This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json) Hash identifier: OmYnB3sF5iCknnCkfpftx6hHXN0WzBqJwE1AZxcer5k= Subject key identifier: F5:19:B6:0D:C7:B4:84:44:2A:C5:03:77:3A:D2:DD:B3:29:97:C1:32 Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32 Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232 Certificate serial: 019B5ABFE451339ACC6D9D07051786D44B21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft Manifest number: 1132 Signing time: Fri 26 Dec 2025 13:01:23 +0000 Manifest this update: Fri 26 Dec 2025 13:01:23 +0000 Manifest next update: Sat 27 Dec 2025 13:01:23 +0000 Files and hashes: 1: PNY0bopVkefbLxgLSsZnVYV7eHU.roa (hash: kYhkbg5jATuw8BE/PYkSTUN7eKPVKmi+NIGEx/Z0W7M=) 2: _DwTrJ6Rj1PQPQ3EZ7Z_NHmoK80.roa (hash: WIzgi3FHup1BX82atvYWveM/B2LQRKi9b5BQedkaQlM=) 3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: ZaR3sQM6MOCOzh6F6Y4taqWAiLLoR0gh7NatwIsuwyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:e4:51:33:9a:cc:6d:9d:07:05:17:86:d4:4b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232 Validity Not Before: Dec 26 13:01:23 2025 GMT Not After : Dec 27 13:01:23 2025 GMT Subject: CN=f519b60dc7b484442ac503773ad2ddb32997c132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:06:f2:e4:d4:8e:cb:74:b4:8d:bd:1b:d7:5d: 5e:a1:b7:01:33:7b:dd:63:eb:30:bc:8f:96:43:fa: 00:9b:21:24:17:c2:c8:2e:c5:1c:2b:67:61:48:ff: b9:f6:ab:5c:aa:7b:9e:1a:4f:fd:6e:04:9d:fb:8b: 83:c4:4c:1c:80:10:f1:f1:71:25:8f:00:4b:47:73: f0:80:93:58:1f:f2:c9:84:e4:ea:b5:41:34:73:ea: ec:e8:f8:b2:e3:22:9a:c9:1f:38:9f:ca:8b:ca:40: fd:bd:07:40:21:0e:55:fc:2b:56:6f:b2:b9:b3:33: ae:67:54:4b:41:37:52:6d:73:24:bd:8c:e1:93:0b: 14:88:7f:ba:84:5b:60:de:b0:28:ee:64:32:1d:88: fa:fa:34:60:19:73:6a:dd:b2:17:c3:f2:98:e2:04: 63:67:e6:4f:01:19:d3:2f:0e:b6:35:c3:cc:c9:5a: 2a:9e:28:75:99:77:50:e4:52:b5:f7:cc:4d:3e:e6: 51:2f:bc:05:00:5e:26:88:a9:40:32:5e:37:57:1b: ec:3b:4f:66:a9:ac:2b:d3:a5:58:dc:f2:b0:3f:a7: fd:98:51:16:67:d3:7d:90:01:ee:de:a4:ad:c9:52: 52:bd:8e:02:8a:c8:99:17:97:07:dd:15:be:ef:28: 23:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:19:B6:0D:C7:B4:84:44:2A:C5:03:77:3A:D2:DD:B3:29:97:C1:32 X509v3 Authority Key Identifier: keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b5:06:40:36:bf:fc:f4:c0:d5:37:d8:5e:37:93:5c:a7:9d: 11:73:24:49:8b:90:65:0e:93:e1:cc:70:9d:bf:96:d6:ec:cf: d5:db:bc:47:99:2f:13:71:6c:e0:6e:f1:ad:08:b9:12:b5:a6: cd:1f:fb:64:a0:54:36:f3:3c:67:e5:a4:a3:71:aa:b8:ae:28: 77:c4:27:c2:76:38:30:f9:d5:d0:2b:42:8d:26:44:30:0b:62: 29:64:f1:5b:66:c8:75:56:af:e9:62:7f:f5:de:0b:de:0a:0f: 0c:6d:df:1d:ee:28:4a:2c:f5:15:e4:f3:98:dd:e1:c8:e4:85: dc:b3:bc:b8:0e:a8:9f:74:69:d4:17:e8:16:ee:3d:0b:f3:09: d3:98:4c:50:1c:dc:74:74:04:f5:aa:6b:5e:ab:ec:bc:a2:79: b7:ff:06:96:f7:f6:38:05:33:fc:50:15:79:25:c1:0f:4f:d1: 50:a0:94:c3:4d:10:3b:b2:d4:aa:b0:4e:85:f3:16:11:87:db: 13:87:4e:55:24:62:0c:dd:93:53:52:f1:0c:3c:25:e4:cc:69: 42:e9:d9:b2:39:be:ae:74:d7:87:b5:61:6e:ba:32:03:70:22: 3d:b3:9b:94:fd:57:ec:87:87:e2:99:9d:90:fd:4a:9c:c4:0c: b7:d2:a4:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav+RRM5rMbZ0HBReG1EshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZTIzNDBlZjVjNGE0OTUyZWI0MTNkMjg4YzI5ZDkzNzgz NDIyMzIwHhcNMjUxMjI2MTMwMTIzWhcNMjUxMjI3MTMwMTIzWjAzMTEwLwYDVQQD EyhmNTE5YjYwZGM3YjQ4NDQ0MmFjNTAzNzczYWQyZGRiMzI5OTdjMTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wby5NSOy3S0jb0b111eobcBM3vd Y+swvI+WQ/oAmyEkF8LILsUcK2dhSP+59qtcqnueGk/9bgSd+4uDxEwcgBDx8XEl jwBLR3PwgJNYH/LJhOTqtUE0c+rs6Piy4yKayR84n8qLykD9vQdAIQ5V/CtWb7K5 szOuZ1RLQTdSbXMkvYzhkwsUiH+6hFtg3rAo7mQyHYj6+jRgGXNq3bIXw/KY4gRj Z+ZPARnTLw62NcPMyVoqnih1mXdQ5FK198xNPuZRL7wFAF4miKlAMl43VxvsO09m qawr06VY3PKwP6f9mFEWZ9N9kAHu3qStyVJSvY4CisiZF5cH3RW+7ygjcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUZtg3HtIREKsUDdzrS3bMpl8EyMB8GA1UdIwQY MBaAFIPiNA71xKSVLrQT0ojCnZN4NCIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kNGQyZjgtOGRjMS00MDcwLTk3N2Ut YTZjZWMwNDU5NWY4LzEvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kNGQyZjgtOGRjMS00MDcwLTk3N2UtYTZjZWMwNDU5NWY4 LzEvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrUGQDa/ /PTA1TfYXjeTXKedEXMkSYuQZQ6T4cxwnb+W1uzP1du8R5kvE3Fs4G7xrQi5ErWm zR/7ZKBUNvM8Z+Wko3GquK4od8QnwnY4MPnV0CtCjSZEMAtiKWTxW2bIdVav6WJ/ 9d4L3goPDG3fHe4oSiz1FeTzmN3hyOSF3LO8uA6on3Rp1BfoFu49C/MJ05hMUBzc dHQE9aprXqvsvKJ5t/8Glvf2OAUz/FAVeSXBD0/RUKCUw00QO7LUqrBOhfMWEYfb E4dOVSRiDN2TU1LxDDwl5MxpQunZsjm+rnTXh7VhbroyA3AiPbOblP1X7IeH4pmd kP1KnMQMt9Kk1Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:57 2025 by rpki-client