This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json) Hash identifier: 0qSN6Ah61Ix8j/LCoYtK16fbCCuw20ckJdge757XxNk= Subject key identifier: 27:EA:9F:CC:FE:50:DF:E1:74:12:45:F5:15:B7:B6:55:C8:73:C3:F1 Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f Certificate serial: 019B33B19242479846A98EF42DDBD01C5741 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft Manifest number: 132A Signing time: Thu 18 Dec 2025 23:00:33 +0000 Manifest this update: Thu 18 Dec 2025 23:00:33 +0000 Manifest next update: Fri 19 Dec 2025 23:00:33 +0000 Files and hashes: 1: PXiVKqc-gzBW0DpV9A_yfa7v6KE.roa (hash: L22rZjAObHC63x5DS7bDRlGFpJbFt5MxhJzGQ+tq5BE=) 2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: d9m29iRp2RVvJeJl2R7C7LQWddPIy3KXLjSo2U0hU5Y=) 3: xFHz4_XjwzN0pPKWaqRmrbsppf4.roa (hash: RMJsZt2RIHwd0V36eKXMJsELKCwZUihxIvWX1Ne3Nog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:92:42:47:98:46:a9:8e:f4:2d:db:d0:1c:57:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f Validity Not Before: Dec 18 23:00:33 2025 GMT Not After : Dec 19 23:00:33 2025 GMT Subject: CN=27ea9fccfe50dfe1741245f515b7b655c873c3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f5:c4:de:2f:67:62:01:59:f3:e7:ed:5e:af: d0:59:d1:38:b7:ed:5a:1b:3e:2d:61:28:87:d8:ad: 42:83:23:ab:aa:1f:e2:f7:72:8d:4b:1a:89:35:2e: bb:ae:9a:90:92:94:88:4d:fc:b9:c7:d0:6a:67:96: 55:64:6b:ee:b0:d4:2d:9d:c8:77:c1:96:18:c5:55: c4:d5:dd:8a:f9:6f:8f:79:05:62:27:dc:df:50:8b: df:d9:c0:d3:42:6d:6f:1a:48:26:fc:c3:1e:7d:8c: e9:39:c5:0d:74:92:ec:f9:11:5f:8d:f1:93:9e:be: 9c:67:0d:7b:4a:30:f9:ea:24:aa:ea:6b:bb:a6:fb: b0:fd:04:c1:da:a1:df:9c:e0:fb:67:62:90:c6:c3: 97:34:e7:56:a3:af:83:3f:b9:4a:bc:a3:1e:46:5d: 8e:dc:be:74:ff:70:b1:d0:b0:c5:1b:4b:a1:05:de: 58:a7:19:ae:d6:91:25:81:25:85:7a:3a:b5:84:57: 91:3f:70:5d:f5:5e:8e:85:7e:c6:21:d1:99:1f:55: bc:5a:ca:e4:82:2d:a0:42:60:30:31:1a:44:fb:04: f6:fe:6e:d1:64:0b:ce:d0:73:64:4a:34:59:38:5a: d6:62:f2:5d:a2:c3:1f:d7:fe:bc:9f:64:3e:73:7d: 1b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EA:9F:CC:FE:50:DF:E1:74:12:45:F5:15:B7:B6:55:C8:73:C3:F1 X509v3 Authority Key Identifier: keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f4:78:e4:40:d0:97:02:06:c7:34:8a:fc:51:36:f1:01:fc: b3:e3:33:a9:2f:88:24:03:75:06:00:59:e1:34:bf:67:ca:c8: ff:9c:0a:2a:17:d2:ed:a4:66:ee:5d:f1:13:69:24:10:7d:26: 