This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft File: g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft (raw, json) Hash identifier: MQqpZKcVAJvCdFD3R/MPmBjUGihVejYTMGELvOL8uew= Subject key identifier: E0:94:0D:65:02:FE:D6:C6:FA:6A:FF:33:40:63:CA:45:E7:88:73:9F Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7 Certificate issuer: /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7 Certificate serial: 019B1125E6B39D42A15EB2008C5CEAD8D6D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft Manifest number: 080C Signing time: Fri 12 Dec 2025 06:00:55 +0000 Manifest this update: Fri 12 Dec 2025 06:00:55 +0000 Manifest next update: Sat 13 Dec 2025 06:00:55 +0000 Files and hashes: 1: g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl (hash: JUzksbk8/QRQ0cXYHvcYWWek5xyqkjt6OAS+/rV+5Xw=) 2: r0PvjEpnlWFsFe9mhlu-x7uuqW4.roa (hash: v9Sjd6VL0RkK073Ql08i5EoR8baGeigT54elfTpIto4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:25:e6:b3:9d:42:a1:5e:b2:00:8c:5c:ea:d8:d6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7 Validity Not Before: Dec 12 06:00:55 2025 GMT Not After : Dec 13 06:00:55 2025 GMT Subject: CN=e0940d6502fed6c6fa6aff334063ca45e788739f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8f:28:51:f3:82:32:8b:4f:a3:bb:c0:16:a3: 4f:37:6f:50:8c:39:f6:55:98:c4:95:b6:41:b0:06: 5d:af:cb:ad:5a:66:eb:35:ee:b0:b0:ae:2e:a2:49: b4:b9:91:a8:a7:c9:19:4e:dc:57:c1:fc:bd:6e:3b: 2d:7f:28:49:5d:b2:71:95:c0:ee:90:94:86:c6:8f: c5:83:26:81:38:65:81:dd:98:08:fd:89:88:91:5f: ed:94:93:1a:b1:97:9a:ee:c6:5f:36:74:29:0c:6e: fc:67:0a:c4:e9:31:9f:2d:1a:29:a2:76:51:d7:da: b1:0b:9a:3a:f3:08:c8:3e:4b:59:f8:b7:83:b3:f5: 7c:0b:de:d5:f9:10:16:90:af:f3:30:8b:20:d3:d9: 43:05:49:36:0d:7a:72:b5:99:a0:a4:b7:69:a1:8c: 4c:38:71:b9:f4:89:88:74:a5:60:d1:48:eb:d3:9a: c0:24:eb:e8:29:34:ab:4f:95:a8:e6:1d:74:4c:15: c9:a7:cf:86:a6:1a:ec:b1:68:e7:56:bf:45:23:ca: 21:bb:42:4c:55:13:20:ae:f8:ab:b2:69:fc:b9:3d: 35:43:dd:6e:8e:c2:3c:e8:cf:1f:53:00:c4:5a:bd: 62:db:9d:4a:7b:3f:65:1a:ce:21:ec:81:19:8b:21: b1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:94:0D:65:02:FE:D6:C6:FA:6A:FF:33:40:63:CA:45:E7:88:73:9F X509v3 Authority Key Identifier: keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:09:b3:3e:49:ac:93:f1:01:0c:00:a3:25:d0:03:f9:ac:0c: ef:e0:42:92:97:fd:ef:ce:9f:b7:9f:d7:da:58:45:24:51:12: 11:c7:02:a8:bc:79:2b:06:9d:8c:ab:00:d3:5e:04:66:d1:d6: a5:d4:6b:95:18:fc:57:5d:1d:eb:e8:26:c8:f7:a4:4e:72:c6: 9f:f2:0c:c7:52:6a:77:c2:ea:18:e3:8f:5e:e5:6f:89:08:68: d0:91:cc:35:a2:1f:1e:a7:b4:33:80:1f:99:60:6c:09:48:c5: ea:e8:e6:a7:d7:72:35:4a:20:de:07:7e:2e:26:f2:95:48:6f: d3:a0:41:06:37:44:13:c4:87:d1:d1:63:57:2c:22:9c:71:ed: 11:cf:62:35:77:5a:56:08:48:20:54:8c:d5:9c:6d:45:a0:a6: ca:b3:00:49:53:68:31:2b:d9:df:93:c4:1f:9a:07:31:96:58: 88:39:ad:d3:2b:25:90:e6:65:1b:d0:7e:17:f5:4c:99:46:78: ae:c9:e4:29:a7:e8:2b:5f:92:17:de:89:87:dd:61:84:51:d8: fb:24:aa:1a:db:26:8f:8b:52:cf:57:59:07:f1:22:1b:65:13: 78:9c:79:4c:68:27:d8:bd:11:6d:a9:db:cb:3e:31:55:82:eb: 58:84:e4:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJeaznUKhXrIAjFzq2NbTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOWI3ZTE2MTVhMDAxYTViY2I5NmUxNTRhNzFhZjlhMGI0 NWI1ZDcwHhcNMjUxMjEyMDYwMDU1WhcNMjUxMjEzMDYwMDU1WjAzMTEwLwYDVQQD EyhlMDk0MGQ2NTAyZmVkNmM2ZmE2YWZmMzM0MDYzY2E0NWU3ODg3MzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5o8oUfOCMotPo7vAFqNPN29QjDn2 VZjElbZBsAZdr8utWmbrNe6wsK4uokm0uZGop8kZTtxXwfy9bjstfyhJXbJxlcDu kJSGxo/FgyaBOGWB3ZgI/YmIkV/tlJMasZea7sZfNnQpDG78ZwrE6TGfLRoponZR 19qxC5o68wjIPktZ+LeDs/V8C97V+RAWkK/zMIsg09lDBUk2DXpytZmgpLdpoYxM OHG59ImIdKVg0Ujr05rAJOvoKTSrT5Wo5h10TBXJp8+GphrssWjnVr9FI8ohu0JM VRMgrvirsmn8uT01Q91ujsI86M8fUwDEWr1i251Kez9lGs4h7IEZiyGxHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCUDWUC/tbG+mr/M0BjykXniHOfMB8GA1UdIwQY MBaAFIObfhYVoAGlvLluFUpxr5oLRbXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzV0LUZoV2dBYVc4dVc0VlNuR3ZtZ3RGdGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi80MmYyNzUtNjhiNy00NDhkLWI5NTYt MzViYjJlNmQwNjA2LzEvZzV0LUZoV2dBYVc4dVc0VlNuR3ZtZ3RGdGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi80MmYyNzUtNjhiNy00NDhkLWI5NTYtMzViYjJlNmQwNjA2 LzEvZzV0LUZoV2dBYVc4dVc0VlNuR3ZtZ3RGdGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQmzPkms k/EBDACjJdAD+awM7+BCkpf9786ft5/X2lhFJFESEccCqLx5KwadjKsA014EZtHW pdRrlRj8V10d6+gmyPekTnLGn/IMx1Jqd8LqGOOPXuVviQho0JHMNaIfHqe0M4Af mWBsCUjF6ujmp9dyNUog3gd+LibylUhv06BBBjdEE8SH0dFjVywinHHtEc9iNXda VghIIFSM1ZxtRaCmyrMASVNoMSvZ35PEH5oHMZZYiDmt0yslkOZlG9B+F/VMmUZ4 rsnkKafoK1+SF96Jh91hhFHY+ySqGtsmj4tSz1dZB/EiG2UTeJx5TGgn2L0Rbanb yz4xVYLrWITk4A== -----END CERTIFICATE-----Generated at Fri Dec 12 07:40:06 2025 by rpki-client