This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft File: g5ka_NRV6xsXT8-J-OEOr39ws1U.mft (raw, json) Hash identifier: cUaq6J3NPb08KbRFqIHoHAynlIHsDyQLcpiU4ZbBAC4= Subject key identifier: 91:DC:D0:48:80:9F:AE:59:BC:E2:1D:79:3F:E0:B6:03:B4:36:19:1B Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55 Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355 Certificate serial: 019B601CC7AF7DB3D69E33F4DC21935A574E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft Manifest number: 17BA Signing time: Sat 27 Dec 2025 14:00:57 +0000 Manifest this update: Sat 27 Dec 2025 14:00:57 +0000 Manifest next update: Sun 28 Dec 2025 14:00:57 +0000 Files and hashes: 1: JTjIGaNjpzftNO-kFk1BOWWIlR0.roa (hash: QhcjtouUn5V8upOm/6e13CmIXaLDrm57wRtRFJI8pfQ=) 2: RDn2kmSbVnJw7wdF-wZa8vdfrGk.roa (hash: PPPp3w62aTSvX+pwPQUqMdFImPKU9XLCtHdMFcqqr1A=) 3: Udl4Y8sRVjim2rAFzxKQuecnclg.roa (hash: OhoAEIIYExt/Quqv/8KIxubBzRvH8hZ7uh526RWh78k=) 4: g5ka_NRV6xsXT8-J-OEOr39ws1U.crl (hash: 77JF8AHVn2WDKlobl493P1vy4c52Cn+PCDSSTm8ajsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:1c:c7:af:7d:b3:d6:9e:33:f4:dc:21:93:5a:57:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355 Validity Not Before: Dec 27 14:00:57 2025 GMT Not After : Dec 28 14:00:57 2025 GMT Subject: CN=91dcd048809fae59bce21d793fe0b603b436191b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:a9:68:a1:12:72:1d:f1:8f:7e:d1:d0:05: 12:4b:66:f5:d7:e8:71:69:d6:3f:27:e0:38:3b:bd: 3b:eb:f2:71:10:e0:7a:f6:74:b4:04:3b:1d:d1:ea: 8b:f0:9b:b8:53:c0:b6:f4:03:97:2b:b3:4f:9e:a5: 95:a6:34:4f:a1:99:a2:e8:e5:cb:23:2c:86:16:91: 12:d4:9c:25:d6:d7:4b:3b:70:7d:74:0f:f9:4d:52: cd:c1:0e:03:d6:42:d3:96:9a:75:9b:27:cc:cd:7d: 4a:1f:5d:bb:1e:c1:fd:d1:ae:12:40:43:23:6b:9b: 20:a7:11:70:11:b6:db:3a:b7:cc:6c:38:b9:81:12: 19:c1:b7:20:29:9f:f5:ca:a9:92:ae:64:cc:55:67: 43:d2:0d:5f:d0:19:d3:9c:89:cd:bc:36:5a:dc:7a: 33:a2:8d:f1:a5:d8:33:7a:55:80:12:e0:99:6b:c8: 10:64:33:c3:be:bd:3d:89:2a:1c:2f:b7:22:4e:eb: 19:5c:26:d9:fc:bb:65:98:9c:6c:b8:db:ff:0f:0b: ea:1c:70:5b:c1:69:0d:c7:c9:2c:90:3c:fb:fc:17: 23:6c:e2:c6:a9:ba:ac:9c:81:c8:ab:63:e7:c2:fb: e8:33:54:b5:aa:fa:cd:ef:e9:e9:53:86:c2:8d:bd: 7e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DC:D0:48:80:9F:AE:59:BC:E2:1D:79:3F:E0:B6:03:B4:36:19:1B X509v3 Authority Key Identifier: keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:fd:66:9d:6d:1f:b1:09:d5:76:35:a0:ad:1b:45:6d:07:60: f6:6a:a4:e1:69:8a:f0:66:4f:cf:78:f1:97:28:04:42:b2:c1: 28:45:1f:66:38:2a:af:d4:2f:cc:53:60:11:6d:75:4c:4e:f5: fd:e8:7b:4f:ad:6b:09:d5:27:57:3a:48:ad:a0:af:2e:69:51: 2c:45:86:04:61:bb:70:0e:bd:aa:19:1c:e0:52:83:81:8e:b2: cb:20:91:77:d1:ba:3c:3f:1f:5f:d8:63:61:aa:78:7b:f4:dc: fe:20:41:6d:b2:b0:f5:ce:77:d1:e5:80:9b:e6:8c:f4:d5:7d: 67:74:1d:d5:5e:ba:b4:f8:15:a5:6a:53:cd:db:0b:3e:4b:89: ea:28:b1:74:dc:aa:24:57:6d:7d:a1:c7:e2:0c:ff:f3:d1:58: bc:5f:d3:98:25:12:60:5f:41:ac:39:c3:de:e2:0b:62:68:5e: f6:c2:7b:d3:11:26:25:1f:46:55:ea:68:ad:00:0e:5d:3c:26: 2b:eb:ee:6c:5e:21:8f:7d:04:2e:69:dd:9c:46:54:3d:9f:ee: 76:08:51:e2:d8:0b:68:61:f0:9b:68:12:d0:62:46:1f:84:e8: 0b:77:52:46:76:af:ee:71:3b:72:da:b3:fb:91:8e:89:93:51: 82:0e:67:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgHMevfbPWnjP03CGTWldOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOTkxYWZjZDQ1NWViMWIxNzRmY2Y4OWY4ZTEwZWFmN2Y3 MGIzNTUwHhcNMjUxMjI3MTQwMDU3WhcNMjUxMjI4MTQwMDU3WjAzMTEwLwYDVQQD Eyg5MWRjZDA0ODgwOWZhZTU5YmNlMjFkNzkzZmUwYjYwM2I0MzYxOTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXqpaKESch3xj37R0AUSS2b11+hx adY/J+A4O7076/JxEOB69nS0BDsd0eqL8Ju4U8C29AOXK7NPnqWVpjRPoZmi6OXL IyyGFpES1Jwl1tdLO3B9dA/5TVLNwQ4D1kLTlpp1myfMzX1KH127HsH90a4SQEMj a5sgpxFwEbbbOrfMbDi5gRIZwbcgKZ/1yqmSrmTMVWdD0g1f0BnTnInNvDZa3Hoz oo3xpdgzelWAEuCZa8gQZDPDvr09iSocL7ciTusZXCbZ/LtlmJxsuNv/DwvqHHBb wWkNx8kskDz7/BcjbOLGqbqsnIHIq2PnwvvoM1S1qvrN7+npU4bCjb1+HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHc0EiAn65ZvOIdeT/gtgO0NhkbMB8GA1UdIwQY MBaAFIOZGvzUVesbF0/PifjhDq9/cLNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzVrYV9OUlY2eHNYVDgtSi1PRU9yMzl3czFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82OWVkMjktYWY0ZS00NTI0LWFkZmIt ZTE1NDM3MzgwMDk5LzEvZzVrYV9OUlY2eHNYVDgtSi1PRU9yMzl3czFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS82OWVkMjktYWY0ZS00NTI0LWFkZmItZTE1NDM3MzgwMDk5 LzEvZzVrYV9OUlY2eHNYVDgtSi1PRU9yMzl3czFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnv1mnW0f sQnVdjWgrRtFbQdg9mqk4WmK8GZPz3jxlygEQrLBKEUfZjgqr9QvzFNgEW11TE71 /eh7T61rCdUnVzpIraCvLmlRLEWGBGG7cA69qhkc4FKDgY6yyyCRd9G6PD8fX9hj Yap4e/Tc/iBBbbKw9c530eWAm+aM9NV9Z3Qd1V66tPgVpWpTzdsLPkuJ6iixdNyq JFdtfaHH4gz/89FYvF/TmCUSYF9BrDnD3uILYmhe9sJ70xEmJR9GVeporQAOXTwm K+vubF4hj30ELmndnEZUPZ/udghR4tgLaGHwm2gS0GJGH4ToC3dSRnav7nE7ctqz +5GOiZNRgg5nVg== -----END CERTIFICATE-----Generated at Sat Dec 27 17:48:38 2025 by rpki-client