This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft File: g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft (raw, json) Hash identifier: FC59vNtZ5/sTTnjWlQi12XgSlSUjuHdES3yWhr2nN24= Subject key identifier: 08:0C:F9:B2:93:EC:C0:B8:B9:2B:25:A7:B3:49:A2:24:AA:1B:F2:D0 Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE Certificate issuer: /CN=83608851202328dce5fc01bf9dd292520530d9fe Certificate serial: 019B5D896A126F13301617213641F4399A1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft Manifest number: 0744 Signing time: Sat 27 Dec 2025 02:00:45 +0000 Manifest this update: Sat 27 Dec 2025 02:00:45 +0000 Manifest next update: Sun 28 Dec 2025 02:00:45 +0000 Files and hashes: 1: 9ZuULR-c9rvN4U_Qezt0ck4tz_4.roa (hash: NvC05zdhztqBgGL0x7IrDtfQb3ZiSTjs+SHJkAWRFb8=) 2: g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl (hash: HAtHg/kKAd5UdBchCkeT34KjYa9Fdr7HwJ0HMnw0Qkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:6a:12:6f:13:30:16:17:21:36:41:f4:39:9a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe Validity Not Before: Dec 27 02:00:45 2025 GMT Not After : Dec 28 02:00:45 2025 GMT Subject: CN=080cf9b293ecc0b8b92b25a7b349a224aa1bf2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1c:67:10:79:28:c7:e6:1b:f3:39:60:ed:d1: 8a:93:b6:70:53:ba:15:a8:b5:23:0f:f1:36:d2:48: 83:6e:97:1a:e6:b1:06:77:3e:f2:5a:b0:de:e9:83: 2f:78:7c:94:a0:ef:25:04:f4:d7:c7:dd:d2:f4:70: c3:04:28:44:db:4f:4a:c5:ae:08:40:14:52:3c:70: f4:7b:5e:60:79:da:91:6c:06:1e:97:6f:66:30:a9: 25:6c:34:e9:cb:87:87:f1:19:c4:f3:d3:cf:dd:63: 20:af:04:4b:e1:9e:62:3d:35:e4:7b:6a:3c:b9:3e: 84:70:4b:a5:5e:b3:cb:8f:2b:d8:2b:47:0b:ca:ec: 61:a3:e1:5a:64:be:f2:3e:a0:1f:a2:9b:fa:e4:c1: bd:07:59:1a:76:48:7e:b4:33:c9:85:a2:73:37:5c: 6d:8c:45:eb:2d:14:fb:40:2d:9e:05:ea:c4:be:5d: 9d:7e:b4:92:89:5f:93:4d:ed:31:11:ec:58:9b:ce: d5:75:84:75:9e:d9:8e:39:da:ef:24:d7:e2:9c:a4: c5:2f:04:44:43:1e:b9:a4:e7:0a:56:c4:6b:6d:5c: 6e:32:97:cf:aa:ff:74:4f:a6:2c:4a:e0:77:aa:88: cc:29:85:29:81:ca:fb:b0:4b:80:78:d4:59:54:8f: 30:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0C:F9:B2:93:EC:C0:B8:B9:2B:25:A7:B3:49:A2:24:AA:1B:F2:D0 X509v3 Authority Key Identifier: keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:e8:03:d6:d6:cb:28:0b:98:47:88:85:ff:4e:67:ca:bb:6d: 91:8e:98:1a:d8:00:c5:f3:42:3b:9b:13:57:d8:5f:e7:b7:40: 1e:13:a9:38:19:d0:f8:f3:58:5f:d1:9d:1a:ae:1c:91:32:10: 46:8b:46:eb:a1:25:b2:42:7c:79:26:80:0f:ff:f9:00:f6:4c: a3:25:76:b8:80:64:dc:d1:f4:e1:95:7d:9f:b0:31:12:c6:05: a6:45:a6:a4:bb:c8:85:6a:d0:38:1f:0b:bb:8c:72:c8:c4:ef: 4b:4c:0d:1b:09:af:06:41:05:dd:9c:0e:8e:f7:8e:ae:16:2d: c0:79:7a:f7:6b:2d:b5:66:a8:67:bb:70:5b:2a:d0:fe:c8:5d: 42:55:a7:01:1a:55:b8:70:bf:44:04:cf:2b:ed:9d:98:44:78: 81:3f:59:f2:80:7b:c6:05:16:7a:ad:54:be:33:23:45:76:6b: 79:8d:3c:1d:74:ae:63:4b:f1:3c:10:06:07:9d:4d:58:65:3f: 80:3b:3d:47:f6:b6:8b:f6:d7:6d:f7:cc:8e:f2:2c:fb:59:b8: 38:80:92:e0:76:27:31:aa:3e:93:33:f5:a9:cb:01:52:54:63: 41:82:60:2a:5c:74:80:9b:be:e2:c5:a7:fc:09:42:95:4b:73: 4b:02:3b:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdiWoSbxMwFhchNkH0OZofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjA4ODUxMjAyMzI4ZGNlNWZjMDFiZjlkZDI5MjUyMDUz MGQ5ZmUwHhcNMjUxMjI3MDIwMDQ1WhcNMjUxMjI4MDIwMDQ1WjAzMTEwLwYDVQQD EygwODBjZjliMjkzZWNjMGI4YjkyYjI1YTdiMzQ5YTIyNGFhMWJmMmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hxnEHkox+Yb8zlg7dGKk7ZwU7oV qLUjD/E20kiDbpca5rEGdz7yWrDe6YMveHyUoO8lBPTXx93S9HDDBChE209Kxa4I QBRSPHD0e15gedqRbAYel29mMKklbDTpy4eH8RnE89PP3WMgrwRL4Z5iPTXke2o8 uT6EcEulXrPLjyvYK0cLyuxho+FaZL7yPqAfopv65MG9B1kadkh+tDPJhaJzN1xt jEXrLRT7QC2eBerEvl2dfrSSiV+TTe0xEexYm87VdYR1ntmOOdrvJNfinKTFLwRE Qx65pOcKVsRrbVxuMpfPqv90T6YsSuB3qojMKYUpgcr7sEuAeNRZVI8wnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgM+bKT7MC4uSslp7NJoiSqG/LQMB8GA1UdIwQY MBaAFINgiFEgIyjc5fwBv53SklIFMNn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80NTM1NDItMDhiMi00Mzk5LWJjNWMt Yzc1NmFlMDFmYThhLzEvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80NTM1NDItMDhiMi00Mzk5LWJjNWMtYzc1NmFlMDFmYThh LzEvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+gD1tbL KAuYR4iF/05nyrttkY6YGtgAxfNCO5sTV9hf57dAHhOpOBnQ+PNYX9GdGq4ckTIQ RotG66ElskJ8eSaAD//5APZMoyV2uIBk3NH04ZV9n7AxEsYFpkWmpLvIhWrQOB8L u4xyyMTvS0wNGwmvBkEF3ZwOjveOrhYtwHl692sttWaoZ7twWyrQ/shdQlWnARpV uHC/RATPK+2dmER4gT9Z8oB7xgUWeq1UvjMjRXZreY08HXSuY0vxPBAGB51NWGU/ gDs9R/a2i/bXbffMjvIs+1m4OICS4HYnMao+kzP1qcsBUlRjQYJgKlx0gJu+4sWn /AlClUtzSwI7iA== -----END CERTIFICATE-----Generated at Sat Dec 27 08:10:45 2025 by rpki-client