This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft File: g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json) Hash identifier: myZ0VInG8bu89dw6BkWMauPUhkboMhdJO0qpzVlvzoQ= Subject key identifier: 36:21:22:AF:50:BF:64:BC:82:96:A1:DC:35:08:31:34:65:19:F1:DD Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61 Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561 Certificate serial: 019B37FCE02B0A5252DABB30628EA831848E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft Manifest number: 0DF4 Signing time: Fri 19 Dec 2025 19:01:17 +0000 Manifest this update: Fri 19 Dec 2025 19:01:17 +0000 Manifest next update: Sat 20 Dec 2025 19:01:17 +0000 Files and hashes: 1: 1-eVtiZIJZtejkcxnJZbMOuqtkvM.roa (hash: /dozujzBruht/lOgqwCLtQNFBrpieolWDy5kZ5Mel3s=) 2: 56FwlKZ7KIhARLPC6HlmmMABBnU.roa (hash: Z+1GZvGlxeBEP1crVQ4oVXjpJKgbOm4WDdf1clBCOOM=) 3: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: mHCEtZmTgqwImTheGdIigOMsv459gJB/bDsBAc2THVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:e0:2b:0a:52:52:da:bb:30:62:8e:a8:31:84:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561 Validity Not Before: Dec 19 19:01:17 2025 GMT Not After : Dec 20 19:01:17 2025 GMT Subject: CN=362122af50bf64bc8296a1dc350831346519f1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:39:e0:60:20:ba:35:ad:57:51:7f:3b:07:48: 09:c3:f0:b9:ab:1c:0a:bf:5c:e5:2d:27:29:ce:e4: 37:8e:60:77:6c:57:20:a3:e2:95:da:0a:23:61:b8: f8:8f:41:d3:db:5a:3c:f0:bf:27:2e:f2:58:ff:aa: ed:4e:70:d8:45:49:96:71:f6:16:01:c7:b0:59:b4: c3:95:7f:77:a7:9f:72:75:5b:68:c1:28:39:dd:44: 1e:04:fb:61:0f:04:b7:e4:94:dc:71:0a:ed:04:38: 20:22:f5:de:81:1b:46:10:62:4a:aa:23:ee:c9:cc: 58:33:36:23:ce:08:d9:82:60:9a:87:f1:38:1e:e2: c0:93:f4:6f:72:33:cc:52:05:7e:d2:4e:a9:74:ed: 69:c5:ce:e6:fd:7d:e7:e5:df:8e:e8:8f:af:20:e4: cf:b1:c5:94:e8:6a:a7:b2:d4:67:cd:3f:20:20:fb: 7a:1a:e4:35:85:e6:6a:fa:0a:bd:0e:46:0e:dd:4e: b5:ab:9a:8a:12:fa:b4:c9:83:3a:dd:b6:79:22:c9: 38:fa:a4:14:47:44:37:e3:99:50:48:a5:7a:9d:e1: 50:6e:7b:f4:b0:3a:10:2c:e6:9a:56:f6:c4:90:6e: 4f:86:14:60:a5:79:5d:f9:d0:3d:aa:fd:06:6f:b2: 9a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:21:22:AF:50:BF:64:BC:82:96:A1:DC:35:08:31:34:65:19:F1:DD X509v3 Authority Key Identifier: keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:93:1f:41:79:be:80:84:14:4c:ae:e7:fa:d7:44:9c:a0:b5: aa:fe:ca:13:b5:4d:1b:b8:80:1a:56:2a:97:a6:f9:1c:47:ca: 29:c1:37:55:c6:63:3d:c1:e2:98:01:d8:b2:33:b1:f7:b4:01: 40:26:69:25:56:f1:4a:f1:02:16:81:4e:1f:d9:ae:e9:2b:72: 58:12:58:df:8e:b6:04:d7:3c:9e:0c:49:0e:db:67:00:2e:23: ce:ac:b4:6c:ab:cc:70:46:cb:bc:75:2a:80:f8:48:77:da:02: 56:6d:d1:87:11:67:d9:87:aa:f7:0e:b3:f4:41:af:91:18:0d: c8:db:1b:d4:5a:82:fb:a3:df:7f:b9:0b:48:ec:66:7a:1d:d2: 21:3a:4d:e1:f1:75:03:2a:64:54:28:90:47:80:fb:14:22:db: 0d:7a:c5:df:8d:39:35:c0:42:c9:ad:6c:23:1a:d7:6b:95:0e: 41:e4:8d:1c:61:57:9f:7f:d0:32:ca:aa:f1:93:43:a2:8b:d6: 3d:7f:10:89:05:9a:37:d5:5d:df:6e:0e:5a:7f:8f:ec:ed:a4: 4b:9c:6e:13:f5:41:31:69:61:6a:57:70:40:18:d6:ae:e7:f5: 71:c6:6e:8e:54:8f:e3:75:ec:23:43:fa:3a:b1:4a:95:d6:20: dd:36:8c:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/OArClJS2rswYo6oMYSOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZTVkOTAzMDFkM2NmNjdiODhmZWU0MmRkNTQ1YWZjZjE0 ZWE1NjEwHhcNMjUxMjE5MTkwMTE3WhcNMjUxMjIwMTkwMTE3WjAzMTEwLwYDVQQD EygzNjIxMjJhZjUwYmY2NGJjODI5NmExZGMzNTA4MzEzNDY1MTlmMWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDngYCC6Na1XUX87B0gJw/C5qxwK v1zlLScpzuQ3jmB3bFcgo+KV2gojYbj4j0HT21o88L8nLvJY/6rtTnDYRUmWcfYW AcewWbTDlX93p59ydVtowSg53UQeBPthDwS35JTccQrtBDggIvXegRtGEGJKqiPu ycxYMzYjzgjZgmCah/E4HuLAk/RvcjPMUgV+0k6pdO1pxc7m/X3n5d+O6I+vIOTP scWU6GqnstRnzT8gIPt6GuQ1heZq+gq9DkYO3U61q5qKEvq0yYM63bZ5Isk4+qQU R0Q345lQSKV6neFQbnv0sDoQLOaaVvbEkG5PhhRgpXld+dA9qv0Gb7Ka7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYhIq9Qv2S8gpah3DUIMTRlGfHdMB8GA1UdIwQY MBaAFIPl2QMB089nuI/uQt1UWvzxTqVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2It NzgyYjgyZWJjYWFlLzEvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2ItNzgyYjgyZWJjYWFl LzEvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJMfQXm+ gIQUTK7n+tdEnKC1qv7KE7VNG7iAGlYql6b5HEfKKcE3VcZjPcHimAHYsjOx97QB QCZpJVbxSvECFoFOH9mu6StyWBJY3462BNc8ngxJDttnAC4jzqy0bKvMcEbLvHUq gPhId9oCVm3RhxFn2Yeq9w6z9EGvkRgNyNsb1FqC+6Pff7kLSOxmeh3SITpN4fF1 AypkVCiQR4D7FCLbDXrF3405NcBCya1sIxrXa5UOQeSNHGFXn3/QMsqq8ZNDoovW PX8QiQWaN9Vd324OWn+P7O2kS5xuE/VBMWlhaldwQBjWruf1ccZujlSP43XsI0P6 OrFKldYg3TaMUA== -----END CERTIFICATE-----Generated at Sat Dec 20 04:24:16 2025 by rpki-client