This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft File: g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json) Hash identifier: lSLfLokF5J0dZZGA9kejnkol0PvtGBRJtAm6QZ3JDLY= Subject key identifier: 89:7C:AB:84:D4:02:5D:01:60:1E:91:FA:00:A4:C8:59:4D:B1:1F:DD Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7 Certificate issuer: /CN=836528e152b6dcba1571241ac55be5bce01118b7 Certificate serial: 019B405AB1E621C656C4F2705624DDDAACD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 10:00:44 +0000 Manifest this update: Sun 21 Dec 2025 10:00:44 +0000 Manifest next update: Mon 22 Dec 2025 10:00:44 +0000 Files and hashes: 1: CvGHepAgyhQF29vgwO5RLU27Tig.roa (hash: MTqSAP2ijcRiLN3/AxskccxaBqUIlze/F2fZZstIpd0=) 2: LG2MEPQP4SA0RYNet0_i-TbLVOA.roa (hash: Q0AqpzK5pnfc1Ye6ZvO737eSRCPhdfmTWDd+EoGA7/k=) 3: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: QFpebjBm9PzpU1XPq5f96+rJ/Ysnu1LqCOYWKoKJLhM=) 4: mM8VTopJZmHymxZODgrdAS9tCB0.roa (hash: xbQXqlIoaX+7utbFJ34rZdlVmArTuhCKQpdLZlu7I7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:b1:e6:21:c6:56:c4:f2:70:56:24:dd:da:ac:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7 Validity Not Before: Dec 21 10:00:44 2025 GMT Not After : Dec 22 10:00:44 2025 GMT Subject: CN=897cab84d4025d01601e91fa00a4c8594db11fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:05:45:55:21:91:50:5b:df:40:a7:7e:8a:b7: 1e:32:51:87:d2:bd:65:ce:a1:7c:82:a3:d6:6d:f2: 6f:bd:46:04:53:38:1c:00:5c:2f:05:09:e6:ba:7c: c8:c0:a2:f8:78:78:2a:d8:9a:7b:21:cf:a3:89:32: 97:e9:6f:be:3d:52:0d:c9:f9:62:98:b3:66:bb:be: a9:a2:0d:56:7e:94:da:ee:64:ce:6d:ec:8b:7e:de: d5:00:71:72:87:05:a3:9f:ae:9d:4d:1d:e8:32:d6: f0:19:de:63:ad:2d:f6:07:30:6d:ed:8b:60:dd:08: 8f:5c:54:79:d7:d7:a9:3e:24:41:23:29:ef:4f:17: 7f:01:1c:57:1e:df:d9:b3:ff:4c:0c:ed:22:05:4f: 8e:9c:7e:ee:7b:21:82:14:3b:e2:d7:9a:02:6d:a2: 4d:34:9f:8c:d0:86:5e:74:55:b6:b0:90:95:09:15: d5:bc:9b:a1:46:ad:b2:30:b5:9f:47:17:33:3c:c4: de:b6:66:8d:80:52:df:c0:f8:61:38:1a:f6:30:d5: bd:d0:e6:3d:63:ad:30:b3:bb:b7:03:2c:cc:b9:54: 44:1d:3d:e1:3b:cf:8e:52:f4:f1:32:af:76:be:43: 56:cb:50:64:94:0c:c6:c3:d5:bf:7c:2b:6f:18:db: 04:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7C:AB:84:D4:02:5D:01:60:1E:91:FA:00:A4:C8:59:4D:B1:1F:DD X509v3 Authority Key Identifier: keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:78:e7:24:02:33:db:e1:b2:0c:ad:83:ed:03:51:c3:6f:d5: 83:14:b8:48:5d:65:a1:fd:dc:67:db:2a:0c:54:0d:dc:5a:39: 14:4a:6e:20:99:31:dd:9f:6c:99:1b:2d:d3:3e:39:2a:91:79: 49:16:aa:92:7a:f3:50:4a:3a:5b:ab:02:b3:f3:3a:e3:9b:63: b3:1b:eb:7e:b8:83:10:64:39:e1:30:7d:ae:e4:66:2c:e2:b0: ff:8a:23:f0:50:64:47:82:c2:2a:fe:d1:79:b9:a8:89:71:69: 84:68:ad:c8:a0:47:59:75:1f:ad:40:ac:05:d1:a4:b0:a0:57: 68:94:3a:be:2d:4c:9d:42:52:b6:45:2d:72:1c:d3:07:ab:35: 5a:df:46:93:71:d9:eb:69:03:c2:93:de:3b:76:b5:df:f6:48: c4:88:da:38:42:e9:22:bf:8f:c6:62:7f:f9:57:5a:c8:11:f8: 8f:8c:4b:f7:0c:3a:cf:28:9a:cc:4d:ea:37:9d:5b:5c:ff:4c: 44:28:c5:27:7b:dd:0e:bd:c7:ad:c7:93:cb:89:7e:58:06:bf: 29:5c:8a:e8:ae:1a:02:c0:68:b3:ca:2e:86:40:39:c2:9a:82: 09:e8:e1:d5:e0:d5:94:b9:cc:43:5f:32:c3:bc:e6:12:83:cb: 07:f7:47:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWrHmIcZWxPJwViTd2qzYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjUyOGUxNTJiNmRjYmExNTcxMjQxYWM1NWJlNWJjZTAx MTE4YjcwHhcNMjUxMjIxMTAwMDQ0WhcNMjUxMjIyMTAwMDQ0WjAzMTEwLwYDVQQD Eyg4OTdjYWI4NGQ0MDI1ZDAxNjAxZTkxZmEwMGE0Yzg1OTRkYjExZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwVFVSGRUFvfQKd+irceMlGH0r1l zqF8gqPWbfJvvUYEUzgcAFwvBQnmunzIwKL4eHgq2Jp7Ic+jiTKX6W++PVINyfli mLNmu76pog1WfpTa7mTObeyLft7VAHFyhwWjn66dTR3oMtbwGd5jrS32BzBt7Ytg 3QiPXFR519epPiRBIynvTxd/ARxXHt/Zs/9MDO0iBU+OnH7ueyGCFDvi15oCbaJN NJ+M0IZedFW2sJCVCRXVvJuhRq2yMLWfRxczPMTetmaNgFLfwPhhOBr2MNW90OY9 Y60ws7u3AyzMuVREHT3hO8+OUvTxMq92vkNWy1BklAzGw9W/fCtvGNsELwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIl8q4TUAl0BYB6R+gCkyFlNsR/dMB8GA1UdIwQY MBaAFINlKOFStty6FXEkGsVb5bzgERi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2Mt ZWI5NDE1ZWM1NDhhLzEvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2MtZWI5NDE1ZWM1NDhh LzEvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXjnJAIz 2+GyDK2D7QNRw2/VgxS4SF1lof3cZ9sqDFQN3Fo5FEpuIJkx3Z9smRst0z45KpF5 SRaqknrzUEo6W6sCs/M645tjsxvrfriDEGQ54TB9ruRmLOKw/4oj8FBkR4LCKv7R ebmoiXFphGityKBHWXUfrUCsBdGksKBXaJQ6vi1MnUJStkUtchzTB6s1Wt9Gk3HZ 62kDwpPeO3a13/ZIxIjaOELpIr+PxmJ/+VdayBH4j4xL9ww6zyiazE3qN51bXP9M RCjFJ3vdDr3HrceTy4l+WAa/KVyK6K4aAsBos8ouhkA5wpqCCejh1eDVlLnMQ18y w7zmEoPLB/dHDQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:55:57 2025 by rpki-client