This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft File: gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json) Hash identifier: 4/KzLz4OpQot5M4ZuWHflHYnOOU2XtNzZab2kOmbT2w= Subject key identifier: 0D:2A:8F:AF:E6:5C:15:A7:C9:F7:0E:F5:FC:70:84:63:06:1A:6A:2D Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87 Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87 Certificate serial: 019B40C8665FDD7641D942F7712566094541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft Manifest number: 1743 Signing time: Sun 21 Dec 2025 12:00:33 +0000 Manifest this update: Sun 21 Dec 2025 12:00:33 +0000 Manifest next update: Mon 22 Dec 2025 12:00:33 +0000 Files and hashes: 1: FZaUJFQYhfOyQWOOlP3rV_o9nW4.roa (hash: 8mXMxLhYRdd/VkcpNmHYspbdck1amSr4XmtcJs+HDLA=) 2: QsA63htkLwfYnYHs-Kq4o8mj9CE.roa (hash: rn3uqwJBUFxLOERoWp4bxdCoGJiytcYNcQK3zAQq29M=) 3: WG0ANufF85rxDdd9Qpj3xWNbQEc.roa (hash: Sp37WqNPSToQfWSQsZD+qupyLcdSmiraov2p9HxbLVc=) 4: X5Fww_8KGev_5n5MWd8zbg2gmXc.roa (hash: DIztrJ51Kpwe3HNc07UEuOz1jm3MBQvVt7F7Mikk1H4=) 5: bJSjsJ3BIHwc_xXJ1R0xw1ipkaw.roa (hash: LBopJzLBdYAjF0iPvUvU2j1Vv+Rl7/hkuGtkkvmE9pk=) 6: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: Me8hXynfp4UMCA8ZlHZ1ZYDFa+Pc2OKdOPYRJMRK4QM=) 7: jhr_GFldqDt1qMGamMwZGXuEY9U.roa (hash: 1yDuZhUHai2SzEeMsTrIrMSyGKcGUnmYYO7txoQyhP0=) 8: l-taV26zQ7WeFxi5U2wEDJxQkyQ.roa (hash: 7NgCRlAWBxyzQ19N/UKMAgzRr/Nec4zr9xbSFVxPVyI=) 9: y4FE1rBXMFm62wHyyCqUymbJNYs.roa (hash: MR4VvjpI1G7xCd6u/lSzNw5eAzME4oCWzew3Uw7zWlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:66:5f:dd:76:41:d9:42:f7:71:25:66:09:45:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87 Validity Not Before: Dec 21 12:00:33 2025 GMT Not After : Dec 22 12:00:33 2025 GMT Subject: CN=0d2a8fafe65c15a7c9f70ef5fc708463061a6a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:f8:4f:fd:d4:46:2f:90:9c:70:41:ca:d2: a0:a7:d0:1a:b6:30:7b:df:a2:27:aa:b4:0f:f9:a1: d8:46:fe:3c:c6:93:25:91:01:c1:6b:5a:75:95:76: fa:3a:95:18:38:a2:9c:10:c2:a7:5e:13:0f:5d:31: 92:4b:3a:a8:a0:9a:2a:4d:28:5c:a2:4b:ae:5a:c3: 6a:4f:5c:45:8e:78:40:36:60:82:51:db:bb:72:20: 8e:4e:58:52:21:fb:2c:2f:09:54:b8:22:b0:1f:ab: 05:68:6a:8a:99:29:8f:d0:0b:65:7e:4b:01:e7:52: cb:3d:e6:6d:6f:4f:d0:d1:c2:db:57:84:95:fe:65: 9f:9c:6e:c7:a0:12:f4:b5:6e:92:73:10:c0:74:2c: 27:1b:d7:39:03:7a:29:68:3d:6a:3f:9c:35:d8:52: cd:c6:dd:94:61:59:69:46:87:48:db:55:21:41:0d: 33:85:68:00:b3:33:2f:61:f6:97:26:89:b1:53:2e: cf:8a:34:a6:05:67:76:2d:7a:f2:53:4f:33:77:54: e7:48:65:5b:01:b7:75:c2:e4:bd:6f:ac:ed:20:08: 