This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft File: g0VE4aPiKMTTZH9iqdjJas6eLDE.mft (raw, json) Hash identifier: S5kiNLR6fJfz7Seudn+6UsEGW98udhdz/JXm9q12abs= Subject key identifier: 28:BB:9E:50:FD:AC:23:B2:5B:C8:FC:0D:C8:DA:EE:16:8F:B8:37:4F Authority key identifier: 83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31 Certificate issuer: /CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31 Certificate serial: 019B315652DCA07226D5FF641C9FA47C2E68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft Manifest number: 011D Signing time: Thu 18 Dec 2025 12:01:39 +0000 Manifest this update: Thu 18 Dec 2025 12:01:39 +0000 Manifest next update: Fri 19 Dec 2025 12:01:39 +0000 Files and hashes: 1: dIRpTlRdZwkzOjzMpDEo5Bfz7bk.roa (hash: C+FNl7OuHMU4htW0AknPyHxKy9e5ZPEt8r7b2jyiJx8=) 2: g0VE4aPiKMTTZH9iqdjJas6eLDE.crl (hash: 4uyKt21IbpVTQCkCPntU9QaU3im0OXd7LgoI4WYX0qY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:52:dc:a0:72:26:d5:ff:64:1c:9f:a4:7c:2e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31 Validity Not Before: Dec 18 12:01:39 2025 GMT Not After : Dec 19 12:01:39 2025 GMT Subject: CN=28bb9e50fdac23b25bc8fc0dc8daee168fb8374f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:93:be:6e:d1:c6:5b:60:ab:b0:f6:68:5a:39: 7e:84:c3:be:d3:9a:a5:a7:88:b6:a8:b9:88:7d:14: a8:55:df:3b:f2:2c:62:78:97:07:75:b9:c3:df:49: 83:9f:a9:19:c9:35:23:e2:da:bd:8c:7e:df:c9:a0: f0:be:85:c3:5a:79:78:97:ce:89:a5:5f:59:ca:e9: 0e:ee:2f:8a:1c:bd:c0:c1:9f:d5:d5:7a:a0:16:cf: dc:70:f6:53:be:18:60:da:af:0c:29:e4:a9:9b:45: da:a9:75:42:8d:07:17:83:eb:51:8e:67:de:58:e7: 2e:cb:d0:ae:7d:83:fd:79:e9:3d:12:bf:05:0a:d0: da:bc:97:c9:be:1d:90:56:7c:77:69:b5:6c:b2:aa: 24:ce:44:9f:1a:cc:92:f7:44:8e:c7:c1:b3:93:42: 3e:a1:ee:0c:59:01:43:25:5e:f6:e4:46:68:63:9e: c5:60:3c:cf:6c:53:e6:38:88:b0:b0:37:ae:9b:b5: 59:62:27:e4:20:43:e7:e8:86:aa:40:a9:04:ab:73: 3e:16:7a:42:89:df:21:b9:3f:fd:23:93:57:cc:11: 85:94:4e:35:df:20:7b:4a:82:06:a9:bd:0d:2b:f1: 26:44:9b:e5:24:10:b4:c6:c3:e9:66:25:36:cb:f8: 04:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BB:9E:50:FD:AC:23:B2:5B:C8:FC:0D:C8:DA:EE:16:8F:B8:37:4F X509v3 Authority Key Identifier: keyid:83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:52:db:ea:c4:d2:31:99:4d:80:ea:9b:fc:a0:3a:b9:50:36: bb:ba:9c:9e:02:4c:dc:c1:d6:9c:98:08:5d:74:21:dd:3a:f3: 