9d:c1:9a:40:ae: 09:d9:dc:0d:f6:d1:e3:e0:a8:24:0e:b4:ff:e1:e7:f4:3b:06: 6d:7b:13:fb:5e:1f:2a:09:0c:b2:4d:f2:e7:0a:26:0e:82:56: 5a:41:19:7f:33:21:26:24:21:a0:04:57:61:e3:d0:9d:01:79: 4c:1c:35:0d:1f:54:98:81:04:17:5a:2b:f0:ea:56:31:85:f4: e4:dd:74:3a:83:b9:ff:dd:c8:20:2a:f8:ac:c1:03:89:cf:ff: eb:26:ec:20:c3:e9:0a:b4:e1:80:d8:f1:c6:f8:d9:d8:67:04: 31:d0:84:b9:b5:dc:03:b3:52:13:38:f9:5f:e0:59:2c:f8:ad: 0e:a5:40:bc:e5:7f:2b:59:a4:dd:f1:45:73:60:14:82:c4:64: c8:84:43:4b:e8:ca:80:f3:9c:e9:17:ef:83:47:f7:56:89:12: 58:2e:fd:88:e3:fa:59:54:19:c5:e4:f3:aa:7a:a6:40:9a:b1: 61:c1:a2:4c:16:7e:e8:18:c1:5a:17:dd:2a:69:ed:ea:4f:30: 7b:8d:57:f3:11:da:70:00:82:a1:8b:ce:2c:6d:09:91:e2:a0: 7b:29:53:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN63y5QdFEec4vTCbciItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTIwMTE5Mzk2ZWViNTZlMjRjZDBhOWIyZWUyNWZhMmRh NGI1ZTYwHhcNMjUxMjIyMDQwMDU4WhcNMjUxMjIzMDQwMDU4WjAzMTEwLwYDVQQD EyhiZWQ2YTk4OTE2ODMxNTQyYTFlMDJmNzM4M2ZhNzlkOTUwMjI5NmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cBzz3qCCHOQXnkz7k8PAu6foaby 4pBdPsJfsmXa3hxX3LlEAa2bU9DV/EjzqhEwD74GJ2UITG1Ir7Dzb8PmMrm8jcUH FdqPeze9/PyxkrLWTh/w8kFhYHcR/Z5i5lwOMlSqLVlagrgUwbUSX4fNCyN8jm5j mTNbWxfD3yQ2NMp5yUVodOtfvvrDLk1w54KQ0iE0IopUSNpPt74a3k1E/CPU1Bg7 /ymnl37wGiCVyYCNisbXJvWB82Y+n/j0IbwcRPD3gZyngwVkW+QotxHTfMwphhlg Jha1oZg/eLfWOgY0ckXaLLvlVaAPx5+Es9jD6IuLEnZgU1RmnrbMUemrbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7WqYkWgxVCoeAvc4P6edlQIpa/MB8GA1UdIwQY MBaAFBuiARk5butW4kzQqbLuJfotpLXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNzcxNjAtNGE4NS00NzhkLWE1NDAt NTVhYzIwMjY2NTNiLzEvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jNzcxNjAtNGE4NS00NzhkLWE1NDAtNTVhYzIwMjY2NTNi LzEvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALidP53G HoMwZVM9vDbHJQ2A0QftN/uXlmQujoU54J3BmkCuCdncDfbR4+CoJA60/+Hn9DsG bXsT+14fKgkMsk3y5womDoJWWkEZfzMhJiQhoARXYePQnQF5TBw1DR9UmIEEF1or 8OpWMYX05N10OoO5/93IICr4rMEDic//6ybsIMPpCrThgNjxxvjZ2GcEMdCEubXc A7NSEzj5X+BZLPitDqVAvOV/K1mk3fFFc2AUgsRkyIRDS+jKgPOc6Rfvg0f3VokS WC79iOP6WVQZxeTzqnqmQJqxYcGiTBZ+6BjBWhfdKmnt6k8we41X8xHacACCoYvO LG0JkeKgeylTeg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:31:39 2025 by rpki-client