This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft File: g-uiXEochs51okt254VYyS-KA3I.mft (raw, json) Hash identifier: TluNHODyNq6Cabpu4sApnzLC3RW00QIj+MjeA4/MjYI= Subject key identifier: A9:27:5E:8C:C6:5C:2B:31:B5:11:FE:E4:AA:8E:91:9E:ED:21:63:73 Authority key identifier: 83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72 Certificate issuer: /CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372 Certificate serial: 019B3757E8A427D94A35A380F531161E246A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft Manifest number: 0A9F Signing time: Fri 19 Dec 2025 16:01:06 +0000 Manifest this update: Fri 19 Dec 2025 16:01:06 +0000 Manifest next update: Sat 20 Dec 2025 16:01:06 +0000 Files and hashes: 1: aQM2rPZRgKrN-7qAHXUxMvpLO9s.roa (hash: 4EzmrUgObdb+dIaJZNcvbs9ezqSEEasVfq7N+SyDkGw=) 2: g-uiXEochs51okt254VYyS-KA3I.crl (hash: OOYNAwGZX/vAQTs4yaNNDd2VmaVCQaLwfV17lsx9IAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:e8:a4:27:d9:4a:35:a3:80:f5:31:16:1e:24:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372 Validity Not Before: Dec 19 16:01:06 2025 GMT Not After : Dec 20 16:01:06 2025 GMT Subject: CN=a9275e8cc65c2b31b511fee4aa8e919eed216373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c1:06:ec:b3:b2:fb:46:60:cd:40:13:99:45: 23:3f:62:27:9b:12:29:22:f3:34:78:59:0d:6c:62: bc:11:10:79:da:ee:80:32:f7:b4:79:60:5e:02:4b: 27:2d:09:69:bf:c2:cc:44:08:dd:6b:a1:8a:46:a1: 8f:aa:bc:07:51:46:47:06:b6:1a:22:d6:c1:3b:fe: 26:78:ec:c6:39:71:87:24:7f:d5:a5:0b:7a:a0:52: a2:82:f8:95:8b:2e:7d:5a:a2:7f:d2:d3:a9:87:db: 45:af:2c:1e:35:e7:59:c1:58:e5:25:b0:4a:95:a9: 95:93:37:44:29:1e:e2:e5:fa:81:39:62:94:31:05: dc:00:2b:e7:69:1e:cd:2d:4b:12:e7:f3:6b:5c:81: 55:2b:f9:1a:c7:29:3b:d4:47:a6:80:7e:77:60:76: e2:bc:46:18:fa:b4:28:df:2d:9a:90:0c:23:bf:ab: c0:9d:fd:69:eb:da:03:cf:fb:88:21:c6:ed:c7:06: 38:02:ce:78:46:71:f1:bc:6b:18:b4:5e:ad:0d:58: 57:81:11:81:3b:8b:92:29:f9:eb:01:4c:48:6b:3f: 3b:85:11:0b:21:8d:cc:7f:e0:c6:51:0a:55:cf:fa: 22:71:77:da:fd:b4:4d:de:70:66:fb:83:42:c2:cc: 0d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:27:5E:8C:C6:5C:2B:31:B5:11:FE:E4:AA:8E:91:9E:ED:21:63:73 X509v3 Authority Key Identifier: keyid:83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2b:3e:a5:e9:15:ce:18:d5:5f:f8:2b:ad:f8:ee:1a:a1:f8: c5:8c:9c:ee:a7:15:7b:ff:56:66:98:2b:3b:8d:b3:43:19:de: