This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft File: g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json) Hash identifier: nMTbnQBQl/caLI6z8rp3uzOel8wId+4T25w1t7RBnME= Subject key identifier: 08:3E:E2:08:DF:3F:31:FC:FB:DB:E4:E1:DF:37:8A:2F:8D:49:D3:64 Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7 Certificate issuer: /CN=836528e152b6dcba1571241ac55be5bce01118b7 Certificate serial: 019B2362FF2F3EC8A31AFE8DB7851DF3CE88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft Manifest number: 177E Signing time: Mon 15 Dec 2025 19:00:48 +0000 Manifest this update: Mon 15 Dec 2025 19:00:48 +0000 Manifest next update: Tue 16 Dec 2025 19:00:48 +0000 Files and hashes: 1: CvGHepAgyhQF29vgwO5RLU27Tig.roa (hash: MTqSAP2ijcRiLN3/AxskccxaBqUIlze/F2fZZstIpd0=) 2: LG2MEPQP4SA0RYNet0_i-TbLVOA.roa (hash: Q0AqpzK5pnfc1Ye6ZvO737eSRCPhdfmTWDd+EoGA7/k=) 3: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: jgrsD4DoAeUkzm8dj/BNrmW0coGc35mrjG/xjKl09iE=) 4: mM8VTopJZmHymxZODgrdAS9tCB0.roa (hash: xbQXqlIoaX+7utbFJ34rZdlVmArTuhCKQpdLZlu7I7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:62:ff:2f:3e:c8:a3:1a:fe:8d:b7:85:1d:f3:ce:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7 Validity Not Before: Dec 15 19:00:48 2025 GMT Not After : Dec 16 19:00:48 2025 GMT Subject: CN=083ee208df3f31fcfbdbe4e1df378a2f8d49d364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d3:4d:d7:19:52:03:e5:7d:65:0b:0a:b3:01: d1:47:db:64:b8:af:62:ae:e1:11:32:37:fc:75:bb: 95:98:ca:06:21:24:5e:9b:4d:fd:75:40:e5:9c:5b: 5f:51:2f:e3:a3:f0:78:54:18:18:54:76:5f:5d:19: e0:16:e9:20:90:9e:46:15:73:60:56:30:bc:de:d4: 21:32:38:7b:eb:90:e7:b0:a7:8c:c6:5f:7c:79:5c: dc:9b:09:bf:c3:45:29:f1:bc:2a:6f:73:8e:69:2d: 9c:9b:17:97:c5:2d:ec:4d:3a:3a:fc:a3:8a:2e:ca: d1:cc:b1:a8:84:fa:05:5e:d5:85:f9:e5:96:1d:8d: 1b:41:a6:bb:58:53:c0:9e:23:42:c7:3e:2d:e3:ae: 11:f9:c8:4f:4e:18:c5:2c:16:c7:35:3c:c3:25:f0: e6:b1:a0:7b:9d:82:34:6b:9f:dc:e9:fc:36:31:54: b6:b8:a3:f9:02:d0:2f:93:13:bb:19:a5:fe:07:d4: 49:42:d5:df:a7:3f:49:b1:a3:cc:39:4f:36:4a:df: ef:24:e1:d3:3b:b8:47:72:ab:d6:5e:80:16:23:b5: 8e:cf:7d:8a:d1:71:32:45:82:c0:2a:14:76:92:43: ec:89:a9:40:2a:86:4e:bf:ee:e3:d7:53:42:61:04: c5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3E:E2:08:DF:3F:31:FC:FB:DB:E4:E1:DF:37:8A:2F:8D:49:D3:64 X509v3 Authority