This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft File: g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft (raw, json) Hash identifier: Uy9zJ1bW6cdh+Gup7XjdnGg0btp2y2fGaMUSo6Q8MbM= Subject key identifier: 78:C6:A4:94:C7:04:1D:54:1A:25:E4:2B:D6:59:C4:3B:94:4D:4A:71 Authority key identifier: 83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74 Certificate issuer: /CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74 Certificate serial: 019B3DFEE3E926DFE469CE5B8981551F9AE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft Manifest number: 0699 Signing time: Sat 20 Dec 2025 23:01:12 +0000 Manifest this update: Sat 20 Dec 2025 23:01:12 +0000 Manifest next update: Sun 21 Dec 2025 23:01:12 +0000 Files and hashes: 1: BU9JhoqrTpIQsWIouXHlxP2UwJc.roa (hash: eExBD31OYoCxpTQ9bbvDSg8Lx/R1p5NUbz4eD5SEWnA=) 2: PMFwvTAxfhGKJmrLSIFVTDEuW3I.roa (hash: HYp8t9eAVcEw+uZrQ21I7eKONuoQGa89OFuwBzm+DCo=) 3: g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl (hash: JBRF7X7QaMSGrIzHXcRDdpDKa+kdVN9d4g9aXCXolDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:e3:e9:26:df:e4:69:ce:5b:89:81:55:1f:9a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74 Validity Not Before: Dec 20 23:01:12 2025 GMT Not After : Dec 21 23:01:12 2025 GMT Subject: CN=78c6a494c7041d541a25e42bd659c43b944d4a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:46:eb:c2:b4:d4:e8:90:45:dd:85:c9:95: 73:b7:7c:10:99:85:ca:19:3c:2b:e2:2d:d1:28:fd: 58:a3:10:17:8d:f7:0b:77:b9:c2:8b:88:00:b1:12: fb:2e:d5:b2:a6:c9:ea:6a:c8:88:5e:99:af:59:8a: 2e:c4:41:d2:3d:02:b5:8e:94:d5:21:74:fb:84:48: e9:dc:b4:96:21:98:f8:85:77:a4:74:83:bb:ac:f5: 79:3d:85:22:a2:07:53:bb:7a:be:55:8c:9b:78:ec: 5c:46:11:46:8f:5b:a4:2b:ed:1c:c3:c0:03:f7:7d: e7:54:89:6b:48:28:df:5e:dc:eb:10:b4:d4:a7:e4: a8:7c:b1:74:b7:db:3b:cb:9e:19:99:ee:73:12:ce: 04:b1:0a:f5:2f:5e:de:eb:88:b3:27:e2:f0:98:ad: 90:e5:10:d5:0c:44:3c:6f:7c:aa:9c:29:31:09:0b: 76:3c:ff:b5:3d:a8:96:0f:cd:b5:00:1a:a9:c0:5f: 65:be:db:f3:4b:24:16:2f:a7:85:55:61:e7:ad:43: c6:e5:43:77:76:af:03:23:a4:12:28:6e:29:57:6d: c5:b5:57:6d:cc:38:14:9a:db:ef:29:20:5f:ba:bd: 19:4c:e4:59:1b:6a:12:1c:a3:98:7b:9e:71:c4:73: a6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C6:A4:94:C7:04:1D:54:1A:25:E4:2B:D6:59:C4:3B:94:4D:4A:71 X509v3 Authority Key Identifier: keyid:83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:91:8e:b9:28:8a:f1:6d:d6:44:dd:27:1a:18:f5:a0:f0:ee: 