d3:c3:07:8e:c3:8a:a9:e1:ea:cc:2b:23:80:6f:03:f4:be:73: 06:b2:3e:dd:8f:90:37:c8:45:85:98:8d:10:9f:7e:8b:a3:24: fc:6f:95:9f:61:32:5c:da:d8:ca:ef:e8:ed:27:2c:ed:0f:e9: 65:a8:ef:8a:c7:69:1e:3b:4b:ae:8d:20:ef:9f:0b:68:99:f2: 32:b4:e8:20:77:5a:82:ee:83:29:21:cc:a9:85:8a:62:13:e1: e4:b7:f6:71:ea:5b:9a:a9:d4:0b:13:de:34:49:ef:ff:6e:a1: df:37:41:d6:6f:19:cf:53:ac:99:98:d5:62:76:f8:d2:9e:23: a8:7d:4a:3b:e0:ce:62:02:25:77:e6:5f:ad:b0:ca:46:4a:0c: c6:93:26:21:df:99:22:c3:9b:9e:2c:fa:71:d6:6a:e2:95:c2: d1:df:95:2e:ff:8b:15:28:95:41:54:7c:7b:42:38:04:df:a3: ec:b3:4a:64:b4:57:d4:66:36:7b:10:62:19:44:19:83:0a:a0: 86:ee:55:47:4e:f3:18:5e:79:c9:7f:69:7d:37:3a:4e:18:bc: 52:df:67:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V+ikJ9lKNaOA9TEWHiRqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZWJhMjVjNGExYzg2Y2U3NWEyNGI3NmU3ODU1OGM5MmY4 YTAzNzIwHhcNMjUxMjE5MTYwMTA2WhcNMjUxMjIwMTYwMTA2WjAzMTEwLwYDVQQD EyhhOTI3NWU4Y2M2NWMyYjMxYjUxMWZlZTRhYThlOTE5ZWVkMjE2MzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncEG7LOy+0ZgzUATmUUjP2InmxIp IvM0eFkNbGK8ERB52u6AMve0eWBeAksnLQlpv8LMRAjda6GKRqGPqrwHUUZHBrYa ItbBO/4meOzGOXGHJH/VpQt6oFKigviViy59WqJ/0tOph9tFryweNedZwVjlJbBK lamVkzdEKR7i5fqBOWKUMQXcACvnaR7NLUsS5/NrXIFVK/kaxyk71EemgH53YHbi vEYY+rQo3y2akAwjv6vAnf1p69oDz/uIIcbtxwY4As54RnHxvGsYtF6tDVhXgRGB O4uSKfnrAUxIaz87hRELIY3Mf+DGUQpVz/oicXfa/bRN3nBm+4NCwswNYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKknXozGXCsxtRH+5KqOkZ7tIWNzMB8GA1UdIwQY MBaAFIProlxKHIbOdaJLdueFWMkvigNyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy11aVhFb2NoczUxb2t0MjU0Vll5Uy1LQTNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jNTYxMmQtZTgxYi00M2JlLWFlN2Mt NTc3ZmFmODU1Mzk5LzEvZy11aVhFb2NoczUxb2t0MjU0Vll5Uy1LQTNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9jNTYxMmQtZTgxYi00M2JlLWFlN2MtNTc3ZmFmODU1Mzk5 LzEvZy11aVhFb2NoczUxb2t0MjU0Vll5Uy1LQTNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjis+pekV zhjVX/grrfjuGqH4xYyc7qcVe/9WZpgrO42zQxne08MHjsOKqeHqzCsjgG8D9L5z BrI+3Y+QN8hFhZiNEJ9+i6Mk/G+Vn2EyXNrYyu/o7Scs7Q/pZajvisdpHjtLro0g 758LaJnyMrToIHdagu6DKSHMqYWKYhPh5Lf2cepbmqnUCxPeNEnv/26h3zdB1m8Z z1OsmZjVYnb40p4jqH1KO+DOYgIld+ZfrbDKRkoMxpMmId+ZIsObniz6cdZq4pXC 0d+VLv+LFSiVQVR8e0I4BN+j7LNKZLRX1GY2exBiGUQZgwqghu5VR07zGF55yX9p fTc6Thi8Ut9n0g== -----END CERTIFICATE-----Generated at Sat Dec 20 01:13:51 2025 by rpki-client