This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft File: G82c0xYDmcHjyAzwdIZ6cp991Pk.mft (raw, json) Hash identifier: XVuoa3dorH7pWQ7ZjHnxZwIzYA61/hB+96KwwwimYrY= Subject key identifier: A0:F5:B3:FF:02:01:69:9D:5C:2D:D0:76:45:4F:47:0F:73:84:1E:60 Authority key identifier: 1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9 Certificate issuer: /CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9 Certificate serial: 019B432551761A5B892BF47D4F39BD0407B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 23:01:17 +0000 Manifest this update: Sun 21 Dec 2025 23:01:17 +0000 Manifest next update: Mon 22 Dec 2025 23:01:17 +0000 Files and hashes: 1: 65jp3a6f2gh4Tkpte2rBeESresA.roa (hash: 07jq7hxGRgJkHsgPxiO4p+naJnzzp9QCQTCf5Ueq5Sc=) 2: G82c0xYDmcHjyAzwdIZ6cp991Pk.crl (hash: Mx/PXT4Iaf+j5tzGS2oMg+YoY6wz/cEqfc3sv/A2oGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:51:76:1a:5b:89:2b:f4:7d:4f:39:bd:04:07:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9 Validity Not Before: Dec 21 23:01:17 2025 GMT Not After : Dec 22 23:01:17 2025 GMT Subject: CN=a0f5b3ff0201699d5c2dd076454f470f73841e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:66:b5:dc:2e:05:5f:95:e1:6c:b1:df:47: 25:cb:3b:2b:bf:c5:c6:54:fe:77:e7:5c:a3:14:44: 63:19:35:64:40:13:9e:ac:01:a9:8b:16:aa:bb:c3: d4:b6:8a:39:a0:bb:d8:56:b6:6a:ab:92:22:06:42: aa:3a:84:4a:8f:fe:de:92:95:e0:35:88:6b:62:ee: 8e:5a:71:6a:5e:73:84:d5:e8:3e:ef:65:f1:5e:1a: 32:6b:e9:ba:f2:d6:fc:d4:e0:e0:09:ec:99:ef:59: 5f:55:ce:ab:57:69:ae:c3:31:9d:e8:33:cd:22:c2: 06:1e:e8:ca:a6:3a:da:41:4c:1f:98:23:0e:3c:63: 3c:6c:25:a9:95:b3:f0:c4:c1:82:09:df:1b:3d:14: 4a:ca:e2:78:e6:8c:6a:c5:a2:fa:cc:dc:d1:40:bb: 75:57:4b:e7:11:26:63:55:98:25:3b:31:fc:84:00: a5:76:39:46:9c:66:d1:c6:47:c8:8c:ce:f4:7b:7d: 25:6f:28:ed:a4:db:c7:f4:16:e8:a3:62:cc:19:2b: 15:90:c1:60:de:85:e3:32:00:06:54:56:af:90:13: 2f:f6:26:f6:08:b2:30:e4:3d:59:79:bb:dc:75:32: 62:16:bc:d5:65:9b:08:45:ed:f9:dd:44:4c:3e:81: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F5:B3:FF:02:01:69:9D:5C:2D:D0:76:45:4F:47:0F:73:84:1E:60 X509v3 Authority Key Identifier: keyid:1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:4f:75:68:5c:3e:48:c1:b1:aa:c2:29:52:74:79:a2:ed:a4: 4a:bd:d8:21:86:b2:12:bf:39:04:1c:63:dd:f7:f8:46:d0:1c: 05:f1:9c:62:f5:6b:a2:ed:89:73:cc:c2:66:01:27:07:e5:ed: