This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft File: G55Be7nssazpSR68KCO7eJNLLN8.mft (raw, json) Hash identifier: rdGtS3atum/ZTHbmSUqeTQq+A9y6e3RSLPu9e9Y0Ths= Subject key identifier: 7E:E5:9F:62:84:57:08:45:BC:E0:E8:FB:34:ED:53:9E:5A:09:1D:7A Authority key identifier: 1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF Certificate issuer: /CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf Certificate serial: 019B3EDAAF0CAA7D7C6D9B1EC7C03AA0DB3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft Manifest number: 1637 Signing time: Sun 21 Dec 2025 03:01:17 +0000 Manifest this update: Sun 21 Dec 2025 03:01:17 +0000 Manifest next update: Mon 22 Dec 2025 03:01:17 +0000 Files and hashes: 1: G55Be7nssazpSR68KCO7eJNLLN8.crl (hash: OJvpXB746o+zYIXFB1syAYmF4ymrWwgjVsVol20rrv0=) 2: uDXgZr4d7paw0tQnlQAuxTAiQJ4.roa (hash: ZLVG9qnKbapzUcUyG3vXPFRhsGi/6YqVmyuunmvWt4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:af:0c:aa:7d:7c:6d:9b:1e:c7:c0:3a:a0:db:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf Validity Not Before: Dec 21 03:01:17 2025 GMT Not After : Dec 22 03:01:17 2025 GMT Subject: CN=7ee59f6284570845bce0e8fb34ed539e5a091d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:0b:47:3b:84:b4:df:c3:cb:95:0c:1c:f8: f3:0c:77:ad:96:1d:fa:d4:44:66:e3:93:45:de:47: f7:c6:fc:8e:b2:55:fb:2c:f1:c9:a8:d8:61:b6:84: 14:ba:5f:8c:6f:db:8f:74:a3:95:89:68:16:b8:1c: b6:33:8d:4d:3e:dc:2c:82:df:0b:59:e9:e7:2d:d0: 3d:6f:22:5c:b6:63:36:04:a9:67:77:20:d1:64:ea: 3d:7a:69:0a:4d:6b:c8:91:87:3b:78:0a:41:3b:27: 05:f8:62:03:10:16:a2:c2:39:cf:38:3a:f1:c3:80: 63:14:89:f9:1f:42:32:b9:a9:be:ca:6d:b5:f5:db: 87:f2:96:d1:80:8f:f9:1f:c7:71:fc:e2:a3:14:a2: ad:04:2f:9e:10:ae:6c:d4:c1:ce:07:a1:d4:01:ba: d0:d2:16:2c:72:44:11:25:8f:56:63:78:7e:7e:dc: ee:5c:82:0e:ff:1d:84:6b:71:fd:fa:f2:8c:ef:c8: cd:e2:b2:9c:5f:62:15:66:28:67:08:30:0f:d7:be: 13:9e:f6:95:71:6d:83:66:0c:8c:f8:14:1d:c1:41: b7:8e:37:58:0f:44:2a:b7:72:54:8f:90:16:d2:ce: 21:d0:d3:72:58:f6:49:cb:54:f6:b9:e9:8a:a5:6d: 63:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E5:9F:62:84:57:08:45:BC:E0:E8:FB:34:ED:53:9E:5A:09:1D:7A X509v3 Authority Key Identifier: keyid:1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d4:79:f0:f4:6c:ba:68:c3:ce:3b:fe:1e:82:5e:6a:7d:f4: 9c:50:35:a1:2b:eb:fd:75:d2:cf:76:f2:36:78:cc:54:c2:e7: 2f:6b:6d:7f:0f:e8:3d:4e:14:84:3a:ce:e6:d9:b6:94:09:a2: 69:d5:8a:eb:4b:28:42:3c:6b:59:4e:60:d0:46:1c:59:43:d8: 58:31:2b:92:da:80:9a:0d:2d:5d:9c:bc:57:1d:47:c0:e6:68: 0f:84:6e:15:83:f5:3f:25:01:03:27:f3:a4:60:d4:5b:d0:ee: d4:06:b6:ee:f6:25:8d:1a:44:e8:98:5d:3c:b9:08:16:36:56: f1:dc:96:c3:a5:98:54:64:e0:2e:d8:76:67:5c:b5:33:28:f1: 5e:84:b1:2a:dd:d8:2a:05:fa:f7:45:55:20:7f:a4:b1:6e:2a: d6:61:29:0c:6a:13:f0:86:55:29:3d:d3:96:17:15:4a:a1:0b: 8c:11:06:ae:81:6f:0c:d5:70:d8:75:0d:64:f7:0f:b6:a9:69: 05:c7:a5:c4:a6:65:be:d0:50:49:63:c7:7b:f6:c9:81:6c:57: 80:ab:cd:72:e7:7b:c1:5d:6d:25:d2:65:7a:a0:25:a5:0f:c4: 4e:86:dc:29:4b:6f:19:10:09:57:39:e7:76:82:85:d3:fc:d7: 5e:00:2f:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2q8Mqn18bZsex8A6oNs6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOWU0MTdiYjllY2IxYWNlOTQ5MWViYzI4MjNiYjc4OTM0 YjJjZGYwHhcNMjUxMjIxMDMwMTE3WhcNMjUxMjIyMDMwMTE3WjAzMTEwLwYDVQQD Eyg3ZWU1OWY2Mjg0NTcwODQ1YmNlMGU4ZmIzNGVkNTM5ZTVhMDkxZDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUoLRzuEtN/Dy5UMHPjzDHetlh36 1ERm45NF3kf3xvyOslX7LPHJqNhhtoQUul+Mb9uPdKOViWgWuBy2M41NPtwsgt8L WennLdA9byJctmM2BKlndyDRZOo9emkKTWvIkYc7eApBOycF+GIDEBaiwjnPODrx w4BjFIn5H0Iyuam+ym219duH8pbRgI/5H8dx/OKjFKKtBC+eEK5s1MHOB6HUAbrQ 0hYsckQRJY9WY3h+ftzuXIIO/x2Ea3H9+vKM78jN4rKcX2IVZihnCDAP174TnvaV cW2DZgyM+BQdwUG3jjdYD0Qqt3JUj5AW0s4h0NNyWPZJy1T2uemKpW1jLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7ln2KEVwhFvODo+zTtU55aCR16MB8GA1UdIwQY MBaAFBueQXu57LGs6UkevCgju3iTSyzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iZGZlMTctOTFhZC00ZjMxLWFlY2Qt ODFlZDEyZGRmMTc1LzEvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iZGZlMTctOTFhZC00ZjMxLWFlY2QtODFlZDEyZGRmMTc1 LzEvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNR58PRs umjDzjv+HoJean30nFA1oSvr/XXSz3byNnjMVMLnL2ttfw/oPU4UhDrO5tm2lAmi adWK60soQjxrWU5g0EYcWUPYWDErktqAmg0tXZy8Vx1HwOZoD4RuFYP1PyUBAyfz pGDUW9Du1Aa27vYljRpE6JhdPLkIFjZW8dyWw6WYVGTgLth2Z1y1MyjxXoSxKt3Y KgX690VVIH+ksW4q1mEpDGoT8IZVKT3TlhcVSqELjBEGroFvDNVw2HUNZPcPtqlp BcelxKZlvtBQSWPHe/bJgWxXgKvNcud7wV1tJdJleqAlpQ/ETobcKUtvGRAJVznn doKF0/zXXgAvRA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:47:09 2025 by rpki-client