This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft File: g2gKwOhPwS_HIje4rtjl7YX43r0.mft (raw, json) Hash identifier: Tpa4xKzrbVsUJs6bh0EPErpBLAzXsEJPNPcbRCQPi4A= Subject key identifier: 56:89:4C:A8:47:A1:AF:77:58:75:1C:26:3F:B1:32:58:36:AE:84:2C Authority key identifier: 83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD Certificate issuer: /CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd Certificate serial: 019B21758CAB409069E59F5F58DFB1B44055 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft Manifest number: 170B Signing time: Mon 15 Dec 2025 10:01:50 +0000 Manifest this update: Mon 15 Dec 2025 10:01:50 +0000 Manifest next update: Tue 16 Dec 2025 10:01:50 +0000 Files and hashes: 1: 8FMLT1AmbwVl9zcvS32Q9od9DEQ.roa (hash: yisuPZkgdD2MViPM9oU55ZAf5YPozXvdCbB7qiW4Gcw=) 2: g2gKwOhPwS_HIje4rtjl7YX43r0.crl (hash: 8q+5noIf7ZXONth1aPLJTW6vHGbEask3EJXt49I3jrk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:8c:ab:40:90:69:e5:9f:5f:58:df:b1:b4:40:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd Validity Not Before: Dec 15 10:01:50 2025 GMT Not After : Dec 16 10:01:50 2025 GMT Subject: CN=56894ca847a1af7758751c263fb1325836ae842c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:fc:00:65:43:6f:9b:7c:8b:4d:da:a5:ed: 40:f1:7a:29:36:0b:3d:00:f7:d0:ab:17:b4:1c:95: 4a:ea:ca:64:82:35:af:04:2c:c5:88:bc:73:c9:9f: 56:b2:2f:60:44:2e:5f:b1:8d:74:2a:a4:5c:3b:5a: bb:46:a9:f8:56:dc:c3:7c:25:33:db:1c:e1:a9:ff: a5:3b:a7:7d:d7:37:af:99:e4:a0:c7:34:df:e4:7c: 65:69:7a:42:0c:5f:79:0c:03:99:a5:4b:c4:6a:c3: db:0d:ee:89:ce:2a:fa:ff:15:fa:35:0e:b7:88:5d: ba:6d:5b:45:28:5f:1a:8f:06:c5:25:4a:b6:4a:ac: 7b:68:f6:52:03:d1:05:85:41:e4:6f:12:30:37:72: a5:af:e7:e5:2e:d5:de:89:8b:dd:d7:27:93:87:87: 34:0e:19:40:99:df:74:2a:58:cb:90:50:ac:73:1b: 7a:52:c2:5e:b2:d6:df:c0:79:68:56:5a:c2:f2:45: 03:2b:e4:01:4a:0f:c0:c1:6e:a0:64:b2:c5:17:01: 92:8c:57:a8:ec:3e:80:a3:6a:63:6d:38:70:81:0b: d5:9b:7c:7f:30:c3:2f:1c:71:60:c1:9c:8b:78:a0: 6b:c7:58:90:eb:06:4c:36:1f:dc:f3:e3:82:79:fa: 95:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:89:4C:A8:47:A1:AF:77:58:75:1C:26:3F:B1:32:58:36:AE:84:2C X509v3 Authority Key Identifier: keyid:83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d2:33:e7:f2:5e:d5:5a:a3:03:b1:9f:13:80:7b:e4:d0:82: 36:1d:16:86:52:2b:7a:69:13:95:a3:b4:dc:cc:df:90:88:67: 