This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft File: g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft (raw, json) Hash identifier: gbDrmecukkzyEtYiANui7Sw+0+mRKgcO7n/2ugHAep8= Subject key identifier: 1D:A1:5E:F0:FA:75:69:24:54:BE:A9:62:37:9A:26:6B:3A:BA:E5:0B Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38 Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938 Certificate serial: 019B38A145A82254A4429B7A3D738CDD591D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft Manifest number: 0AEF Signing time: Fri 19 Dec 2025 22:00:51 +0000 Manifest this update: Fri 19 Dec 2025 22:00:51 +0000 Manifest next update: Sat 20 Dec 2025 22:00:51 +0000 Files and hashes: 1: 0A7YmzuBMp3AnzV7uyObYfuJA-I.roa (hash: 7fXqAOKC5Q/vz61tqbSnvN/llglRyFYHrN6Bf9NPAuw=) 2: fg0q70bVoI7HDsFD4OzxGfbGsXs.roa (hash: O0o51/XaSgNiVnVW/1p1U3d6wUGPCY8T1Nsxw9qFmPo=) 3: fninY7dk4NBx5RTL5R_Wezr9T0s.roa (hash: SwOpz8NdRi+4j0eDktQnp/qAQ8UOrHFKwcilSnSB5hM=) 4: g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl (hash: dR1N4lffhOCmbgAicgvUFla4VErwMGNlYweXNL9vnRQ=) 5: iJx10D_iglakU4AeKeBDgEdcsVA.roa (hash: Dd6ao6PCLUT7Zm7DTtmPv5yg6OD7SudpnqLI9ibfBjM=) 6: jrbItzUNEH8rNuRKqj_moPSL76A.roa (hash: MddU7hBmFca6+WpltnhT8I5jhwwjpiy5HJwTYX9nENM=) 7: k3wReR7smqHRttYp_YytIIVUngE.roa (hash: yfFvsISgbeVw0q/ouZSyuznCXuWiBQ8OYRXG8uymDy8=) 8: ktAAidM8yuGSNSk_nWhJUqA9KEs.roa (hash: PukwcAGvFtblvafh80ccf3hyXxWAP6VQ8wyQlvDsA6s=) 9: oDYht5WNFMxT4sfzVWahtOBNgl8.roa (hash: 4hzDVibyG3EqU8r1GZL8mr4iVORi5bVTwiads+GorvI=) 10: zysZHwwZdHMoWgMUXdeFAHJvcPQ.roa (hash: JSFcJICikF4gq2JmcLqwfQ02lvaUo4SqU2srzhKJuS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:45:a8:22:54:a4:42:9b:7a:3d:73:8c:dd:59:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938 Validity Not Before: Dec 19 22:00:51 2025 GMT Not After : Dec 20 22:00:51 2025 GMT Subject: CN=1da15ef0fa75692454bea962379a266b3abae50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1a:45:ff:2d:77:ec:69:18:88:65:fe:7b:9d: a1:0f:43:da:63:c9:bd:61:5b:ed:51:f0:2a:39:f0: 2d:b5:e3:4b:cf:f4:52:de:70:b9:3c:5f:11:99:be: b1:99:df:7c:21:6e:a1:5a:0b:f4:19:0c:f2:02:1e: b5:5d:77:c5:0f:02:5d:2e:58:64:16:33:e8:72:8f: 96:55:7f:9c:b4:70:ef:08:eb:f9:17:6c:16:a0:6a: 10:8e:6e:79:3a:e1:8a:44:90:68:f8:0a:bf:1a:1b: 7c:df:6e:1f:d5:7a:77:e3:15:3d:c9:83:15:8e:ba: 9e:1c:d8:68:0d:60:bb:9d:66:40:1e:68:af:db:e1: 61:fb:b5:bc:f9:80:1e:c9:31:8b:3a:66:73:43:40: 32:3e:d2:5f:ea:f7:ca:b4:0e:2d:d4:d8:f3:80:e0: bd:9a:0f:a7:bc:4e:af:b2:f0:43:a4:8c:a8:64:bb: 8e:54:48:72:bc:2d:87:37:3f:7f:02:7f:d8:5e:cf: 26:51:f4:c2:c1:a4:a2:51:e8:ca:cf:46:80:b3:f9: