This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft File: g_rANRxoqaHdZA2oY9hnrYX3ipE.mft (raw, json) Hash identifier: djkVE013S37EByettkDBk1IJfhqyJlBbmFQdIqBRwSE= Subject key identifier: 04:95:52:5B:22:22:48:17:82:0C:F6:57:C7:63:5A:C1:56:A7:92:C6 Authority key identifier: 83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91 Certificate issuer: /CN=83fac0351c68a9a1dd640da863d867ad85f78a91 Certificate serial: 019B3BA22B759DA739031C3E6B6BA0887E3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft Manifest number: C6 Signing time: Sat 20 Dec 2025 12:00:42 +0000 Manifest this update: Sat 20 Dec 2025 12:00:42 +0000 Manifest next update: Sun 21 Dec 2025 12:00:42 +0000 Files and hashes: 1: Ifp7fQ7mKS2UADFnL-dEcvfRDTE.roa (hash: zAV7cpAaiTXY8jJp2Gcf8CxnC05s7OAa7rmlAr6seaI=) 2: g_rANRxoqaHdZA2oY9hnrYX3ipE.crl (hash: u1izmSCgGOyLzlNIgSYxO7mO+EAOXKTy+qNHY4BmGF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:2b:75:9d:a7:39:03:1c:3e:6b:6b:a0:88:7e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83fac0351c68a9a1dd640da863d867ad85f78a91 Validity Not Before: Dec 20 12:00:42 2025 GMT Not After : Dec 21 12:00:42 2025 GMT Subject: CN=0495525b22224817820cf657c7635ac156a792c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6e:76:56:91:3d:07:09:0f:56:3e:fb:a6:7e: 09:1f:2f:f6:8b:55:f3:28:5e:78:d0:35:d4:a5:2b: ec:60:f8:fb:21:34:e7:47:e0:3c:39:bf:ca:2f:61: b1:a7:68:1b:60:c0:89:d5:87:a2:48:db:d3:6a:80: 6a:eb:d9:35:7a:55:e9:f6:c8:c8:63:1c:94:3e:64: 53:4c:d7:e8:fb:2e:19:a8:d1:83:b9:b0:85:17:55: ec:e5:d4:d8:33:72:69:57:cd:f3:30:a8:b5:b0:45: fd:75:f1:8e:28:86:be:d8:0a:13:54:c2:bd:d2:f6: 84:56:1d:af:be:5c:44:1b:53:bd:17:5d:f2:78:7b: db:c2:0e:81:99:5c:bf:f2:f5:6a:20:a3:46:81:96: 98:cc:30:11:f3:8e:5d:91:33:93:24:84:d8:1f:7f: 1a:6c:11:e3:7a:98:d9:b9:43:f6:ad:b3:b2:82:41: 91:52:c4:d8:96:3e:07:09:72:94:59:4d:1b:38:db: 70:47:7f:ce:8f:92:41:78:2f:77:73:68:ed:ba:b8: fb:c0:21:e9:92:c2:53:76:96:fc:32:ba:92:a4:c4: 23:1c:08:b3:41:6e:3f:20:16:d7:3b:16:72:e1:a7: 78:89:da:6b:12:b7:ae:a5:5e:9c:db:49:69:9f:e2: c4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:95:52:5B:22:22:48:17:82:0C:F6:57:C7:63:5A:C1:56:A7:92:C6 X509v3 Authority Key Identifier: keyid:83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:3a:a5:dd:8a:7a:c0:01:10:8d:6d:26:02:03:54:23:eb:79: f5:55:8b:d6:e2:1f:e3:bc:f8:7d:6e:bc:2a:ea:9a:97:13:36: 