This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft File: G82c0xYDmcHjyAzwdIZ6cp991Pk.mft (raw, json) Hash identifier: JGqfnV3VTOMKTtguGoVPMcOi9fPBpHCaeRW7K+TrlSc= Subject key identifier: 88:9A:59:32:71:C0:A5:41:F9:66:BD:B1:BD:D0:74:3B:1F:3A:AD:62 Authority key identifier: 1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9 Certificate issuer: /CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9 Certificate serial: 019B378EC5866BEEF5677DFDB9D5E1F39B39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 17:01:02 +0000 Manifest this update: Fri 19 Dec 2025 17:01:02 +0000 Manifest next update: Sat 20 Dec 2025 17:01:02 +0000 Files and hashes: 1: 65jp3a6f2gh4Tkpte2rBeESresA.roa (hash: 07jq7hxGRgJkHsgPxiO4p+naJnzzp9QCQTCf5Ueq5Sc=) 2: G82c0xYDmcHjyAzwdIZ6cp991Pk.crl (hash: A0tGlgKwkjW6zj2dhE9BpcohqcDbtNoJmDK4V2QN9MI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:c5:86:6b:ee:f5:67:7d:fd:b9:d5:e1:f3:9b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9 Validity Not Before: Dec 19 17:01:02 2025 GMT Not After : Dec 20 17:01:02 2025 GMT Subject: CN=889a593271c0a541f966bdb1bdd0743b1f3aad62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:3b:7f:05:d8:7d:2c:78:ec:26:00:c9:d5: 2b:f0:62:c6:d9:67:6f:ae:80:d1:ef:bc:c1:1f:23: 05:41:d4:a0:f3:0c:8a:95:e0:4e:2a:be:d5:1a:de: 5d:1f:9c:47:94:2e:42:91:ad:5e:f5:94:72:57:14: 10:cb:e3:f3:0f:ff:23:60:68:65:46:22:48:f6:20: cf:5a:79:fa:9d:44:80:24:25:4f:a0:9a:13:d7:57: 93:6c:e9:06:cb:e7:0c:e1:66:0b:bc:ac:ef:a6:40: 3e:30:6a:92:ea:4a:ca:35:8d:74:48:1c:36:a8:bc: 32:63:9e:90:83:1d:26:26:6e:67:49:1a:57:c8:d8: 73:a6:f9:45:b9:b5:23:f6:12:fb:4c:c2:34:b2:7e: 60:0b:39:f9:79:41:ea:93:9f:94:4d:9c:94:57:a1: cb:f7:cd:25:ab:68:5f:67:85:0e:76:9f:bd:b7:79: 64:66:a4:1c:ca:1b:6e:1c:a2:82:13:60:e7:57:fe: 06:cb:48:6f:9e:52:d6:a5:90:cd:5b:48:09:e7:c0: 1a:8c:17:d6:f3:85:06:6e:e8:e9:9a:83:c8:5a:7e: c1:31:88:4b:62:c8:7d:68:66:3e:ab:81:ad:82:00: a3:ac:b2:b0:cc:7a:31:32:37:35:08:57:91:8e:8f: 10:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9A:59:32:71:C0:A5:41:F9:66:BD:B1:BD:D0:74:3B:1F:3A:AD:62 X509v3 Authority Key Identifier: keyid:1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:8a:13:a9:a1:84:e2:ab:7c:74:a9:15:62:21:d9:5b:05:0c: 00:84:61:09:58:ff:4c:d5:ad:d0:00:bd:0f:c1:e3:35:91:5b: d4:ef:42:2b:f2:36:a3:c6:76:ee:ab:d5:2a:36:a5:14:60:8c: 