36:16:3f:6e:70:b0:74:aa:04:fc:2b:7f:03:12:a4:0c:10:0a: f3:b0:10:07:36:fc:cf:42:49:4c:f9:75:4c:53:d6:36:a1:45: a6:b7:31:05:c7:57:20:54:81:b8:0b:34:e8:92:87:52:a0:22: f5:78:ad:9d:18:ba:62:e2:23:19:4c:8d:d0:1b:da:48:2b:d9: b1:15:47:4d:06:9c:a6:c1:58:29:70:87:d6:54:40:70:03:19: 47:27:65:97:23:ff:70:ff:3a:c3:3f:ed:2c:f8:d4:44:f6:0f: 7e:a6:0d:1f:d9:54:30:37:29:69:4e:e4:c5:30:a2:f1:d3:75: e2:1b:39:40:3b:5d:02:c3:47:11:a6:f3:d3:14:20:42:11:ee: 19:14:b7:23:0b:fa:96:48:a4:de:d4:93:89:41:bf:7b:f3:ca: 03:06:30:52:d2:37:f5:94:ba:a9:03:50:1a:c0:53:d5:38:52: 87:46:7b:10:1b:fd:41:5e:fb:9f:f8:28:98:eb:9d:bd:ae:d2: 25:25:71:67:33:97:9c:67:36:45:5b:77:e9:c2:16:95:70:53: e6:c8:f3:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVlLcoHIm1f9kHJ+kfC5oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNDU0NGUxYTNlMjI4YzRkMzY0N2Y2MmE5ZDhjOTZhY2U5 ZTJjMzEwHhcNMjUxMjE4MTIwMTM5WhcNMjUxMjE5MTIwMTM5WjAzMTEwLwYDVQQD EygyOGJiOWU1MGZkYWMyM2IyNWJjOGZjMGRjOGRhZWUxNjhmYjgzNzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZO+btHGW2CrsPZoWjl+hMO+05ql p4i2qLmIfRSoVd878ixieJcHdbnD30mDn6kZyTUj4tq9jH7fyaDwvoXDWnl4l86J pV9ZyukO7i+KHL3AwZ/V1XqgFs/ccPZTvhhg2q8MKeSpm0XaqXVCjQcXg+tRjmfe WOcuy9CufYP9eek9Er8FCtDavJfJvh2QVnx3abVssqokzkSfGsyS90SOx8Gzk0I+ oe4MWQFDJV725EZoY57FYDzPbFPmOIiwsDeum7VZYifkIEPn6IaqQKkEq3M+FnpC id8huT/9I5NXzBGFlE413yB7SoIGqb0NK/EmRJvlJBC0xsPpZiU2y/gEbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCi7nlD9rCOyW8j8Dcja7haPuDdPMB8GA1UdIwQY MBaAFINFROGj4ijE02R/YqnYyWrOniwxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzBWRTRhUGlLTVRUWkg5aXFkakphczZlTERFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iMmVhYTgtODk4Yi00ZjMzLWFmYjkt ODkyNjdlNTI4MDA5LzEvZzBWRTRhUGlLTVRUWkg5aXFkakphczZlTERFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9iMmVhYTgtODk4Yi00ZjMzLWFmYjktODkyNjdlNTI4MDA5 LzEvZzBWRTRhUGlLTVRUWkg5aXFkakphczZlTERFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1Lb6sTS MZlNgOqb/KA6uVA2u7qcngJM3MHWnJgIXXQh3TrzNhY/bnCwdKoE/Ct/AxKkDBAK 87AQBzb8z0JJTPl1TFPWNqFFprcxBcdXIFSBuAs06JKHUqAi9XitnRi6YuIjGUyN 0BvaSCvZsRVHTQacpsFYKXCH1lRAcAMZRydllyP/cP86wz/tLPjURPYPfqYNH9lU MDcpaU7kxTCi8dN14hs5QDtdAsNHEabz0xQgQhHuGRS3Iwv6lkik3tSTiUG/e/PK AwYwUtI39ZS6qQNQGsBT1ThSh0Z7EBv9QV77n/gomOudva7SJSVxZzOXnGc2RVt3 6cIWlXBT5sjz0w== -----END CERTIFICATE-----Generated at Thu Dec 18 18:26:24 2025 by rpki-client