This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json) Hash identifier: nkZFaVfU+4dIrqEvi87CABOcqq42uSSuMEL+jpiy6RE= Subject key identifier: CA:06:27:8E:13:D4:AB:A9:03:06:8E:89:35:C7:EF:6D:4B:3F:1A:42 Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f Certificate serial: 019B0E5BDF91135401D9A6199C47ECB8062F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 17:01:00 +0000 Manifest this update: Thu 11 Dec 2025 17:01:00 +0000 Manifest next update: Fri 12 Dec 2025 17:01:00 +0000 Files and hashes: 1: L07o_vv656M9OEJjc4BFj7rpTc8.roa (hash: RSQDee8PToqw8SZNKDk+n8QFVV+DzoM0xmaXuyUh35A=) 2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: ZBTmKKnL8VMMgfpHJgaGhnzdXo34vw3qhcw92C1KSRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:df:91:13:54:01:d9:a6:19:9c:47:ec:b8:06:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f Validity Not Before: Dec 11 17:01:00 2025 GMT Not After : Dec 12 17:01:00 2025 GMT Subject: CN=ca06278e13d4aba903068e8935c7ef6d4b3f1a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fb:dd:d1:b5:a2:62:11:d8:12:21:90:40:ea: 68:3a:4b:32:cf:78:e9:05:96:52:64:f8:af:a5:dc: ae:9c:6f:b1:e0:3c:ec:8f:e2:83:b5:e2:42:2c:52: fa:75:9b:60:10:56:5c:09:56:15:89:bc:fb:3e:65: 9b:08:d6:db:2b:5e:59:1b:fd:a5:34:c2:de:33:ef: 92:bd:1c:2a:3b:bf:a8:54:ec:1f:00:ea:f6:71:39: de:97:4e:28:a1:1b:e3:52:e8:18:a0:7f:27:ad:4d: 77:20:bb:49:62:21:21:08:5e:b2:ad:0f:49:93:a9: 34:0b:68:a0:d8:22:cb:93:24:4b:d6:12:f6:1f:55: b7:63:64:0e:5f:a0:91:b5:fb:05:7a:98:18:a1:36: f8:1e:72:d7:56:cc:59:09:41:99:74:e4:4f:2d:19: 56:96:bd:e3:b5:54:f1:5f:68:17:a0:2e:05:10:07: 5d:da:83:91:cd:bc:2b:4f:1f:db:9e:b2:48:9b:dc: cc:c5:db:85:2e:0b:3f:19:62:7d:3b:a8:07:6a:0f: 0d:ff:e1:5e:75:f3:10:6f:05:68:e1:6a:49:72:88: a4:ca:0f:ce:55:42:e8:29:ff:3e:1f:d1:cc:53:36: 17:e1:15:85:a7:c6:51:79:0e:ff:90:4a:4c:82:3d: 91:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:06:27:8E:13:D4:AB:A9:03:06:8E:89:35:C7:EF:6D:4B:3F:1A:42 X509v3 Authority Key Identifier: keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a6:42:f8:93:d9:1d:a9:aa:e1:5c:1a:3a:b4:fb:a7:5e:fb: 15:e0:ad:49:b3:91:d0:7b:59:47:97:5a:18:28:5d:56:03:75: ab:52:a7:28:0e:7b:08:49:fb:e8:3e:39:7e:ba:08:b1:d0:1b: 5e:7e:79:3d:b9:e9:4e:45:28:43:a9:11:f5:55:83:06:8c:db: 39:c6:74:b5:89:ff:25:8c:cf:21:78:bc:60:c4:54:5a:fc:e4: 9a:91:16:13:2c:28:04:a8:dc:85:ec:c0:74:e5:bb:68:b7:b4: 72:50:98:38:b9:8c:3f:6f:3e:de:cd:21:39:44:2d:2f:02:8e: 83:10:1f:e1:f5:80:b4:d3:2e:8c:58:54:53:4f:9e:29:c9:7b: ca:5d:b5:6b:37:2a:37:60:37:ad:44:14:85:b7:4c:ce:0a:db: 69:28:e1:06:73:d5:b8:b7:fc:85:5c:d9:4b:e2:ce:7d:32:2f: 4f:8a:1e:98:9b:b4:6e:e3:fe:14:c0:87:1a:44:2f:ea:c2:0b: 2b:d3:30:36:30:55:68:78:fb:5c:17:1f:51:d4:ac:e1:8c:61: 8b:3a:48:3b:89:6b:a0:4b:88:76:cf:19:06:f5:b3:b4:bf:01: 60:9e:fa:36:f4:9e:92:73:24:04:e2:6f:71:3c:f8:d2:e6:98: d7:bf:a0:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW9+RE1QB2aYZnEfsuAYvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOTBlMTA0MmJhZGQ4OGU5NmU2MzllYWEwYWQwMjMyODdl YTUwN2YwHhcNMjUxMjExMTcwMTAwWhcNMjUxMjEyMTcwMTAwWjAzMTEwLwYDVQQD EyhjYTA2Mjc4ZTEzZDRhYmE5MDMwNjhlODkzNWM3ZWY2ZDRiM2YxYTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPvd0bWiYhHYEiGQQOpoOksyz3jp BZZSZPivpdyunG+x4Dzsj+KDteJCLFL6dZtgEFZcCVYVibz7PmWbCNbbK15ZG/2l NMLeM++SvRwqO7+oVOwfAOr2cTnel04ooRvjUugYoH8nrU13ILtJYiEhCF6yrQ9J k6k0C2ig2CLLkyRL1hL2H1W3Y2QOX6CRtfsFepgYoTb4HnLXVsxZCUGZdORPLRlW lr3jtVTxX2gXoC4FEAdd2oORzbwrTx/bnrJIm9zMxduFLgs/GWJ9O6gHag8N/+Fe dfMQbwVo4WpJcoikyg/OVULoKf8+H9HMUzYX4RWFp8ZReQ7/kEpMgj2RlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoGJ44T1KupAwaOiTXH721LPxpCMB8GA1UdIwQY MBaAFIOQ4QQrrdiOluY56qCtAjKH6lB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYt NDlmYTU4ZmVkZmYzLzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYtNDlmYTU4ZmVkZmYz LzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6ZC+JPZ Hamq4VwaOrT7p177FeCtSbOR0HtZR5daGChdVgN1q1KnKA57CEn76D45froIsdAb Xn55PbnpTkUoQ6kR9VWDBozbOcZ0tYn/JYzPIXi8YMRUWvzkmpEWEywoBKjchezA dOW7aLe0clCYOLmMP28+3s0hOUQtLwKOgxAf4fWAtNMujFhUU0+eKcl7yl21azcq N2A3rUQUhbdMzgrbaSjhBnPVuLf8hVzZS+LOfTIvT4oemJu0buP+FMCHGkQv6sIL K9MwNjBVaHj7XBcfUdSs4YxhizpIO4lroEuIds8ZBvWztL8BYJ76NvSeknMkBOJv cTz40uaY17+gfA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:18:58 2025 by rpki-client