Key Identifier: keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:93:10:16:12:b7:61:96:d8:2c:14:9f:6e:e9:3e:02:6e:be: ef:3d:56:97:f9:da:a0:00:f1:b5:29:2a:91:27:0e:8d:65:45: 5d:38:9e:d4:5e:79:c4:62:e0:71:62:d9:ba:38:2b:be:77:cb: a1:bd:54:50:80:64:82:9c:3f:61:af:8f:ee:a1:28:59:93:08: 67:77:f5:54:03:a4:12:42:1e:ba:3f:a5:bd:52:94:f0:48:97: 7b:4c:aa:5d:56:54:27:a7:de:5d:5d:12:17:ed:95:00:5e:b8: 43:c1:64:5f:c0:0b:fb:e5:a6:fc:94:13:5e:19:c5:e5:d5:93: da:5e:05:35:59:f7:d7:8d:48:1c:24:c2:68:a1:c8:4f:f3:51: 44:e2:4c:48:fa:5d:73:39:b7:96:40:b0:50:28:f8:48:5e:13: ba:74:00:1a:6d:e1:bd:a8:18:17:84:30:11:3a:50:dd:f1:7b: 83:2b:88:18:5d:a8:ca:c3:49:fb:a2:dc:22:37:bb:97:9b:7b: 32:06:13:64:8a:7e:34:06:b7:d4:6d:2a:87:7f:0b:06:33:89: bb:a7:f6:0c:92:69:00:3f:7a:e7:50:04:89:d9:14:d8:01:c8: a6:c8:8a:0a:35:5c:53:9b:e9:c1:d9:b4:6f:18:6d:53:49:5a: b4:a0:36:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjYv8vPsijGv6Nt4Ud886IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjUyOGUxNTJiNmRjYmExNTcxMjQxYWM1NWJlNWJjZTAx MTE4YjcwHhcNMjUxMjE1MTkwMDQ4WhcNMjUxMjE2MTkwMDQ4WjAzMTEwLwYDVQQD EygwODNlZTIwOGRmM2YzMWZjZmJkYmU0ZTFkZjM3OGEyZjhkNDlkMzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tNN1xlSA+V9ZQsKswHRR9tkuK9i ruERMjf8dbuVmMoGISRem039dUDlnFtfUS/jo/B4VBgYVHZfXRngFukgkJ5GFXNg VjC83tQhMjh765DnsKeMxl98eVzcmwm/w0Up8bwqb3OOaS2cmxeXxS3sTTo6/KOK LsrRzLGohPoFXtWF+eWWHY0bQaa7WFPAniNCxz4t464R+chPThjFLBbHNTzDJfDm saB7nYI0a5/c6fw2MVS2uKP5AtAvkxO7GaX+B9RJQtXfpz9JsaPMOU82St/vJOHT O7hHcqvWXoAWI7WOz32K0XEyRYLAKhR2kkPsialAKoZOv+7j11NCYQTFawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAg+4gjfPzH8+9vk4d83ii+NSdNkMB8GA1UdIwQY MBaAFINlKOFStty6FXEkGsVb5bzgERi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2Mt ZWI5NDE1ZWM1NDhhLzEvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2MtZWI5NDE1ZWM1NDhh LzEvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJMQFhK3 YZbYLBSfbuk+Am6+7z1Wl/naoADxtSkqkScOjWVFXTie1F55xGLgcWLZujgrvnfL ob1UUIBkgpw/Ya+P7qEoWZMIZ3f1VAOkEkIeuj+lvVKU8EiXe0yqXVZUJ6feXV0S F+2VAF64Q8FkX8AL++Wm/JQTXhnF5dWT2l4FNVn3141IHCTCaKHIT/NRROJMSPpd czm3lkCwUCj4SF4TunQAGm3hvagYF4QwETpQ3fF7gyuIGF2oysNJ+6LcIje7l5t7 MgYTZIp+NAa31G0qh38LBjOJu6f2DJJpAD9651AEidkU2AHIpsiKCjVcU5vpwdm0 bxhtU0latKA2Qg== -----END CERTIFICATE-----Generated at Tue Dec 16 03:38:10 2025 by rpki-client