This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json) Hash identifier: QXD+/cmOdazaqg8KZGwRZoBLo+RlGlbHvYJ7gAbyKRs= Subject key identifier: 13:B1:9A:18:DE:06:83:05:36:D7:FB:D8:50:AA:C6:2C:B3:FE:9B:CD Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67 Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267 Certificate serial: 019B51F339203A97C5F6D375740F1D95052D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft Manifest number: 112C Signing time: Wed 24 Dec 2025 20:00:52 +0000 Manifest this update: Wed 24 Dec 2025 20:00:52 +0000 Manifest next update: Thu 25 Dec 2025 20:00:52 +0000 Files and hashes: 1: 0L_x5KrJ0yONYZL6OhXnnI9ON0g.roa (hash: pLDQ94A0tCs3zB2hMsSvw81lpJnRZzCDTURKCYOZ0g4=) 2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: smCM07ceqRs/moIArgat3WfFBII9bAi7Wg5SPVt5q5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:39:20:3a:97:c5:f6:d3:75:74:0f:1d:95:05:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267 Validity Not Before: Dec 24 20:00:52 2025 GMT Not After : Dec 25 20:00:52 2025 GMT Subject: CN=13b19a18de06830536d7fbd850aac62cb3fe9bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d4:6f:36:51:48:63:73:40:a1:14:05:e1:81: 76:29:c4:60:90:01:e3:ab:8a:50:d4:e1:4b:96:c0: 69:57:ee:b7:71:4f:fc:93:4a:e2:77:8f:48:f5:2b: ec:69:90:74:dc:e8:ad:90:71:52:38:ed:f8:e6:16: 58:97:6a:86:9e:b5:53:7c:53:ea:6b:f3:75:79:6a: e2:76:d3:d9:0d:63:8c:95:03:b2:0a:bc:f5:98:8b: 47:c4:fe:00:01:f3:1b:68:d1:11:7f:22:41:fb:11: f1:5e:d6:1b:af:5a:a5:43:65:d7:e2:8c:6e:53:ff: b4:14:46:8c:dc:e9:bc:7f:45:2c:ac:18:24:97:b6: f4:00:ba:94:2a:ed:5e:4e:46:1e:af:2d:04:d0:88: 68:4d:7f:19:87:68:9f:37:86:37:2f:15:f2:93:f8: e0:f7:a0:8a:28:d5:f1:88:8f:93:42:7a:ae:67:d3: 05:a8:8c:3f:53:4e:e8:eb:b4:c7:7a:9d:03:b9:b0: de:89:a7:71:67:cc:d0:cc:02:91:96:9d:38:1f:ad: f2:e3:b3:b4:de:f0:ed:3e:c3:11:fd:17:13:25:64: 64:84:fb:64:52:a7:84:4b:63:48:a0:f0:0e:8a:04: 32:e7:f4:ea:82:ad:8c:31:ed:0a:fc:87:5c:bf:dc: 08:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B1:9A:18:DE:06:83:05:36:D7:FB:D8:50:AA:C6:2C:B3:FE:9B:CD X509v3 Authority Key Identifier: keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:30:13:e3:37:4b:7d:57:c7:c8:44:9b:ff:66:64:39:25:a7: cc:26:8e:d8:e5:77:22:d1:b4:cf:74:c2:8e:6a:49:a9:da:15: 44:4b:95:4d:8c:4f:1b:59:de:93:a4:b1:fe:1c:3d:65:9c:c2: bf:96:a2:98:2d:8f:a1:e3:33:05:cf:44:ff:e0:d5:26:b5:56: 30:7b:58:54:ad:e1:94:98:4d:af:62:5d:24:35:cd:62:7f:4d: 4e:0f:81:1d:65:36:0b:9c:2c:eb:c7:51:5a:2a:f7:08:41:d1: e6:54:af:cc:6a:a1:27:04:74:5d:58:5a:17:48:21:2a:de:1b: 06:7c:5f:0f:4f:34:f5:a0:1f:8c:3d:5d:b5:3d:ed:ce:72:d8: 4f:2d:d9:8d:52:c6:8d:a0:1f:30:2d:db:c3:70:77:f0:e5:7c: 92:26:01:4d:38:2c:59:63:9f:8c:38:bf:25:59:ee:bd:94:2c: 5a:52:9c:b1:50:64:2f:dc:45:88:f6:bd:35:65:81:20:8d:ef: 37:5f:d7:8a:e9:06:c6:17:eb:9b:33:01:3e:93:af:55:ee:e3: 54:c0:29:78:c6:52:f8:4e:dc:a8:6e:22:44:44:1d:c6:bc:52: 8e:bf:65:78:51:dc:76:f9:22:91:39:83:6c:65:25:da:ef:01: fe:f8:16:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8zkgOpfF9tN1dA8dlQUtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNDJhMTQxM2IwY2NlMzRlM2Y3ZmJmMGU3ZjM4ZTBhMzcw YTYyNjcwHhcNMjUxMjI0MjAwMDUyWhcNMjUxMjI1MjAwMDUyWjAzMTEwLwYDVQQD EygxM2IxOWExOGRlMDY4MzA1MzZkN2ZiZDg1MGFhYzYyY2IzZmU5YmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tRvNlFIY3NAoRQF4YF2KcRgkAHj q4pQ1OFLlsBpV+63cU/8k0rid49I9SvsaZB03OitkHFSOO345hZYl2qGnrVTfFPq a/N1eWridtPZDWOMlQOyCrz1mItHxP4AAfMbaNERfyJB+xHxXtYbr1qlQ2XX4oxu U/+0FEaM3Om8f0UsrBgkl7b0ALqUKu1eTkYery0E0IhoTX8Zh2ifN4Y3LxXyk/jg 96CKKNXxiI+TQnquZ9MFqIw/U07o67THep0DubDeiadxZ8zQzAKRlp04H63y47O0 3vDtPsMR/RcTJWRkhPtkUqeES2NIoPAOigQy5/Tqgq2MMe0K/Idcv9wIqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOxmhjeBoMFNtf72FCqxiyz/pvNMB8GA1UdIwQY MBaAFINCoUE7DM404/f78Ofzjgo3CmJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzBLaFFUc016alRqOV92dzVfT09DamNLWW1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81NGU3OTctZGJlMy00OTQ1LWE4MzUt NjQ4YjkyMjc2MDE0LzEvZzBLaFFUc016alRqOV92dzVfT09DamNLWW1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81NGU3OTctZGJlMy00OTQ1LWE4MzUtNjQ4YjkyMjc2MDE0 LzEvZzBLaFFUc016alRqOV92dzVfT09DamNLWW1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzAT4zdL fVfHyESb/2ZkOSWnzCaO2OV3ItG0z3TCjmpJqdoVREuVTYxPG1nek6Sx/hw9ZZzC v5aimC2PoeMzBc9E/+DVJrVWMHtYVK3hlJhNr2JdJDXNYn9NTg+BHWU2C5ws68dR Wir3CEHR5lSvzGqhJwR0XVhaF0ghKt4bBnxfD0809aAfjD1dtT3tznLYTy3ZjVLG jaAfMC3bw3B38OV8kiYBTTgsWWOfjDi/JVnuvZQsWlKcsVBkL9xFiPa9NWWBII3v N1/XiukGxhfrmzMBPpOvVe7jVMApeMZS+E7cqG4iREQdxrxSjr9leFHcdvkikTmD bGUl2u8B/vgWAg== -----END CERTIFICATE-----Generated at Thu Dec 25 01:24:08 2025 by rpki-client