This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json) Hash identifier: Eqf5OBUeTxfWXOfLICH3o8hvxts0SvNYsn2FrwkUwpg= Subject key identifier: 79:E7:1B:E3:C3:AA:06:6C:71:C1:DE:FA:45:BF:D9:92:8E:AA:55:22 Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f Certificate serial: 019B3B6B1D36F3F3BAD4BA543C6171957319 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft Manifest number: 132E Signing time: Sat 20 Dec 2025 11:00:34 +0000 Manifest this update: Sat 20 Dec 2025 11:00:34 +0000 Manifest next update: Sun 21 Dec 2025 11:00:34 +0000 Files and hashes: 1: PXiVKqc-gzBW0DpV9A_yfa7v6KE.roa (hash: L22rZjAObHC63x5DS7bDRlGFpJbFt5MxhJzGQ+tq5BE=) 2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: xX25s221BN5F9vZQnIQM1w4TsL6ntyspUhS3FXijegE=) 3: xFHz4_XjwzN0pPKWaqRmrbsppf4.roa (hash: RMJsZt2RIHwd0V36eKXMJsELKCwZUihxIvWX1Ne3Nog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:1d:36:f3:f3:ba:d4:ba:54:3c:61:71:95:73:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f Validity Not Before: Dec 20 11:00:34 2025 GMT Not After : Dec 21 11:00:34 2025 GMT Subject: CN=79e71be3c3aa066c71c1defa45bfd9928eaa5522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f3:d8:36:57:be:55:da:40:19:75:47:01:54: e1:05:bb:c5:df:0e:2e:85:9f:78:0c:03:43:19:dd: 49:97:e0:aa:4b:26:3a:06:b0:47:c2:4c:cc:c7:fd: 68:2e:84:b3:41:7f:65:85:f9:d8:a3:ec:52:66:5c: a5:0d:91:e0:7c:78:b0:e7:a6:48:5f:40:21:76:ee: 39:70:30:8c:a3:29:78:7a:f9:2f:6c:4d:66:bd:f2: fe:24:b0:07:d1:f4:0a:ea:1d:89:7c:41:3d:ff:03: 55:3a:8a:dc:67:e1:f0:d4:11:e2:30:f3:cb:ec:68: 2e:bb:f7:7d:79:dd:a3:12:b2:f0:f5:68:b6:45:09: fd:74:f2:0e:20:d5:23:b0:d0:bd:79:1f:1c:d0:2f: a6:4e:76:71:42:eb:dd:95:97:c3:1a:b1:31:2f:db: d9:27:c8:3d:0e:1b:f7:fb:ac:61:c2:86:8d:4d:35: 49:69:72:dd:c2:ab:3d:06:24:4d:1a:37:15:cd:31: 5b:94:d2:8e:03:ae:3d:0f:0d:43:a1:76:73:93:b8: cf:96:51:ad:06:e8:81:07:01:eb:0e:f8:e8:67:23: 8d:09:fd:71:69:50:82:69:23:f1:40:c5:52:96:79: e6:c5:5a:b4:9a:ce:01:f6:b8:24:13:9c:3e:6a:8a: 01:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E7:1B:E3:C3:AA:06:6C:71:C1:DE:FA:45:BF:D9:92:8E:AA:55:22 X509v3 Authority Key Identifier: keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:05:9f:89:34:c0:4b:54:6d:2f:8f:1f:91:25:2d:77:86:45: 3d:fe:0f:9c:e3:89:09:ca:d4:94:72:78:ad:ac:eb:ae:6a:ce: b2:e5:0f:10:54:eb:67:58:1e:99:f3:c7:df:02:2c:4b:30:e0: 