This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json) Hash identifier: kJhBel7vvVTyVElV0e8cdNi/P/AptrstZfkD66my/5E= Subject key identifier: 4A:D2:1D:58:A2:A5:09:C6:86:09:F7:91:AC:55:DD:00:0C:C6:61:1A Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f Certificate serial: 019B55D01322D312F27AAF71F5A943DFF733 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 14:00:58 +0000 Manifest this update: Thu 25 Dec 2025 14:00:58 +0000 Manifest next update: Fri 26 Dec 2025 14:00:58 +0000 Files and hashes: 1: L07o_vv656M9OEJjc4BFj7rpTc8.roa (hash: RSQDee8PToqw8SZNKDk+n8QFVV+DzoM0xmaXuyUh35A=) 2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: aw13ycmcRc+BCtZ3AM2ihaXBaA5uP3KYNCS+N67QMuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:d0:13:22:d3:12:f2:7a:af:71:f5:a9:43:df:f7:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f Validity Not Before: Dec 25 14:00:58 2025 GMT Not After : Dec 26 14:00:58 2025 GMT Subject: CN=4ad21d58a2a509c68609f791ac55dd000cc6611a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3f:95:67:ad:d0:b9:78:59:84:66:27:02:0b: 4a:e5:28:86:5b:2f:17:ae:66:9e:06:07:4d:46:5c: 14:4b:3e:4e:c3:8d:ea:6f:f1:c9:9f:aa:d7:9a:84: 90:5d:ed:b3:9e:85:19:78:5a:6d:29:46:ee:10:f3: b5:86:39:d6:e8:59:07:2f:fa:38:47:08:f4:22:dc: 97:10:51:40:b5:cd:04:24:78:c6:cb:00:09:d1:1b: fc:b0:51:0d:cb:95:b5:91:bf:71:b9:c8:d9:54:9b: 76:df:6a:d7:66:c3:4c:42:ab:bb:e7:ec:2a:ea:e3: dc:fe:22:20:a4:aa:91:f1:dc:7a:a0:36:31:4f:5c: 79:5b:41:ea:94:da:5a:28:64:d3:4d:37:be:7a:aa: ee:30:36:a1:a4:63:b0:71:43:e7:3f:9e:b8:9b:05: 98:dd:9b:4d:5c:80:d4:7c:90:7c:8d:ba:ce:bd:41: 1d:84:48:eb:68:5a:e8:4a:a0:a2:84:6c:9e:80:34: 88:dd:90:dd:cd:31:23:15:46:10:ea:95:b2:5f:38: 2d:18:32:1e:a2:90:97:40:ee:75:0c:12:b9:8a:bc: 8e:93:5e:4d:71:d0:77:71:56:92:ce:ed:d4:25:fb: 8c:50:c7:da:9c:fe:97:75:b4:fb:b8:0d:c0:d1:28: 2d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D2:1D:58:A2:A5:09:C6:86:09:F7:91:AC:55:DD:00:0C:C6:61:1A X509v3 Authority Key Identifier: keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a2:1c:e0:36:a9:36:e2:10:cb:4b:f0:7b:46:d3:9b:85:b0: 81:bd:aa:01:30:c6:f9:63:0d:0a:ac:35:70:77:83:26:3e:6a: f2:a5:0f:dc:06:c3:a9:0c:80:b6:17:72:f1:c8:b0:5e:f8:0e: ac:73:b5:33:ef:95:61:27:44:38:f0:08:69:40:d6:d8:d9:09: 48:c2:cc:08:c8:d3:e2:68:3c:e3:b7:75:bd:e0:bd:f9:f4:9c: 2d:a4:d2:ff:9e:10:34:ee:c1:60:3e:8a:26:83:13:1a:91:d4: a0:25:29:81:37:92:12:7e:96:2f:0d:ab:2d:57:8d:6e:86:13: a4:60:17:96:d3:de:2c:0a:00:b2:b7:d1:41:09:d9:a1:20:63: 1f:37:d3:b4:16:f0:f8:ec:1c:90:da:93:4e:28:37:8c:93:c7: 46:3b:7a:c9:91:cf:78:7e:0c:6d:ac:f5:0b:25:fb:53:da:c8: 98:7a:2e:43:4f:9f:e4:f1:a3:29:55:d7:c0:e3:db:7a:9e:6a: 43:83:7b:ea:1e:40:60:c6:a3:5f:c2:cb:d4:21:a3:a9:da:10: 9d:1a:2b:7d:3c:c9:d7:d7:6e:6a:bb:eb:f6:91:bb:a8:4d:88: e2:e0:bf:65:13:ad:10:0c:4b:f2:15:69:44:74:e0:94:87:0a: 30:b0:3d:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtV0BMi0xLyeq9x9alD3/czMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOTBlMTA0MmJhZGQ4OGU5NmU2MzllYWEwYWQwMjMyODdl YTUwN2YwHhcNMjUxMjI1MTQwMDU4WhcNMjUxMjI2MTQwMDU4WjAzMTEwLwYDVQQD Eyg0YWQyMWQ1OGEyYTUwOWM2ODYwOWY3OTFhYzU1ZGQwMDBjYzY2MTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj+VZ63QuXhZhGYnAgtK5SiGWy8X rmaeBgdNRlwUSz5Ow43qb/HJn6rXmoSQXe2znoUZeFptKUbuEPO1hjnW6FkHL/o4 Rwj0ItyXEFFAtc0EJHjGywAJ0Rv8sFENy5W1kb9xucjZVJt232rXZsNMQqu75+wq 6uPc/iIgpKqR8dx6oDYxT1x5W0HqlNpaKGTTTTe+eqruMDahpGOwcUPnP564mwWY 3ZtNXIDUfJB8jbrOvUEdhEjraFroSqCihGyegDSI3ZDdzTEjFUYQ6pWyXzgtGDIe opCXQO51DBK5iryOk15NcdB3cVaSzu3UJfuMUMfanP6XdbT7uA3A0SgtawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErSHViipQnGhgn3kaxV3QAMxmEaMB8GA1UdIwQY MBaAFIOQ4QQrrdiOluY56qCtAjKH6lB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYt NDlmYTU4ZmVkZmYzLzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYtNDlmYTU4ZmVkZmYz LzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6Ic4Dap NuIQy0vwe0bTm4Wwgb2qATDG+WMNCqw1cHeDJj5q8qUP3AbDqQyAthdy8ciwXvgO rHO1M++VYSdEOPAIaUDW2NkJSMLMCMjT4mg847d1veC9+fScLaTS/54QNO7BYD6K JoMTGpHUoCUpgTeSEn6WLw2rLVeNboYTpGAXltPeLAoAsrfRQQnZoSBjHzfTtBbw +OwckNqTTig3jJPHRjt6yZHPeH4Mbaz1CyX7U9rImHouQ0+f5PGjKVXXwOPbep5q Q4N76h5AYMajX8LL1CGjqdoQnRorfTzJ19duarvr9pG7qE2I4uC/ZROtEAxL8hVp RHTglIcKMLA9XA== -----END CERTIFICATE-----Generated at Thu Dec 25 16:27:28 2025 by rpki-client