This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft File: g0VE4aPiKMTTZH9iqdjJas6eLDE.mft (raw, json) Hash identifier: +GZ7zqlJ4ukTlcLRLjhBwhN0GD4kDPcQtdHFPtRHXBM= Subject key identifier: ED:57:95:63:ED:DE:62:F6:1A:D8:76:01:52:BD:74:9E:7D:A3:84:E2 Authority key identifier: 83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31 Certificate issuer: /CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31 Certificate serial: 019B59E3CB6A7A3D06170E8570B1C741CDB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft Manifest number: 0132 Signing time: Fri 26 Dec 2025 09:00:59 +0000 Manifest this update: Fri 26 Dec 2025 09:00:59 +0000 Manifest next update: Sat 27 Dec 2025 09:00:59 +0000 Files and hashes: 1: dIRpTlRdZwkzOjzMpDEo5Bfz7bk.roa (hash: C+FNl7OuHMU4htW0AknPyHxKy9e5ZPEt8r7b2jyiJx8=) 2: g0VE4aPiKMTTZH9iqdjJas6eLDE.crl (hash: TmFFuCaYO6rOTASy+ToBTAA6nSPJ1RJe0UCMio/0hZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:cb:6a:7a:3d:06:17:0e:85:70:b1:c7:41:cd:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31 Validity Not Before: Dec 26 09:00:59 2025 GMT Not After : Dec 27 09:00:59 2025 GMT Subject: CN=ed579563edde62f61ad8760152bd749e7da384e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c1:2f:ed:f5:73:5a:a3:f1:0a:41:49:24:80: 15:48:36:f5:2a:b1:d5:87:f3:74:67:08:ad:3a:32: f8:35:40:22:17:12:be:41:0b:6d:26:7a:be:66:48: bb:4b:87:fc:0e:ad:ac:7f:fc:14:61:18:1f:e2:88: 63:cd:ad:94:51:8d:9d:77:7a:a9:dc:74:a1:94:52: 1f:ec:8f:09:b7:6f:e6:54:d1:c8:ca:bf:99:c4:af: 69:58:12:54:f3:8b:45:3a:da:64:56:2a:3e:1d:32: 5e:9e:16:be:3a:8c:b4:03:f3:1f:f3:52:98:af:d7: 53:04:d7:28:0a:67:b5:38:49:55:a6:8f:30:d4:28: de:ee:31:8c:96:ef:d9:41:ee:bd:f5:bb:fc:eb:75: 43:fd:c6:ee:be:5a:a2:62:a5:dc:2a:c0:d8:af:e3: d4:5f:1c:f4:06:3d:d8:87:54:13:db:bc:c7:6e:b2: e2:d6:e2:83:03:5c:62:03:fb:43:35:72:78:24:3c: b5:01:6e:bd:33:bd:2e:a6:76:c5:d9:8f:2a:f4:01: 60:3f:97:2e:58:18:d4:a9:40:e1:1e:36:87:fe:eb: 24:5e:b8:cb:1d:07:12:69:19:f4:fb:ed:24:9a:44: b6:1a:68:9d:8a:4d:3f:2b:9b:12:e6:b5:db:b7:3d: 3a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:57:95:63:ED:DE:62:F6:1A:D8:76:01:52:BD:74:9E:7D:A3:84:E2 X509v3 Authority Key Identifier: keyid:83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:50:0b:ac:dd:ec:9e:81:fa:f2:b3:d3:65:f2:4b:5a:b7:8f: ec:86:87:7f:bb:0b:74:cd:b7:cf:a7:76:f2:ab:6e:3b:cf:1f: d7:0b:92:87:57:fc:a8:f2:c3:b4:bc:54:71:a3:b1:4b:61:04: d1:b6:fb:18:99:e7:86:db:1c:cc:44:2c:df:df:3c:a9:81:3d: 9f:25:53:c5:08:d1:24:60:b9:f6:09:44:42:9c:fd:93:dd:06: d2:98:7f:68:d1:c7:eb:ef:0e:b2:96:92:c0:55:de:7e:e8:e6: 99:47:34:d2:df:3e:7f:9b:5e:9d:68:91:d0:e5:84:2b:bb:22: b3:5c:c6:c7:02:bb:ab:ff:93:23:ec:4f:c6:f7:57:0a:98:89: a8:6b:38:dc:2a:c2:17:01:7c:4c:5c:c6:59:62:c4:87:bf:9b: 2a:31:b2:14:03:14:d4:54:47:1d:36:f8:1b:0a:fb:4a:3c:1d: 99:46:6d:28:9c:0d:d2:93:5b:2f:92:ed:86:08:28:07:39:13: 84:86:b3:93:25:34:1a:96:2b:23:60:d4:c4:f5:7b:d9:d2:a0: f8:3c:4f:eb:0b:70:ed:bf:4f:95:3f:1f:94:23:94:34:d9:4b: 50:10:d3:c0:5b:78:57:7c:15:c7:4f:06:2c:55:43:37:7a:2d: 97:e7:e3:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ48tqej0GFw6FcLHHQc21MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNDU0NGUxYTNlMjI4YzRkMzY0N2Y2MmE5ZDhjOTZhY2U5 ZTJjMzEwHhcNMjUxMjI2MDkwMDU5WhcNMjUxMjI3MDkwMDU5WjAzMTEwLwYDVQQD EyhlZDU3OTU2M2VkZGU2MmY2MWFkODc2MDE1MmJkNzQ5ZTdkYTM4NGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MEv7fVzWqPxCkFJJIAVSDb1KrHV h/N0ZwitOjL4NUAiFxK+QQttJnq+Zki7S4f8Dq2sf/wUYRgf4ohjza2UUY2dd3qp 3HShlFIf7I8Jt2/mVNHIyr+ZxK9pWBJU84tFOtpkVio+HTJenha+Ooy0A/Mf81KY r9dTBNcoCme1OElVpo8w1Cje7jGMlu/ZQe699bv863VD/cbuvlqiYqXcKsDYr+PU Xxz0Bj3Yh1QT27zHbrLi1uKDA1xiA/tDNXJ4JDy1AW69M70upnbF2Y8q9AFgP5cu WBjUqUDhHjaH/uskXrjLHQcSaRn0++0kmkS2Gmidik0/K5sS5rXbtz06eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1XlWPt3mL2Gth2AVK9dJ59o4TiMB8GA1UdIwQY MBaAFINFROGj4ijE02R/YqnYyWrOniwxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzBWRTRhUGlLTVRUWkg5aXFkakphczZlTERFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iMmVhYTgtODk4Yi00ZjMzLWFmYjkt ODkyNjdlNTI4MDA5LzEvZzBWRTRhUGlLTVRUWkg5aXFkakphczZlTERFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9iMmVhYTgtODk4Yi00ZjMzLWFmYjktODkyNjdlNTI4MDA5 LzEvZzBWRTRhUGlLTVRUWkg5aXFkakphczZlTERFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1ALrN3s noH68rPTZfJLWreP7IaHf7sLdM23z6d28qtuO88f1wuSh1f8qPLDtLxUcaOxS2EE 0bb7GJnnhtsczEQs3988qYE9nyVTxQjRJGC59glEQpz9k90G0ph/aNHH6+8OspaS wFXefujmmUc00t8+f5tenWiR0OWEK7sis1zGxwK7q/+TI+xPxvdXCpiJqGs43CrC FwF8TFzGWWLEh7+bKjGyFAMU1FRHHTb4Gwr7SjwdmUZtKJwN0pNbL5LthggoBzkT hIazkyU0GpYrI2DUxPV72dKg+DxP6wtw7b9PlT8flCOUNNlLUBDTwFt4V3wVx08G LFVDN3otl+fjkA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:27 2025 by rpki-client