This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft File: g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft (raw, json) Hash identifier: zIzzQCOt62e158BeVWt//3DOnzXYjq+iF7lEyx17exY= Subject key identifier: DA:79:6C:69:1E:40:74:EF:69:D1:1D:EB:56:81:D7:76:DA:04:33:15 Authority key identifier: 83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE Certificate issuer: /CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be Certificate serial: 019B34C55843626E4172DD3108F494DA624A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft Manifest number: 025B Signing time: Fri 19 Dec 2025 04:01:46 +0000 Manifest this update: Fri 19 Dec 2025 04:01:46 +0000 Manifest next update: Sat 20 Dec 2025 04:01:46 +0000 Files and hashes: 1: g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl (hash: R9o3009vJiFgFs7A2xNF7B9OJA07frv2IdpjwbOY5QQ=) 2: msDEeS6sASlV5Nrug60HOmxHAjw.roa (hash: td9s2j9cTMVJ/N4A25CfBZ5lbq+TNEGFP43f11ycPe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:58:43:62:6e:41:72:dd:31:08:f4:94:da:62:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be Validity Not Before: Dec 19 04:01:46 2025 GMT Not After : Dec 20 04:01:46 2025 GMT Subject: CN=da796c691e4074ef69d11deb5681d776da043315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:75:b9:6f:87:a0:46:e5:cd:a0:30:a7:d7:f7: 41:eb:a3:04:5d:c9:d4:1b:18:a3:05:28:05:8a:d8: cd:c7:86:dc:07:40:48:e1:37:21:fe:06:62:fe:82: 05:f2:ee:c5:9d:a5:4e:fa:b8:64:ce:3e:f3:59:db: 05:6d:dc:d7:bc:76:34:3f:48:8d:b8:10:30:33:47: 5d:53:a2:dd:c5:01:c1:61:e0:30:24:62:83:c5:fc: c5:0b:4b:3f:28:07:45:df:97:c8:0e:bc:2a:12:2d: c3:23:a4:e0:dd:9d:c6:40:96:4c:f0:4a:16:94:f2: ac:13:82:e4:b9:0c:2d:93:c7:01:37:34:5b:08:9b: e2:ee:8c:42:c5:ce:50:73:0a:ab:71:8b:e6:0d:4e: 68:0f:4a:6d:33:c8:07:3a:ee:0a:f4:fb:47:b2:3e: 0b:1c:2f:b8:31:04:77:53:11:bb:44:67:a5:28:70: 43:d6:74:82:73:9e:b3:b5:1f:ed:06:a2:64:d7:d8: fd:61:64:26:9c:05:f2:64:e8:f3:c8:e6:77:62:58: 17:88:36:80:ec:a3:05:35:b0:cf:b5:46:27:13:d8: ae:c8:c2:6e:0d:16:c2:d3:ee:e2:5d:31:3e:bc:17: b0:72:04:5f:5a:0b:35:01:02:a3:d6:7e:c3:04:e3: 93:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:79:6C:69:1E:40:74:EF:69:D1:1D:EB:56:81:D7:76:DA:04:33:15 X509v3 Authority Key Identifier: keyid:83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8d:f3:60:e5:dc:35:d1:89:4c:dc:99:4b:c0:24:bc:2e:a5: 1b:c6:a9:14:da:81:f1:53:b2:e4:25:d1:2c:22:0c:24:0d:f7: a8:34:b8:f7:98:09:61:30:73:b2:c1:a7:26:9a:ba:7a:fc:d8: 43:07:3b:c5:9e:dc:28:33:cc:37:f6:77:09:6a:e8:4e:98:ca: 83:7f:4f:99:49:25:ab:4a:b8:ba:b0:f7:04:3d:a0:3b:51:be: 64:8e:89:01:d2:0b:4b:26:aa:bc:26:ff:c4:b5:07:bb:03:42: 82:fa:e0:26:ab:bf:73:b5:50:90:1f:ec:03:dc:f2:00:be:66: 4e:32:68:29:02:d5:67:1f:ec:bf:33:2f:41:a6:37:9f:e6:74: a4:b0:ee:f7:03:18:40:4d:7a:39:8a:19:e1:2e:f0:e6:2b:31: ef:11:89:36:e8:23:b4:e2:94:92:8f:d4:60:6c:d6:48:3a:3d: 94:35:9d:81:37:6c:cb:55:81:a5:3d:b5:e7:37:9b:e7:2e:1e: 10:87:29:6b:71:83:81:20:b0:ca:c1:2d:aa:a3:65:3f:4a:59: a3:3b:62:c0:b1:08:e8:94:c6:cb:33:90:4a:6d:2b:94:85:fa: 9a:64:62:fa:2e:b0:5d:69:42:37:9c:59:23:04:ad:0e:a8:b4: a9:30:24:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xVhDYm5Bct0xCPSU2mJKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZGYwY2FjYjlmZDUwZTFiZTdkZmJmM2QwYWM4NTRiZWVk Nzg2YmUwHhcNMjUxMjE5MDQwMTQ2WhcNMjUxMjIwMDQwMTQ2WjAzMTEwLwYDVQQD EyhkYTc5NmM2OTFlNDA3NGVmNjlkMTFkZWI1NjgxZDc3NmRhMDQzMzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3W5b4egRuXNoDCn1/dB66MEXcnU GxijBSgFitjNx4bcB0BI4Tch/gZi/oIF8u7FnaVO+rhkzj7zWdsFbdzXvHY0P0iN uBAwM0ddU6LdxQHBYeAwJGKDxfzFC0s/KAdF35fIDrwqEi3DI6Tg3Z3GQJZM8EoW lPKsE4LkuQwtk8cBNzRbCJvi7oxCxc5QcwqrcYvmDU5oD0ptM8gHOu4K9PtHsj4L HC+4MQR3UxG7RGelKHBD1nSCc56ztR/tBqJk19j9YWQmnAXyZOjzyOZ3YlgXiDaA 7KMFNbDPtUYnE9iuyMJuDRbC0+7iXTE+vBewcgRfWgs1AQKj1n7DBOOTlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNp5bGkeQHTvadEd61aB13baBDMVMB8GA1UdIwQY MBaAFIPfDKy5/VDhvn3789CshUvu14a+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzk4TXJMbjlVT0ctZmZ2ejBLeUZTLTdYaHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hYTFjNTEtOTI2NC00MDZlLWI3OTYt NGUwMGMzYjcwODc4LzEvZzk4TXJMbjlVT0ctZmZ2ejBLeUZTLTdYaHI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hYTFjNTEtOTI2NC00MDZlLWI3OTYtNGUwMGMzYjcwODc4 LzEvZzk4TXJMbjlVT0ctZmZ2ejBLeUZTLTdYaHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb43zYOXc NdGJTNyZS8AkvC6lG8apFNqB8VOy5CXRLCIMJA33qDS495gJYTBzssGnJpq6evzY Qwc7xZ7cKDPMN/Z3CWroTpjKg39PmUklq0q4urD3BD2gO1G+ZI6JAdILSyaqvCb/ xLUHuwNCgvrgJqu/c7VQkB/sA9zyAL5mTjJoKQLVZx/svzMvQaY3n+Z0pLDu9wMY QE16OYoZ4S7w5isx7xGJNugjtOKUko/UYGzWSDo9lDWdgTdsy1WBpT215zeb5y4e EIcpa3GDgSCwysEtqqNlP0pZoztiwLEI6JTGyzOQSm0rlIX6mmRi+i6wXWlCN5xZ IwStDqi0qTAkFA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:26:09 2025 by rpki-client