This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft File: grEuz7IvKdYKPjG3nzYt1gwtTBA.mft (raw, json) Hash identifier: kyTLyVYf+zHOWnHJMLB5223zsRh3dSXiPqYHOV7qAvk= Subject key identifier: F3:68:86:A1:C0:43:70:AF:94:10:4E:72:23:79:33:6E:1D:3F:32:87 Authority key identifier: 82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10 Certificate issuer: /CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10 Certificate serial: 019B18A8FD82D8457FA18FCB9E93A7EAAA19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft Manifest number: 0F0E Signing time: Sat 13 Dec 2025 17:01:26 +0000 Manifest this update: Sat 13 Dec 2025 17:01:26 +0000 Manifest next update: Sun 14 Dec 2025 17:01:26 +0000 Files and hashes: 1: 1-q5t5dbXJQJPAbEiSYfDN9-Kp_0.roa (hash: jh5W+EA/au2yjcrCCgbD+iZSjQ/AqIbIhccnO7LERWE=) 2: grEuz7IvKdYKPjG3nzYt1gwtTBA.crl (hash: Z4KYMCI8moHgilz4aMzQw3Uer/bk+ymwiRO9UEdIFqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:fd:82:d8:45:7f:a1:8f:cb:9e:93:a7:ea:aa:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10 Validity Not Before: Dec 13 17:01:26 2025 GMT Not After : Dec 14 17:01:26 2025 GMT Subject: CN=f36886a1c04370af94104e722379336e1d3f3287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cb:47:eb:20:ee:42:81:e0:e7:b2:1b:aa:71: 88:0b:cb:80:06:3a:a8:39:7b:ff:58:e6:ce:0f:06: 5a:60:a9:bb:fa:f3:60:a9:3d:15:7d:41:2e:27:c5: 99:5d:84:fd:1e:c1:36:cc:c5:58:f4:4b:bb:0c:88: 6b:31:15:69:9c:c6:d1:e7:74:91:5a:24:0e:2f:96: d9:f6:69:c1:ea:d3:77:aa:5f:97:21:65:7e:70:66: 0e:3a:d2:5a:08:0e:0f:e5:67:1d:3e:88:08:44:16: b6:c5:82:b5:20:f9:2d:31:45:77:fa:ea:7a:1b:c7: 3a:8f:33:e7:3a:13:90:47:5d:92:18:66:aa:10:54: cf:25:b2:dc:07:32:0c:bb:3e:9c:d4:58:05:84:ec: 98:59:78:74:9f:4d:c6:5a:d3:69:de:4b:da:0d:70: ed:58:17:49:e3:af:e6:af:d9:fe:90:de:71:61:78: 02:f2:ab:e8:ed:d5:08:9d:4e:01:39:eb:93:d5:7f: 2d:20:f9:a2:c5:cc:d0:12:ec:0a:94:39:ef:88:a6: a4:93:a8:c1:58:b6:72:95:05:3a:2e:38:7a:49:99: 23:3d:75:29:90:59:52:66:e5:4f:19:d8:0b:d7:e9: 4d:67:fd:a8:fe:5a:84:19:4e:45:ba:99:c2:d0:99: ff:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:68:86:A1:C0:43:70:AF:94:10:4E:72:23:79:33:6E:1D:3F:32:87 X509v3 Authority Key Identifier: keyid:82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:8b:1a:96:54:47:7a:66:97:57:ca:a6:e6:94:b7:9e:54:6a: ad:ed:10:e2:67:1b:54:76:14:e2:cc:8c:79:12:9a:d9:31:2c: 