This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json) Hash identifier: teaVo6Np25Ef5i3XQyuOLJw0R54A/Nd2jl7BkILXxrU= Subject key identifier: FB:B1:FF:94:D7:CE:49:E6:F3:AC:C9:03:2D:40:2C:01:F8:B8:04:17 Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8 Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8 Certificate serial: 019B3CEBF3268EFCBE96C69D4610FDDA0EF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 18:00:54 +0000 Manifest this update: Sat 20 Dec 2025 18:00:54 +0000 Manifest next update: Sun 21 Dec 2025 18:00:54 +0000 Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: uFTEm/qVoMtbT4I6JirKk2z21Kiu7U4gNms97A7u24E=) 2: g9iZztKhPBfdB3SMkUVgLaoGa6I.roa (hash: 3cdl1mhf1MuyZrBGoECoS2FydheWQgVhXvTorzFZles=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:f3:26:8e:fc:be:96:c6:9d:46:10:fd:da:0e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8 Validity Not Before: Dec 20 18:00:54 2025 GMT Not After : Dec 21 18:00:54 2025 GMT Subject: CN=fbb1ff94d7ce49e6f3acc9032d402c01f8b80417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:60:16:12:f0:76:17:41:16:c1:03:b3:d2:5f: 27:41:51:0b:e7:41:d5:59:eb:0d:02:23:4c:73:75: d4:1c:c4:43:d0:1b:d3:64:22:a6:4a:c1:83:36:56: 96:2a:42:bb:3e:37:6d:8e:f8:8c:c0:f2:d4:7d:35: b4:50:b5:9a:1f:7a:cd:c6:d2:20:68:61:57:5f:fe: 35:81:27:58:83:ca:af:e4:e7:54:c3:b5:e4:9a:a2: 6c:85:64:95:5d:f6:a6:38:b8:c1:3f:78:7a:a4:eb: c1:6e:bf:e1:8b:fd:f2:30:7f:ab:96:99:85:59:39: 3a:4a:8e:9f:d8:28:c0:58:9e:40:f8:98:e1:2c:5d: 6a:72:03:af:79:ab:b1:14:4f:5f:95:bd:4d:aa:01: d1:1c:13:9f:ff:ce:ff:53:62:73:2b:cd:82:74:06: 90:f9:9f:fd:71:b8:80:08:d5:99:91:df:5b:63:9d: 6a:e5:dd:bf:09:1f:d1:f7:fe:75:94:e8:17:73:cf: 5b:cb:9e:2f:85:d3:e0:29:5d:ad:98:06:f7:01:10: c9:78:68:04:95:69:fc:17:2b:2e:e2:e6:02:bc:af: d6:d4:72:f1:56:4d:16:da:22:6c:30:4a:6d:8f:f5: 3b:aa:d1:40:c1:01:a6:ae:d7:86:93:e0:3f:e5:ae: 89:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B1:FF:94:D7:CE:49:E6:F3:AC:C9:03:2D:40:2C:01:F8:B8:04:17 X509v3 Authority Key Identifier: keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:2d:b1:62:81:4d:13:83:53:63:03:b1:f7:80:f9:db:4b:3a: 70:51:7e:93:42:67:48:fc:fe:a1:54:5f:03:6c:80:82:d7:ad: 26:77:ef:11:bb:95:1b:93:dd:4a:6e:83:c8:dc:b1:24:1a:a7: 0b:73:17:ff:6b:79:50:a3:a7:f3:fa:27:df:6f:b4:ac:cd:cc: b7:ba:c5:82:a1:20:2f:f7:e1:27:f2:dd:be:e5:ad:61:dc:b6: 0a:07:3e:b3:f3:dd:46:0b:2c:a9:d5:b6:e8:3a:dd:2d:3d:27: fb:2a:85:e6:de:e3:65:2a:09:95:b6:97:3f:78:99:ca:b9:aa: 28:9e:bd:e8:58:23:29:53:2b:36:45:bd:66:8b:32:50:e4:28: 1f:b4:5b:e6:f5:ae:63:e8:50:d5:e6:92:84:7b:ec:b0:9e:7c: 58:4e:7c:37:52:f8:4d:db:36:84:09:2d:e8:36:71:cd:87:58: 9f:ca:6e:df:7b:0e:0d:ec:8c:e7:cf:06:37:e0:20:3d:11:7e: 19:4f:38:f8:54:08:fc:c2:f5:7f:7f:67:c8:a3:da:fb:a4:08: 83:e3:92:9f:5e:7c:4d:b2:75:3e:c9:8a:0e:91:76:12:09:16: 79:2b:5a:60:d8:80:86:92:23:6f:4f:04:19:ab:73:f2:62:f5: 69:6c:05:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/Mmjvy+lsadRhD92g72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MDkwZWQwMDI3ZjBlMzNhNzU0YzI1OWY3ZGM4OGJiN2E3 MmZmYTgwHhcNMjUxMjIwMTgwMDU0WhcNMjUxMjIxMTgwMDU0WjAzMTEwLwYDVQQD EyhmYmIxZmY5NGQ3Y2U0OWU2ZjNhY2M5MDMyZDQwMmMwMWY4YjgwNDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GAWEvB2F0EWwQOz0l8nQVEL50HV WesNAiNMc3XUHMRD0BvTZCKmSsGDNlaWKkK7PjdtjviMwPLUfTW0ULWaH3rNxtIg aGFXX/41gSdYg8qv5OdUw7XkmqJshWSVXfamOLjBP3h6pOvBbr/hi/3yMH+rlpmF WTk6So6f2CjAWJ5A+JjhLF1qcgOveauxFE9flb1NqgHRHBOf/87/U2JzK82CdAaQ +Z/9cbiACNWZkd9bY51q5d2/CR/R9/51lOgXc89by54vhdPgKV2tmAb3ARDJeGgE lWn8Fysu4uYCvK/W1HLxVk0W2iJsMEptj/U7qtFAwQGmrteGk+A/5a6JSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPux/5TXzknm86zJAy1ALAH4uAQXMB8GA1UdIwQY MBaAFBgJDtACfw4zp1TCWffciLt6cv+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xMGRkN2YtNWVkNy00NGRkLWJlYjIt Y2ZmYWQ1MzI5MmNlLzEvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xMGRkN2YtNWVkNy00NGRkLWJlYjItY2ZmYWQ1MzI5MmNl LzEvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0C2xYoFN E4NTYwOx94D520s6cFF+k0JnSPz+oVRfA2yAgtetJnfvEbuVG5PdSm6DyNyxJBqn C3MX/2t5UKOn8/on32+0rM3Mt7rFgqEgL/fhJ/LdvuWtYdy2Cgc+s/PdRgssqdW2 6DrdLT0n+yqF5t7jZSoJlbaXP3iZyrmqKJ696FgjKVMrNkW9ZosyUOQoH7Rb5vWu Y+hQ1eaShHvssJ58WE58N1L4Tds2hAkt6DZxzYdYn8pu33sODeyM588GN+AgPRF+ GU84+FQI/ML1f39nyKPa+6QIg+OSn158TbJ1PsmKDpF2EgkWeStaYNiAhpIjb08E Gatz8mL1aWwF/Q== -----END CERTIFICATE-----Generated at Sun Dec 21 01:16:06 2025 by rpki-client