This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft File: g5ka_NRV6xsXT8-J-OEOr39ws1U.mft (raw, json) Hash identifier: SuZethhNjOv+eiE94pMG7wsUx5s2Z8oHIZ0/GTjLk2c= Subject key identifier: 1C:83:EC:D4:F3:8C:7D:68:85:F1:EC:4E:4D:72:63:E4:09:8F:E6:C8 Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55 Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355 Certificate serial: 019B0F0095E3EE625294162E728C94CAA374 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft Manifest number: 1790 Signing time: Thu 11 Dec 2025 20:00:55 +0000 Manifest this update: Thu 11 Dec 2025 20:00:55 +0000 Manifest next update: Fri 12 Dec 2025 20:00:55 +0000 Files and hashes: 1: JTjIGaNjpzftNO-kFk1BOWWIlR0.roa (hash: QhcjtouUn5V8upOm/6e13CmIXaLDrm57wRtRFJI8pfQ=) 2: RDn2kmSbVnJw7wdF-wZa8vdfrGk.roa (hash: PPPp3w62aTSvX+pwPQUqMdFImPKU9XLCtHdMFcqqr1A=) 3: Udl4Y8sRVjim2rAFzxKQuecnclg.roa (hash: OhoAEIIYExt/Quqv/8KIxubBzRvH8hZ7uh526RWh78k=) 4: g5ka_NRV6xsXT8-J-OEOr39ws1U.crl (hash: vhktYdQLi5Ut5EqlF5BrSdaCyaBDQUIKooySZHOJlBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:95:e3:ee:62:52:94:16:2e:72:8c:94:ca:a3:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355 Validity Not Before: Dec 11 20:00:55 2025 GMT Not After : Dec 12 20:00:55 2025 GMT Subject: CN=1c83ecd4f38c7d6885f1ec4e4d7263e4098fe6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:43:1c:e5:36:14:36:b2:b9:06:83:f8:56: e3:f2:a2:06:67:dd:ac:4d:a8:d4:e0:49:7d:8c:fc: bd:2d:ac:9d:ff:7d:a5:07:ba:8d:b6:16:2a:22:36: 2a:fa:c4:ca:11:cb:58:1e:13:6e:04:d7:ee:84:44: bf:41:5f:9a:8e:74:7f:70:47:76:76:2b:27:2a:6d: 2b:66:55:61:fd:13:b0:49:c1:ce:70:29:a7:30:1f: 53:4c:04:63:f7:39:a5:b2:d7:f9:d1:46:62:2e:3a: 1d:a7:58:3c:ff:7b:c2:05:51:34:62:4c:6d:51:e5: de:2e:8c:4c:6e:a0:55:01:4c:aa:f2:34:43:52:41: 85:17:12:d0:e5:ad:ee:c1:7f:cd:18:11:6c:f1:15: 53:73:89:a1:46:5b:6f:9f:8d:3e:89:ed:cf:29:03: 6e:ec:0b:dc:41:6e:c7:75:49:06:1c:53:1c:d3:a7: 33:bc:df:1a:f6:93:02:ef:2d:39:17:1f:f2:01:42: 26:6a:67:c9:05:f8:da:00:18:5f:a0:ac:42:38:6b: 90:f8:0a:d7:5c:b0:50:4d:34:35:a5:ed:e6:d0:60: 44:c9:85:37:1d:08:db:06:fc:24:a3:46:56:10:1f: 6f:31:0c:24:9f:88:5d:59:15:3f:e9:b6:a0:48:9e: c4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:83:EC:D4:F3:8C:7D:68:85:F1:EC:4E:4D:72:63:E4:09:8F:E6:C8 X509v3 Authority Key Identifier: keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:6d:42:20:24:ca:e4:6d:1c:e6:b5:17:9c:e0:12:2b:d7:7a: b4:b5:73:43:07:9f:8c:3b:e1:55:0a:b8:0c:37:a3:31:c4:7d: a8:12:9f:83:f0:4c:41:e6:58:06:b8:a0:9a:65:27:87:87:e2: 00:61:9c:29:81:7b:65:d3:a9:5d:64:f1:b1:4e:d8:43:ee:ed: 90:4b:03:9e:b7:b5:bc:82:36:98:bf:7a:05:60:7d:46:aa:2e: c9:da:92:52:30:e4:ff:da:5c:d7:d9:22:1e:9c:e6:cd:e5:46: c1:5d:96:20:08:42:5c:53:b5:d8:78:49:e6:33:5c:db:59:97: a4:8d:9d:12:4f:ee:03:10:b5:cc:b0:1a:32:51:26:a1:ca:56: 72:18:c5:a0:30:2e:0e:fb:e6:97:65:3b:fc:12:7e:d4:9b:35: de:9f:86:81:8b:a5:de:9c:e2:33:3b:c8:a2:50:ac:c4:c4:40: 2e:4a:40:d7:8e:46:10:d6:b9:20:d9:5c:c2:76:40:66:2e:79: 46:12:5f:88:51:3d:c9:21:ec:32:34:f0:ec:c2:ee:38:3d:ad: 7f:11:dd:25:2f:62:d8:ec:23:4b:2c:8b:69:60:8c:19:aa:a8: 82:29:eb:9f:03:f4:dc:a4:01:52:fe:fc:ca:3c:1b:36:db:34: 7f:83:5c:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAJXj7mJSlBYucoyUyqN0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOTkxYWZjZDQ1NWViMWIxNzRmY2Y4OWY4ZTEwZWFmN2Y3 MGIzNTUwHhcNMjUxMjExMjAwMDU1WhcNMjUxMjEyMjAwMDU1WjAzMTEwLwYDVQQD EygxYzgzZWNkNGYzOGM3ZDY4ODVmMWVjNGU0ZDcyNjNlNDA5OGZlNmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYdDHOU2FDayuQaD+Fbj8qIGZ92s TajU4El9jPy9Layd/32lB7qNthYqIjYq+sTKEctYHhNuBNfuhES/QV+ajnR/cEd2 disnKm0rZlVh/ROwScHOcCmnMB9TTARj9zmlstf50UZiLjodp1g8/3vCBVE0Ykxt UeXeLoxMbqBVAUyq8jRDUkGFFxLQ5a3uwX/NGBFs8RVTc4mhRltvn40+ie3PKQNu 7AvcQW7HdUkGHFMc06czvN8a9pMC7y05Fx/yAUImamfJBfjaABhfoKxCOGuQ+ArX XLBQTTQ1pe3m0GBEyYU3HQjbBvwko0ZWEB9vMQwkn4hdWRU/6bagSJ7EXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByD7NTzjH1ohfHsTk1yY+QJj+bIMB8GA1UdIwQY MBaAFIOZGvzUVesbF0/PifjhDq9/cLNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzVrYV9OUlY2eHNYVDgtSi1PRU9yMzl3czFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82OWVkMjktYWY0ZS00NTI0LWFkZmIt ZTE1NDM3MzgwMDk5LzEvZzVrYV9OUlY2eHNYVDgtSi1PRU9yMzl3czFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS82OWVkMjktYWY0ZS00NTI0LWFkZmItZTE1NDM3MzgwMDk5 LzEvZzVrYV9OUlY2eHNYVDgtSi1PRU9yMzl3czFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ21CICTK 5G0c5rUXnOASK9d6tLVzQwefjDvhVQq4DDejMcR9qBKfg/BMQeZYBrigmmUnh4fi AGGcKYF7ZdOpXWTxsU7YQ+7tkEsDnre1vII2mL96BWB9RqouydqSUjDk/9pc19ki HpzmzeVGwV2WIAhCXFO12HhJ5jNc21mXpI2dEk/uAxC1zLAaMlEmocpWchjFoDAu Dvvml2U7/BJ+1Js13p+GgYul3pziMzvIolCsxMRALkpA145GENa5INlcwnZAZi55 RhJfiFE9ySHsMjTw7MLuOD2tfxHdJS9i2OwjSyyLaWCMGaqoginrnwP03KQBUv78 yjwbNts0f4NcZA== -----END CERTIFICATE-----Generated at Fri Dec 12 03:45:24 2025 by rpki-client