68:12:c6:8e:f1:a3:1e:9f:79:20:ca:be:25:56:0e:1a:87:8e: ea:e5:da:7b:a5:1a:32:4d:87:c0:b5:02:6d:2b:38:0d:8a:d5: 5b:76:e3:85:90:23:16:a8:e7:e7:25:d3:d9:3f:60:6d:8c:52: a1:bd:ac:e2:6c:bc:62:20:5f:fb:7d:15:35:f8:a0:47:8f:5d: 2a:b0:46:06:d9:fc:09:1e:5b:29:55:3d:09:bb:c1:47:f2:8b: 30:86:76:80:32:f3:12:16:17:e9:fb:4a:cf:09:b6:c1:df:66: a5:de:6b:33:70:e6:ab:ea:eb:0a:3e:63:cf:d7:3a:27:0a:01: 09:73:cf:fa:b4:0f:2f:49:cb:dd:1d:19:20:b5:4e:ed:74:87: 01:74:66:7b:6d:2b:94:ce:eb:e2:f2:1e:b7:af:89:ec:43:d4: 84:0c:de:61:3a:d7:84:06:f5:22:83:8e:42:95:65:17:1e:64: 8e:45:7d:b7:26:9f:d9:e7:5c:7d:2b:d4:9d:e6:32:0e:90:cb: af:f8:84:a3:db:b9:e1:f7:21:da:f8:06:55:b2:60:97:ed:04: ae:5f:b7:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqP2C2EV/oY/LnpOn6qoZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYjEyZWNmYjIyZjI5ZDYwYTNlMzFiNzlmMzYyZGQ2MGMy ZDRjMTAwHhcNMjUxMjEzMTcwMTI2WhcNMjUxMjE0MTcwMTI2WjAzMTEwLwYDVQQD EyhmMzY4ODZhMWMwNDM3MGFmOTQxMDRlNzIyMzc5MzM2ZTFkM2YzMjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnstH6yDuQoHg57IbqnGIC8uABjqo OXv/WObODwZaYKm7+vNgqT0VfUEuJ8WZXYT9HsE2zMVY9Eu7DIhrMRVpnMbR53SR WiQOL5bZ9mnB6tN3ql+XIWV+cGYOOtJaCA4P5WcdPogIRBa2xYK1IPktMUV3+up6 G8c6jzPnOhOQR12SGGaqEFTPJbLcBzIMuz6c1FgFhOyYWXh0n03GWtNp3kvaDXDt WBdJ46/mr9n+kN5xYXgC8qvo7dUInU4BOeuT1X8tIPmixczQEuwKlDnviKakk6jB WLZylQU6Ljh6SZkjPXUpkFlSZuVPGdgL1+lNZ/2o/lqEGU5FupnC0Jn/3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNohqHAQ3CvlBBOciN5M24dPzKHMB8GA1UdIwQY MBaAFIKxLs+yLynWCj4xt582LdYMLUwQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3JFdXo3SXZLZFlLUGpHM256WXQxZ3d0VEJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hNWM3MzgtM2RmNS00ZTAyLWFmMzEt MmIwZWFiM2QzZDM3LzEvZ3JFdXo3SXZLZFlLUGpHM256WXQxZ3d0VEJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9hNWM3MzgtM2RmNS00ZTAyLWFmMzEtMmIwZWFiM2QzZDM3 LzEvZ3JFdXo3SXZLZFlLUGpHM256WXQxZ3d0VEJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIsallRH emaXV8qm5pS3nlRqre0Q4mcbVHYU4syMeRKa2TEsaBLGjvGjHp95IMq+JVYOGoeO 6uXae6UaMk2HwLUCbSs4DYrVW3bjhZAjFqjn5yXT2T9gbYxSob2s4my8YiBf+30V NfigR49dKrBGBtn8CR5bKVU9CbvBR/KLMIZ2gDLzEhYX6ftKzwm2wd9mpd5rM3Dm q+rrCj5jz9c6JwoBCXPP+rQPL0nL3R0ZILVO7XSHAXRme20rlM7r4vIet6+J7EPU hAzeYTrXhAb1IoOOQpVlFx5kjkV9tyaf2edcfSvUneYyDpDLr/iEo9u54fch2vgG VbJgl+0Erl+3sg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:18:19 2025 by rpki-client