This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft File: g_s0shoO-MQBkcDgfDtFJOMjss8.mft (raw, json) Hash identifier: v0K1YpMJrbU7jYzX3BVzJLv1ZtguyBbJ9hHUAJgvU84= Subject key identifier: C7:39:16:DF:D0:1B:C0:05:7E:E0:F0:A6:75:BC:35:F3:92:A8:6C:A8 Authority key identifier: 83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF Certificate issuer: /CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf Certificate serial: 019B48F020C01A124A0ACACB14709E3D80D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft Manifest number: 1496 Signing time: Tue 23 Dec 2025 02:00:55 +0000 Manifest this update: Tue 23 Dec 2025 02:00:55 +0000 Manifest next update: Wed 24 Dec 2025 02:00:55 +0000 Files and hashes: 1: DobE_GDwj6LglTHnTGTNO49HHQg.roa (hash: BUWVPFb7JdXBEYo3ia6vx/6Nxlayi+TmF4VDb5fiITc=) 2: g_s0shoO-MQBkcDgfDtFJOMjss8.crl (hash: 8kzCKejESNq8kvXyxHKDS1jTkRDaF7gyb7deAX4MMlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:20:c0:1a:12:4a:0a:ca:cb:14:70:9e:3d:80:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf Validity Not Before: Dec 23 02:00:55 2025 GMT Not After : Dec 24 02:00:55 2025 GMT Subject: CN=c73916dfd01bc0057ee0f0a675bc35f392a86ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f4:65:9c:14:6a:cb:81:f7:cc:b2:15:22:93: 60:0f:77:b6:df:70:66:fb:b9:f2:a5:45:9f:74:f0: c6:2a:a3:2a:e4:97:02:8c:bd:2b:af:a1:82:61:12: 17:45:c3:8e:35:ed:84:dc:cb:29:1a:ff:71:b8:50: 63:b2:86:42:9b:82:13:14:7b:e7:bc:f7:03:ef:37: 38:4c:ed:fa:1e:d8:75:38:4b:96:a4:12:41:ea:c5: e0:72:a2:4a:26:45:fd:06:be:3d:0b:4a:60:84:0e: 69:cc:4a:21:9a:09:95:f9:4e:81:18:39:9f:fc:d1: 91:69:50:da:c3:ae:80:87:80:a9:13:36:d0:cb:10: 54:7f:6c:d9:81:c0:b7:3a:5c:8a:c9:98:75:77:ea: 0e:62:34:73:5a:1d:1b:59:c2:68:dc:cb:fd:0c:49: af:3c:c6:82:ac:85:d7:81:8f:07:4c:f9:7e:96:ed: 65:64:e5:a6:65:97:ad:2d:a7:d7:6e:81:6d:6a:31: bd:25:d5:7b:2e:9d:47:01:a8:7d:21:5e:e6:4c:e7: bf:09:d2:c2:7a:b5:7f:8b:8b:8e:a2:12:82:9b:9e: 06:94:05:9f:07:b4:51:b9:d4:85:65:7a:d7:69:77: 4a:38:ac:30:21:56:68:97:b0:bb:65:a2:48:c6:88: 97:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:39:16:DF:D0:1B:C0:05:7E:E0:F0:A6:75:BC:35:F3:92:A8:6C:A8 X509v3 Authority Key Identifier: keyid:83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:ed:8c:6b:14:48:b5:79:93:45:56:32:b6:9a:b6:8b:a7:e3: 5b:50:3a:84:27:84:d5:4d:4f:67:94:94:93:b2:32:55:67:9f: 