This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft File: grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft (raw, json) Hash identifier: KX+yETDD90r/Pe7jT/6WJsMcE4PJORe/zbcTuXAoau8= Subject key identifier: 74:2D:1F:DE:22:FD:60:A6:0D:B4:8E:BE:41:44:A4:9B:1B:01:19:A6 Authority key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE Certificate issuer: /CN=82b53661f621b6f574a5f38f1162ca679c3b30ee Certificate serial: 019B30B0B8019E9A963B4DEC74B9CE7D2587 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft Manifest number: 07C5 Signing time: Thu 18 Dec 2025 09:00:46 +0000 Manifest this update: Thu 18 Dec 2025 09:00:46 +0000 Manifest next update: Fri 19 Dec 2025 09:00:46 +0000 Files and hashes: 1: QOnOX-qgjRMjz_SNK9ZpG_NDO98.roa (hash: N/XUOamSaDoqkQC9NmUkQgS+Uf69LEs+brVxUPL9rfU=) 2: grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl (hash: DSXPLLL8dWFAfxMdb0vpqtaU1wC7vWckEEzhYTGHIio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:b0:b8:01:9e:9a:96:3b:4d:ec:74:b9:ce:7d:25:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee Validity Not Before: Dec 18 09:00:46 2025 GMT Not After : Dec 19 09:00:46 2025 GMT Subject: CN=742d1fde22fd60a60db48ebe4144a49b1b0119a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ed:0a:77:e3:91:89:e4:7e:46:e9:be:06:b0: 4a:46:45:e8:6b:3c:84:7f:82:02:e2:ec:fa:86:fe: 1a:a0:5e:62:69:e3:c2:36:ba:42:f1:33:73:f1:a0: 70:63:a4:dc:77:77:ec:7a:26:55:20:84:c0:09:1a: 2b:f2:1b:c0:5b:d6:3a:dd:fe:04:73:1f:ec:bd:9c: 56:f4:b5:61:90:41:33:93:91:05:32:24:c6:99:e0: 27:28:3b:1e:71:f0:f7:3b:b7:95:e3:ec:85:9b:53: b8:cf:8c:50:81:64:e4:26:d3:f0:b6:26:b3:0c:a3: b2:8f:10:c4:6b:ee:a7:52:63:cf:3e:a0:f3:5c:f6: 84:6e:b8:47:70:e6:72:52:86:a2:ef:81:f6:ab:d4: 0b:15:e5:ae:91:cc:1a:bd:ba:f6:0d:db:71:57:ed: ca:de:2b:3e:a3:6d:cc:37:95:46:ff:36:13:32:e1: ce:af:87:01:9f:3f:0c:f2:45:bf:00:01:3c:bc:e3: f0:2a:9d:7c:43:3f:33:d4:24:af:5e:8e:67:6e:4c: ed:b6:28:9e:6e:39:7b:48:c3:5f:ec:7b:77:96:5c: fe:03:34:80:41:0d:9c:1a:b0:fa:69:b7:71:17:2e: 1f:56:5d:1c:ed:dd:12:5d:cf:83:6a:98:86:a2:a7: f7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2D:1F:DE:22:FD:60:A6:0D:B4:8E:BE:41:44:A4:9B:1B:01:19:A6 X509v3 Authority Key Identifier: keyid:82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:ea:de:5a:f5:72:38:85:55:00:89:02:7a:ab:f2:ca:10:9d: 3d:65:81:8d:80:f8:7e:71:5f:01:73:6b:ca:43:a6:1b:ae:f9: 5d:ef:a0:27:5b:f0:ec:a2:c5:86:07:06:e1:b6:b3:fc:67:fe: 1c:b0:bc:e6:16:f0:61:2a:93:4c:e1:4e:c1:05:97:09:7c:ec: 95:e2:94:f0:43:f0:ad:54:65:d1:ad:b7:1b:c6:61:cc:b0:0f: 92:4c:b1:8b:b8:f5:71:59:02:33:81:33:45:8e:0a:8e:e8:97: a3:13:15:53:46:1a:57:61:0c:8d:68:e4:9d:52:dc:de:45:bb: c1:69:06:5c:69:bb:54:23:e9:23:23:09:75:a6:4e:b1:64:8d: f8:ba:9e:5c:03:54:f5:f8:c6:41:0b:18:fc:0e:07:56:4e:dc: 1d:b8:9f:9e:ae:56:19:b7:a0:30:23:ac:f0:a6:95:09:7f:2d: 6c:48:01:d4:10:96:b9:34:91:6b:50:a3:53:c9:9c:06:5a:f1: 06:75:23:7b:f2:49:a3:2e:67:ee:05:40:e1:1b:96:0e:4c:89: ac:9e:a1:d7:72:f6:4f:6f:77:63:d3:90:f3:29:28:49:c9:c9: 2c:82:e1:a7:65:1c:77:b8:d0:fc:5b:95:f9:65:31:51:12:25: ef:f0:d1:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswsLgBnpqWO03sdLnOfSWHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYjUzNjYxZjYyMWI2ZjU3NGE1ZjM4ZjExNjJjYTY3OWMz YjMwZWUwHhcNMjUxMjE4MDkwMDQ2WhcNMjUxMjE5MDkwMDQ2WjAzMTEwLwYDVQQD Eyg3NDJkMWZkZTIyZmQ2MGE2MGRiNDhlYmU0MTQ0YTQ5YjFiMDExOWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke0Kd+ORieR+Rum+BrBKRkXoazyE f4IC4uz6hv4aoF5iaePCNrpC8TNz8aBwY6Tcd3fseiZVIITACRor8hvAW9Y63f4E cx/svZxW9LVhkEEzk5EFMiTGmeAnKDsecfD3O7eV4+yFm1O4z4xQgWTkJtPwtiaz DKOyjxDEa+6nUmPPPqDzXPaEbrhHcOZyUoai74H2q9QLFeWukcwavbr2DdtxV+3K 3is+o23MN5VG/zYTMuHOr4cBnz8M8kW/AAE8vOPwKp18Qz8z1CSvXo5nbkzttiie bjl7SMNf7Ht3llz+AzSAQQ2cGrD6abdxFy4fVl0c7d0SXc+DapiGoqf37wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQtH94i/WCmDbSOvkFEpJsbARmmMB8GA1UdIwQY MBaAFIK1NmH2Ibb1dKXzjxFiymecOzDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iNzRhZDYtYWE1YS00OTQ5LWI4NjAt NjQ5YmZjNTQ4NTg3LzEvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iNzRhZDYtYWE1YS00OTQ5LWI4NjAtNjQ5YmZjNTQ4NTg3 LzEvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0ureWvVy OIVVAIkCeqvyyhCdPWWBjYD4fnFfAXNrykOmG675Xe+gJ1vw7KLFhgcG4baz/Gf+ HLC85hbwYSqTTOFOwQWXCXzsleKU8EPwrVRl0a23G8ZhzLAPkkyxi7j1cVkCM4Ez RY4KjuiXoxMVU0YaV2EMjWjknVLc3kW7wWkGXGm7VCPpIyMJdaZOsWSN+LqeXANU 9fjGQQsY/A4HVk7cHbifnq5WGbegMCOs8KaVCX8tbEgB1BCWuTSRa1CjU8mcBlrx BnUje/JJoy5n7gVA4RuWDkyJrJ6h13L2T293Y9OQ8ykoScnJLILhp2Ucd7jQ/FuV +WUxURIl7/DR4Q== -----END CERTIFICATE-----Generated at Thu Dec 18 18:35:51 2025 by rpki-client