This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json) Hash identifier: VTATDE6ZlDFsSNFrVE2ZQEAQzfHgZtNEooiWMidPbLM= Subject key identifier: 08:EF:85:00:95:E8:67:F7:C7:16:DD:8B:01:C4:56:2A:F9:0A:53:F9 Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2 Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2 Certificate serial: 019B4091B2EBAE7B16FB2874D5FBEAE351F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft Manifest number: 0FB1 Signing time: Sun 21 Dec 2025 11:00:48 +0000 Manifest this update: Sun 21 Dec 2025 11:00:48 +0000 Manifest next update: Mon 22 Dec 2025 11:00:48 +0000 Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: Kw55zP2G8r2Dg+ZtObM0DmGdyioONFHD/gQPzByunhg=) 2: fCpGf801cfDHze74QhXzgzMLUwE.roa (hash: BwtWyFu9Dt2iFCFGI4JjDsN2ooEJ/qDRF3vXF+9EsfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:b2:eb:ae:7b:16:fb:28:74:d5:fb:ea:e3:51:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2 Validity Not Before: Dec 21 11:00:48 2025 GMT Not After : Dec 22 11:00:48 2025 GMT Subject: CN=08ef850095e867f7c716dd8b01c4562af90a53f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:18:4a:d8:b4:46:16:76:10:c7:52:d9:9f:3d: bd:38:1d:b8:45:c3:a1:b5:3a:8b:a1:27:00:a2:08: 4e:6c:18:a0:c7:1f:8f:99:51:e1:2c:47:5b:cb:d7: b7:3b:4c:c0:00:27:24:51:57:e5:f8:e1:dd:37:c3: 1f:3c:76:50:78:3c:2e:3d:8d:bf:ca:a8:aa:0a:33: bf:3d:9c:c3:55:8f:61:73:b1:b9:ba:ca:41:6b:a6: f9:3c:65:e3:a7:da:74:2e:ff:6d:74:c2:b2:9b:3a: 2a:f8:80:64:98:7e:6a:97:6c:52:f8:f7:21:67:0e: fd:90:8f:76:34:12:6e:99:ff:1e:ac:5d:d1:78:92: c9:06:85:12:58:e9:55:b5:b8:c0:c2:6d:7c:22:aa: 09:9f:b2:cb:1a:a4:09:77:97:6b:0e:6c:7a:56:5e: 01:2e:14:d0:ae:75:a9:78:41:c8:d6:e4:8f:6b:55: 82:2c:a2:2a:4f:27:69:fa:f6:f9:3c:36:4e:42:76: a1:5f:cc:70:03:5d:2d:71:79:f7:31:d5:07:29:fe: 34:25:66:7d:1e:72:94:91:b4:aa:e9:67:41:57:9e: f4:bf:3f:39:eb:f7:4a:1f:47:f9:92:89:f5:d3:7d: e1:c0:97:f4:0b:4c:f5:df:8b:65:04:3d:2b:86:62: 01:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EF:85:00:95:E8:67:F7:C7:16:DD:8B:01:C4:56:2A:F9:0A:53:F9 X509v3 Authority Key Identifier: keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:9f:44:9f:b9:da:d2:04:da:eb:1d:a9:3b:02:2d:7b:0d:0d: 09:48:ce:3e:5a:79:cf:9f:59:2b:15:c5:07:8c:83:3e:00:4e: 19:aa:7c:6e:17:8d:c0:79:35:a4:d6:26:7c:b7:3d:10:d4:0d: 85:24:2d:a7:f5:2a:92:54:d8:58:8c:13:03:2f:ee:12:44:7a: 13:18:1f:7e:ba:d3:07:79:0a:9e:4f:bf:8f:69:87:d8:38:47: 7e:90:25:10:5d:f6:a2:0c:5c:8a:9d:6d:51:c1:0c:d3:c9:97: 51:7c:51:e4:88:1a:b7:31:45:98:99:02:e9:df:f3:d4:91:25: f2:62:9c:9d:d7:88:98:ad:a2:72:05:81:70:3e:5f:44:27:14: 10:67:8c:ea:8d:74:a0:99:a7:8e:5e:fb:2b:03:67:00:a9:c1: 73:86:f6:76:b5:fe:60:f3:53:8a:10:70:71:e0:93:d5:88:c7: 50:a5:ae:ae:48:cc:fb:46:ce:c3:b1:f9:aa:a5:4b:82:e2:aa: 9c:d8:f6:d0:1e:dd:8a:21:b5:0d:86:75:c7:9e:ed:28:d9:f2: ac:4d:20:23:6a:87:ea:f7:a7:9d:cc:5c:d7:1a:df:ee:b7:96: 56:eb:16:c7:2e:18:21:44:e3:5c:02:54:dd:8f:79:e4:ec:3f: 9f:c3:be:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkbLrrnsW+yh01fvq41HyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNjQ2ZDQyY2U4OWQ0MDkzZTRhYzkyN2E3ZjIzNmYzN2E1 MWFiZTIwHhcNMjUxMjIxMTEwMDQ4WhcNMjUxMjIyMTEwMDQ4WjAzMTEwLwYDVQQD EygwOGVmODUwMDk1ZTg2N2Y3YzcxNmRkOGIwMWM0NTYyYWY5MGE1M2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRhK2LRGFnYQx1LZnz29OB24RcOh tTqLoScAoghObBigxx+PmVHhLEdby9e3O0zAACckUVfl+OHdN8MfPHZQeDwuPY2/ yqiqCjO/PZzDVY9hc7G5uspBa6b5PGXjp9p0Lv9tdMKymzoq+IBkmH5ql2xS+Pch Zw79kI92NBJumf8erF3ReJLJBoUSWOlVtbjAwm18IqoJn7LLGqQJd5drDmx6Vl4B LhTQrnWpeEHI1uSPa1WCLKIqTydp+vb5PDZOQnahX8xwA10tcXn3MdUHKf40JWZ9 HnKUkbSq6WdBV570vz856/dKH0f5kon1033hwJf0C0z134tlBD0rhmIBGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjvhQCV6Gf3xxbdiwHEVir5ClP5MB8GA1UdIwQY MBaAFBtkbULOidQJPkrJJ6fyNvN6UaviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMt NjYzNDBiYmZmMGI5LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMtNjYzNDBiYmZmMGI5 LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZ9En7na 0gTa6x2pOwItew0NCUjOPlp5z59ZKxXFB4yDPgBOGap8bheNwHk1pNYmfLc9ENQN hSQtp/UqklTYWIwTAy/uEkR6ExgffrrTB3kKnk+/j2mH2DhHfpAlEF32ogxcip1t UcEM08mXUXxR5IgatzFFmJkC6d/z1JEl8mKcndeImK2icgWBcD5fRCcUEGeM6o10 oJmnjl77KwNnAKnBc4b2drX+YPNTihBwceCT1YjHUKWurkjM+0bOw7H5qqVLguKq nNj20B7diiG1DYZ1x57tKNnyrE0gI2qH6venncxc1xrf7reWVusWxy4YIUTjXAJU 3Y955Ow/n8O+ug== -----END CERTIFICATE-----Generated at Sun Dec 21 13:28:19 2025 by rpki-client