ab:61:b3:53:4a:96:6e:ac:6f:7f:b2:bf:1f:29:b1: db:8a:46:db:76:af:1f:95:ac:a6:c6:1d:63:31:50: 39:b0:32:21:26:ae:34:6c:f6:82:e6:fb:e1:5f:bf: 30:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A1:5E:F0:FA:75:69:24:54:BE:A9:62:37:9A:26:6B:3A:BA:E5:0B X509v3 Authority Key Identifier: keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e1:97:46:35:77:d9:5b:43:2b:05:70:6c:75:85:b6:16:d9: fc:2d:d9:3e:b1:c2:ba:c6:5f:dc:69:83:95:fe:3e:3f:92:a7: 60:9b:df:70:5c:d9:88:39:a6:22:4d:94:4b:73:9d:94:27:81: 72:2d:ab:12:74:11:9d:62:24:3d:0b:69:72:b4:b9:d0:e7:3c: e4:d7:8a:62:67:27:73:c8:52:07:8e:20:9f:48:bf:0c:19:f3: 48:00:ad:ec:36:a3:a4:77:9b:17:8e:15:39:dc:69:aa:59:3d: f1:99:8f:2c:90:04:d5:3d:3b:8e:65:69:d2:8c:66:44:f0:cf: 99:fc:c1:6a:24:54:d8:0b:db:08:53:a9:44:10:6c:95:86:f7: a2:a5:11:66:b3:0c:03:05:b0:90:8d:f5:8a:d7:28:ec:b2:05: 9f:b9:14:8c:2a:33:4c:67:82:66:a4:cf:88:b9:85:c8:89:83: 04:f3:6b:69:b8:cb:ec:08:1d:f5:52:1d:f9:22:ea:a4:b3:0f: 38:fb:4f:28:11:61:dd:8d:c8:9a:f8:4d:2b:8b:4c:ff:ea:17: 9c:14:3e:25:7c:3f:22:f5:ac:5a:ec:e8:a8:e6:d1:7f:dd:ea: 51:85:ae:cd:79:87:10:e2:32:04:e7:82:0c:82:c6:99:e3:b7: ad:14:51:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oUWoIlSkQpt6PXOM3VkdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZjM2YjBhZGVlNmNiNTUxODc2M2I1YmM4ZWFhM2Q0MWYy M2U5MzgwHhcNMjUxMjE5MjIwMDUxWhcNMjUxMjIwMjIwMDUxWjAzMTEwLwYDVQQD EygxZGExNWVmMGZhNzU2OTI0NTRiZWE5NjIzNzlhMjY2YjNhYmFlNTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxpF/y137GkYiGX+e52hD0PaY8m9 YVvtUfAqOfAtteNLz/RS3nC5PF8Rmb6xmd98IW6hWgv0GQzyAh61XXfFDwJdLlhk FjPoco+WVX+ctHDvCOv5F2wWoGoQjm55OuGKRJBo+Aq/Ght8324f1Xp34xU9yYMV jrqeHNhoDWC7nWZAHmiv2+Fh+7W8+YAeyTGLOmZzQ0AyPtJf6vfKtA4t1NjzgOC9 mg+nvE6vsvBDpIyoZLuOVEhyvC2HNz9/An/YXs8mUfTCwaSiUejKz0aAs/mrYbNT SpZurG9/sr8fKbHbikbbdq8flaymxh1jMVA5sDIhJq40bPaC5vvhX78wswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2hXvD6dWkkVL6pYjeaJms6uuULMB8GA1UdIwQY MBaAFIPzawre5stVGHY7W8jqo9QfI+k4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGIt YWY2NGYzZmEyNDU5LzEvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGItYWY2NGYzZmEyNDU5 LzEvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOGXRjV3 2VtDKwVwbHWFthbZ/C3ZPrHCusZf3GmDlf4+P5KnYJvfcFzZiDmmIk2US3OdlCeB ci2rEnQRnWIkPQtpcrS50Oc85NeKYmcnc8hSB44gn0i/DBnzSACt7DajpHebF44V Odxpqlk98ZmPLJAE1T07jmVp0oxmRPDPmfzBaiRU2AvbCFOpRBBslYb3oqURZrMM AwWwkI31itco7LIFn7kUjCozTGeCZqTPiLmFyImDBPNrabjL7Agd9VId+SLqpLMP OPtPKBFh3Y3ImvhNK4tM/+oXnBQ+JXw/IvWsWuzoqObRf93qUYWuzXmHEOIyBOeC DILGmeO3rRRRpw== -----END CERTIFICATE-----Generated at Fri Dec 19 23:54:56 2025 by rpki-client