02:86:ed:8b:aa:73:aa:15:93:d9:e6:bb:d0:05:e1: 65:e9:a7:09:c4:2c:91:5b:75:c2:49:b4:db:ad:6c: 2a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2A:8F:AF:E6:5C:15:A7:C9:F7:0E:F5:FC:70:84:63:06:1A:6A:2D X509v3 Authority Key Identifier: keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7e:ff:ab:fd:34:50:f3:20:25:63:83:fe:b5:0d:d1:8d:96: 7f:a6:a5:29:0d:18:16:bd:57:54:96:b0:13:b4:f8:66:48:ae: 17:e8:e0:92:e3:dd:29:73:54:1a:56:00:e4:89:b1:f7:ec:5b: 71:51:6c:b8:91:54:f3:5f:9c:c8:01:92:14:2f:25:98:ab:64: 2c:52:b4:d3:44:63:12:36:39:ad:8f:bf:a3:ca:78:6a:f4:cc: bb:c5:d5:0e:98:e3:64:5a:67:ee:b1:a4:85:30:b6:4a:b4:81: 48:4b:f9:4a:42:73:6f:d7:f1:1a:a7:23:0b:2c:e5:ee:f2:63: 60:97:11:d5:e5:d0:19:73:50:62:27:7c:dc:cd:90:40:75:72: d1:1f:24:d3:9e:26:f3:22:93:d3:10:8d:c1:bb:02:03:40:b3: 35:10:5a:dc:b9:e7:2f:e1:85:ba:bd:69:e8:80:d6:00:80:6e: da:1f:c3:c0:c4:be:36:fb:ed:03:95:54:dc:96:ce:1d:70:ee: ca:18:48:a2:03:86:ca:a4:3a:58:4e:61:40:0c:be:65:69:cb: 2f:c0:05:83:7d:2f:8f:cb:88:70:b0:a1:c4:e4:bf:93:f3:32: f9:e5:d0:5d:53:20:63:45:5a:be:f8:c4:5b:e6:ed:d3:b8:2c: 3d:4b:7e:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyGZf3XZB2UL3cSVmCUVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOGUyMzhlMzBkY2I3NTk3NTlmYjhhMzk0ZDllMjExYTI4 YjlkODcwHhcNMjUxMjIxMTIwMDMzWhcNMjUxMjIyMTIwMDMzWjAzMTEwLwYDVQQD EygwZDJhOGZhZmU2NWMxNWE3YzlmNzBlZjVmYzcwODQ2MzA2MWE2YTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo/4T/3URi+QnHBBytKgp9AatjB7 36InqrQP+aHYRv48xpMlkQHBa1p1lXb6OpUYOKKcEMKnXhMPXTGSSzqooJoqTShc okuuWsNqT1xFjnhANmCCUdu7ciCOTlhSIfssLwlUuCKwH6sFaGqKmSmP0AtlfksB 51LLPeZtb0/Q0cLbV4SV/mWfnG7HoBL0tW6ScxDAdCwnG9c5A3opaD1qP5w12FLN xt2UYVlpRodI21UhQQ0zhWgAszMvYfaXJomxUy7PijSmBWd2LXryU08zd1TnSGVb Abd1wuS9b6ztIAgChu2LqnOqFZPZ5rvQBeFl6acJxCyRW3XCSbTbrWwqpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0qj6/mXBWnyfcO9fxwhGMGGmotMB8GA1UdIwQY MBaAFICOI44w3LdZdZ+4o5TZ4hGii52HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDkt Y2Q5NzQwNDI2NDlmLzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDktY2Q5NzQwNDI2NDlm LzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfn7/q/00 UPMgJWOD/rUN0Y2Wf6alKQ0YFr1XVJawE7T4ZkiuF+jgkuPdKXNUGlYA5Imx9+xb cVFsuJFU81+cyAGSFC8lmKtkLFK000RjEjY5rY+/o8p4avTMu8XVDpjjZFpn7rGk hTC2SrSBSEv5SkJzb9fxGqcjCyzl7vJjYJcR1eXQGXNQYid83M2QQHVy0R8k054m 8yKT0xCNwbsCA0CzNRBa3LnnL+GFur1p6IDWAIBu2h/DwMS+NvvtA5VU3JbOHXDu yhhIogOGyqQ6WE5hQAy+ZWnLL8AFg30vj8uIcLChxOS/k/My+eXQXVMgY0VavvjE W+bt07gsPUt+dA== -----END CERTIFICATE-----Generated at Sun Dec 21 21:01:52 2025 by rpki-client