This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft File: G8PBvvFfS8zE50jAiVfswimg8e8.mft (raw, json) Hash identifier: tzM6ooAhkCGa2xlp6PuCVDEzpXy45XK/6cIEQO0UBHk= Subject key identifier: 57:53:E6:13:15:22:E1:42:6A:E4:6B:90:89:55:29:A9:81:CC:B6:4C Authority key identifier: 1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF Certificate issuer: /CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef Certificate serial: 019B3E6CDE20EA0BBB05D14E23F2C007FCC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 01:01:20 +0000 Manifest this update: Sun 21 Dec 2025 01:01:20 +0000 Manifest next update: Mon 22 Dec 2025 01:01:20 +0000 Files and hashes: 1: G8PBvvFfS8zE50jAiVfswimg8e8.crl (hash: mjZmkqBpVHvuT74qN3mfrdeyZDwEBaYDeQT18+Q88Cg=) 2: hwl_pJftKoYgWaDLkyi1NUP4Iqo.roa (hash: zD6uA78lx0+tAtyuIqfvTt4SALf3UDD47V0kgwtFI/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:de:20:ea:0b:bb:05:d1:4e:23:f2:c0:07:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef Validity Not Before: Dec 21 01:01:20 2025 GMT Not After : Dec 22 01:01:20 2025 GMT Subject: CN=5753e6131522e1426ae46b90895529a981ccb64c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:05:d0:a0:f3:7c:f9:1e:74:de:4f:4a:d8:02: 68:e9:93:5e:33:df:08:a7:e8:ab:a3:36:10:38:a7: 4d:41:d4:dd:12:7c:33:fd:71:99:a6:e5:38:1c:09: 1b:67:b9:25:fa:b2:45:cc:c9:40:66:30:b7:f8:ef: d8:ef:47:57:ec:da:b9:5a:e9:c0:fa:71:7c:44:9d: c8:2e:2d:8d:0b:8f:f0:25:6c:df:19:79:26:9a:37: b9:f2:e1:0d:dd:a0:d4:b6:8a:1d:b3:1c:e6:83:2f: 28:7d:7c:89:60:7b:26:29:21:9c:37:4e:fb:f4:55: 95:ae:d7:1a:51:2f:3a:5a:da:98:20:62:23:1e:37: 2c:8f:e4:04:59:64:d1:e4:57:b6:29:20:99:b1:22: 29:5a:23:c2:b8:8c:46:eb:6d:6d:75:7e:fd:3b:49: 50:c3:76:b2:af:08:47:c5:c0:f2:40:ab:3d:65:fc: 88:2c:a7:df:5b:f0:0e:2b:12:31:75:a7:2c:c5:27: f1:47:8d:92:5b:04:c5:6b:5f:bc:c5:5b:40:a2:d6: 27:7e:1a:f0:7e:a8:e6:af:32:85:cc:a7:a7:f6:57: c2:8b:d1:1d:2f:7d:0b:74:4d:e3:70:24:17:a3:a2: 92:77:ee:7d:f5:ff:3c:f1:0c:47:0c:f0:f3:f6:9b: 83:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:53:E6:13:15:22:E1:42:6A:E4:6B:90:89:55:29:A9:81:CC:B6:4C X509v3 Authority Key Identifier: keyid:1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:25:09:ec:51:c6:1d:b8:76:40:6d:ee:5d:5a:49:a2:93:04: e5:b8:91:38:48:35:40:93:7e:e7:3a:43:e4:f9:42:91:55:90: 34:ff:80:8b:6b:88:ce:7e:64:c9:be:59:b5:56:be:31:c3:78: b9:a5:12:6f:bd:44:04:1a:dc:9c:e2:eb:00:4b:78:11:a2:5a: bc:85:11:29:6a:b8:80:0c:6f:7d:b8:1a:ad:44:70:49:e3:4d: e6:51:26:b0:1f:e4:62:22:55:12:37:13:e5:91:d5:c3:4b:6c: b5:1d:5e:64:7d:35:46:18:9d:0a:50:9d:79:dc:2c:7a:a6:bb: 82:42:e0:bf:5a:e9:ac:22:7c:3e:37:3b:94:a8:fe:8d:5a:05: 48:57:e7:1a:dd:c3:05:56:72:20:2a:48:6a:b8:78:d3:07:68: 6d:00:b3:22:ac:4a:9c:7b:e2:44:6d:7c:67:f9:18:aa:dd:c8: 5d:6a:a5:c6:74:ea:f3:e1:4a:24:6b:73:44:75:db:96:75:74: 9d:d6:fc:9f:e2:b5:64:51:aa:40:f8:47:89:85:bb:17:dd:44: 85:c3:df:19:13:7e:c3:8d:02:4a:5c:c1:ea:95:75:f2:9d:95: 72:e9:3e:cf:be:fd:cf:8e:18:69:fd:90:cc:44:ac:ee:9d:c6: 08:7b:ef:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bN4g6gu7BdFOI/LAB/zAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYzNjMWJlZjE1ZjRiY2NjNGU3NDhjMDg5NTdlY2MyMjlh MGYxZWYwHhcNMjUxMjIxMDEwMTIwWhcNMjUxMjIyMDEwMTIwWjAzMTEwLwYDVQQD Eyg1NzUzZTYxMzE1MjJlMTQyNmFlNDZiOTA4OTU1MjlhOTgxY2NiNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gXQoPN8+R503k9K2AJo6ZNeM98I p+irozYQOKdNQdTdEnwz/XGZpuU4HAkbZ7kl+rJFzMlAZjC3+O/Y70dX7Nq5WunA +nF8RJ3ILi2NC4/wJWzfGXkmmje58uEN3aDUtoodsxzmgy8ofXyJYHsmKSGcN077 9FWVrtcaUS86WtqYIGIjHjcsj+QEWWTR5Fe2KSCZsSIpWiPCuIxG621tdX79O0lQ w3ayrwhHxcDyQKs9ZfyILKffW/AOKxIxdacsxSfxR42SWwTFa1+8xVtAotYnfhrw fqjmrzKFzKen9lfCi9EdL30LdE3jcCQXo6KSd+599f888QxHDPDz9puDjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdT5hMVIuFCauRrkIlVKamBzLZMMB8GA1UdIwQY MBaAFBvDwb7xX0vMxOdIwIlX7MIpoPHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzhQQnZ2RmZTOHpFNTBqQWlWZnN3aW1nOGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iYzk0ZGYtNzI1OS00MmQxLTgyMmEt M2Q5ODEwMDk4NzAzLzEvRzhQQnZ2RmZTOHpFNTBqQWlWZnN3aW1nOGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9iYzk0ZGYtNzI1OS00MmQxLTgyMmEtM2Q5ODEwMDk4NzAz LzEvRzhQQnZ2RmZTOHpFNTBqQWlWZnN3aW1nOGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSUJ7FHG Hbh2QG3uXVpJopME5biROEg1QJN+5zpD5PlCkVWQNP+Ai2uIzn5kyb5ZtVa+McN4 uaUSb71EBBrcnOLrAEt4EaJavIURKWq4gAxvfbgarURwSeNN5lEmsB/kYiJVEjcT 5ZHVw0tstR1eZH01RhidClCdedwseqa7gkLgv1rprCJ8Pjc7lKj+jVoFSFfnGt3D BVZyICpIarh40wdobQCzIqxKnHviRG18Z/kYqt3IXWqlxnTq8+FKJGtzRHXblnV0 ndb8n+K1ZFGqQPhHiYW7F91EhcPfGRN+w40CSlzB6pV18p2Vcuk+z779z44Yaf2Q zESs7p3GCHvvmA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:46:12 2025 by rpki-client