This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json) Hash identifier: PJ0ad8qQxSoS4bfYOT3XE+VIJxk5Mno+ePwBL2TWqWE= Subject key identifier: 36:3F:BD:2E:C1:9C:7D:E0:69:ED:82:00:C1:92:33:D9:C2:54:73:86 Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32 Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232 Certificate serial: 019B360ECD7FAD477E026D7B4D0745E72055 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft Manifest number: 111F Signing time: Fri 19 Dec 2025 10:01:38 +0000 Manifest this update: Fri 19 Dec 2025 10:01:38 +0000 Manifest next update: Sat 20 Dec 2025 10:01:38 +0000 Files and hashes: 1: PNY0bopVkefbLxgLSsZnVYV7eHU.roa (hash: kYhkbg5jATuw8BE/PYkSTUN7eKPVKmi+NIGEx/Z0W7M=) 2: _DwTrJ6Rj1PQPQ3EZ7Z_NHmoK80.roa (hash: WIzgi3FHup1BX82atvYWveM/B2LQRKi9b5BQedkaQlM=) 3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: lWtMNhB7artsXNZm3T8SbzzwwCkqaWmSa3bVhNhBQwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:cd:7f:ad:47:7e:02:6d:7b:4d:07:45:e7:20:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232 Validity Not Before: Dec 19 10:01:38 2025 GMT Not After : Dec 20 10:01:38 2025 GMT Subject: CN=363fbd2ec19c7de069ed8200c19233d9c2547386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:30:bc:23:72:c0:c3:06:d8:24:eb:30:cc:8f: 37:2a:d1:3d:e9:47:6b:f1:99:a4:2e:0f:67:65:87: 93:1c:73:f4:57:d9:45:7e:df:9e:09:42:77:2f:81: 8b:6c:4b:5b:97:f1:58:2c:1e:90:84:15:c2:9b:97: 01:a5:52:4c:d7:d3:4f:7f:d9:55:8b:08:a4:30:26: 8e:79:f3:e0:35:c2:bc:50:bc:36:67:bd:82:4c:ab: 15:f1:5b:21:2b:b3:e2:b7:16:80:ab:0a:ff:77:3c: 9b:1e:6d:f2:ac:ed:ff:e3:a6:40:0a:22:8a:e9:87: 8f:95:3f:4a:d3:67:20:40:db:ee:b3:6b:c7:52:00: 48:9c:39:2d:c1:be:b1:da:41:93:4a:5e:8d:e4:55: e3:8f:3f:cf:f9:85:e4:1c:38:72:5d:a4:82:39:53: 45:42:a0:6d:0e:e0:4d:25:93:a7:d5:51:2d:c0:b1: 7f:85:c9:c1:3f:06:4a:e7:76:14:62:73:2c:cb:90: 41:a4:24:19:0c:c5:52:39:6e:88:71:dd:d4:93:11: ac:11:81:7b:ef:71:2e:eb:08:e2:44:70:0e:ae:69: 85:fd:20:b8:ab:88:4d:d6:d4:3a:0f:f1:ee:19:1d: db:a9:05:ce:03:f9:11:de:6f:9f:36:70:b1:5a:8b: c5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3F:BD:2E:C1:9C:7D:E0:69:ED:82:00:C1:92:33:D9:C2:54:73:86 X509v3 Authority Key Identifier: keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:08:38:8c:d4:66:2f:50:42:08:3a:ee:8a:75:9a:1e:24:53: 71:75:2e:d8:ba:08:e2:d5:01:2c:a8:92:18:bc:a2:72:0a:20: 35:89:f9:24:57:1b:ba:76:ba:50:23:36:34:3b:d9:f7:c0:17: ee:87:ba:f7:df:91:cd:da:10:3c:53:97:f5:1b:7b:75:e9:8d: 08:23:d6:9f:27:d7:0e:09:e5:86:b7:50:70:98:25:30:8a:91: 77:e4:26:c2:2c:09:4e:ff:7a:6b:44:2a:7a:86:d0:7a:d3:54: 55:30:71:f3:03:29:23:ee:0f:53:d4:8b:91:58:e4:8d:66:ca: ed:50:95:a0:5d:a7:bc:8f:bd:cf:07:aa:3d:e5:b4:00:95:53: 7f:60:9e:dc:ef:1c:27:19:79:46:95:21:27:b4:ab:91:8f:17: 00:1a:e6:f3:a3:61:b8:50:51:33:ac:e6:bf:c0:59:a6:74:a2: 12:2e:f1:1e:3e:10:43:bb:22:ae:a8:92:c8:9e:05:03:16:ea: e4:48:e6:d6:57:25:3c:f3:49:4f:f7:f4:62:e7:86:65:c2:90: 84:b7:c3:63:4b:d5:a8:2d:0b:b5:6c:f9:2b:3c:67:98:a2:f8: d8:4c:6a:22:14:10:b8:2f:77:19:6c:42:5f:15:0d:2d:ec:d0: 7f:38:63:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2Ds1/rUd+Am17TQdF5yBVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZTIzNDBlZjVjNGE0OTUyZWI0MTNkMjg4YzI5ZDkzNzgz NDIyMzIwHhcNMjUxMjE5MTAwMTM4WhcNMjUxMjIwMTAwMTM4WjAzMTEwLwYDVQQD EygzNjNmYmQyZWMxOWM3ZGUwNjllZDgyMDBjMTkyMzNkOWMyNTQ3Mzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDC8I3LAwwbYJOswzI83KtE96Udr 8ZmkLg9nZYeTHHP0V9lFft+eCUJ3L4GLbEtbl/FYLB6QhBXCm5cBpVJM19NPf9lV iwikMCaOefPgNcK8ULw2Z72CTKsV8VshK7PitxaAqwr/dzybHm3yrO3/46ZACiKK 6YePlT9K02cgQNvus2vHUgBInDktwb6x2kGTSl6N5FXjjz/P+YXkHDhyXaSCOVNF QqBtDuBNJZOn1VEtwLF/hcnBPwZK53YUYnMsy5BBpCQZDMVSOW6Icd3UkxGsEYF7 73Eu6wjiRHAOrmmF/SC4q4hN1tQ6D/HuGR3bqQXOA/kR3m+fNnCxWovFOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDY/vS7BnH3gae2CAMGSM9nCVHOGMB8GA1UdIwQY MBaAFIPiNA71xKSVLrQT0ojCnZN4NCIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kNGQyZjgtOGRjMS00MDcwLTk3N2Ut YTZjZWMwNDU5NWY4LzEvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kNGQyZjgtOGRjMS00MDcwLTk3N2UtYTZjZWMwNDU5NWY4 LzEvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAg4jNRm L1BCCDruinWaHiRTcXUu2LoI4tUBLKiSGLyicgogNYn5JFcbuna6UCM2NDvZ98AX 7oe699+RzdoQPFOX9Rt7demNCCPWnyfXDgnlhrdQcJglMIqRd+QmwiwJTv96a0Qq eobQetNUVTBx8wMpI+4PU9SLkVjkjWbK7VCVoF2nvI+9zweqPeW0AJVTf2Ce3O8c Jxl5RpUhJ7SrkY8XABrm86NhuFBRM6zmv8BZpnSiEi7xHj4QQ7sirqiSyJ4FAxbq 5Ejm1lclPPNJT/f0YueGZcKQhLfDY0vVqC0LtWz5KzxnmKL42ExqIhQQuC93GWxC XxUNLezQfzhj4g== -----END CERTIFICATE-----Generated at Fri Dec 19 17:55:17 2025 by rpki-client