This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft File: RpG_08_sWhEI8choVHZOK5A9eIg.mft (raw, json) Hash identifier: itnT4vFCsHakoz9Ks1Ocv2TTDHC5a5Dgwl/p744hMsw= Subject key identifier: 3F:B4:F4:94:B7:F9:8D:57:75:6A:39:4E:20:5D:A9:25:28:02:30:11 Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88 Certificate issuer: /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888 Certificate serial: 019B35D710847F2954FB004EE0F5A19925EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 09:00:45 +0000 Manifest this update: Fri 19 Dec 2025 09:00:45 +0000 Manifest next update: Sat 20 Dec 2025 09:00:45 +0000 Files and hashes: 1: 4Fc8DyjVSWCEsU_EUG8kyZV4jp4.roa (hash: f+6PC2+8l4GQP1uSjRq7ZupGlBtpnFIedMNKrq+WMR4=) 2: RpG_08_sWhEI8choVHZOK5A9eIg.crl (hash: L6+ikGnQHDtUrmv9oUn3cG1jQwQKCj88aJ/itl/1tKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:10:84:7f:29:54:fb:00:4e:e0:f5:a1:99:25:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888 Validity Not Before: Dec 19 09:00:45 2025 GMT Not After : Dec 20 09:00:45 2025 GMT Subject: CN=3fb4f494b7f98d57756a394e205da92528023011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:99:b1:79:20:41:62:fc:a4:b4:ca:97:b5: f3:19:27:13:94:05:87:d2:d2:c1:eb:4e:a8:3d:70: 27:d2:16:ee:b3:c5:a8:f0:8c:d7:5d:9b:5a:af:ea: 4e:0b:ae:91:b4:0b:f2:67:d6:26:6c:db:1c:0a:46: 0a:e5:4c:70:c1:fd:45:65:1a:a7:e2:db:4b:0a:86: 06:35:67:85:00:3a:59:40:a3:ad:2e:1d:1d:a7:8f: 7b:d0:76:2d:ba:53:de:4b:c3:99:09:db:4e:a2:7a: 7c:b8:46:38:58:a9:a6:ef:21:bc:cf:2e:81:7e:2c: 47:0a:b2:03:80:da:ca:cc:11:05:06:ec:55:9f:1c: 3b:5c:c4:0a:d0:37:73:82:ec:a1:fe:4e:bb:98:82: 5b:a3:f4:da:04:d6:39:60:1a:5d:28:48:b8:79:1b: ad:87:74:ef:d7:fe:e0:47:42:1c:48:49:0f:a7:98: 0c:f7:1b:c5:aa:28:24:5e:d7:47:4d:0d:c9:d0:f8: 85:ec:94:44:89:57:f4:dc:0a:74:a0:0e:6e:a5:ca: d9:cf:96:64:7b:22:07:f0:98:ec:ff:7c:7c:03:ff: 96:1c:e4:9d:05:41:ae:95:a3:7f:d2:9b:de:77:64: 9e:c3:0d:31:11:02:fa:7f:d7:1d:e4:83:45:45:d1: 81:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B4:F4:94:B7:F9:8D:57:75:6A:39:4E:20:5D:A9:25:28:02:30:11 X509v3 Authority Key Identifier: keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ba:06:b0:58:7b:5e:b6:ee:b5:18:07:13:ac:fb:33:ca:a5: 83:3b:f4:ae:dc:92:de:44:e3:b5:f2:f3:d2:fa:bc:3d:0c:7a: bd:cb:7a:c7:49:6f:9d:4a:8c:08:d8:a5:da:8c:67:23:59:ac: 61:eb:fc:49:85:be:56:e3:7d:39:3e:4e:34:77:01:46:9d:74: bd:02:5b:3e:16:d0:0a:a7:ce:6c:1b:fc:79:51:41:cd:2c:8e: b7:c2:03:b9:0b:aa:d2:8f:39:bb:fd:db:15:c3:54:ac:10:29: 99:67:4b:39:e7:ab:5d:74:43:d7:08:48:e3:bb:6d:97:34:55: 2c:bc:f7:60:3b:6d:6b:1f:d0:e3:15:f4:3a:d3:7f:1d:70:d8: 6b:5b:68:1a:ed:ea:3d:ea:8c:0c:5e:69:fa:7d:db:66:ea:9a: 9c:f0:63:68:09:e6:10:3c:79:db:c3:8d:bf:53:e5:b7:f6:77: 06:55:8e:04:b6:c6:c0:0f:10:dd:07:4d:8f:76:0b:0d:da:69: 55:3e:2e:e5:c4:87:6e:89:fb:e9:54:1d:ac:43:6a:e7:ae:c7: d2:cf:71:12:09:d0:d1:b5:a2:f1:41:1c:fc:7c:a2:76:80:e2: 8f:25:ff:37:52:1e:f2:68:5c:58:a1:89:a7:20:d0:d6:37:a3: db:15:01:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11xCEfylU+wBO4PWhmSXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OTFiZmQzY2ZlYzVhMTEwOGYxYzg2ODU0NzY0ZTJiOTAz ZDc4ODgwHhcNMjUxMjE5MDkwMDQ1WhcNMjUxMjIwMDkwMDQ1WjAzMTEwLwYDVQQD EygzZmI0ZjQ5NGI3Zjk4ZDU3NzU2YTM5NGUyMDVkYTkyNTI4MDIzMDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWCZsXkgQWL8pLTKl7XzGScTlAWH 0tLB606oPXAn0hbus8Wo8IzXXZtar+pOC66RtAvyZ9YmbNscCkYK5Uxwwf1FZRqn 4ttLCoYGNWeFADpZQKOtLh0dp4970HYtulPeS8OZCdtOonp8uEY4WKmm7yG8zy6B fixHCrIDgNrKzBEFBuxVnxw7XMQK0Ddzguyh/k67mIJbo/TaBNY5YBpdKEi4eRut h3Tv1/7gR0IcSEkPp5gM9xvFqigkXtdHTQ3J0PiF7JREiVf03Ap0oA5upcrZz5Zk eyIH8Jjs/3x8A/+WHOSdBUGulaN/0pved2Seww0xEQL6f9cd5INFRdGBjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+09JS3+Y1XdWo5TiBdqSUoAjARMB8GA1UdIwQY MBaAFEaRv9PP7FoRCPHIaFR2TiuQPXiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81ZWE1ZjAtMDJkNy00YjBmLWIwYjIt MWI4NjE3N2FmMGRkLzEvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81ZWE1ZjAtMDJkNy00YjBmLWIwYjItMWI4NjE3N2FmMGRk LzEvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACroGsFh7 XrbutRgHE6z7M8qlgzv0rtyS3kTjtfLz0vq8PQx6vct6x0lvnUqMCNil2oxnI1ms Yev8SYW+VuN9OT5ONHcBRp10vQJbPhbQCqfObBv8eVFBzSyOt8IDuQuq0o85u/3b FcNUrBApmWdLOeerXXRD1whI47ttlzRVLLz3YDttax/Q4xX0OtN/HXDYa1toGu3q PeqMDF5p+n3bZuqanPBjaAnmEDx528ONv1Plt/Z3BlWOBLbGwA8Q3QdNj3YLDdpp VT4u5cSHbon76VQdrENq567H0s9xEgnQ0bWi8UEc/HyidoDijyX/N1Ie8mhcWKGJ pyDQ1jej2xUBlA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:48:29 2025 by rpki-client