08:1f:f5:f6:67:9b:10:78:4f:f3:47:8a:d1:07:38:3d:d2:5e: 6c:a8:97:63:6a:25:15:f9:94:ae:7c:43:54:00:34:6a:e8:6c: 95:45:71:e2:d7:94:8c:c7:34:e0:48:f1:d7:9a:74:db:be:de: 6b:74:98:b2:3b:dd:4d:df:ab:6b:2b:7c:ce:20:42:eb:79:ea: c1:36:3e:3c:1b:03:16:6a:e5:e5:71:bc:18:b4:2b:07:11:01: de:d6:12:ee:dc:4b:ca:89:57:25:c9:97:1e:08:05:ed:15:08: 6f:45:0c:e0:e1:ba:ff:07:62:89:81:47:22:02:0b:f1:42:1e: 5a:3f:cf:c7:2c:8b:4a:a8:19:3e:e8:ea:b1:9c:cc:8a:f5:04: 14:f7:ce:e5:ed:db:ee:6d:d8:cf:cb:8c:3d:94:88:cb:b7:9a: 85:b8:5d:49:74:44:46:a6:ea:2c:f9:f2:84:30:28:9a:ef:dc: 4e:f0:72:81:1c:69:29:57:b4:d1:00:50:c6:e1:53:c3:51:83: 8c:a5:59:4c:6a:41:e0:b9:b1:7d:c6:d7:b2:8d:67:6c:9f:9b: 09:7f:5f:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdYyrQJBp5Z9fWN+xtEBVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjgwYWMwZTg0ZmMxMmZjNzIyMzdiOGFlZDhlNWVkODVm OGRlYmQwHhcNMjUxMjE1MTAwMTUwWhcNMjUxMjE2MTAwMTUwWjAzMTEwLwYDVQQD Eyg1Njg5NGNhODQ3YTFhZjc3NTg3NTFjMjYzZmIxMzI1ODM2YWU4NDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJv8AGVDb5t8i03ape1A8XopNgs9 APfQqxe0HJVK6spkgjWvBCzFiLxzyZ9Wsi9gRC5fsY10KqRcO1q7Rqn4VtzDfCUz 2xzhqf+lO6d91zevmeSgxzTf5HxlaXpCDF95DAOZpUvEasPbDe6Jzir6/xX6NQ63 iF26bVtFKF8ajwbFJUq2Sqx7aPZSA9EFhUHkbxIwN3Klr+flLtXeiYvd1yeTh4c0 DhlAmd90KljLkFCscxt6UsJestbfwHloVlrC8kUDK+QBSg/AwW6gZLLFFwGSjFeo 7D6Ao2pjbThwgQvVm3x/MMMvHHFgwZyLeKBrx1iQ6wZMNh/c8+OCefqVqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaJTKhHoa93WHUcJj+xMlg2roQsMB8GA1UdIwQY MBaAFINoCsDoT8EvxyI3uK7Y5e2F+N69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJnS3dPaFB3U19ISWplNHJ0amw3WVg0M3IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi83ODJmYjItNDhmNS00ZTdjLWEwNjgt ZmZhY2QyOWZkYTNhLzEvZzJnS3dPaFB3U19ISWplNHJ0amw3WVg0M3IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi83ODJmYjItNDhmNS00ZTdjLWEwNjgtZmZhY2QyOWZkYTNh LzEvZzJnS3dPaFB3U19ISWplNHJ0amw3WVg0M3IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9Iz5/Je 1VqjA7GfE4B75NCCNh0WhlIremkTlaO03MzfkIhnCB/19mebEHhP80eK0Qc4PdJe bKiXY2olFfmUrnxDVAA0auhslUVx4teUjMc04Ejx15p0277ea3SYsjvdTd+rayt8 ziBC63nqwTY+PBsDFmrl5XG8GLQrBxEB3tYS7txLyolXJcmXHggF7RUIb0UM4OG6 /wdiiYFHIgIL8UIeWj/PxyyLSqgZPujqsZzMivUEFPfO5e3b7m3Yz8uMPZSIy7ea hbhdSXRERqbqLPnyhDAomu/cTvBygRxpKVe00QBQxuFTw1GDjKVZTGpB4LmxfcbX so1nbJ+bCX9fSw== -----END CERTIFICATE-----Generated at Mon Dec 15 20:01:48 2025 by rpki-client