This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft File: g0jafL6MpBhlvaGgguAMtcJYh68.mft (raw, json) Hash identifier: IOd3oBAG5wW1IQjQXRt0aeEFIvxKGifp+kmZnCsd0yI= Subject key identifier: 0F:F0:6E:2E:D8:B4:12:6C:16:65:61:D7:7F:4D:2E:C2:3E:60:CE:EA Authority key identifier: 83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF Certificate issuer: /CN=8348da7cbe8ca41865bda1a082e00cb5c25887af Certificate serial: 019B3B6B4D7E40A2B47850DA637F6A30006D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 11:00:46 +0000 Manifest this update: Sat 20 Dec 2025 11:00:46 +0000 Manifest next update: Sun 21 Dec 2025 11:00:46 +0000 Files and hashes: 1: g0jafL6MpBhlvaGgguAMtcJYh68.crl (hash: +W4T6xlsJNK6V49jDhSUmJbpzF0tfOb3Cb8X5ygXGxI=) 2: tiFC6JqksrztinNgeHjMezLIyQo.roa (hash: AMO7U+NdmFNyNa76WinXG21mQKY3WubeaQslsZeF+HY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:4d:7e:40:a2:b4:78:50:da:63:7f:6a:30:00:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8348da7cbe8ca41865bda1a082e00cb5c25887af Validity Not Before: Dec 20 11:00:46 2025 GMT Not After : Dec 21 11:00:46 2025 GMT Subject: CN=0ff06e2ed8b4126c166561d77f4d2ec23e60ceea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bc:52:c8:74:16:be:83:27:76:85:a5:06:fa: 5c:0a:bd:cf:55:00:da:20:9a:75:32:3d:40:67:95: a6:be:f6:69:dc:24:ad:a9:34:96:4b:1b:9a:81:0d: e7:39:db:d6:ee:7e:bd:f4:fd:46:dd:f4:db:68:63: c5:24:d1:24:7a:41:a7:18:33:96:56:21:ed:8a:d7: cc:8b:e3:3f:09:48:b0:5f:bd:07:69:cf:4e:07:67: ca:fb:e8:6f:0e:86:c9:67:30:b9:9f:89:0a:c5:a7: 00:e2:0b:cb:e8:dc:ca:70:f8:f6:34:2a:98:91:54: 7e:45:d4:93:2f:35:2d:81:c1:06:ce:f7:33:7e:73: 42:71:65:57:ec:87:33:9d:86:46:89:46:79:d8:be: af:8f:85:d8:d4:cd:05:ba:39:2d:c8:0d:80:fd:cf: 11:c7:cf:d5:fd:b6:64:cf:fe:8c:95:72:06:0f:f4: 0e:da:3d:25:bb:6c:8d:ef:20:9e:1d:38:6c:e1:33: ff:18:75:9d:2f:bd:d6:27:4a:50:f2:43:41:1d:2d: 76:90:92:2b:76:e8:10:e1:76:6f:3a:a7:5e:1a:0f: 3a:7b:04:e0:9b:79:eb:6f:7e:46:92:a9:f6:e8:f3: 48:fe:74:b9:c5:e5:8b:ee:70:b3:d0:29:4f:9c:53: 78:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F0:6E:2E:D8:B4:12:6C:16:65:61:D7:7F:4D:2E:C2:3E:60:CE:EA X509v3 Authority Key Identifier: keyid:83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:88:da:c4:49:42:11:94:67:d5:2e:50:49:a0:6f:f5:25:78: a4:3b:28:41:79:2e:25:aa:92:0e:7f:1f:85:77:06:f6:15:88: fd:56:df:26:8b:2c:88:52:7e:e8:bb:fb:38:7b:1d:2f:f7:72: b1:2d:54:d5:05:3c:fa:a5:50:00:f0:97:32:0a:5f:44:d9:e0: ed:38:91:a5:2c:76:9b:58:ca:f8:98:ad:d7:eb:8e:2c:cd:a1: a8:5e:c8:45:ab:73:9b:41:14:84:73:c2:a7:bf:3a:61:3f:91: f7:c1:97:a5:c9:84:8b:c3:e7:70:b6:fe:66:72:88:ee:08:a9: dd:93:51:12:68:e7:6c:8b:84:4c:e9:82:94:38:32:7d:4e:1d: f4:96:96:2f:84:6f:ec:42:b9:a2:a9:4b:3f:2b:39:40:0a:6f: 0b:f8:9a:53:be:2d:b3:5c:53:dc:17:b9:c1:be:81:8c:3a:85: e5:ee:72:ce:e1:76:89:43:58:87:5f:56:10:a4:9e:dc:d1:94: 13:d2:89:3e:da:1d:93:99:01:d4:fc:ab:04:70:64:d8:57:1d: 92:e0:46:56:fc:2e:a6:c7:15:2d:fe:f5:02:0d:91:15:8b:6a: 55:d8:37:93:36:3c:cc:5d:66:93:d5:e9:d3:c7:3d:20:77:df: f4:e5:d6:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a01+QKK0eFDaY39qMABtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNDhkYTdjYmU4Y2E0MTg2NWJkYTFhMDgyZTAwY2I1YzI1 ODg3YWYwHhcNMjUxMjIwMTEwMDQ2WhcNMjUxMjIxMTEwMDQ2WjAzMTEwLwYDVQQD EygwZmYwNmUyZWQ4YjQxMjZjMTY2NTYxZDc3ZjRkMmVjMjNlNjBjZWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbxSyHQWvoMndoWlBvpcCr3PVQDa IJp1Mj1AZ5WmvvZp3CStqTSWSxuagQ3nOdvW7n699P1G3fTbaGPFJNEkekGnGDOW ViHtitfMi+M/CUiwX70Hac9OB2fK++hvDobJZzC5n4kKxacA4gvL6NzKcPj2NCqY kVR+RdSTLzUtgcEGzvczfnNCcWVX7IcznYZGiUZ52L6vj4XY1M0FujktyA2A/c8R x8/V/bZkz/6MlXIGD/QO2j0lu2yN7yCeHThs4TP/GHWdL73WJ0pQ8kNBHS12kJIr dugQ4XZvOqdeGg86ewTgm3nrb35Gkqn26PNI/nS5xeWL7nCz0ClPnFN43wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/wbi7YtBJsFmVh139NLsI+YM7qMB8GA1UdIwQY MBaAFINI2ny+jKQYZb2hoILgDLXCWIevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzBqYWZMNk1wQmhsdmFHZ2d1QU10Y0pZaDY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85M2RhM2EtODdkNS00NDMzLTlmMzgt YTI5NjA5MmJlMTUzLzEvZzBqYWZMNk1wQmhsdmFHZ2d1QU10Y0pZaDY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS85M2RhM2EtODdkNS00NDMzLTlmMzgtYTI5NjA5MmJlMTUz LzEvZzBqYWZMNk1wQmhsdmFHZ2d1QU10Y0pZaDY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4jaxElC EZRn1S5QSaBv9SV4pDsoQXkuJaqSDn8fhXcG9hWI/VbfJossiFJ+6Lv7OHsdL/dy sS1U1QU8+qVQAPCXMgpfRNng7TiRpSx2m1jK+Jit1+uOLM2hqF7IRatzm0EUhHPC p786YT+R98GXpcmEi8PncLb+ZnKI7gip3ZNREmjnbIuETOmClDgyfU4d9JaWL4Rv 7EK5oqlLPys5QApvC/iaU74ts1xT3Be5wb6BjDqF5e5yzuF2iUNYh19WEKSe3NGU E9KJPtodk5kB1PyrBHBk2FcdkuBGVvwupscVLf71Ag2RFYtqVdg3kzY8zF1mk9Xp 08c9IHff9OXWgQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:11:20 2025 by rpki-client