99:0d:09:89:f3:72:3f:c7:6d:d8:b3:72:bd:51:ed:dc:85:8f: 6d:ea:60:27:b2:87:67:01:f0:18:55:3b:66:37:66:66:10:b3: c5:54:31:e5:65:66:0f:b1:e4:8c:52:27:e1:2a:f6:6a:ef:2d: 28:ed:76:99:14:94:cb:67:34:73:5c:68:d8:fa:ae:7c:12:e3: 46:2f:ca:7d:a0:c1:c6:56:a2:6c:b3:44:4d:06:84:e7:40:48: cf:5c:27:fb:56:6a:14:54:19:35:1b:16:49:48:ab:5e:a6:fd: dc:99:98:70:bf:a7:78:b5:ec:53:e7:7c:54:9b:ad:e4:46:c7: 55:5d:13:e0:28:dd:6c:c5:f5:df:08:a7:35:59:f4:0c:6f:45: b6:5b:50:4d:d5:7c:52:26:21:e7:b9:01:f7:8d:35:f9:5e:44: 86:bb:9b:ea:fd:12:47:58:b5:c8:85:9e:df:94:7d:6e:13:7d: b3:c4:c8:38:28:35:32:bb:82:5f:fe:74:cc:51:48:bc:43:27: e2:2e:4a:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ax028/O61LpUPGFxlXMZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYjEzNmU2ODIwZDk0ZjAzYjFjNWQ3MWVlZTNkNGIyMjE5 MTUyOGYwHhcNMjUxMjIwMTEwMDM0WhcNMjUxMjIxMTEwMDM0WjAzMTEwLwYDVQQD Eyg3OWU3MWJlM2MzYWEwNjZjNzFjMWRlZmE0NWJmZDk5MjhlYWE1NTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/PYNle+VdpAGXVHAVThBbvF3w4u hZ94DANDGd1Jl+CqSyY6BrBHwkzMx/1oLoSzQX9lhfnYo+xSZlylDZHgfHiw56ZI X0Ahdu45cDCMoyl4evkvbE1mvfL+JLAH0fQK6h2JfEE9/wNVOorcZ+Hw1BHiMPPL 7Gguu/d9ed2jErLw9Wi2RQn9dPIOINUjsNC9eR8c0C+mTnZxQuvdlZfDGrExL9vZ J8g9Dhv3+6xhwoaNTTVJaXLdwqs9BiRNGjcVzTFblNKOA649Dw1DoXZzk7jPllGt BuiBBwHrDvjoZyONCf1xaVCCaSPxQMVSlnnmxVq0ms4B9rgkE5w+aooBNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnnG+PDqgZsccHe+kW/2ZKOqlUiMB8GA1UdIwQY MBaAFIKxNuaCDZTwOxxdce7j1LIhkVKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3JFMjVvSU5sUEE3SEYxeDd1UFVzaUdSVW84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yMjExMmUtNGUxMy00M2QwLTllYjEt MGRhM2NhYTkxNDI5LzEvZ3JFMjVvSU5sUEE3SEYxeDd1UFVzaUdSVW84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yMjExMmUtNGUxMy00M2QwLTllYjEtMGRhM2NhYTkxNDI5 LzEvZ3JFMjVvSU5sUEE3SEYxeDd1UFVzaUdSVW84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwWfiTTA S1RtL48fkSUtd4ZFPf4PnOOJCcrUlHJ4razrrmrOsuUPEFTrZ1gemfPH3wIsSzDg mQ0JifNyP8dt2LNyvVHt3IWPbepgJ7KHZwHwGFU7ZjdmZhCzxVQx5WVmD7HkjFIn 4Sr2au8tKO12mRSUy2c0c1xo2PqufBLjRi/KfaDBxlaibLNETQaE50BIz1wn+1Zq FFQZNRsWSUirXqb93JmYcL+neLXsU+d8VJut5EbHVV0T4CjdbMX13winNVn0DG9F tltQTdV8UiYh57kB9401+V5Ehrub6v0SR1i1yIWe35R9bhN9s8TIOCg1MruCX/50 zFFIvEMn4i5KWA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:21:54 2025 by rpki-client