This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft File: g_2WfGwZoxt-OOnlycqPoN49YUk.mft (raw, json) Hash identifier: q9VAGcFayN7+BOHPuRUEcbgcOUAE9lZJ49oJ6J3a5kI= Subject key identifier: EE:4E:7B:41:87:2A:FD:3C:1D:5F:BC:BE:CD:AE:28:1B:B8:0F:07:1A Authority key identifier: 83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49 Certificate issuer: /CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149 Certificate serial: 019B6AD8200274EB7773543DA45CEC215DF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft Manifest number: 131B Signing time: Mon 29 Dec 2025 16:01:47 +0000 Manifest this update: Mon 29 Dec 2025 16:01:47 +0000 Manifest next update: Tue 30 Dec 2025 16:01:47 +0000 Files and hashes: 1: UGrR__PyRipPzdjGAZBG7BppT8M.roa (hash: iYevY5/kIjNolOqwa16r2Chgd87dJ+qeTiEz7+9fEjM=) 2: g_2WfGwZoxt-OOnlycqPoN49YUk.crl (hash: X+XFPKHhM3Vso7/zdJqZC6HMmUC8r0d+aMZ47hSdPf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d8:20:02:74:eb:77:73:54:3d:a4:5c:ec:21:5d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149 Validity Not Before: Dec 29 16:01:47 2025 GMT Not After : Dec 30 16:01:47 2025 GMT Subject: CN=ee4e7b41872afd3c1d5fbcbecdae281bb80f071a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c9:7c:ca:e6:aa:fe:17:94:98:07:60:b7:3c: dd:17:40:d6:9f:37:89:7d:ea:48:a7:b9:1a:02:cb: cf:be:61:c4:44:78:83:39:ea:ab:74:29:1d:00:a2: 2f:0a:16:e5:b0:5d:69:b1:3e:aa:d2:61:d5:58:37: 74:cc:e1:cb:91:c4:17:3b:21:cf:cc:fc:77:0a:bf: 71:60:44:0e:6c:3a:3c:3b:e9:7c:e3:34:33:1c:12: 86:e5:73:43:4a:c1:ef:46:56:d4:7c:0b:c5:f1:7a: 8b:98:96:1a:d8:8d:df:10:03:55:e4:65:b9:e7:24: 74:5a:2d:52:5f:70:15:23:1a:7b:ef:a7:35:76:f7: c4:6f:1a:12:2c:8d:f1:a2:ea:59:37:f7:0d:d1:bc: 05:e7:57:42:96:be:9a:85:e9:57:13:d9:54:9c:9b: b8:1c:06:38:ae:97:c4:25:1c:7c:ac:34:c5:5a:6f: 01:6c:33:90:dd:6a:cb:2a:f6:19:da:93:c7:14:bb: f5:23:90:c7:34:d9:1f:e3:bb:8c:87:7b:51:f4:9a: ff:fe:2a:67:3f:1d:07:69:8e:b4:93:fc:48:ea:10: 26:d9:ce:c0:9e:b0:eb:05:ec:60:1b:39:0f:e4:66: 1a:3f:60:21:79:e5:9b:96:e5:7f:2f:19:da:16:c1: bd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4E:7B:41:87:2A:FD:3C:1D:5F:BC:BE:CD:AE:28:1B:B8:0F:07:1A X509v3 Authority Key Identifier: keyid:83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:8a:0b:e3:e1:57:1d:0a:03:c1:41:9a:5a:3f:d9:10:8e:24: 61:7b:cd:3e:32:6f:fa:54:3d:4b:11:88:24:f0:1f:ff:c2:4f: 