This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft File: g7d8noEHbPS0zv7V7vIQf3UsNjA.mft (raw, json) Hash identifier: X6uAhSzuAI1WpLfPWKkmbmwTwQGxqKWHRHO9a+FYU7A= Subject key identifier: 94:F3:0D:86:6B:31:37:A3:DD:7E:7C:9E:6B:A7:CF:B2:99:4C:E2:9E Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30 Certificate issuer: /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630 Certificate serial: 019B21E2A5ABD97B5AD39ADE43B93EC1B1A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 12:01:00 +0000 Manifest this update: Mon 15 Dec 2025 12:01:00 +0000 Manifest next update: Tue 16 Dec 2025 12:01:00 +0000 Files and hashes: 1: fYK373nYUB0XvmUvg-oovkxaiNE.roa (hash: xzFxyXs3TjE095d1PcNasH+Goh3HeA3NihMPCGecT0o=) 2: g7d8noEHbPS0zv7V7vIQf3UsNjA.crl (hash: ncuIP4ZduCpQLmodVS7MfzMGeUMk6TozKg7YPWyjbcY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:a5:ab:d9:7b:5a:d3:9a:de:43:b9:3e:c1:b1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630 Validity Not Before: Dec 15 12:01:00 2025 GMT Not After : Dec 16 12:01:00 2025 GMT Subject: CN=94f30d866b3137a3dd7e7c9e6ba7cfb2994ce29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:5d:80:07:d2:37:2a:92:3d:a0:19:95:23: 02:9a:50:99:9c:c3:26:3b:6a:2f:a1:52:f0:a1:70: e3:bf:72:a6:90:b5:47:0d:51:ab:97:49:97:30:5a: 10:fa:8f:ca:9d:55:98:40:b2:a5:2c:65:f2:4c:6a: a3:06:c4:8c:b7:40:e0:a0:86:83:98:f6:49:f5:90: 40:14:63:48:61:2e:4e:42:e0:1e:0f:be:4c:4c:a3: 97:2f:cb:a8:33:81:2f:13:d4:b0:17:22:02:bd:8b: ef:d1:82:b1:84:8f:86:b0:89:47:14:56:95:2a:32: b4:87:71:b4:10:a5:2c:4b:b4:82:76:09:e6:46:9c: 1a:09:19:7f:b6:0a:ba:48:cf:af:a3:0a:d8:3b:f0: 27:d5:4e:62:88:2c:42:49:89:bc:8e:15:8c:70:b3: 9d:c4:f6:06:c1:00:b3:5c:ba:91:26:00:0e:e3:a1: 60:de:7d:19:d6:f6:73:fc:b0:6a:e7:e4:ed:10:2a: 20:93:e4:be:be:09:76:f4:35:41:c4:f1:7b:1e:9c: a8:4c:66:2e:e4:f8:d2:1b:5a:54:db:a3:d8:32:ad: 4e:36:56:f7:48:fd:9a:30:1b:46:f2:52:c5:b2:6d: ab:67:da:cf:ac:6f:2f:bd:bb:34:71:74:e6:f7:b4: 04:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F3:0D:86:6B:31:37:A3:DD:7E:7C:9E:6B:A7:CF:B2:99:4C:E2:9E X509v3 Authority Key Identifier: keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0c:90:7c:8f:29:b8:e3:b4:8e:91:63:20:70:de:6a:8e:5d: 28:7d:00:f9:f5:e2:2a:f9:59:a8:0f:47:9d:7f:2e:97:0d:59: 02:8d:78:09:87:cd:03:ce:35:93:c3:86:cf:7a:b7:de:be:df: 