11:02:96:43:83:73:96:4d:ec:2d:b9:44:b1:b5:ca:bb:38:ac: eb:2d:fa:4d:45:9d:1a:41:00:82:64:03:36:c8:f4:1c:36:5e: 52:0f:5a:9d:36:99:f4:09:2a:3e:c7:1b:63:91:7a:1d:b0:8a: 91:50:56:09:56:b4:f0:e4:61:0f:a0:b2:32:ad:03:d8:97:ff: 5c:21:de:6b:4a:d5:4b:b2:e5:98:39:aa:14:75:cd:78:c7:f1: b2:9b:d7:1c:fc:11:5c:96:ab:27:a2:43:4d:50:fa:a2:d1:0d: c2:10:a3:e5:ee:ce:78:e4:4c:0b:2e:51:d4:a0:37:5b:44:fb: 80:69:4e:9d:01:87:d5:6c:0d:cb:9c:e7:fc:e4:32:2d:1e:2c: f5:75:74:4c:83:ee:ff:80:51:e6:24:ef:d9:1b:88:ae:ea:93: 93:43:d1:7b:15:54:36:e5:a3:2d:cd:86:65:ec:31:29:a3:ec: 1c:5e:e2:c4:65:c2:10:34:16:ae:62:fa:90:24:7c:b3:d6:9f: c5:ef:04:53:78:60:f4:32:e3:6a:86:95:75:92:e3:df:05:60: 34:22:5e:cf:43:0f:27:d0:e9:f9:86:79:ed:8d:ee:9c:69:cb: 6e:e0:61:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/uPpJt/kac5biYFVH5roMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNDhjY2U0ZmI2ZDM2MTQwZWI3ZDU2ZmVkMjg5YjM4NzFm YzRkNzQwHhcNMjUxMjIwMjMwMTEyWhcNMjUxMjIxMjMwMTEyWjAzMTEwLwYDVQQD Eyg3OGM2YTQ5NGM3MDQxZDU0MWEyNWU0MmJkNjU5YzQzYjk0NGQ0YTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsZG68K01OiQRd2FyZVzt3wQmYXK GTwr4i3RKP1YoxAXjfcLd7nCi4gAsRL7LtWypsnqasiIXpmvWYouxEHSPQK1jpTV IXT7hEjp3LSWIZj4hXekdIO7rPV5PYUiogdTu3q+VYybeOxcRhFGj1ukK+0cw8AD 933nVIlrSCjfXtzrELTUp+SofLF0t9s7y54Zme5zEs4EsQr1L17e64izJ+LwmK2Q 5RDVDEQ8b3yqnCkxCQt2PP+1PaiWD821ABqpwF9lvtvzSyQWL6eFVWHnrUPG5UN3 dq8DI6QSKG4pV23FtVdtzDgUmtvvKSBfur0ZTORZG2oSHKOYe55xxHOm/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjGpJTHBB1UGiXkK9ZZxDuUTUpxMB8GA1UdIwQY MBaAFINIzOT7bTYUDrfVb+0omzhx/E10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzBqTTVQdHROaFFPdDlWdjdTaWJPSEg4VFhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hZmFlN2MtNmViZi00NTQzLWJjMmYt YjhjM2RkNzY2MTNlLzEvZzBqTTVQdHROaFFPdDlWdjdTaWJPSEg4VFhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9hZmFlN2MtNmViZi00NTQzLWJjMmYtYjhjM2RkNzY2MTNl LzEvZzBqTTVQdHROaFFPdDlWdjdTaWJPSEg4VFhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZGOuSiK 8W3WRN0nGhj1oPDuEQKWQ4Nzlk3sLblEsbXKuzis6y36TUWdGkEAgmQDNsj0HDZe Ug9anTaZ9AkqPscbY5F6HbCKkVBWCVa08ORhD6CyMq0D2Jf/XCHea0rVS7LlmDmq FHXNeMfxspvXHPwRXJarJ6JDTVD6otENwhCj5e7OeORMCy5R1KA3W0T7gGlOnQGH 1WwNy5zn/OQyLR4s9XV0TIPu/4BR5iTv2RuIruqTk0PRexVUNuWjLc2GZewxKaPs HF7ixGXCEDQWrmL6kCR8s9afxe8EU3hg9DLjaoaVdZLj3wVgNCJez0MPJ9Dp+YZ5 7Y3unGnLbuBhWQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:16:00 2025 by rpki-client