7d:45:0a:3f:b5:1b:74:e9:2d:94:47:49:eb:dd:6d:48:45:fe: 18:33:9c:e0:ea:b7:f9:07:2d:e7:f1:b7:d0:d6:28:f4:64:25: 1c:ae:dc:ea:56:26:8c:9d:81:40:ab:2e:a3:d5:01:92:84:49: ba:a8:ad:34:82:2e:75:bd:c5:af:b7:b9:0a:2e:99:76:ac:21: 3f:90:b1:eb:f4:51:95:b7:f6:a2:00:26:05:ce:e4:42:20:db: e8:0b:19:52:64:c2:20:83:f6:14:83:3a:99:3e:31:66:10:58: 53:99:04:ef:c4:d5:be:b5:ba:78:2a:2a:b0:08:e6:a2:2e:75: ca:95:0d:77:1a:6c:bf:9a:c5:3a:ba:74:83:83:cb:4d:3a:e1: 36:cb:3f:af:f7:46:a7:ec:0c:41:81:f1:46:40:f3:03:c9:f5: b6:99:59:5d:db:67:cb:c1:e8:a1:74:34:fa:9a:21:3e:60:2b: ad:66:62:eb:37:15:b5:e3:1b:d0:08:f3:9e:66:e6:40:bd:69: 7f:78:4d:9f:5c:38:a0:72:bd:c7:19:19:8f:56:bf:2d:f0:9d: 66:bc:10:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq2CACdOt3c1Q9pFzsIV35MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZmQ5NjdjNmMxOWEzMWI3ZTM4ZTllNWM5Y2E4ZmEwZGUz ZDYxNDkwHhcNMjUxMjI5MTYwMTQ3WhcNMjUxMjMwMTYwMTQ3WjAzMTEwLwYDVQQD EyhlZTRlN2I0MTg3MmFmZDNjMWQ1ZmJjYmVjZGFlMjgxYmI4MGYwNzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8l8yuaq/heUmAdgtzzdF0DWnzeJ fepIp7kaAsvPvmHERHiDOeqrdCkdAKIvChblsF1psT6q0mHVWDd0zOHLkcQXOyHP zPx3Cr9xYEQObDo8O+l84zQzHBKG5XNDSsHvRlbUfAvF8XqLmJYa2I3fEANV5GW5 5yR0Wi1SX3AVIxp776c1dvfEbxoSLI3xoupZN/cN0bwF51dClr6ahelXE9lUnJu4 HAY4rpfEJRx8rDTFWm8BbDOQ3WrLKvYZ2pPHFLv1I5DHNNkf47uMh3tR9Jr//ipn Px0HaY60k/xI6hAm2c7AnrDrBexgGzkP5GYaP2AheeWbluV/LxnaFsG9vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5Oe0GHKv08HV+8vs2uKBu4DwcaMB8GA1UdIwQY MBaAFIP9lnxsGaMbfjjp5cnKj6DePWFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ18yV2ZHd1pveHQtT09ubHljcVBvTjQ5WVVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hOGRmNTgtZWFiYy00NWQ0LTk0Mzct YjU3NjE2MTM2YWI2LzEvZ18yV2ZHd1pveHQtT09ubHljcVBvTjQ5WVVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hOGRmNTgtZWFiYy00NWQ0LTk0MzctYjU3NjE2MTM2YWI2 LzEvZ18yV2ZHd1pveHQtT09ubHljcVBvTjQ5WVVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs4oL4+FX HQoDwUGaWj/ZEI4kYXvNPjJv+lQ9SxGIJPAf/8JPfUUKP7UbdOktlEdJ691tSEX+ GDOc4Oq3+Qct5/G30NYo9GQlHK7c6lYmjJ2BQKsuo9UBkoRJuqitNIIudb3Fr7e5 Ci6ZdqwhP5Cx6/RRlbf2ogAmBc7kQiDb6AsZUmTCIIP2FIM6mT4xZhBYU5kE78TV vrW6eCoqsAjmoi51ypUNdxpsv5rFOrp0g4PLTTrhNss/r/dGp+wMQYHxRkDzA8n1 tplZXdtny8HooXQ0+pohPmArrWZi6zcVteMb0AjznmbmQL1pf3hNn1w4oHK9xxkZ j1a/LfCdZrwQgA== -----END CERTIFICATE-----Generated at Mon Dec 29 22:46:24 2025 by rpki-client