This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json) Hash identifier: KjhqrmGbCjcWSE3QhAlcEOHHs0KYjuW3XFlR429aeaE= Subject key identifier: 9A:B6:58:6F:5F:20:93:E2:16:23:59:55:94:56:E8:D9:63:DA:0A:D2 Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace Certificate serial: 019B61D4AE626D85AFE7E1395A0193D39D74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft Manifest number: 1101 Signing time: Sat 27 Dec 2025 22:01:26 +0000 Manifest this update: Sat 27 Dec 2025 22:01:26 +0000 Manifest next update: Sun 28 Dec 2025 22:01:26 +0000 Files and hashes: 1: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: uBaaL+ffHibn7/kxDXzvkxQpBDW0JM0j20JN3NhRPiI=) 2: q_rL_wFzPAM2YYi3BD5DV-movBM.roa (hash: /Sn84qQYAJwMH4nFNeAxdZuxTOPDKe5EpdIqdCovILg=) 3: rsYfCDwusLsrJbhFacpTz-HDjfU.roa (hash: O6JB/ggb5jt1mvOF+3NkLkH3JGPJ5nijBG0kU9AI6Fo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:d4:ae:62:6d:85:af:e7:e1:39:5a:01:93:d3:9d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace Validity Not Before: Dec 27 22:01:26 2025 GMT Not After : Dec 28 22:01:26 2025 GMT Subject: CN=9ab6586f5f2093e2162359559456e8d963da0ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:65:78:a5:b7:dc:4a:c3:5c:5d:5c:06:25:4a: 9d:67:68:ea:40:09:c0:44:2c:8a:cf:d3:9b:7a:93: ce:f3:0c:e2:8c:f0:db:a0:ab:70:91:40:10:2b:5f: 1d:49:b9:f4:ab:fd:87:f0:e1:24:2e:3a:a9:f6:6f: 38:59:31:9c:7f:9e:5a:e5:87:76:fb:92:fb:54:3f: 05:9d:b8:14:c7:b0:7b:4e:91:19:0f:a3:29:c1:70: 15:b4:39:a5:f7:c8:71:3a:ac:40:42:26:dd:f2:22: 54:dc:a3:b1:49:ce:74:7c:09:42:0e:f0:d7:68:6b: 35:37:ab:8e:99:78:87:24:15:32:4a:9c:6a:9b:1b: e5:4a:36:81:b8:d9:7b:56:48:c2:a9:44:59:9e:3c: 1c:ef:37:4e:d2:36:53:12:2e:07:71:d0:22:12:0d: a5:bf:25:11:1a:3f:4c:d9:4e:35:19:16:e2:e4:26: 56:f3:c6:46:af:9a:43:da:10:41:60:e3:45:2b:8d: 4f:49:26:70:18:a5:19:49:57:ed:16:57:20:4c:dd: b5:c3:12:f3:39:1e:c3:db:30:e5:bd:d5:5e:7f:a9: 45:cf:cc:44:32:4e:7b:65:53:aa:21:44:07:e2:08: e0:8b:13:46:3f:43:9c:e2:d1:9d:c2:d7:44:c2:5d: 98:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B6:58:6F:5F:20:93:E2:16:23:59:55:94:56:E8:D9:63:DA:0A:D2 X509v3 Authority Key Identifier: keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:1b:59:c6:b4:e3:11:38:6e:e4:83:7d:d5:eb:7e:80:ce:61: bf:70:72:ba:52:1c:cc:7c:1e:70:48:4a:6a:6e:a3:9e:d5:93: 53:74:36:1d:98:15:40:fb:5c:4d:49:d5:d9:6e:34:6e:3b:f0: 2d:af:e4:de:6d:94:37:11:ed:26:e8:ed:8a:bf:a2:d0:8e:92: 31:d3:7c:bc:fe:99:1e:11:e5:63:1b:e3:9a:97:4d:76:74:fc: 84:aa:72:27:59:f0:0b:36:56:0f:ee:64:57:22:7e:f0:11:1f: e7:d6:92:9a:38:80:35:78:96:23:99:2e:32:d5:31:72:5f:34: f5:ac:1b:fa:27:24:39:de:7d:62:ef:57:1b:1a:27:bf:10:23: 3b:a7:42:d0:80:5f:49:49:f2:15:a2:0b:af:ac:c8:52:ba:19: 2e:bf:88:52:2d:a2:42:88:01:63:a5:0b:78:ec:4b:be:9b:b0: 42:2a:c1:ba:3f:79:5c:bb:18:a7:d2:84:5f:22:bc:25:ae:fe: 8c:c6:47:00:ed:9e:94:28:09:96:7d:46:0a:75:f3:08:30:ce: 19:7f:a1:2c:85:73:e8:cf:76:60:80:e5:09:92:92:34:20:ba: da:aa:8e:7b:0d:a2:03:8d:27:aa:16:80:45:b9:c6:8c:ff:dc: 62:39:e6:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZth1K5ibYWv5+E5WgGT0510MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzN2UxNzdmNzY2NjMxNjZjNzUxOTBlMmQyMDkzMzVhNmFh ZTVhY2UwHhcNMjUxMjI3MjIwMTI2WhcNMjUxMjI4MjIwMTI2WjAzMTEwLwYDVQQD Eyg5YWI2NTg2ZjVmMjA5M2UyMTYyMzU5NTU5NDU2ZThkOTYzZGEwYWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GV4pbfcSsNcXVwGJUqdZ2jqQAnA RCyKz9ObepPO8wzijPDboKtwkUAQK18dSbn0q/2H8OEkLjqp9m84WTGcf55a5Yd2 +5L7VD8FnbgUx7B7TpEZD6MpwXAVtDml98hxOqxAQibd8iJU3KOxSc50fAlCDvDX aGs1N6uOmXiHJBUySpxqmxvlSjaBuNl7VkjCqURZnjwc7zdO0jZTEi4HcdAiEg2l vyURGj9M2U41GRbi5CZW88ZGr5pD2hBBYONFK41PSSZwGKUZSVftFlcgTN21wxLz OR7D2zDlvdVef6lFz8xEMk57ZVOqIUQH4gjgixNGP0Oc4tGdwtdEwl2YwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJq2WG9fIJPiFiNZVZRW6Nlj2grSMB8GA1UdIwQY MBaAFIN+F392ZjFmx1GQ4tIJM1pqrlrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83MGMxOWYtMjljYS00YjYyLWFjNjIt OGJhNzY4MDIyNzYzLzEvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My83MGMxOWYtMjljYS00YjYyLWFjNjItOGJhNzY4MDIyNzYz LzEvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxtZxrTj EThu5IN91et+gM5hv3ByulIczHwecEhKam6jntWTU3Q2HZgVQPtcTUnV2W40bjvw La/k3m2UNxHtJujtir+i0I6SMdN8vP6ZHhHlYxvjmpdNdnT8hKpyJ1nwCzZWD+5k VyJ+8BEf59aSmjiANXiWI5kuMtUxcl809awb+ickOd59Yu9XGxonvxAjO6dC0IBf SUnyFaILr6zIUroZLr+IUi2iQogBY6ULeOxLvpuwQirBuj95XLsYp9KEXyK8Ja7+ jMZHAO2elCgJln1GCnXzCDDOGX+hLIVz6M92YIDlCZKSNCC62qqOew2iA40nqhaA RbnGjP/cYjnmGg== -----END CERTIFICATE-----Generated at Sun Dec 28 01:49:06 2025 by rpki-client