This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft File: g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json) Hash identifier: e42S2/5Hdo4LNzcJNEagfVbpsIggiIrgCaKj9gZXmfQ= Subject key identifier: A2:4D:B9:7F:D4:DD:3F:07:3D:65:CA:D1:49:C8:FC:5C:8F:A3:E4:B4 Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E Certificate issuer: /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e Certificate serial: 019B5BD1F8A308FD1719582F720F36DD304B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft Manifest number: 12CB Signing time: Fri 26 Dec 2025 18:00:45 +0000 Manifest this update: Fri 26 Dec 2025 18:00:45 +0000 Manifest next update: Sat 27 Dec 2025 18:00:45 +0000 Files and hashes: 1: Db2mHELjbKafmmak8MMgrVJ9q6s.roa (hash: 0wtkW6LztiP4K0i9kH54ddtGh234DUMSdImFiKp9l5M=) 2: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: BToYsUXgwy7easGN/j61UNSnzUZydmZrO9GhdL9prbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d1:f8:a3:08:fd:17:19:58:2f:72:0f:36:dd:30:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e Validity Not Before: Dec 26 18:00:45 2025 GMT Not After : Dec 27 18:00:45 2025 GMT Subject: CN=a24db97fd4dd3f073d65cad149c8fc5c8fa3e4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:bf:58:ed:e7:a3:9a:19:0d:db:13:8a:c9: ce:34:82:be:d1:9c:89:97:1f:48:99:67:d9:a4:1e: 29:4e:6f:36:7f:88:8c:b5:62:d6:35:e8:6f:a1:72: 41:7b:b8:d8:a4:3c:29:d7:c3:af:5e:00:5c:98:6b: d9:50:e7:3d:31:91:e2:f1:9a:74:8d:6f:9e:39:4b: dc:8f:34:1b:ca:a8:96:ac:d8:29:bc:bb:fa:cd:d7: 6c:ba:a1:29:35:52:4c:4a:0a:c7:ec:27:ea:89:4b: 10:f1:11:a6:ee:85:46:b2:37:c3:1f:b7:38:2c:82: ea:09:91:b6:bd:e7:aa:ed:33:9a:ff:17:0d:9d:4d: c7:80:b3:81:a9:71:25:fc:7b:ef:35:f4:b2:b2:4d: df:de:1c:c8:5a:3c:67:0d:f5:8c:d6:08:2e:75:ff: e7:f1:af:bd:3a:1e:ee:66:f8:95:ef:b0:b2:c5:e5: 4b:c2:05:3d:84:a2:2f:9d:65:e0:5d:9e:f9:cc:ff: c7:4a:0a:1b:25:fe:44:2a:a3:42:65:7d:e0:33:43: 0a:d4:2b:66:a5:f0:c6:7f:a8:d3:0c:40:05:a2:50: 97:f7:7f:f5:f5:34:be:63:17:0a:2d:88:aa:7c:0e: e5:ce:2e:ed:fd:82:3e:91:c8:4a:c9:b5:9a:2f:d1: bd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4D:B9:7F:D4:DD:3F:07:3D:65:CA:D1:49:C8:FC:5C:8F:A3:E4:B4 X509v3 Authority Key Identifier: keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:03:cc:60:ec:f2:1d:e3:88:46:66:ad:97:39:98:29:b4:75: 4f:b4:0b:b3:c7:e9:19:77:f9:75:4c:60:84:87:55:4b:fb:00: 76:fe:d1:e4:79:2f:0e:0b:b7:b0:3b:b0:4a:52:5f:04:7d:ff: e4:a6:e2:30:2a:16:a5:c4:eb:59:4a:bb:3d:a7:3d:f0:04:24: 90:45:0b:b6:b2:e7:1c:87:46:5e:01:8a:b1:de:7f:55:ff:b5: cc:a0:09:37:4b:3b:05:0a:ec:67:a5:5d:0d:69:48:fe:b3:f8: 36:a5:da:6d:41:39:e4:27:cd:b9:0f:65:cf:2e:a8:03:00:5c: dc:2a:48:14:81:0d:6d:da:44:37:0d:bc:c7:8d:80:42:67:4b: 77:ea:10:1b:55:7e:e3:80:8a:6e:72:0a:b9:1b:c3:32:33:b8: b2:d9:b3:3e:2f:d9:ed:9e:dc:e6:c5:5a:ce:e0:7d:50:75:b1: cc:c9:7f:51:f3:0f:9c:28:35:51:70:ee:9f:b1:ed:99:0f:0c: a1:d8:b7:f2:e3:f2:c4:07:b5:af:a7:0f:54:81:70:ee:e8:20: 6b:3b:b8:b6:f7:96:a8:b1:6b:a0:6a:e2:27:48:96:97:81:8b: 08:47:87:e7:d2:70:1e:ee:ba:f0:0f:7d:de:04:1f:b6:27:e2: 1d:2d:12:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0fijCP0XGVgvcg823TBLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYmYzNmViMThlZjlhNTdjNWZiNjAzYWRhNDAwZmU2YjY2 ODhlNmUwHhcNMjUxMjI2MTgwMDQ1WhcNMjUxMjI3MTgwMDQ1WjAzMTEwLwYDVQQD EyhhMjRkYjk3ZmQ0ZGQzZjA3M2Q2NWNhZDE0OWM4ZmM1YzhmYTNlNGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLi/WO3no5oZDdsTisnONIK+0ZyJ lx9ImWfZpB4pTm82f4iMtWLWNehvoXJBe7jYpDwp18OvXgBcmGvZUOc9MZHi8Zp0 jW+eOUvcjzQbyqiWrNgpvLv6zddsuqEpNVJMSgrH7CfqiUsQ8RGm7oVGsjfDH7c4 LILqCZG2veeq7TOa/xcNnU3HgLOBqXEl/HvvNfSysk3f3hzIWjxnDfWM1ggudf/n 8a+9Oh7uZviV77CyxeVLwgU9hKIvnWXgXZ75zP/HSgobJf5EKqNCZX3gM0MK1Ctm pfDGf6jTDEAFolCX93/19TS+YxcKLYiqfA7lzi7t/YI+kchKybWaL9G95wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJNuX/U3T8HPWXK0UnI/FyPo+S0MB8GA1UdIwQY MBaAFIO/NusY75pXxftgOtpAD+a2aI5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mNzdkNTEtZWUxYy00N2E5LTkwYmMt ZTBkMmExYjZlOGFjLzEvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mNzdkNTEtZWUxYy00N2E5LTkwYmMtZTBkMmExYjZlOGFj LzEvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwPMYOzy HeOIRmatlzmYKbR1T7QLs8fpGXf5dUxghIdVS/sAdv7R5HkvDgu3sDuwSlJfBH3/ 5KbiMCoWpcTrWUq7Pac98AQkkEULtrLnHIdGXgGKsd5/Vf+1zKAJN0s7BQrsZ6Vd DWlI/rP4NqXabUE55CfNuQ9lzy6oAwBc3CpIFIENbdpENw28x42AQmdLd+oQG1V+ 44CKbnIKuRvDMjO4stmzPi/Z7Z7c5sVazuB9UHWxzMl/UfMPnCg1UXDun7HtmQ8M odi38uPyxAe1r6cPVIFw7uggazu4tveWqLFroGriJ0iWl4GLCEeH59JwHu668A99 3gQftifiHS0SWw== -----END CERTIFICATE-----Generated at Fri Dec 26 21:02:39 2025 by rpki-client