4f:16:9a:69:26:07:59:ed:60:a0:d3:7f:19:92:cb:93:c3:fa: d5:6f:ea:1f:e8:4f:c9:59:38:ce:18:e8:a1:57:8e:46:68:ac: 64:32:ce:48:e1:b5:ed:8f:d3:9e:2b:b5:91:43:07:23:f3:bf: 96:8e:1a:2e:7a:76:5c:e0:36:6a:fe:1f:39:a5:e5:10:29:87: 3f:52:98:35:2a:75:0b:85:bf:a0:57:59:ac:b4:6a:24:5c:1a: b9:65:31:5b:26:af:1e:ba:f1:32:c1:bf:84:7b:d2:66:cd:ff: 9c:8f:0c:a4:15:1e:46:70:73:84:85:c3:c7:75:65:03:8c:d5: c7:a7:97:38:d8:51:32:64:2b:e4:c6:73:23:43:b5:fd:b5:75: 96:cb:aa:56:1f:c4:c0:e1:9e:7e:37:27:e8:a2:7f:1b:22:0a: a8:23:36:2f:70:bb:ee:a6:0f:5d:0a:c4:12:c5:79:e5:30:7e: b7:49:14:a9:7b:b7:73:70:d5:c7:6c:4b:8b:3a:54:6a:eb:e8: 11:81:5a:ac:6b:cd:42:50:74:f7:5e:16:11:9c:30:7b:54:64: a8:ec:7c:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oit1nac5Axw+a2ugiH47MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZmFjMDM1MWM2OGE5YTFkZDY0MGRhODYzZDg2N2FkODVm NzhhOTEwHhcNMjUxMjIwMTIwMDQyWhcNMjUxMjIxMTIwMDQyWjAzMTEwLwYDVQQD EygwNDk1NTI1YjIyMjI0ODE3ODIwY2Y2NTdjNzYzNWFjMTU2YTc5MmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs252VpE9BwkPVj77pn4JHy/2i1Xz KF540DXUpSvsYPj7ITTnR+A8Ob/KL2Gxp2gbYMCJ1YeiSNvTaoBq69k1elXp9sjI YxyUPmRTTNfo+y4ZqNGDubCFF1Xs5dTYM3JpV83zMKi1sEX9dfGOKIa+2AoTVMK9 0vaEVh2vvlxEG1O9F13yeHvbwg6BmVy/8vVqIKNGgZaYzDAR845dkTOTJITYH38a bBHjepjZuUP2rbOygkGRUsTYlj4HCXKUWU0bONtwR3/Oj5JBeC93c2jturj7wCHp ksJTdpb8MrqSpMQjHAizQW4/IBbXOxZy4ad4idprEreupV6c20lpn+LEQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASVUlsiIkgXggz2V8djWsFWp5LGMB8GA1UdIwQY MBaAFIP6wDUcaKmh3WQNqGPYZ62F94qRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ19yQU5SeG9xYUhkWkEyb1k5aG5yWVgzaXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9jNzJjZjctMzU3Yi00ZmM3LTlmNjEt ZGZmN2U2MzQ4ZmZmLzEvZ19yQU5SeG9xYUhkWkEyb1k5aG5yWVgzaXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9jNzJjZjctMzU3Yi00ZmM3LTlmNjEtZGZmN2U2MzQ4ZmZm LzEvZ19yQU5SeG9xYUhkWkEyb1k5aG5yWVgzaXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTql3Yp6 wAEQjW0mAgNUI+t59VWL1uIf47z4fW68KuqalxM2TxaaaSYHWe1goNN/GZLLk8P6 1W/qH+hPyVk4zhjooVeORmisZDLOSOG17Y/Tniu1kUMHI/O/lo4aLnp2XOA2av4f OaXlECmHP1KYNSp1C4W/oFdZrLRqJFwauWUxWyavHrrxMsG/hHvSZs3/nI8MpBUe RnBzhIXDx3VlA4zVx6eXONhRMmQr5MZzI0O1/bV1lsuqVh/EwOGefjcn6KJ/GyIK qCM2L3C77qYPXQrEEsV55TB+t0kUqXu3c3DVx2xLizpUauvoEYFarGvNQlB0914W EZwwe1RkqOx8UA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:58:37 2025 by rpki-client