This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft File: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft (raw, json) Hash identifier: jZ0u9kaM1qkhq2a6WR4iKji0QOJbdRKmSuVut60awMg= Subject key identifier: 0D:E0:42:64:D6:10:2A:B0:08:13:29:9C:B7:AF:0C:8A:05:52:99:3A Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4 Certificate issuer: /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4 Certificate serial: 019B522ABE22003DD210CC85FC0C912096FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft Manifest number: 0C12 Signing time: Wed 24 Dec 2025 21:01:31 +0000 Manifest this update: Wed 24 Dec 2025 21:01:31 +0000 Manifest next update: Thu 25 Dec 2025 21:01:31 +0000 Files and hashes: 1: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl (hash: phipGFwKoVncMVUY+CNxgfDdQPKqld8vZt8qCNTegYQ=) 2: ogliIW3uJqaM5LS-fzkMZKt_cLk.roa (hash: LLZA+4CzPtqrtq7hIsuRZwdNW4zECVbIb6kWURR2Rw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 21:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:be:22:00:3d:d2:10:cc:85:fc:0c:91:20:96:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4 Validity Not Before: Dec 24 21:01:31 2025 GMT Not After : Dec 25 21:01:31 2025 GMT Subject: CN=0de04264d6102ab00813299cb7af0c8a0552993a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:06:54:91:37:b4:f4:28:79:b9:58:fb:94:b6: 13:25:ad:f9:83:80:8f:17:6c:5f:7f:95:05:e5:da: 83:20:97:8f:76:b3:2a:86:63:f3:80:c9:d2:36:62: 55:ed:21:8d:aa:23:f6:cf:1c:b9:49:15:a7:ad:b6: f5:5e:7b:91:40:2e:b8:ee:0b:c7:8e:ed:fd:7b:3c: af:a7:eb:89:36:47:a0:20:0b:f9:bc:75:57:11:48: e7:4f:32:af:7a:fa:65:95:a9:05:01:c6:44:5d:5b: 2b:4c:e8:28:4b:91:51:e0:a0:18:65:4f:79:3e:d2: 81:c9:52:08:f4:c5:8b:4b:35:7d:f2:f4:c2:f9:3f: 10:00:b5:a7:55:bf:95:1b:16:a9:e7:9a:d6:b6:6e: 19:52:d7:b5:8d:15:0b:e0:7e:92:b6:9d:12:10:ac: a4:88:9b:3d:d6:a5:e3:b4:a7:a5:37:89:a8:b3:a5: 7d:05:4a:26:cf:e8:c6:b0:99:c0:b5:25:cb:3a:a4: c2:f4:06:2e:2f:4f:5b:db:39:3f:bb:2d:60:72:6e: 4e:fe:e1:3e:5f:9e:73:17:d2:94:69:29:a5:7c:32: 51:36:f8:38:2e:86:75:0a:81:59:1f:6d:d0:90:97: 35:b9:aa:b3:f2:87:5b:36:3a:4d:f7:cc:3c:d3:68: ec:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E0:42:64:D6:10:2A:B0:08:13:29:9C:B7:AF:0C:8A:05:52:99:3A X509v3 Authority Key Identifier: keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a5:76:66:ea:03:08:3f:c5:21:52:27:71:c4:af:02:44:f6: 24:36:4e:4d:b3:59:37:7d:87:12:4e:a7:68:8a:cf:6d:47:c6: 64:62:89:da:29:f1:1d:d0:c6:13:b5:48:ea:2c:84:32:bc:ef: 40:f4:ed:91:57:6a:98:6f:91:3a:a8:5b:45:21:87:79:cc:a3: d2:af:5b:13:42:3a:14:c0:b7:77:79:af:4d:3b:6f:0f:f4:cf: 7d:aa:03:36:2f:80:0c:3d:f5:7a:a3:1c:ca:7d:b4:bb:48:1a: 12:c3:be:4e:fe:44:6a:e2:5f:8f:00:32:43:95:19:2c:40:f9: 06:d8:f7:2d:45:3e:6c:38:22:c4:cf:a6:bf:75:0b:75:32:ee: af:8a:9f:52:3f:e4:eb:07:9e:57:06:0d:0d:90:30:af:1e:41: 40:cb:20:1e:7e:18:8a:93:48:6f:ea:b6:0c:ea:92:df:8d:96: e2:da:0f:41:93:35:9e:24:01:d3:c2:95:79:2d:fe:59:54:ab: 2a:e7:c4:26:ba:b9:cf:35:0e:ac:e8:f1:ac:20:e3:6e:bc:f5: 23:ed:8d:75:bf:c7:96:bd:8c:69:d0:4c:63:87:f9:14:86:4e: b9:9e:b7:7c:8e:2e:a6:7c:df:17:80:8a:f1:22:0e:6e:41:38: fe:15:8f:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKr4iAD3SEMyF/AyRIJb8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZTM2ZmNmYjA0N2I4YzY1M2ZmYTMyN2ZjMmNhNTExNjll OTQ3YTQwHhcNMjUxMjI0MjEwMTMxWhcNMjUxMjI1MjEwMTMxWjAzMTEwLwYDVQQD EygwZGUwNDI2NGQ2MTAyYWIwMDgxMzI5OWNiN2FmMGM4YTA1NTI5OTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQZUkTe09Ch5uVj7lLYTJa35g4CP F2xff5UF5dqDIJePdrMqhmPzgMnSNmJV7SGNqiP2zxy5SRWnrbb1XnuRQC647gvH ju39ezyvp+uJNkegIAv5vHVXEUjnTzKvevpllakFAcZEXVsrTOgoS5FR4KAYZU95 PtKByVII9MWLSzV98vTC+T8QALWnVb+VGxap55rWtm4ZUte1jRUL4H6Stp0SEKyk iJs91qXjtKelN4mos6V9BUomz+jGsJnAtSXLOqTC9AYuL09b2zk/uy1gcm5O/uE+ X55zF9KUaSmlfDJRNvg4LoZ1CoFZH23QkJc1uaqz8odbNjpN98w802jsiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3gQmTWECqwCBMpnLevDIoFUpk6MB8GA1UdIwQY MBaAFBvjb8+wR7jGU/+jJ/wspRFp6UekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81ZGRkOTItNDFkNi00NjlmLTg5NmMt ZTBjOTY2YzE1ZDVmLzEvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS81ZGRkOTItNDFkNi00NjlmLTg5NmMtZTBjOTY2YzE1ZDVm LzEvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKV2ZuoD CD/FIVInccSvAkT2JDZOTbNZN32HEk6naIrPbUfGZGKJ2inxHdDGE7VI6iyEMrzv QPTtkVdqmG+ROqhbRSGHecyj0q9bE0I6FMC3d3mvTTtvD/TPfaoDNi+ADD31eqMc yn20u0gaEsO+Tv5EauJfjwAyQ5UZLED5Btj3LUU+bDgixM+mv3ULdTLur4qfUj/k 6weeVwYNDZAwrx5BQMsgHn4YipNIb+q2DOqS342W4toPQZM1niQB08KVeS3+WVSr KufEJrq5zzUOrOjxrCDjbrz1I+2Ndb/Hlr2MadBMY4f5FIZOuZ63fI4upnzfF4CK 8SIObkE4/hWP4g== -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:13 2025 by rpki-client