bb:82:86:9a:7d:05:f9:97:e2:bf:66:41:48:0f:7d:b0:57:b9: 46:b8:09:e3:f2:e0:6e:3b:f7:05:bf:a3:3b:b4:0c:09:3d:69: de:61:c2:48:03:1a:00:58:4f:84:a6:6b:19:23:83:7e:73:36: 0f:a6:4d:4b:e6:88:f9:5a:36:2a:4c:91:39:eb:f0:0e:aa:f1: ee:a5:03:9e:14:e6:db:f9:f9:2c:7d:25:46:84:6b:8b:01:08: 2e:15:54:27:89:57:a7:13:b2:78:9a:bd:88:65:a4:ac:2d:ca: e2:06:20:d8:19:54:40:cd:36:19:83:c8:04:ad:9e:3b:5f:f7: fd:27:93:c5:74:10:f5:a0:41:80:c0:98:c2:76:00:57:fd:6a: 42:1d:d7:37:d2:76:c1:7f:4d:f5:b5:74:3a:b9:71:fa:9b:bb: ba:31:b4:d1:3f:b1:56:0b:5b:ec:6e:c3:9b:b1:90:93:51:79: c0:0b:62:c7:1c:8a:f4:4d:95:ca:e3:38:79:e8:ab:bb:59:92: d5:a3:26:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJVF2GluJK/R9Tzm9BAe2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiY2Q5Y2QzMTYwMzk5YzFlM2M4MGNmMDc0ODY3YTcyOWY3 ZGQ0ZjkwHhcNMjUxMjIxMjMwMTE3WhcNMjUxMjIyMjMwMTE3WjAzMTEwLwYDVQQD EyhhMGY1YjNmZjAyMDE2OTlkNWMyZGQwNzY0NTRmNDcwZjczODQxZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtFmtdwuBV+V4Wyx30clyzsrv8XG VP5351yjFERjGTVkQBOerAGpixaqu8PUtoo5oLvYVrZqq5IiBkKqOoRKj/7ekpXg NYhrYu6OWnFqXnOE1eg+72XxXhoya+m68tb81ODgCeyZ71lfVc6rV2muwzGd6DPN IsIGHujKpjraQUwfmCMOPGM8bCWplbPwxMGCCd8bPRRKyuJ45oxqxaL6zNzRQLt1 V0vnESZjVZglOzH8hACldjlGnGbRxkfIjM70e30lbyjtpNvH9Bboo2LMGSsVkMFg 3oXjMgAGVFavkBMv9ib2CLIw5D1ZebvcdTJiFrzVZZsIRe353URMPoH6qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKD1s/8CAWmdXC3QdkVPRw9zhB5gMB8GA1UdIwQY MBaAFBvNnNMWA5nB48gM8HSGenKffdT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzgyYzB4WURtY0hqeUF6d2RJWjZjcDk5MVBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS80Mjc0NTYtNDk1Ny00ZDMzLTljNjQt MTZmNDA1N2ZhYzI2LzEvRzgyYzB4WURtY0hqeUF6d2RJWjZjcDk5MVBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS80Mjc0NTYtNDk1Ny00ZDMzLTljNjQtMTZmNDA1N2ZhYzI2 LzEvRzgyYzB4WURtY0hqeUF6d2RJWjZjcDk5MVBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM091aFw+ SMGxqsIpUnR5ou2kSr3YIYayEr85BBxj3ff4RtAcBfGcYvVrou2Jc8zCZgEnB+Xt u4KGmn0F+Zfiv2ZBSA99sFe5RrgJ4/Lgbjv3Bb+jO7QMCT1p3mHCSAMaAFhPhKZr GSODfnM2D6ZNS+aI+Vo2KkyROevwDqrx7qUDnhTm2/n5LH0lRoRriwEILhVUJ4lX pxOyeJq9iGWkrC3K4gYg2BlUQM02GYPIBK2eO1/3/SeTxXQQ9aBBgMCYwnYAV/1q Qh3XN9J2wX9N9bV0Orlx+pu7ujG00T+xVgtb7G7Dm7GQk1F5wAtixxyK9E2VyuM4 eeiru1mS1aMmUg== -----END CERTIFICATE-----Generated at Mon Dec 22 04:00:30 2025 by rpki-client