6f:62:df:85:3a:a0:31:52:90:ae:b1:19:23:c1:cb:f1:0d:09: 0d:5a:cf:24:f0:f8:74:82:47:0d:56:71:bb:8b:79:d0:72:67: c2:6a:96:82:d0:e4:f3:bd:79:de:25:87:ab:b6:85:e8:d6:03: 0f:a5:ea:a8:36:6b:69:be:3a:0b:22:c2:72:36:af:7b:0f:87: 47:3a:fd:7a:e7:21:7e:a9:80:67:11:cf:da:3e:9a:a8:9c:af: 55:eb:24:d6:cf:06:32:dd:fc:72:70:5f:28:13:02:8b:12:93: 58:c8:21:c5:86:bc:88:60:8e:09:f2:19:8e:a6:50:cb:af:ae: 2e:b9:ac:6c:bd:9c:70:69:29:22:12:11:8d:24:68:db:2b:e6: 91:a2:34:a1:29:71:44:60:de:c6:38:6c:68:70:92:07:38:49: 06:7b:d4:9f:c8:e1:2d:be:26:ef:c6:32:4f:04:5d:34:91:16: 79:b1:93:6d:87:62:02:4d:3c:aa:50:a2:05:11:91:92:5f:17: d1:de:b9:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsZJCR5hGqY70LdvQHFdBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYjEzNmU2ODIwZDk0ZjAzYjFjNWQ3MWVlZTNkNGIyMjE5 MTUyOGYwHhcNMjUxMjE4MjMwMDMzWhcNMjUxMjE5MjMwMDMzWjAzMTEwLwYDVQQD EygyN2VhOWZjY2ZlNTBkZmUxNzQxMjQ1ZjUxNWI3YjY1NWM4NzNjM2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivXE3i9nYgFZ8+ftXq/QWdE4t+1a Gz4tYSiH2K1CgyOrqh/i93KNSxqJNS67rpqQkpSITfy5x9BqZ5ZVZGvusNQtnch3 wZYYxVXE1d2K+W+PeQViJ9zfUIvf2cDTQm1vGkgm/MMefYzpOcUNdJLs+RFfjfGT nr6cZw17SjD56iSq6mu7pvuw/QTB2qHfnOD7Z2KQxsOXNOdWo6+DP7lKvKMeRl2O 3L50/3Cx0LDFG0uhBd5Ypxmu1pElgSWFejq1hFeRP3Bd9V6OhX7GIdGZH1W8Wsrk gi2gQmAwMRpE+wT2/m7RZAvO0HNkSjRZOFrWYvJdosMf1/68n2Q+c30b2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfqn8z+UN/hdBJF9RW3tlXIc8PxMB8GA1UdIwQY MBaAFIKxNuaCDZTwOxxdce7j1LIhkVKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3JFMjVvSU5sUEE3SEYxeDd1UFVzaUdSVW84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yMjExMmUtNGUxMy00M2QwLTllYjEt MGRhM2NhYTkxNDI5LzEvZ3JFMjVvSU5sUEE3SEYxeDd1UFVzaUdSVW84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yMjExMmUtNGUxMy00M2QwLTllYjEtMGRhM2NhYTkxNDI5 LzEvZ3JFMjVvSU5sUEE3SEYxeDd1UFVzaUdSVW84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfR45EDQ lwIGxzSK/FE28QH8s+MzqS+IJAN1BgBZ4TS/Z8rI/5wKKhfS7aRm7l3xE2kkEH0m b2LfhTqgMVKQrrEZI8HL8Q0JDVrPJPD4dIJHDVZxu4t50HJnwmqWgtDk87153iWH q7aF6NYDD6XqqDZrab46CyLCcjavew+HRzr9euchfqmAZxHP2j6aqJyvVesk1s8G Mt38cnBfKBMCixKTWMghxYa8iGCOCfIZjqZQy6+uLrmsbL2ccGkpIhIRjSRo2yvm kaI0oSlxRGDexjhsaHCSBzhJBnvUn8jhLb4m78YyTwRdNJEWebGTbYdiAk08qlCi BRGRkl8X0d65hg== -----END CERTIFICATE-----Generated at Fri Dec 19 04:39:14 2025 by rpki-client