This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft File: g2CfK50khvNujNKd-ip1akjefFE.mft (raw, json) Hash identifier: x4/66DhzTI77ZI7oJ3H1rrLufP6Xpp9tvmVWv6swMeY= Subject key identifier: B9:E5:21:12:32:63:AE:38:91:C6:67:FD:BC:33:7A:96:8C:92:48:BF Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51 Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51 Certificate serial: 019B0FDC086DFE51BB7400313C435AAA7AA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft Manifest number: 1778 Signing time: Fri 12 Dec 2025 00:00:36 +0000 Manifest this update: Fri 12 Dec 2025 00:00:36 +0000 Manifest next update: Sat 13 Dec 2025 00:00:36 +0000 Files and hashes: 1: GxR7z8RKcSPGLTL-vNXCK33Iesc.roa (hash: YLGDTkKd+pthF6v4ZZ4TjrJJjHHjvrONsu/e4skdHWA=) 2: g2CfK50khvNujNKd-ip1akjefFE.crl (hash: whAE/7jUXqI8fMbebrCjh1h+X6dy8rtyYwlsvDkelnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:dc:08:6d:fe:51:bb:74:00:31:3c:43:5a:aa:7a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51 Validity Not Before: Dec 12 00:00:36 2025 GMT Not After : Dec 13 00:00:36 2025 GMT Subject: CN=b9e521123263ae3891c667fdbc337a968c9248bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:59:f4:0e:a7:1e:5e:4f:6e:15:ec:e7:8d:bc: 2e:9b:9d:8e:90:7c:21:bb:10:41:28:11:f2:0a:47: 99:27:b9:a3:e5:aa:b1:a5:da:b9:c8:df:c0:ab:73: 00:76:c5:c8:c4:29:49:d1:b0:c8:db:50:8b:c0:f0: 38:6a:ff:a8:ee:a8:7f:29:34:6b:74:e0:fa:cd:86: 47:60:ad:5c:ac:90:2f:89:42:ca:1f:2f:a0:77:98: 53:44:0a:f3:9c:b3:18:96:44:3b:5c:da:ec:37:9b: 0c:64:d4:44:da:1b:cc:b2:c5:ea:c7:7c:dc:79:ab: 28:74:53:db:1b:d0:b1:d9:00:51:e2:a4:99:a6:c3: a9:8b:55:bc:fe:57:f8:5a:28:38:65:2b:39:fe:9e: a9:2b:6f:40:02:bd:be:d1:32:a4:da:93:81:f8:4c: b9:91:30:e9:73:7e:6c:9c:8d:40:5b:33:dc:fa:1d: ff:3b:1a:95:a7:5b:7f:cd:5c:2d:46:d7:dd:cc:1b: c6:c6:d0:6c:6a:51:58:78:5d:cd:af:d5:26:e2:e7: 8a:49:51:bd:9b:42:5c:1e:53:bf:d7:54:93:a7:56: 0e:bc:12:1d:0a:aa:79:5c:fe:81:4b:fd:88:07:04: 62:3d:d6:c3:c8:23:4e:ae:a0:4f:0c:27:5e:b1:06: 27:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E5:21:12:32:63:AE:38:91:C6:67:FD:BC:33:7A:96:8C:92:48:BF X509v3 Authority Key Identifier: keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:2d:91:ca:87:70:4d:c2:56:90:f9:4f:11:aa:03:ad:12:b8: d2:0e:66:df:0f:8a:72:04:93:78:e8:ec:16:e2:26:5d:d5:68: 23:e7:b5:fe:80:05:b6:7f:fa:b0:36:3a:7a:c9:0a:e7:12:09: 24:2a:46:d4:34:51:d7:77:d1:7f:89:69:57:0b:f9:7b:93:cc: 3b:e7:21:a8:dc:55:7c:76:e6:5a:35:f0:db:82:d1:98:8c:db: 6e:ee:bc:40:e1:de:33:20:1e:91:6d:d8:b9:bb:0c:3c:fb:8a: 6a:11:85:4d:98:1c:ec:af:0f:d3:37:96:9e:51:6d:3e:3d:d0: 69:16:33:c7:6e:07:10:88:2a:56:24:be:ea:e9:66:ce:47:76: cd:bb:05:f3:bc:a6:b7:82:56:cd:3b:6d:3a:df:c8:31:18:46: 5b:c8:ad:29:31:d5:a1:0d:d6:e4:77:54:fc:be:9c:80:4a:dc: 02:79:95:86:86:cd:15:bd:60:b0:c2:b3:9d:11:4c:d1:37:b8: 3d:ca:14:39:16:23:fd:28:d1:39:e6:d5:0c:97:de:fb:77:d9: 2d:b7:2b:ea:31:80:f5:f1:2c:de:67:56:e4:ce:33:8a:d8:85: f1:85:df:68:5b:b6:a0:0e:8f:34:b9:5c:29:31:71:e2:25:30: 2e:bd:39:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsP3Aht/lG7dAAxPENaqnqpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjA5ZjJiOWQyNDg2ZjM2ZThjZDI5ZGZhMmE3NTZhNDhk ZTdjNTEwHhcNMjUxMjEyMDAwMDM2WhcNMjUxMjEzMDAwMDM2WjAzMTEwLwYDVQQD EyhiOWU1MjExMjMyNjNhZTM4OTFjNjY3ZmRiYzMzN2E5NjhjOTI0OGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlln0DqceXk9uFeznjbwum52OkHwh uxBBKBHyCkeZJ7mj5aqxpdq5yN/Aq3MAdsXIxClJ0bDI21CLwPA4av+o7qh/KTRr dOD6zYZHYK1crJAviULKHy+gd5hTRArznLMYlkQ7XNrsN5sMZNRE2hvMssXqx3zc easodFPbG9Cx2QBR4qSZpsOpi1W8/lf4Wig4ZSs5/p6pK29AAr2+0TKk2pOB+Ey5 kTDpc35snI1AWzPc+h3/OxqVp1t/zVwtRtfdzBvGxtBsalFYeF3Nr9Um4ueKSVG9 m0JcHlO/11STp1YOvBIdCqp5XP6BS/2IBwRiPdbDyCNOrqBPDCdesQYnXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnlIRIyY644kcZn/bwzepaMkki/MB8GA1UdIwQY MBaAFINgnyudJIbzbozSnfoqdWpI3nxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9kNmVjM2ItZTcxNy00YzNkLWIwYWUt NWU2MGY2ZGEyYjA5LzEvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9kNmVjM2ItZTcxNy00YzNkLWIwYWUtNWU2MGY2ZGEyYjA5 LzEvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKS2Ryodw TcJWkPlPEaoDrRK40g5m3w+KcgSTeOjsFuImXdVoI+e1/oAFtn/6sDY6eskK5xIJ JCpG1DRR13fRf4lpVwv5e5PMO+chqNxVfHbmWjXw24LRmIzbbu68QOHeMyAekW3Y ubsMPPuKahGFTZgc7K8P0zeWnlFtPj3QaRYzx24HEIgqViS+6ulmzkd2zbsF87ym t4JWzTttOt/IMRhGW8itKTHVoQ3W5HdU/L6cgErcAnmVhobNFb1gsMKznRFM0Te4 PcoUORYj/SjROebVDJfe+3fZLbcr6jGA9fEs3mdW5M4zitiF8YXfaFu2oA6PNLlc KTFx4iUwLr05ew== -----END CERTIFICATE-----Generated at Fri Dec 12 06:27:53 2025 by rpki-client