This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft File: RpG_08_sWhEI8choVHZOK5A9eIg.mft (raw, json) Hash identifier: rQAC/wx2yGWlXyD7dto1vbaG9U99VHvg4bkfNgfkxp8= Subject key identifier: F9:A7:43:F2:54:23:AB:3A:CD:59:49:10:64:DC:F3:98:9E:66:72:48 Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88 Certificate issuer: /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888 Certificate serial: 019B54BD3DB394159786B3C8FA6AC83531D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft Manifest number: 1796 Signing time: Thu 25 Dec 2025 09:00:46 +0000 Manifest this update: Thu 25 Dec 2025 09:00:46 +0000 Manifest next update: Fri 26 Dec 2025 09:00:46 +0000 Files and hashes: 1: 4Fc8DyjVSWCEsU_EUG8kyZV4jp4.roa (hash: f+6PC2+8l4GQP1uSjRq7ZupGlBtpnFIedMNKrq+WMR4=) 2: RpG_08_sWhEI8choVHZOK5A9eIg.crl (hash: LOb4f6SNE9CRfYw1L5rZYGV8aLttjdxaDTsRGjw3lDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:3d:b3:94:15:97:86:b3:c8:fa:6a:c8:35:31:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888 Validity Not Before: Dec 25 09:00:46 2025 GMT Not After : Dec 26 09:00:46 2025 GMT Subject: CN=f9a743f25423ab3acd59491064dcf3989e667248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:99:38:80:24:6a:b7:36:5b:cb:01:98:f9:17: 8f:28:f1:ff:1c:28:f3:13:41:ad:4c:b8:99:51:3a: d5:38:a6:19:d1:3f:7d:e6:45:f5:38:21:b3:64:55: dc:e2:4e:1c:80:e6:69:f7:d9:2c:fb:a2:9c:71:38: c0:7d:0b:40:c3:9c:51:8d:f3:7f:67:b1:7e:8a:51: c0:ec:2f:ef:b2:4d:e8:ff:9a:a2:2b:c4:04:5d:45: b8:b3:bb:22:f4:70:88:e0:c5:65:84:be:5f:85:5a: d6:8d:54:53:65:71:da:b7:3c:d5:64:09:06:ba:ba: 05:13:ca:04:15:02:07:55:0c:0a:d8:4f:b2:97:80: 4a:2c:89:e8:36:2c:f1:ad:1e:89:40:a2:b6:c8:16: 08:58:9e:a4:6a:a6:e6:d8:43:04:76:ac:55:39:47: c7:04:55:8a:f7:b9:14:cd:42:46:30:23:c5:11:3d: 60:0e:c5:28:29:78:c2:ce:4f:82:6f:2e:ce:2d:9f: 5f:4e:9c:a1:d4:a8:a7:6d:3c:02:24:08:a0:b6:b5: d0:c2:e4:35:b9:2e:bd:7a:30:93:89:50:99:f1:10: 78:b1:4e:58:af:db:29:f5:5a:4f:ab:11:2e:0e:54: fc:34:c8:5d:a6:34:8d:f9:e7:41:3b:86:b0:99:b9: 1f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A7:43:F2:54:23:AB:3A:CD:59:49:10:64:DC:F3:98:9E:66:72:48 X509v3 Authority Key Identifier: keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ea:de:fd:55:e9:fb:5c:08:02:17:80:2b:5b:27:73:66:d8: 1d:58:fb:6c:b0:f4:8a:3b:5c:a8:30:2a:cc:f7:dc:6b:6e:3a: d5:c9:46:1d:cf:ed:f0:c4:d4:d7:e9:70:76:b9:70:2c:c4:be: 7a:35:79:65:fc:32:06:cc:9e:17:58:de:af:39:41:04:14:70: ef:3c:cd:0c:ed:3b:be:7c:50:ff:c5:40:56:49:ad:59:38:68: 17:dc:23:98:ba:ed:c9:f3:20:e3:56:e4:55:4b:86:6e:e4:33: 42:d3:82:6a:53:df:6c:92:65:b7:97:69:98:58:a0:f9:35:29: c8:4b:1a:7f:8d:71:d2:91:d9:06:af:a8:20:c2:cd:6c:be:97: 87:e1:44:f2:a9:38:32:7b:f4:9a:27:2c:03:90:33:62:0e:2f: 57:7d:1d:9e:59:56:2c:cd:c0:0d:e4:a2:fd:54:ee:30:29:89: 04:d0:57:cb:30:34:da:13:88:27:c9:9b:83:b6:da:aa:9d:1f: 18:eb:ee:0e:e9:01:de:61:ab:7b:05:b3:29:cf:ce:52:23:eb: 34:e2:2f:35:56:58:db:19:9e:74:18:ac:93:a6:0c:99:cb:64: a0:c0:2d:a2:7f:02:91:a6:28:25:89:6b:de:7b:95:84:ca:23: f2:5d:ae:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUvT2zlBWXhrPI+mrINTHXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OTFiZmQzY2ZlYzVhMTEwOGYxYzg2ODU0NzY0ZTJiOTAz ZDc4ODgwHhcNMjUxMjI1MDkwMDQ2WhcNMjUxMjI2MDkwMDQ2WjAzMTEwLwYDVQQD EyhmOWE3NDNmMjU0MjNhYjNhY2Q1OTQ5MTA2NGRjZjM5ODllNjY3MjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Jk4gCRqtzZbywGY+RePKPH/HCjz E0GtTLiZUTrVOKYZ0T995kX1OCGzZFXc4k4cgOZp99ks+6KccTjAfQtAw5xRjfN/ Z7F+ilHA7C/vsk3o/5qiK8QEXUW4s7si9HCI4MVlhL5fhVrWjVRTZXHatzzVZAkG uroFE8oEFQIHVQwK2E+yl4BKLInoNizxrR6JQKK2yBYIWJ6kaqbm2EMEdqxVOUfH BFWK97kUzUJGMCPFET1gDsUoKXjCzk+Cby7OLZ9fTpyh1KinbTwCJAigtrXQwuQ1 uS69ejCTiVCZ8RB4sU5Yr9sp9VpPqxEuDlT8NMhdpjSN+edBO4awmbkfZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmnQ/JUI6s6zVlJEGTc85ieZnJIMB8GA1UdIwQY MBaAFEaRv9PP7FoRCPHIaFR2TiuQPXiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81ZWE1ZjAtMDJkNy00YjBmLWIwYjIt MWI4NjE3N2FmMGRkLzEvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81ZWE1ZjAtMDJkNy00YjBmLWIwYjItMWI4NjE3N2FmMGRk LzEvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+re/VXp +1wIAheAK1snc2bYHVj7bLD0ijtcqDAqzPfca2461clGHc/t8MTU1+lwdrlwLMS+ ejV5ZfwyBsyeF1jerzlBBBRw7zzNDO07vnxQ/8VAVkmtWThoF9wjmLrtyfMg41bk VUuGbuQzQtOCalPfbJJlt5dpmFig+TUpyEsaf41x0pHZBq+oIMLNbL6Xh+FE8qk4 Mnv0micsA5AzYg4vV30dnllWLM3ADeSi/VTuMCmJBNBXyzA02hOIJ8mbg7baqp0f GOvuDukB3mGrewWzKc/OUiPrNOIvNVZY2xmedBisk6YMmctkoMAton8CkaYoJYlr 3nuVhMoj8l2uhw== -----END CERTIFICATE-----Generated at Thu Dec 25 16:02:07 2025 by rpki-client