This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft File: g_s0shoO-MQBkcDgfDtFJOMjss8.mft (raw, json) Hash identifier: TqK7SYTvEmmNVqfPT5rijP+WoOyG/hl/KYU0XRs3iAg= Subject key identifier: 94:5E:A1:09:F2:26:BB:11:D8:2C:09:90:21:4C:C9:34:16:FD:0D:1A Authority key identifier: 83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF Certificate issuer: /CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf Certificate serial: 019B281B91554EB4051377CEACC38EAAF461 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft Manifest number: 1485 Signing time: Tue 16 Dec 2025 17:00:53 +0000 Manifest this update: Tue 16 Dec 2025 17:00:53 +0000 Manifest next update: Wed 17 Dec 2025 17:00:53 +0000 Files and hashes: 1: DobE_GDwj6LglTHnTGTNO49HHQg.roa (hash: BUWVPFb7JdXBEYo3ia6vx/6Nxlayi+TmF4VDb5fiITc=) 2: g_s0shoO-MQBkcDgfDtFJOMjss8.crl (hash: KuMqqTuxbSjPTFojYqUpY4l2m5VxzNPRtuuzlQjid9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:91:55:4e:b4:05:13:77:ce:ac:c3:8e:aa:f4:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf Validity Not Before: Dec 16 17:00:53 2025 GMT Not After : Dec 17 17:00:53 2025 GMT Subject: CN=945ea109f226bb11d82c0990214cc93416fd0d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:41:63:f6:30:d6:d4:5f:9a:ea:04:d3:ac:05: 58:34:17:29:9a:ac:76:5c:c4:e5:f4:1e:17:eb:a8: 95:a3:c1:01:25:3e:1d:03:2f:94:37:b0:fc:3d:3c: 0d:72:8e:a5:d5:3a:eb:3b:3f:22:22:48:ad:9f:59: 67:45:ce:b8:14:18:ce:64:89:95:1e:68:dd:f6:50: cb:e1:6a:cb:ff:1c:a8:45:47:9c:8a:0c:4f:63:fa: fc:80:9a:90:b5:d7:06:be:66:91:7b:95:f9:e0:69: b1:6b:83:58:1c:6d:6f:ee:04:4f:6a:e9:11:fb:d1: b0:a1:38:63:b6:1c:4d:66:69:8f:ee:34:03:5e:49: 18:d2:1f:35:64:c7:d1:a3:2e:77:f4:19:08:ed:27: 7c:b5:b1:de:98:26:06:88:29:01:9c:36:bd:e0:53: 77:6c:e9:f2:0f:da:ed:e2:b5:99:f2:7f:57:99:97: d4:59:ed:1c:00:18:0e:dd:96:df:d1:4d:84:a6:7c: f1:f9:e4:32:ba:a9:c4:ae:e7:d5:85:67:31:ea:13: 2a:38:15:11:5a:ee:5c:67:fd:e5:bc:a3:b0:52:1a: 5f:55:2a:90:9e:64:12:35:59:55:d1:57:17:7a:b1: 4e:71:4c:3b:0b:c4:70:00:42:88:2a:e2:e2:fb:6a: 6b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5E:A1:09:F2:26:BB:11:D8:2C:09:90:21:4C:C9:34:16:FD:0D:1A X509v3 Authority Key Identifier: keyid:83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:16:98:f4:5f:01:4a:b5:6c:81:38:bc:56:1a:9e:76:39:af: a8:a4:6c:09:1d:ea:f6:24:9f:bd:25:4a:38:bb:f6:ba:46:5e: 