2b:6f:16:c6:ed:0b:f6:60:33:2a:cf:61:96:8c:00:b9:26:76: ec:c3:66:04:eb:7e:0c:1b:4a:f5:27:64:c1:44:5e:d0:4c:eb: 5f:e1:33:65:52:34:6a:f7:2d:bb:87:b5:67:c0:fe:7c:e3:8b: bc:8c:9d:df:7f:53:e1:0a:2d:c8:a9:91:98:de:c0:d4:25:f4: 81:3e:e5:5a:6e:21:0e:c7:fa:19:07:91:17:c4:a6:ab:1a:85: dd:67:c3:2b:4b:9f:09:cb:a7:c8:a0:60:39:98:39:6a:67:35: 66:e7:e0:83:1b:c2:0e:c3:4b:42:f1:fa:f5:7c:53:77:8e:2b: 83:91:04:80:09:78:1e:a6:93:41:50:6a:1e:49:69:4d:84:ee: 6a:01:79:37:e6:8e:da:ee:15:3e:5d:6c:9a:b4:d0:70:ac:5d: 71:61:82:d1:cb:7b:e3:25:e6:e3:00:94:37:cb:f4:91:31:0e: b8:e4:98:7e:9f:f7:e6:9e:5d:11:80:02:42:b2:cd:ec:f8:f6: 2a:ca:22:77:f7:23:48:c6:06:e9:0c:46:a3:0e:60:2c:b4:29: 8d:98:09:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8CDAGhJKCsrLFHCePYDWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZmIzNGIyMWEwZWY4YzQwMTkxYzBlMDdjM2I0NTI0ZTMy M2IyY2YwHhcNMjUxMjIzMDIwMDU1WhcNMjUxMjI0MDIwMDU1WjAzMTEwLwYDVQQD EyhjNzM5MTZkZmQwMWJjMDA1N2VlMGYwYTY3NWJjMzVmMzkyYTg2Y2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/RlnBRqy4H3zLIVIpNgD3e233Bm +7nypUWfdPDGKqMq5JcCjL0rr6GCYRIXRcOONe2E3MspGv9xuFBjsoZCm4ITFHvn vPcD7zc4TO36Hth1OEuWpBJB6sXgcqJKJkX9Br49C0pghA5pzEohmgmV+U6BGDmf /NGRaVDaw66Ah4CpEzbQyxBUf2zZgcC3OlyKyZh1d+oOYjRzWh0bWcJo3Mv9DEmv PMaCrIXXgY8HTPl+lu1lZOWmZZetLafXboFtajG9JdV7Lp1HAah9IV7mTOe/CdLC erV/i4uOohKCm54GlAWfB7RRudSFZXrXaXdKOKwwIVZol7C7ZaJIxoiXVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMc5Ft/QG8AFfuDwpnW8NfOSqGyoMB8GA1UdIwQY MBaAFIP7NLIaDvjEAZHA4Hw7RSTjI7LPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ19zMHNob08tTVFCa2NEZ2ZEdEZKT01qc3M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wMDQyODQtZDRhNy00OTYyLTk2OTct ZjIzYjA3N2VkYjk2LzEvZ19zMHNob08tTVFCa2NEZ2ZEdEZKT01qc3M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8wMDQyODQtZDRhNy00OTYyLTk2OTctZjIzYjA3N2VkYjk2 LzEvZ19zMHNob08tTVFCa2NEZ2ZEdEZKT01qc3M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+2MaxRI tXmTRVYytpq2i6fjW1A6hCeE1U1PZ5SUk7IyVWefK28Wxu0L9mAzKs9hlowAuSZ2 7MNmBOt+DBtK9SdkwURe0EzrX+EzZVI0avctu4e1Z8D+fOOLvIyd339T4QotyKmR mN7A1CX0gT7lWm4hDsf6GQeRF8SmqxqF3WfDK0ufCcunyKBgOZg5amc1ZufggxvC DsNLQvH69XxTd44rg5EEgAl4HqaTQVBqHklpTYTuagF5N+aO2u4VPl1smrTQcKxd cWGC0ct74yXm4wCUN8v0kTEOuOSYfp/35p5dEYACQrLN7Pj2Ksoid/cjSMYG6QxG ow5gLLQpjZgJJA== -----END CERTIFICATE-----Generated at Tue Dec 23 11:05:43 2025 by rpki-client