This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft File: G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json) Hash identifier: NJfZaQA9Ld2RTq9zQZ9vgfMPaRxDYZ6Fs5j3yn55jnY= Subject key identifier: D3:5F:18:9C:0A:C6:77:E5:02:8E:50:F8:57:95:FF:71:E3:11:81:04 Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20 Certificate issuer: /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720 Certificate serial: 019B3DFEB447121D96E47DA806B19264892C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 23:01:00 +0000 Manifest this update: Sat 20 Dec 2025 23:01:00 +0000 Manifest next update: Sun 21 Dec 2025 23:01:00 +0000 Files and hashes: 1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: j3x4vGXVQg3aJwZ1FGPhpRAHtWqHhcZiVctMCcdUmx4=) 2: PWeS-NKTh0dPX7EQagJN_UUuvpA.roa (hash: B0E7vLVtVMLANL6NGMEZXBlTrX+gpHtSfadbpxHmK4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:b4:47:12:1d:96:e4:7d:a8:06:b1:92:64:89:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720 Validity Not Before: Dec 20 23:01:00 2025 GMT Not After : Dec 21 23:01:00 2025 GMT Subject: CN=d35f189c0ac677e5028e50f85795ff71e3118104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:59:0d:db:6e:78:37:06:7c:60:d9:24:a3:3c: 80:c4:9c:ca:43:44:7d:39:4b:61:28:9e:17:f8:57: 15:d6:dd:3a:74:74:b7:ab:ea:ec:58:66:ce:11:5f: b9:40:db:91:26:3a:94:f0:1d:26:31:67:b0:da:a6: 66:fd:3c:57:50:52:d1:47:05:5d:41:02:6b:4f:06: 05:b0:42:04:e8:ad:62:b9:78:7f:7b:d4:87:07:98: 3b:84:42:86:31:ad:29:d4:e3:0e:58:9b:fa:1e:5f: c1:d5:ad:7b:8d:01:33:75:86:4d:4b:53:ee:3e:5c: 69:a2:07:21:8e:df:54:89:80:1b:ee:3d:fb:21:85: d5:65:f7:4a:59:fd:72:4c:89:58:a8:a7:92:35:1d: 05:4d:d1:76:57:51:42:5e:67:64:b8:ff:90:66:4c: 83:a3:ba:cf:80:d5:a2:58:c9:b9:1b:70:37:b8:c9: ac:b1:35:51:48:6d:72:b9:09:6d:17:87:bc:05:20: da:09:da:86:fa:30:3f:5c:d5:f9:eb:73:62:54:bc: 7f:3d:ca:29:be:96:17:f0:ed:44:a3:50:a3:5d:92: b5:99:0b:bf:86:c2:0c:e2:c7:96:7e:50:3f:6f:72: 9b:81:f8:4e:7f:b6:39:02:1a:65:d2:47:85:cc:c6: 3d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5F:18:9C:0A:C6:77:E5:02:8E:50:F8:57:95:FF:71:E3:11:81:04 X509v3 Authority Key Identifier: keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:9f:45:8e:68:2c:0c:d6:df:8d:f4:69:d1:fd:94:75:6e:62: d6:a1:9e:94:64:2e:20:43:ac:4d:7e:35:57:55:52:ac:64:50: b6:3a:dc:00:72:96:25:77:42:85:d6:fb:f5:7d:3f:1a:18:70: 11:66:d0:fe:70:55:f8:68:ab:41:8b:e2:f6:f1:4f:22:27:7f: c8:b1:68:5a:c6:b7:57:55:fd:88:64:38:fb:33:7e:9c:6e:55: 96:7a:54:c5:93:52:7d:b8:29:c7:99:1f:0d:e2:8d:06:57:ae: c7:c0:36:c9:7c:68:cd:60:4c:04:a6:98:ca:fd:83:5f:c2:fb: 94:2c:1e:6c:31:de:04:f7:b8:2d:d2:67:b9:97:07:01:6e:59: 95:b2:8f:2a:ce:cd:4a:4e:1a:44:3c:f8:91:11:ee:13:2c:6d: 36:6c:99:bd:e8:52:14:5d:8e:73:59:4e:18:ca:43:61:46:64: d9:2e:76:ac:15:f8:c9:98:7a:cc:ac:f8:60:83:23:75:fc:2b: 6e:af:9b:2e:f3:2b:25:f8:eb:6c:a2:1d:f2:fb:55:8a:e8:9e: ec:38:35:17:df:1d:cd:c9:4e:10:13:2d:da:46:bd:11:f5:10: 04:b8:26:bb:5f:07:2f:82:8d:35:bf:e9:26:a5:82:fc:5c:58: 2a:7f:ad:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/rRHEh2W5H2oBrGSZIksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZGJjNDExNDQ0NDgwNjUzMTNlZjBiODJlMWNjZjdhZTZl YTU3MjAwHhcNMjUxMjIwMjMwMTAwWhcNMjUxMjIxMjMwMTAwWjAzMTEwLwYDVQQD EyhkMzVmMTg5YzBhYzY3N2U1MDI4ZTUwZjg1Nzk1ZmY3MWUzMTE4MTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VkN2254NwZ8YNkkozyAxJzKQ0R9 OUthKJ4X+FcV1t06dHS3q+rsWGbOEV+5QNuRJjqU8B0mMWew2qZm/TxXUFLRRwVd QQJrTwYFsEIE6K1iuXh/e9SHB5g7hEKGMa0p1OMOWJv6Hl/B1a17jQEzdYZNS1Pu Plxpogchjt9UiYAb7j37IYXVZfdKWf1yTIlYqKeSNR0FTdF2V1FCXmdkuP+QZkyD o7rPgNWiWMm5G3A3uMmssTVRSG1yuQltF4e8BSDaCdqG+jA/XNX563NiVLx/Pcop vpYX8O1Eo1CjXZK1mQu/hsIM4seWflA/b3KbgfhOf7Y5Ahpl0keFzMY9zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNfGJwKxnflAo5Q+FeV/3HjEYEEMB8GA1UdIwQY MBaAFBvbxBFERIBlMT7wuC4cz3rm6lcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80YTI5M2ItNGM0MS00MjhjLTkyODct YmQ5OGIzZTkwZTQzLzEvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80YTI5M2ItNGM0MS00MjhjLTkyODctYmQ5OGIzZTkwZTQz LzEvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJ9Fjmgs DNbfjfRp0f2UdW5i1qGelGQuIEOsTX41V1VSrGRQtjrcAHKWJXdChdb79X0/Ghhw EWbQ/nBV+GirQYvi9vFPIid/yLFoWsa3V1X9iGQ4+zN+nG5VlnpUxZNSfbgpx5kf DeKNBleux8A2yXxozWBMBKaYyv2DX8L7lCwebDHeBPe4LdJnuZcHAW5ZlbKPKs7N Sk4aRDz4kRHuEyxtNmyZvehSFF2Oc1lOGMpDYUZk2S52rBX4yZh6zKz4YIMjdfwr bq+bLvMrJfjrbKId8vtViuie7Dg1F98dzclOEBMt2ka9EfUQBLgmu18HL4KNNb/p JqWC/FxYKn+tJw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:43:19 2025 by rpki-client