00:2e:64:cd:b3:99:4b:99:cd:e1:15:c0:0f:85:9f:50:bf:58: 95:d2:82:64:7b:20:c8:8b:77:a3:09:fa:56:d5:6b:9a:cc:34: d9:09:9f:03:3a:af:2a:c1:d5:b3:2a:c5:8d:a8:b4:82:77:ea: 08:a2:73:51:9c:ca:50:df:a2:82:d5:f4:2a:79:30:bd:43:18: 33:06:95:31:81:2a:e9:66:e1:cf:a8:2e:f7:4c:b6:c5:11:92: f7:9c:20:82:4a:ed:8b:57:9e:59:20:4e:14:4c:92:55:28:a0: b3:80:52:a5:b4:e4:8d:25:4e:b3:5f:83:e4:7b:11:17:9b:f2: 4c:11:56:b8:a0:00:5d:96:be:46:e1:38:56:9d:96:6d:12:c9: ca:db:48:af:31:43:58:0c:da:c0:99:6e:1c:d9:eb:6d:9f:2c: 38:1a:7d:52:28:d3:11:21:02:af:3a:4d:80:54:ba:c9:67:de: 0f:96:d7:36:f7:fe:6b:f2:33:83:7d:9b:fb:8e:70:a2:b9:c6: e9:ac:6d:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4qWr2Xta05reQ7k+wbGoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYjc3YzllODEwNzZjZjRiNGNlZmVkNWVlZjIxMDdmNzUy YzM2MzAwHhcNMjUxMjE1MTIwMTAwWhcNMjUxMjE2MTIwMTAwWjAzMTEwLwYDVQQD Eyg5NGYzMGQ4NjZiMzEzN2EzZGQ3ZTdjOWU2YmE3Y2ZiMjk5NGNlMjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWldgAfSNyqSPaAZlSMCmlCZnMMm O2ovoVLwoXDjv3KmkLVHDVGrl0mXMFoQ+o/KnVWYQLKlLGXyTGqjBsSMt0DgoIaD mPZJ9ZBAFGNIYS5OQuAeD75MTKOXL8uoM4EvE9SwFyICvYvv0YKxhI+GsIlHFFaV KjK0h3G0EKUsS7SCdgnmRpwaCRl/tgq6SM+vowrYO/An1U5iiCxCSYm8jhWMcLOd xPYGwQCzXLqRJgAO46Fg3n0Z1vZz/LBq5+TtECogk+S+vgl29DVBxPF7HpyoTGYu 5PjSG1pU26PYMq1ONlb3SP2aMBtG8lLFsm2rZ9rPrG8vvbs0cXTm97QE/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTzDYZrMTej3X58nmunz7KZTOKeMB8GA1UdIwQY MBaAFIO3fJ6BB2z0tM7+1e7yEH91LDYwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzdkOG5vRUhiUFMwenY3Vjd2SVFmM1VzTmpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZGM0ZGQtODBiYi00ZGY1LWFmNTgt YjdhZGYwNGU0MjNkLzEvZzdkOG5vRUhiUFMwenY3Vjd2SVFmM1VzTmpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8zZGM0ZGQtODBiYi00ZGY1LWFmNTgtYjdhZGYwNGU0MjNk LzEvZzdkOG5vRUhiUFMwenY3Vjd2SVFmM1VzTmpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwyQfI8p uOO0jpFjIHDeao5dKH0A+fXiKvlZqA9HnX8ulw1ZAo14CYfNA841k8OGz3q33r7f AC5kzbOZS5nN4RXAD4WfUL9YldKCZHsgyIt3own6VtVrmsw02QmfAzqvKsHVsyrF jai0gnfqCKJzUZzKUN+igtX0KnkwvUMYMwaVMYEq6Wbhz6gu90y2xRGS95wggkrt i1eeWSBOFEySVSigs4BSpbTkjSVOs1+D5HsRF5vyTBFWuKAAXZa+RuE4Vp2WbRLJ yttIrzFDWAzawJluHNnrbZ8sOBp9UijTESECrzpNgFS6yWfeD5bXNvf+a/Izg32b +45wornG6axtCg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:54:58 2025 by rpki-client