This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft File: g2CfK50khvNujNKd-ip1akjefFE.mft (raw, json) Hash identifier: IDzFYjVN0+hKO7vwLkHzH42Y0OXBmtxFbsnrP8C+Vv4= Subject key identifier: CE:9C:83:B2:F9:8F:07:54:FE:3F:B3:2B:E9:9D:B4:F7:49:01:F3:97 Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51 Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51 Certificate serial: 019B386A225FC0BD6DA24EA3C8F8770CA589 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft Manifest number: 178D Signing time: Fri 19 Dec 2025 21:00:38 +0000 Manifest this update: Fri 19 Dec 2025 21:00:38 +0000 Manifest next update: Sat 20 Dec 2025 21:00:38 +0000 Files and hashes: 1: GxR7z8RKcSPGLTL-vNXCK33Iesc.roa (hash: YLGDTkKd+pthF6v4ZZ4TjrJJjHHjvrONsu/e4skdHWA=) 2: g2CfK50khvNujNKd-ip1akjefFE.crl (hash: BsRAY4y14v8ZhfB/3Sh4l0zWEFbdXEVNNNXEth4qf2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:22:5f:c0:bd:6d:a2:4e:a3:c8:f8:77:0c:a5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51 Validity Not Before: Dec 19 21:00:38 2025 GMT Not After : Dec 20 21:00:38 2025 GMT Subject: CN=ce9c83b2f98f0754fe3fb32be99db4f74901f397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f4:aa:ba:60:91:e0:bf:24:4b:c7:cd:6a:52: c3:f7:48:5e:f2:45:6a:24:7a:81:47:c5:35:b4:6b: 3b:31:56:37:ba:44:15:05:16:45:0c:60:27:79:95: b3:a1:57:df:6e:04:78:c7:c9:94:8e:80:ca:d0:86: 78:3c:93:a4:79:35:30:3b:ae:70:19:db:58:61:e5: 9b:cc:e7:6b:63:ed:af:9e:93:ec:fa:74:f2:9f:b0: 5a:07:5c:05:61:1c:d9:a7:3a:62:fa:ad:23:5b:d0: 0f:a3:12:0f:c2:a1:2f:ba:56:c2:de:27:dc:75:dd: 77:fb:81:e5:5d:25:38:84:7c:a7:c0:94:ea:ed:b7: 97:86:43:82:e0:75:67:99:1e:2c:a7:96:01:2f:b0: a9:69:71:8f:8a:ec:17:76:58:33:68:1c:6b:f4:ff: 1c:34:6c:86:02:35:bf:7b:e7:a4:b3:78:34:01:6b: 68:69:78:bb:ec:4b:1b:52:fb:72:e8:c4:2e:57:88: a6:91:37:95:77:e9:44:8a:7d:82:ff:5f:19:75:13: 24:aa:06:41:53:2e:97:03:08:97:07:1b:cf:99:62: 3c:36:d5:66:6a:5d:0e:75:d9:f3:ce:9b:fa:63:09: 2c:3e:64:32:1e:55:52:02:3d:eb:86:58:5d:08:84: 2a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9C:83:B2:F9:8F:07:54:FE:3F:B3:2B:E9:9D:B4:F7:49:01:F3:97 X509v3 Authority Key Identifier: keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:15:de:c2:d6:64:f2:b2:23:17:e0:c7:93:98:7b:49:81:5d: 33:09:c1:c4:8a:c9:f3:fb:31:c1:22:89:af:d8:99:8e:da:57: 8b:36:aa:3b:4d:cf:90:bb:f7:90:7e:ce:c3:ce:14:fe:db:df: 1e:11:54:8e:24:8c:b1:e6:a0:ab:fd:8b:65:da:93:ac:4c:23: f0:1e:7d:d8:f6:1e:3e:14:85:d3:95:d5:99:26:e2:62:dd:c5: 8d:64:c8:e1:e2:56:38:d3:4b:c6:79:74:98:68:7c:7a:8d:ee: d7:c2:e9:ee:81:21:54:99:cb:d9:96:b6:5a:c9:62:3c:ab:90: d6:35:dd:97:fc:90:61:61:2d:bc:83:92:06:5a:a1:78:31:b0: d5:a1:00:86:26:e5:fc:d2:af:35:60:11:e3:a1:34:4f:3d:69: c6:f7:1b:da:0b:04:76:8f:85:ca:4a:b8:64:79:9c:1f:0d:72: 40:08:c5:a4:ac:1e:d1:84:f7:a3:eb:a4:63:c4:fc:31:7e:97: 76:1d:12:85:48:a6:7a:b7:b6:3a:51:fe:6b:d0:c1:db:20:ef: 55:89:a1:ed:13:5e:f4:4d:54:aa:c1:69:a5:be:d0:1e:26:d5: 98:9f:0f:3c:6c:25:4f:f4:d1:88:60:09:ad:73:7a:70:71:9f: 34:e5:b9:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4aiJfwL1tok6jyPh3DKWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjA5ZjJiOWQyNDg2ZjM2ZThjZDI5ZGZhMmE3NTZhNDhk ZTdjNTEwHhcNMjUxMjE5MjEwMDM4WhcNMjUxMjIwMjEwMDM4WjAzMTEwLwYDVQQD EyhjZTljODNiMmY5OGYwNzU0ZmUzZmIzMmJlOTlkYjRmNzQ5MDFmMzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvSqumCR4L8kS8fNalLD90he8kVq JHqBR8U1tGs7MVY3ukQVBRZFDGAneZWzoVffbgR4x8mUjoDK0IZ4PJOkeTUwO65w GdtYYeWbzOdrY+2vnpPs+nTyn7BaB1wFYRzZpzpi+q0jW9APoxIPwqEvulbC3ifc dd13+4HlXSU4hHynwJTq7beXhkOC4HVnmR4sp5YBL7CpaXGPiuwXdlgzaBxr9P8c NGyGAjW/e+eks3g0AWtoaXi77EsbUvty6MQuV4imkTeVd+lEin2C/18ZdRMkqgZB Uy6XAwiXBxvPmWI8NtVmal0Oddnzzpv6YwksPmQyHlVSAj3rhlhdCIQqmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6cg7L5jwdU/j+zK+mdtPdJAfOXMB8GA1UdIwQY MBaAFINgnyudJIbzbozSnfoqdWpI3nxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9kNmVjM2ItZTcxNy00YzNkLWIwYWUt NWU2MGY2ZGEyYjA5LzEvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9kNmVjM2ItZTcxNy00YzNkLWIwYWUtNWU2MGY2ZGEyYjA5 LzEvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhXewtZk 8rIjF+DHk5h7SYFdMwnBxIrJ8/sxwSKJr9iZjtpXizaqO03PkLv3kH7Ow84U/tvf HhFUjiSMseagq/2LZdqTrEwj8B592PYePhSF05XVmSbiYt3FjWTI4eJWONNLxnl0 mGh8eo3u18Lp7oEhVJnL2Za2WsliPKuQ1jXdl/yQYWEtvIOSBlqheDGw1aEAhibl /NKvNWAR46E0Tz1pxvcb2gsEdo+Fykq4ZHmcHw1yQAjFpKwe0YT3o+ukY8T8MX6X dh0ShUimere2OlH+a9DB2yDvVYmh7RNe9E1UqsFppb7QHibVmJ8PPGwlT/TRiGAJ rXN6cHGfNOW5gw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:12:29 2025 by rpki-client