This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft File: g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json) Hash identifier: lugZAxd4BCDr7C6+/Tb1gAK4vS52qodgq67EMJhxiO0= Subject key identifier: E2:70:11:FC:77:2A:80:B1:65:5F:B7:D4:6A:3F:5E:80:2A:D1:92:71 Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61 Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561 Certificate serial: 019AACF0ADA00D588A46070A942324930547 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft Manifest number: 0DAC Signing time: Sat 22 Nov 2025 19:00:45 +0000 Manifest this update: Sat 22 Nov 2025 19:00:45 +0000 Manifest next update: Sun 23 Nov 2025 19:00:45 +0000 Files and hashes: 1: 1-eVtiZIJZtejkcxnJZbMOuqtkvM.roa (hash: /dozujzBruht/lOgqwCLtQNFBrpieolWDy5kZ5Mel3s=) 2: 56FwlKZ7KIhARLPC6HlmmMABBnU.roa (hash: Z+1GZvGlxeBEP1crVQ4oVXjpJKgbOm4WDdf1clBCOOM=) 3: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: WYREN1EEu28xElss5zmhh7xCW2WRw3gB4bus2/VG06U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:f0:ad:a0:0d:58:8a:46:07:0a:94:23:24:93:05:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561 Validity Not Before: Nov 22 19:00:45 2025 GMT Not After : Nov 23 19:00:45 2025 GMT Subject: CN=e27011fc772a80b1655fb7d46a3f5e802ad19271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5b:46:1e:a0:2f:5c:da:af:60:42:3a:18:b7: d9:a1:dc:54:44:d4:96:5d:8a:82:a6:81:ba:b0:7f: dd:53:06:12:f2:94:d7:a7:6a:ac:28:db:3b:e5:c7: c4:6e:16:82:31:92:3a:61:d1:3a:12:dc:c3:50:cb: f8:04:b6:f9:a6:b5:a7:12:53:02:41:73:73:bb:fb: 35:f4:55:ba:0b:92:91:46:d4:2d:1f:34:75:a1:a8: 78:8f:41:4d:91:c6:85:54:d3:b7:8b:d9:d9:7f:d5: 99:d0:8d:33:bb:89:a2:8a:85:c0:fc:f4:f7:21:4f: 34:0d:0b:d3:65:96:e0:76:04:07:35:7d:ae:99:98: 13:6d:65:3b:2c:f6:b6:16:a0:c9:11:0c:43:f2:4a: 2e:f3:43:c7:8d:53:7b:8e:87:ce:03:2c:c9:88:67: bb:3c:79:13:b7:55:33:ae:b9:4c:59:12:40:14:d3: d3:b2:8a:13:b9:b0:a1:e9:0b:c7:8f:aa:e4:d4:a8: 9b:e1:0b:69:2b:ba:d4:a4:31:7b:8f:c4:9e:4c:e3: b0:c8:d9:bb:2c:ce:dd:44:69:1c:a1:bf:73:9b:07: 6b:a2:04:61:03:cf:87:52:60:07:27:5f:b6:df:97: 4c:1e:87:f0:fa:d7:4e:93:79:03:22:01:ce:dc:55: 22:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:70:11:FC:77:2A:80:B1:65:5F:B7:D4:6A:3F:5E:80:2A:D1:92:71 X509v3 Authority Key Identifier: keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:bd:3b:b4:27:99:68:77:3c:24:fb:4c:9c:27:84:c6:de:ed: e5:62:b1:24:be:ac:f9:2a:39:fc:d5:9c:d7:94:86:68:e5:f5: 1f:8b:1b:aa:f7:5b:b7:73:ad:e3:05:36:e3:15:25:ff:5c:d7: 9f:80:cd:23:90:60:e4:b4:24:45:6f:a8:dc:77:e7:8e:87:d7: e3:2e:94:69:22:b8:4e:0e:ab:4d:4c:d8:d2:7a:0f:7a:16:5f: 92:58:e6:59:97:4d:89:5f:e5:dd:7b:52:36:39:5f:41:ae:da: 98:e8:d9:81:3c:e2:42:8d:a4:ba:42:d6:90:b2:5f:ee:1a:f0: 89:de:12:6c:f6:44:dd:f5:f7:d8:9f:e1:2a:2c:b9:81:c2:e7: 25:44:55:29:dd:84:35:25:0e:26:ee:d0:66:dd:cd:f8:c4:26: 91:57:a0:0b:c1:66:a5:71:52:d2:50:5f:c7:03:af:33:5b:ca: cf:5c:34:6b:5f:e0:ee:f0:07:46:ac:0b:2c:a6:00:aa:27:02: 45:ec:dc:9c:77:d1:9e:96:9d:d8:2c:27:f7:19:0b:7a:41:ed: b6:f1:e5:04:cb:96:56:2f:06:68:2a:83:59:82:20:3a:ea:f8: ca:7b:f6:72:58:2b:8a:06:a2:9d:e1:64:e8:8f:9a:a2:3f:ed: 2a:79:c1:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqs8K2gDViKRgcKlCMkkwVHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZTVkOTAzMDFkM2NmNjdiODhmZWU0MmRkNTQ1YWZjZjE0 ZWE1NjEwHhcNMjUxMTIyMTkwMDQ1WhcNMjUxMTIzMTkwMDQ1WjAzMTEwLwYDVQQD EyhlMjcwMTFmYzc3MmE4MGIxNjU1ZmI3ZDQ2YTNmNWU4MDJhZDE5MjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVtGHqAvXNqvYEI6GLfZodxURNSW XYqCpoG6sH/dUwYS8pTXp2qsKNs75cfEbhaCMZI6YdE6EtzDUMv4BLb5prWnElMC QXNzu/s19FW6C5KRRtQtHzR1oah4j0FNkcaFVNO3i9nZf9WZ0I0zu4miioXA/PT3 IU80DQvTZZbgdgQHNX2umZgTbWU7LPa2FqDJEQxD8kou80PHjVN7jofOAyzJiGe7 PHkTt1UzrrlMWRJAFNPTsooTubCh6QvHj6rk1Kib4QtpK7rUpDF7j8SeTOOwyNm7 LM7dRGkcob9zmwdrogRhA8+HUmAHJ1+235dMHofw+tdOk3kDIgHO3FUioQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJwEfx3KoCxZV+31Go/XoAq0ZJxMB8GA1UdIwQY MBaAFIPl2QMB089nuI/uQt1UWvzxTqVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2It NzgyYjgyZWJjYWFlLzEvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2ItNzgyYjgyZWJjYWFl LzEvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeb07tCeZ aHc8JPtMnCeExt7t5WKxJL6s+So5/NWc15SGaOX1H4sbqvdbt3Ot4wU24xUl/1zX n4DNI5Bg5LQkRW+o3HfnjofX4y6UaSK4Tg6rTUzY0noPehZfkljmWZdNiV/l3XtS NjlfQa7amOjZgTziQo2kukLWkLJf7hrwid4SbPZE3fX32J/hKiy5gcLnJURVKd2E NSUOJu7QZt3N+MQmkVegC8FmpXFS0lBfxwOvM1vKz1w0a1/g7vAHRqwLLKYAqicC RezcnHfRnpad2Cwn9xkLekHttvHlBMuWVi8GaCqDWYIgOur4ynv2clgrigaineFk 6I+aoj/tKnnBtg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:55:47 2025 by rpki-client