17:73:63:4f:4d:3d:27:27:ee:77:8b:3b:77:8e:f5:52:2c:6f: bc:eb:a8:bd:26:f1:24:44:c2:16:c6:0e:f3:24:f6:f2:ad:01: b2:1a:31:19:3e:a8:04:a6:5a:2e:f4:c3:69:5b:65:9e:40:89: 99:a7:cd:90:aa:53:b5:07:a7:eb:e2:65:2e:38:2f:12:8a:f9: 6d:33:73:26:8e:c2:91:e0:7d:cd:8a:30:c0:c0:ab:e6:6e:15: 70:0e:06:cc:68:25:c8:b1:5e:c0:87:d8:9a:c4:ec:41:7b:e4: f5:c0:69:be:86:49:8c:85:b9:ad:7a:cd:9b:27:73:80:30:3e: 2f:e5:e6:48:af:bd:4e:80:52:af:9d:75:c6:ac:b9:c0:bb:9d: 70:12:e5:7a:e2:6a:22:d7:fd:fd:16:5d:3f:fd:86:ca:90:62: a2:2c:56:92:e6:bd:53:03:64:8c:73:5a:8c:00:31:6b:40:30: 6e:c1:34:03:8f:62:f4:eb:9b:5f:7f:4e:8d:5a:46:bb:7d:46: 55:9d:8e:9c:e3:d0:23:0d:e3:30:eb:e7:21:09:df:c4:fc:da: 18:34:8a:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG5FVTrQFE3fOrMOOqvRhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZmIzNGIyMWEwZWY4YzQwMTkxYzBlMDdjM2I0NTI0ZTMy M2IyY2YwHhcNMjUxMjE2MTcwMDUzWhcNMjUxMjE3MTcwMDUzWjAzMTEwLwYDVQQD Eyg5NDVlYTEwOWYyMjZiYjExZDgyYzA5OTAyMTRjYzkzNDE2ZmQwZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEFj9jDW1F+a6gTTrAVYNBcpmqx2 XMTl9B4X66iVo8EBJT4dAy+UN7D8PTwNco6l1TrrOz8iIkitn1lnRc64FBjOZImV Hmjd9lDL4WrL/xyoRUecigxPY/r8gJqQtdcGvmaRe5X54Gmxa4NYHG1v7gRPaukR +9GwoThjthxNZmmP7jQDXkkY0h81ZMfRoy539BkI7Sd8tbHemCYGiCkBnDa94FN3 bOnyD9rt4rWZ8n9XmZfUWe0cABgO3Zbf0U2Epnzx+eQyuqnErufVhWcx6hMqOBUR Wu5cZ/3lvKOwUhpfVSqQnmQSNVlV0VcXerFOcUw7C8RwAEKIKuLi+2pr7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJReoQnyJrsR2CwJkCFMyTQW/Q0aMB8GA1UdIwQY MBaAFIP7NLIaDvjEAZHA4Hw7RSTjI7LPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ19zMHNob08tTVFCa2NEZ2ZEdEZKT01qc3M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wMDQyODQtZDRhNy00OTYyLTk2OTct ZjIzYjA3N2VkYjk2LzEvZ19zMHNob08tTVFCa2NEZ2ZEdEZKT01qc3M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8wMDQyODQtZDRhNy00OTYyLTk2OTctZjIzYjA3N2VkYjk2 LzEvZ19zMHNob08tTVFCa2NEZ2ZEdEZKT01qc3M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRaY9F8B SrVsgTi8VhqedjmvqKRsCR3q9iSfvSVKOLv2ukZeF3NjT009Jyfud4s7d471Uixv vOuovSbxJETCFsYO8yT28q0BshoxGT6oBKZaLvTDaVtlnkCJmafNkKpTtQen6+Jl LjgvEor5bTNzJo7CkeB9zYowwMCr5m4VcA4GzGglyLFewIfYmsTsQXvk9cBpvoZJ jIW5rXrNmydzgDA+L+XmSK+9ToBSr511xqy5wLudcBLleuJqItf9/RZdP/2GypBi oixWkua9UwNkjHNajAAxa0AwbsE0A49i9OubX39OjVpGu31GVZ2OnOPQIw3jMOvn IQnfxPzaGDSKog== -----END CERTIFICATE-----Generated at Tue Dec 16 19:51:42 2025 by rpki-client