This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft File: g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json) Hash identifier: EXW6LGLfInLCpkgPW2oFaEoJ3d7k5U9kbmZzI6z2+B0= Subject key identifier: 58:ED:C9:9B:AE:89:3C:59:7E:42:9A:3A:07:B9:BE:E8:7C:CD:69:CD Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7 Certificate issuer: /CN=836528e152b6dcba1571241ac55be5bce01118b7 Certificate serial: 019B3C7DE83AB766B64046ECD324892C5C9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 16:00:42 +0000 Manifest this update: Sat 20 Dec 2025 16:00:42 +0000 Manifest next update: Sun 21 Dec 2025 16:00:42 +0000 Files and hashes: 1: CvGHepAgyhQF29vgwO5RLU27Tig.roa (hash: MTqSAP2ijcRiLN3/AxskccxaBqUIlze/F2fZZstIpd0=) 2: LG2MEPQP4SA0RYNet0_i-TbLVOA.roa (hash: Q0AqpzK5pnfc1Ye6ZvO737eSRCPhdfmTWDd+EoGA7/k=) 3: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: E04F8F2f5Bfzh8Ch+jmeqFmW+/r8oyVWPBNbW6kBX9Q=) 4: mM8VTopJZmHymxZODgrdAS9tCB0.roa (hash: xbQXqlIoaX+7utbFJ34rZdlVmArTuhCKQpdLZlu7I7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:e8:3a:b7:66:b6:40:46:ec:d3:24:89:2c:5c:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7 Validity Not Before: Dec 20 16:00:42 2025 GMT Not After : Dec 21 16:00:42 2025 GMT Subject: CN=58edc99bae893c597e429a3a07b9bee87ccd69cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:61:7a:ff:89:9f:b1:3a:30:29:1c:15:8f:68: 25:19:82:7e:2c:7d:8d:bb:73:7c:3e:c9:26:84:08: 85:b4:ff:f0:41:48:a2:3d:24:43:f8:b7:59:32:80: 51:7d:41:0f:30:80:18:30:71:9d:97:42:b1:8b:71: 9c:13:da:46:f7:5e:bd:a5:a5:25:30:4b:16:83:f2: 99:52:98:bc:b5:7c:fe:b5:29:53:5d:ea:8c:ec:63: 47:6f:bc:ab:3c:3d:0d:9d:26:0d:3a:4c:b1:2b:0e: 9d:aa:0d:bd:42:c2:8b:9d:12:d3:fb:07:af:c3:d6: 38:74:d5:a3:9d:00:71:a3:82:53:e0:af:64:7c:3e: 6b:2f:d5:06:51:e5:c7:cc:2b:23:6f:1a:af:dc:27: e4:bd:b7:ae:84:95:59:9f:23:a1:e7:d3:02:cd:49: ad:24:bd:d1:52:ee:df:76:10:66:06:1e:45:41:dd: 3c:aa:62:c6:b5:91:fa:30:f8:1c:8d:9b:6b:ec:d9: ad:ec:21:79:e4:e2:d5:35:80:fe:34:15:9c:b6:f3: dc:dd:21:5d:cf:ea:4d:bb:d8:4c:55:f3:92:c2:e0: ab:00:30:2b:2a:c2:8f:11:22:10:e1:93:35:9f:ec: 92:89:f4:5d:50:f3:d1:41:8e:37:c7:4d:cf:b4:14: 28:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:ED:C9:9B:AE:89:3C:59:7E:42:9A:3A:07:B9:BE:E8:7C:CD:69:CD X509v3 Authority Key Identifier: keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:fe:21:72:2a:9c:05:de:75:68:76:05:43:bb:ee:97:93:1d: 40:4b:26:8d:1f:f8:c4:eb:06:b0:5c:7b:80:c0:3e:19:27:ab: 6d:ce:a1:ff:59:83:bb:3a:e1:79:1d:9b:29:3c:71:d3:65:c0: 4d:4e:2e:3d:46:65:60:cb:1c:19:3e:14:23:ed:95:5c:88:68: b5:b3:89:3e:fc:85:cf:f3:42:49:a5:09:4f:25:e4:94:5a:0f: a3:6a:60:da:bd:2b:93:a3:21:87:04:e9:93:26:6d:f1:16:9a: 04:b2:87:db:f4:44:f7:e9:12:a1:2e:f2:36:17:bd:cf:f9:50: 0d:7b:fc:ef:9f:13:b8:b0:f4:5e:4d:48:b2:21:25:01:80:b9: 3c:e0:e7:9f:34:b2:55:56:ee:ef:0b:8c:60:7e:07:24:45:a0: 14:16:92:7b:6e:c5:f6:01:e6:7b:10:16:29:96:ae:b8:1d:99: e7:cf:bf:9d:d5:dd:35:17:7e:f8:2d:cf:cc:03:80:43:40:5d: 55:38:73:ff:5d:11:af:39:5d:7f:d8:ef:a0:eb:03:7e:ac:1e: 80:84:91:aa:62:ae:01:dd:29:ec:56:76:3d:5b:bc:1e:df:85: cf:c3:aa:08:fd:d5:9b:7e:d5:f8:fe:9f:c5:e5:75:d8:ae:7c: 31:52:e7:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8feg6t2a2QEbs0ySJLFydMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjUyOGUxNTJiNmRjYmExNTcxMjQxYWM1NWJlNWJjZTAx MTE4YjcwHhcNMjUxMjIwMTYwMDQyWhcNMjUxMjIxMTYwMDQyWjAzMTEwLwYDVQQD Eyg1OGVkYzk5YmFlODkzYzU5N2U0MjlhM2EwN2I5YmVlODdjY2Q2OWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGF6/4mfsTowKRwVj2glGYJ+LH2N u3N8PskmhAiFtP/wQUiiPSRD+LdZMoBRfUEPMIAYMHGdl0Kxi3GcE9pG9169paUl MEsWg/KZUpi8tXz+tSlTXeqM7GNHb7yrPD0NnSYNOkyxKw6dqg29QsKLnRLT+wev w9Y4dNWjnQBxo4JT4K9kfD5rL9UGUeXHzCsjbxqv3CfkvbeuhJVZnyOh59MCzUmt JL3RUu7fdhBmBh5FQd08qmLGtZH6MPgcjZtr7Nmt7CF55OLVNYD+NBWctvPc3SFd z+pNu9hMVfOSwuCrADArKsKPESIQ4ZM1n+ySifRdUPPRQY43x03PtBQo1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjtyZuuiTxZfkKaOge5vuh8zWnNMB8GA1UdIwQY MBaAFINlKOFStty6FXEkGsVb5bzgERi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2Mt ZWI5NDE1ZWM1NDhhLzEvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2MtZWI5NDE1ZWM1NDhh LzEvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApP4hciqc Bd51aHYFQ7vul5MdQEsmjR/4xOsGsFx7gMA+GSerbc6h/1mDuzrheR2bKTxx02XA TU4uPUZlYMscGT4UI+2VXIhotbOJPvyFz/NCSaUJTyXklFoPo2pg2r0rk6MhhwTp kyZt8RaaBLKH2/RE9+kSoS7yNhe9z/lQDXv8758TuLD0Xk1IsiElAYC5PODnnzSy VVbu7wuMYH4HJEWgFBaSe27F9gHmexAWKZauuB2Z58+/ndXdNRd++C3PzAOAQ0Bd VThz/10Rrzldf9jvoOsDfqwegISRqmKuAd0p7FZ2PVu8Ht+Fz8OqCP3Vm37V+P6f xeV12K58MVLnZw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:53:53 2025 by rpki-client