This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json) Hash identifier: njrPpjkgsbDP7K0ntlfMXdFc9MhE2OQw9kzbPy+p/+g= Subject key identifier: 58:F1:14:B9:3D:D0:0F:A9:60:B6:13:FA:70:58:8F:4F:BF:0A:56:57 Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1 Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1 Certificate serial: 019B44383106E3C9DE4E646AF4F3A5E19D45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 04:01:31 +0000 Manifest this update: Mon 22 Dec 2025 04:01:31 +0000 Manifest next update: Tue 23 Dec 2025 04:01:31 +0000 Files and hashes: 1: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: f8b2B+x/xAo2ejRb2HN6Fo5U+eEP/JdcrIHwbkx03t8=) 2: a6z9s2B5USpArv-yW1XShxJdtpo.roa (hash: hfVnswmh8KT0yGpguvtRDoEqQ95xhx5KsIsgaJn/9yM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:31:06:e3:c9:de:4e:64:6a:f4:f3:a5:e1:9d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1 Validity Not Before: Dec 22 04:01:31 2025 GMT Not After : Dec 23 04:01:31 2025 GMT Subject: CN=58f114b93dd00fa960b613fa70588f4fbf0a5657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:51:54:07:84:44:41:fb:2e:ea:32:46:6d: 1b:73:d4:41:9b:00:17:c7:07:d6:11:bf:85:2a:f9: 94:a1:67:00:64:95:81:f0:ea:99:5b:fd:30:b9:a3: 77:e7:19:b3:cc:8d:0f:e9:35:ac:85:db:17:9d:36: 10:3e:8e:35:ca:cc:dd:f6:36:d6:77:e3:1a:f9:f9: 27:83:04:67:76:63:46:0e:60:b1:3b:8e:0e:82:66: 41:71:9f:14:ad:53:2f:63:d5:77:3b:fc:19:ce:d9: b3:2e:19:99:71:4f:d6:f9:d3:da:a5:b9:68:b9:da: 26:0e:d4:85:21:2b:49:6b:7c:23:3d:b1:71:6c:ba: 45:89:30:5a:43:9d:2e:72:c5:8e:a6:57:d3:3a:5f: 0c:69:9f:29:b5:62:06:ad:6c:0a:37:41:5b:1f:35: 6a:eb:3d:ab:19:35:29:bd:db:4d:a9:3a:c2:c8:9d: dd:ab:88:f3:67:fd:39:6b:79:59:00:64:51:fe:b1: d7:73:8a:97:bb:b8:aa:c7:90:b0:db:6e:43:46:fd: 55:19:9d:69:59:b1:e4:6d:94:8d:b5:4a:c5:97:4b: af:6b:a5:9a:2b:58:14:72:ed:ca:34:c2:95:9f:96: d7:7f:cf:34:7b:ad:53:8b:39:1f:b0:09:b4:cb:f2: 6c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F1:14:B9:3D:D0:0F:A9:60:B6:13:FA:70:58:8F:4F:BF:0A:56:57 X509v3 Authority Key Identifier: keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:2a:fd:ac:e4:e1:95:71:31:ea:11:f7:bf:a6:d6:cf:9c:6c: d0:0c:a3:4f:23:50:0b:ce:79:8e:b5:e4:2a:d5:eb:c9:1a:e6: 77:9c:e3:e5:f7:a2:5d:39:e2:4b:ff:e8:88:0f:84:a2:ca:9b: 26:a0:23:57:e7:5f:a7:b9:fc:6e:94:47:cb:48:40:2b:30:a4: 73:44:8b:a8:f9:fd:4f:48:d7:29:4d:46:ff:8d:1a:60:41:52: 7d:cc:9a:14:c0:cf:e1:f0:df:be:da:5a:9d:e7:a7:e4:02:ff: 8c:f3:f0:1d:f2:ca:d1:bf:30:d9:00:8f:dc:a0:3f:03:2a:ff: b4:a4:cc:9c:34:66:7c:49:cc:4b:28:03:ea:f0:e7:b3:76:17: 6c:ab:5c:52:32:13:fb:6e:15:97:e0:32:df:5d:37:6c:b7:26: 58:08:2c:b4:fc:d8:03:14:c7:ac:99:b1:ed:34:7c:87:95:e1: 59:79:1f:89:05:31:1e:bb:ae:f7:41:e7:cf:97:ce:f7:68:cc: 0f:3e:aa:52:47:21:3b:22:5f:ae:e8:31:29:75:4e:54:dd:cb: a4:2b:f4:7e:4d:34:ca:b7:dc:6b:72:e6:0a:cb:14:ec:cb:3d: 86:12:70:23:49:be:5b:5f:8d:e3:30:b9:a4:70:c4:7c:4b:72: 78:ce:8f:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEODEG48neTmRq9POl4Z1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZWY1YWExNGQzMTQwYzdjN2M0OTg4ZjE5ZGE5NDMxZWIx YTQwZjEwHhcNMjUxMjIyMDQwMTMxWhcNMjUxMjIzMDQwMTMxWjAzMTEwLwYDVQQD Eyg1OGYxMTRiOTNkZDAwZmE5NjBiNjEzZmE3MDU4OGY0ZmJmMGE1NjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf1RVAeEREH7LuoyRm0bc9RBmwAX xwfWEb+FKvmUoWcAZJWB8OqZW/0wuaN35xmzzI0P6TWshdsXnTYQPo41yszd9jbW d+Ma+fkngwRndmNGDmCxO44OgmZBcZ8UrVMvY9V3O/wZztmzLhmZcU/W+dPapblo udomDtSFIStJa3wjPbFxbLpFiTBaQ50ucsWOplfTOl8MaZ8ptWIGrWwKN0FbHzVq 6z2rGTUpvdtNqTrCyJ3dq4jzZ/05a3lZAGRR/rHXc4qXu7iqx5Cw225DRv1VGZ1p WbHkbZSNtUrFl0uva6WaK1gUcu3KNMKVn5bXf880e61TizkfsAm0y/Js+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjxFLk90A+pYLYT+nBYj0+/ClZXMB8GA1UdIwQY MBaAFBvvWqFNMUDHx8SYjxnalDHrGkDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZDYxNjctZjAyYi00NGRiLWI1NjUt MGU0MzgyMzEwY2E1LzEvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC81ZDYxNjctZjAyYi00NGRiLWI1NjUtMGU0MzgyMzEwY2E1 LzEvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCr9rOTh lXEx6hH3v6bWz5xs0AyjTyNQC855jrXkKtXryRrmd5zj5feiXTniS//oiA+Eosqb JqAjV+dfp7n8bpRHy0hAKzCkc0SLqPn9T0jXKU1G/40aYEFSfcyaFMDP4fDfvtpa neen5AL/jPPwHfLK0b8w2QCP3KA/Ayr/tKTMnDRmfEnMSygD6vDns3YXbKtcUjIT +24Vl+Ay3103bLcmWAgstPzYAxTHrJmx7TR8h5XhWXkfiQUxHruu90Hnz5fO92jM Dz6qUkchOyJfrugxKXVOVN3LpCv0fk00yrfca3LmCssU7Ms9hhJwI0m+W1+N4zC5 pHDEfEtyeM6PAw== -----END CERTIFICATE-----Generated at Mon Dec 22 07:04:27 2025 by rpki-client