This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft File: g7d8noEHbPS0zv7V7vIQf3UsNjA.mft (raw, json) Hash identifier: 8LZYcq4VYV2qKPtt+lXv4blJUcsau7/U/xiJ37UHdXc= Subject key identifier: 93:40:F2:24:AA:7B:8B:2D:9F:47:51:A0:9C:68:22:6B:D3:59:2C:B0 Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30 Certificate issuer: /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630 Certificate serial: 019B3CEC099C169E107A0FADB098A2213473 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 18:01:00 +0000 Manifest this update: Sat 20 Dec 2025 18:01:00 +0000 Manifest next update: Sun 21 Dec 2025 18:01:00 +0000 Files and hashes: 1: fYK373nYUB0XvmUvg-oovkxaiNE.roa (hash: xzFxyXs3TjE095d1PcNasH+Goh3HeA3NihMPCGecT0o=) 2: g7d8noEHbPS0zv7V7vIQf3UsNjA.crl (hash: 3CVQugAMSW5nWLxmEyg0ggTVsKTa0ll77/6kaDfzrlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:09:9c:16:9e:10:7a:0f:ad:b0:98:a2:21:34:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630 Validity Not Before: Dec 20 18:01:00 2025 GMT Not After : Dec 21 18:01:00 2025 GMT Subject: CN=9340f224aa7b8b2d9f4751a09c68226bd3592cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:32:8d:3b:46:e5:2b:db:fe:8b:e5:ec:db:c6: 81:8d:84:13:48:01:f0:91:df:d3:90:4d:96:f4:4e: 1f:62:c3:00:07:79:5d:d8:04:e1:e9:c8:7a:08:68: dd:5b:fe:05:92:8d:7d:e0:67:ad:13:e0:42:50:e6: af:63:6e:aa:7b:83:16:6f:fb:a1:bf:ae:ed:32:e6: 50:a3:2b:6b:a2:f8:59:3a:6b:4c:4b:12:3c:8d:e7: ad:50:79:93:b0:0c:d8:42:4d:a8:02:2d:77:fb:95: 89:f9:d7:03:3f:1a:e2:75:c0:f2:60:bf:4f:c0:2c: 51:ad:9a:c4:79:1f:86:25:3a:c8:91:31:c6:8e:9b: dc:0a:c7:55:1a:d7:0a:b0:47:e6:fd:2d:22:f4:3c: f8:a8:71:3f:2e:ad:eb:39:c5:d2:2e:eb:b8:19:a0: 39:d3:89:0d:0e:26:8d:83:d2:d2:c5:73:f4:a8:f4: 89:c6:cb:17:4f:9e:ec:88:2c:5f:41:a2:29:87:d4: df:d2:ec:5d:1a:4d:4d:85:de:80:e0:28:59:e0:5e: 2b:86:6e:eb:65:63:53:e1:08:54:ec:af:ae:8b:00: 17:5f:84:27:37:98:bf:ff:1d:9a:d6:99:9e:1b:27: d3:16:e5:4e:80:78:a6:95:02:f4:f1:7d:d7:ff:d5: b2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:40:F2:24:AA:7B:8B:2D:9F:47:51:A0:9C:68:22:6B:D3:59:2C:B0 X509v3 Authority Key Identifier: keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0a:c8:a6:5f:5b:10:f8:c4:9c:85:7d:88:fb:d9:5f:34:1c: a8:8b:c1:dc:46:01:de:40:f4:e7:31:e1:17:0a:a9:1d:05:38: 02:8a:65:7a:29:07:24:cd:ca:d3:1a:0d:5c:05:8c:1e:56:57: ee:1e:53:1d:46:7c:df:15:1a:fa:2c:a1:3a:84:8e:6f:1b:8a: 27:10:cc:ff:e1:0f:1e:c2:54:8a:3a:fa:8e:38:a6:01:5b:05: fb:07:1b:2e:c4:fd:bb:e5:71:70:f8:6c:95:ed:f0:4e:87:97: ba:1d:07:81:33:69:d6:c1:a9:bb:91:09:80:e6:9a:37:5f:ca: 82:92:6c:86:1d:0d:1d:05:00:cb:30:65:ae:54:64:94:dd:ba: 6d:54:a8:d5:bc:72:61:df:ee:c3:43:2f:a0:28:96:ad:16:c5: b6:e2:a9:74:a5:e8:50:f6:04:cd:14:66:8d:8f:7c:68:e9:58: 54:1c:af:ce:df:d8:26:22:d3:75:5c:db:13:3f:a9:51:18:f8: 4c:00:e3:9d:f4:40:c1:08:52:d6:22:58:9f:0f:55:74:fd:ea: 18:68:bf:f2:aa:e7:5c:b6:23:ef:ca:5a:ae:f5:3c:8a:f4:6a: 48:7c:46:e7:9b:00:3c:57:6a:db:44:93:1a:49:30:67:fd:44: 36:9a:a7:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87AmcFp4Qeg+tsJiiITRzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYjc3YzllODEwNzZjZjRiNGNlZmVkNWVlZjIxMDdmNzUy YzM2MzAwHhcNMjUxMjIwMTgwMTAwWhcNMjUxMjIxMTgwMTAwWjAzMTEwLwYDVQQD Eyg5MzQwZjIyNGFhN2I4YjJkOWY0NzUxYTA5YzY4MjI2YmQzNTkyY2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DKNO0blK9v+i+Xs28aBjYQTSAHw kd/TkE2W9E4fYsMAB3ld2ATh6ch6CGjdW/4Fko194GetE+BCUOavY26qe4MWb/uh v67tMuZQoytrovhZOmtMSxI8jeetUHmTsAzYQk2oAi13+5WJ+dcDPxridcDyYL9P wCxRrZrEeR+GJTrIkTHGjpvcCsdVGtcKsEfm/S0i9Dz4qHE/Lq3rOcXSLuu4GaA5 04kNDiaNg9LSxXP0qPSJxssXT57siCxfQaIph9Tf0uxdGk1Nhd6A4ChZ4F4rhm7r ZWNT4QhU7K+uiwAXX4QnN5i//x2a1pmeGyfTFuVOgHimlQL08X3X/9WyOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNA8iSqe4stn0dRoJxoImvTWSywMB8GA1UdIwQY MBaAFIO3fJ6BB2z0tM7+1e7yEH91LDYwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzdkOG5vRUhiUFMwenY3Vjd2SVFmM1VzTmpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZGM0ZGQtODBiYi00ZGY1LWFmNTgt YjdhZGYwNGU0MjNkLzEvZzdkOG5vRUhiUFMwenY3Vjd2SVFmM1VzTmpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8zZGM0ZGQtODBiYi00ZGY1LWFmNTgtYjdhZGYwNGU0MjNk LzEvZzdkOG5vRUhiUFMwenY3Vjd2SVFmM1VzTmpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwrIpl9b EPjEnIV9iPvZXzQcqIvB3EYB3kD05zHhFwqpHQU4AopleikHJM3K0xoNXAWMHlZX 7h5THUZ83xUa+iyhOoSObxuKJxDM/+EPHsJUijr6jjimAVsF+wcbLsT9u+VxcPhs le3wToeXuh0HgTNp1sGpu5EJgOaaN1/KgpJshh0NHQUAyzBlrlRklN26bVSo1bxy Yd/uw0MvoCiWrRbFtuKpdKXoUPYEzRRmjY98aOlYVByvzt/YJiLTdVzbEz+pURj4 TADjnfRAwQhS1iJYnw9VdP3qGGi/8qrnXLYj78parvU8ivRqSHxG55sAPFdq20ST GkkwZ/1ENpqnaw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:33:07 2025 by rpki-client