94:66:03:e2:1b:87:0b:b7:7c:37:e8:8a:fa:cc:6c:a0:0d:b0: 90:79:97:13:cc:a7:f4:db:1e:8e:f8:0a:ab:5a:af:dd:f4:69: 97:a4:ba:3e:01:11:32:c6:9b:47:9d:d1:f2:cb:7b:95:42:5e: 78:cf:33:cb:c1:51:d9:e3:d6:0d:90:4b:dd:c9:4b:8f:bb:f0: 1e:c2:6f:25:e9:4c:d3:d7:d9:52:bc:57:f0:c7:95:ab:77:6c: a3:bf:1e:77:89:49:f1:2c:bc:dc:69:72:d4:46:90:ab:a3:0b: 57:d5:0c:b4:3a:5a:83:37:49:37:26:f2:97:10:4b:91:f9:3b: bd:e7:84:7e:58:b3:e6:42:95:88:57:78:f8:b7:db:d9:58:c9: 5c:0b:b5:a1:e3:2d:ec:51:a6:a6:99:2b:4b:1a:79:a8:73:01: 46:66:b8:bc:01:14:44:7e:f3:9d:2d:b6:d1:9a:ae:94:71:67: 23:95:ec:f2:ec:08:63:6a:4d:71:e7:de:e9:06:aa:ca:40:d2: eb:d7:67:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jsWGa+71Z339udXh85s5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiY2Q5Y2QzMTYwMzk5YzFlM2M4MGNmMDc0ODY3YTcyOWY3 ZGQ0ZjkwHhcNMjUxMjE5MTcwMTAyWhcNMjUxMjIwMTcwMTAyWjAzMTEwLwYDVQQD Eyg4ODlhNTkzMjcxYzBhNTQxZjk2NmJkYjFiZGQwNzQzYjFmM2FhZDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SQ7fwXYfSx47CYAydUr8GLG2Wdv roDR77zBHyMFQdSg8wyKleBOKr7VGt5dH5xHlC5Cka1e9ZRyVxQQy+PzD/8jYGhl RiJI9iDPWnn6nUSAJCVPoJoT11eTbOkGy+cM4WYLvKzvpkA+MGqS6krKNY10SBw2 qLwyY56Qgx0mJm5nSRpXyNhzpvlFubUj9hL7TMI0sn5gCzn5eUHqk5+UTZyUV6HL 980lq2hfZ4UOdp+9t3lkZqQcyhtuHKKCE2DnV/4Gy0hvnlLWpZDNW0gJ58AajBfW 84UGbujpmoPIWn7BMYhLYsh9aGY+q4GtggCjrLKwzHoxMjc1CFeRjo8QHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIiaWTJxwKVB+Wa9sb3QdDsfOq1iMB8GA1UdIwQY MBaAFBvNnNMWA5nB48gM8HSGenKffdT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzgyYzB4WURtY0hqeUF6d2RJWjZjcDk5MVBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS80Mjc0NTYtNDk1Ny00ZDMzLTljNjQt MTZmNDA1N2ZhYzI2LzEvRzgyYzB4WURtY0hqeUF6d2RJWjZjcDk5MVBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS80Mjc0NTYtNDk1Ny00ZDMzLTljNjQtMTZmNDA1N2ZhYzI2 LzEvRzgyYzB4WURtY0hqeUF6d2RJWjZjcDk5MVBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjooTqaGE 4qt8dKkVYiHZWwUMAIRhCVj/TNWt0AC9D8HjNZFb1O9CK/I2o8Z27qvVKjalFGCM lGYD4huHC7d8N+iK+sxsoA2wkHmXE8yn9NsejvgKq1qv3fRpl6S6PgERMsabR53R 8st7lUJeeM8zy8FR2ePWDZBL3clLj7vwHsJvJelM09fZUrxX8MeVq3dso78ed4lJ 8Sy83Gly1EaQq6MLV9UMtDpagzdJNybylxBLkfk7veeEfliz5kKViFd4+Lfb2VjJ XAu1oeMt7FGmppkrSxp5qHMBRma4vAEURH7znS220ZqulHFnI5Xs8uwIY2pNcefe 6QaqykDS69dnUw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:55:10 2025 by rpki-client