This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json) Hash identifier: BgXo192xh7UVPfb2/QIanaGgCujYPVbXBqtkOtDBmUo= Subject key identifier: DF:62:24:F2:3B:AA:6F:04:EF:33:A8:14:A4:19:EB:88:24:FF:D4:7F Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80 Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780 Certificate serial: 019B27401DB11AE67680900D6E09D576586B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft Manifest number: 177F Signing time: Tue 16 Dec 2025 13:01:11 +0000 Manifest this update: Tue 16 Dec 2025 13:01:11 +0000 Manifest next update: Wed 17 Dec 2025 13:01:11 +0000 Files and hashes: 1: FseoG8adiLo0RLAf1UjvghOTljU.roa (hash: KjYrZHqJ+HstyQr/uUASJXDHhJKgj2NLAuGOtjEwvqg=) 2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: GjuaECpv7und5elBfxON33Si2YeDtaVa5DLTTOP4SGQ=) 3: HZwokTuDHsI8h-fzTOEC6oBOUUI.roa (hash: WM7QJ6OQyLcuKoO0U9leXRvAuei8nXuZdEOZY6w3qXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:40:1d:b1:1a:e6:76:80:90:0d:6e:09:d5:76:58:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780 Validity Not Before: Dec 16 13:01:11 2025 GMT Not After : Dec 17 13:01:11 2025 GMT Subject: CN=df6224f23baa6f04ef33a814a419eb8824ffd47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fb:ce:01:30:10:28:d6:aa:c8:1b:36:84:70: 4e:e7:22:04:64:40:ed:05:5e:b6:f2:f4:22:0b:e4: b2:a3:58:f5:4c:53:98:54:40:e6:5b:65:52:cd:e8: a9:d0:3c:bc:f7:ef:ef:a2:7e:75:1e:bb:42:38:fb: 49:21:a8:7b:bc:fa:bf:27:bc:13:cd:51:95:2d:6b: 4f:be:0d:84:60:8c:85:1d:b1:67:ed:fd:f9:34:be: 51:ed:e7:70:cd:58:2d:6a:17:dc:ca:32:78:49:92: f6:25:ec:dc:fe:f4:38:79:b0:2a:69:55:7e:84:ce: 44:15:36:82:9f:bb:b9:ab:05:d7:c0:07:4d:e2:a0: 4f:5e:bc:18:d4:3b:37:95:96:6f:a4:ae:2f:7f:0d: c0:1b:b2:9d:f0:05:97:0c:2f:25:5b:9a:aa:74:53: 5e:ec:39:25:b8:e3:1b:25:e9:8b:7c:1a:e3:f9:95: c0:64:b9:9a:12:3e:e8:b3:5c:01:59:7e:4a:ac:43: 8b:c2:5b:85:9f:62:7d:07:1d:e9:6d:76:2a:8e:1e: 49:e2:13:52:fc:7b:bb:8c:be:7b:f7:b5:25:5f:15: a8:22:8b:ac:65:93:af:2a:74:48:24:68:23:a4:7e: 4e:19:61:67:fa:48:9d:8a:cd:19:0c:1d:c8:19:6b: 36:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:62:24:F2:3B:AA:6F:04:EF:33:A8:14:A4:19:EB:88:24:FF:D4:7F X509v3 Authority Key Identifier: keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ff:16:19:4b:13:07:99:93:ce:97:4a:bf:48:41:8d:a6:2c: 38:f6:57:e3:6f:4f:af:8a:2c:6a:71:39:d4:88:4e:2c:81:c7: 41:b5:26:db:0b:86:18:fe:e6:84:40:4e:7b:43:0c:c4:80:d6: 26:c7:f9:52:01:7f:f4:3e:b9:69:53:29:ce:4c:13:8c:ea:bc: 58:b0:4f:d7:a1:cc:1b:b0:0e:44:39:80:87:36:47:3d:6e:58: 10:55:1d:18:ea:09:a2:87:73:d3:02:2a:b2:67:a7:ef:a6:b9: 2b:ad:5e:2f:43:0f:2a:19:ef:07:26:72:73:83:a2:f8:2e:d4: 41:24:92:de:b7:1b:cb:0c:8d:ed:08:63:aa:be:ce:05:a9:2d: 04:18:8f:1a:af:e0:09:be:41:47:6d:5a:79:16:7c:c7:e2:db: b9:6e:35:67:b8:b0:41:6e:49:a8:a1:ab:99:7c:4e:ea:c1:ad: 0b:87:63:7b:c5:ce:06:82:d7:fd:f7:f2:b1:40:b0:8a:ee:5f: 64:49:77:c0:01:c4:28:d6:4a:30:45:5b:7b:0e:3d:79:8f:2c: 28:14:37:c9:41:89:4a:3a:09:56:71:f6:67:9a:24:62:33:2c: 24:d0:2d:3c:65:5f:05:f2:0e:1c:7f:b8:86:5c:8d:da:aa:61: 4f:b5:c9:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQB2xGuZ2gJANbgnVdlhrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNjg2NTYxMjYxOTgzNzNkMDc4ODZiZjRhYjhmYjA2Yjkw MDY3ODAwHhcNMjUxMjE2MTMwMTExWhcNMjUxMjE3MTMwMTExWjAzMTEwLwYDVQQD EyhkZjYyMjRmMjNiYWE2ZjA0ZWYzM2E4MTRhNDE5ZWI4ODI0ZmZkNDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PvOATAQKNaqyBs2hHBO5yIEZEDt BV628vQiC+Syo1j1TFOYVEDmW2VSzeip0Dy89+/von51HrtCOPtJIah7vPq/J7wT zVGVLWtPvg2EYIyFHbFn7f35NL5R7edwzVgtahfcyjJ4SZL2Jezc/vQ4ebAqaVV+ hM5EFTaCn7u5qwXXwAdN4qBPXrwY1Ds3lZZvpK4vfw3AG7Kd8AWXDC8lW5qqdFNe 7DkluOMbJemLfBrj+ZXAZLmaEj7os1wBWX5KrEOLwluFn2J9Bx3pbXYqjh5J4hNS /Hu7jL5797UlXxWoIousZZOvKnRIJGgjpH5OGWFn+kidis0ZDB3IGWs2+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9iJPI7qm8E7zOoFKQZ64gk/9R/MB8GA1UdIwQY MBaAFBtoZWEmGYNz0HiGv0q4+wa5AGeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81MzEwMGYtMWJiMy00MjE5LTljODIt MjM5ODcwNGFiNTBjLzEvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81MzEwMGYtMWJiMy00MjE5LTljODItMjM5ODcwNGFiNTBj LzEvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABP8WGUsT B5mTzpdKv0hBjaYsOPZX429Pr4osanE51IhOLIHHQbUm2wuGGP7mhEBOe0MMxIDW Jsf5UgF/9D65aVMpzkwTjOq8WLBP16HMG7AORDmAhzZHPW5YEFUdGOoJoodz0wIq smen76a5K61eL0MPKhnvByZyc4Oi+C7UQSSS3rcbywyN7Qhjqr7OBaktBBiPGq/g Cb5BR21aeRZ8x+LbuW41Z7iwQW5JqKGrmXxO6sGtC4dje8XOBoLX/ffysUCwiu5f ZEl3wAHEKNZKMEVbew49eY8sKBQ3yUGJSjoJVnH2Z5okYjMsJNAtPGVfBfIOHH+4 hlyN2qphT7XJAA== -----END CERTIFICATE-----Generated at Tue Dec 16 17:47:16 2025 by rpki-client