This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft File: g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json) Hash identifier: KAN6hZ3P3fKRHzKCpHJGvOGBCWYW63V0/DLTkESz5TI= Subject key identifier: 86:57:51:14:C5:12:ED:CD:51:FE:46:F1:F8:1B:30:9E:1F:2B:A4:AE Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E Certificate issuer: /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e Certificate serial: 019B2B8AE81DB68B2E4CEE28E79969BFD783 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft Manifest number: 12B2 Signing time: Wed 17 Dec 2025 09:01:22 +0000 Manifest this update: Wed 17 Dec 2025 09:01:22 +0000 Manifest next update: Thu 18 Dec 2025 09:01:22 +0000 Files and hashes: 1: Db2mHELjbKafmmak8MMgrVJ9q6s.roa (hash: 0wtkW6LztiP4K0i9kH54ddtGh234DUMSdImFiKp9l5M=) 2: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: JKv8ggpEUJrbZUzsnSMTVu4Tqi872wfkGPzTg9lbXo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:e8:1d:b6:8b:2e:4c:ee:28:e7:99:69:bf:d7:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e Validity Not Before: Dec 17 09:01:22 2025 GMT Not After : Dec 18 09:01:22 2025 GMT Subject: CN=86575114c512edcd51fe46f1f81b309e1f2ba4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7a:2f:76:93:c6:24:e2:fb:f2:bd:b9:74:76: df:16:26:63:73:75:bc:c6:9b:62:a7:5a:fa:25:29: 9d:69:b8:f4:e6:26:e9:d7:ae:0e:8b:25:28:9b:e9: 55:5d:85:dc:40:ef:b7:ab:a3:48:5d:37:f0:37:b3: 17:3f:b1:bc:ea:50:34:b5:1a:7b:1f:0c:cb:76:0c: 9a:f7:bd:72:2e:1c:1f:93:0b:93:c3:3d:59:d2:b0: a6:f0:c0:79:68:4c:85:3a:ad:81:c3:69:53:e4:5a: a3:54:a7:47:06:88:be:b9:2a:e2:99:6b:7c:dc:c4: 96:ed:1e:04:57:b4:8c:61:d8:27:c4:7d:cc:37:db: 54:a9:29:34:e6:b2:ed:16:eb:ad:81:f1:4c:05:b9: 20:e5:82:09:6f:3e:1b:46:75:12:26:78:f7:6e:87: 9d:4f:b9:a6:69:20:ec:1c:82:14:19:38:89:d4:51: 35:06:48:25:8c:3f:f6:4c:7a:37:00:1c:1e:87:fc: 2f:de:13:13:57:e6:68:f3:cf:c1:2b:45:39:ea:19: f9:7a:27:cc:6c:9b:95:89:47:de:e8:2b:da:cc:64: 74:92:40:5e:31:31:d2:f7:77:15:a9:c5:69:92:af: 98:14:49:f7:bd:3a:6a:cc:ae:a7:11:77:9f:14:57: 70:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:57:51:14:C5:12:ED:CD:51:FE:46:F1:F8:1B:30:9E:1F:2B:A4:AE X509v3 Authority Key Identifier: keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8d:d7:ea:33:f9:d2:18:f5:f2:03:d3:a1:42:9b:8d:8b:21: bf:1f:60:5a:8e:4a:53:86:ac:38:f1:e2:73:5c:f8:8c:7b:00: 97:84:d1:55:57:af:67:de:99:7a:8a:6d:db:a1:9b:0e:c2:d5: 91:2c:f0:1b:dd:99:84:ce:1d:e0:bf:ed:1c:64:a3:cb:e5:5f: 2f:71:8b:3c:26:99:bd:79:2c:13:f5:19:b2:31:2f:c1:53:17: c2:17:69:df:64:e9:11:6a:30:f5:b7:94:03:83:03:fc:02:64: a6:e5:67:61:0d:38:d4:37:72:7f:8d:af:98:a2:cb:7a:46:c7: 96:f0:3a:52:79:f1:37:f8:80:ec:7a:49:eb:45:ec:95:45:fa: 12:12:57:6e:ce:bc:5b:15:57:3f:00:6e:5c:8f:96:0a:84:0a: 10:5e:13:f4:5b:fd:bb:15:45:f4:67:bb:2c:12:87:6c:36:16: 8c:2e:42:56:41:16:b8:1d:21:0e:5d:22:ee:33:f7:ff:c1:4b: bf:4d:e7:f3:ba:81:d9:8a:5d:e6:70:5f:ae:48:13:08:ac:c9: 2b:c5:f8:07:fb:1a:20:00:36:1f:49:46:61:19:46:40:ed:8d: d0:d5:af:e2:0a:4b:72:fc:46:23:2f:b3:3c:e2:ce:19:5f:c6: c2:f9:01:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriugdtosuTO4o55lpv9eDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYmYzNmViMThlZjlhNTdjNWZiNjAzYWRhNDAwZmU2YjY2 ODhlNmUwHhcNMjUxMjE3MDkwMTIyWhcNMjUxMjE4MDkwMTIyWjAzMTEwLwYDVQQD Eyg4NjU3NTExNGM1MTJlZGNkNTFmZTQ2ZjFmODFiMzA5ZTFmMmJhNGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnovdpPGJOL78r25dHbfFiZjc3W8 xptip1r6JSmdabj05ibp164OiyUom+lVXYXcQO+3q6NIXTfwN7MXP7G86lA0tRp7 HwzLdgya971yLhwfkwuTwz1Z0rCm8MB5aEyFOq2Bw2lT5FqjVKdHBoi+uSrimWt8 3MSW7R4EV7SMYdgnxH3MN9tUqSk05rLtFuutgfFMBbkg5YIJbz4bRnUSJnj3boed T7mmaSDsHIIUGTiJ1FE1BkgljD/2THo3ABweh/wv3hMTV+Zo88/BK0U56hn5eifM bJuViUfe6CvazGR0kkBeMTHS93cVqcVpkq+YFEn3vTpqzK6nEXefFFdwyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZXURTFEu3NUf5G8fgbMJ4fK6SuMB8GA1UdIwQY MBaAFIO/NusY75pXxftgOtpAD+a2aI5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mNzdkNTEtZWUxYy00N2E5LTkwYmMt ZTBkMmExYjZlOGFjLzEvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mNzdkNTEtZWUxYy00N2E5LTkwYmMtZTBkMmExYjZlOGFj LzEvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG43X6jP5 0hj18gPToUKbjYshvx9gWo5KU4asOPHic1z4jHsAl4TRVVevZ96Zeopt26GbDsLV kSzwG92ZhM4d4L/tHGSjy+VfL3GLPCaZvXksE/UZsjEvwVMXwhdp32TpEWow9beU A4MD/AJkpuVnYQ041Ddyf42vmKLLekbHlvA6UnnxN/iA7HpJ60XslUX6EhJXbs68 WxVXPwBuXI+WCoQKEF4T9Fv9uxVF9Ge7LBKHbDYWjC5CVkEWuB0hDl0i7jP3/8FL v03n87qB2Ypd5nBfrkgTCKzJK8X4B/saIAA2H0lGYRlGQO2N0NWv4gpLcvxGIy+z POLOGV/GwvkBAA== -----END CERTIFICATE-----Generated at Wed Dec 17 16:47:23 2025 by rpki-client