This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft File: g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json) Hash identifier: leCD+rlY9809B4qIf6AgPElj15LEEaNb+wJWvZ9gbbY= Subject key identifier: 92:EC:E4:6F:48:61:C0:BD:0B:B9:8B:A4:74:2A:02:D3:23:68:D5:E0 Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61 Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561 Certificate serial: 019B4F296E0EBDC56F27FAC68F5193CBFE06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft Manifest number: 0E00 Signing time: Wed 24 Dec 2025 07:01:13 +0000 Manifest this update: Wed 24 Dec 2025 07:01:13 +0000 Manifest next update: Thu 25 Dec 2025 07:01:13 +0000 Files and hashes: 1: 1-eVtiZIJZtejkcxnJZbMOuqtkvM.roa (hash: /dozujzBruht/lOgqwCLtQNFBrpieolWDy5kZ5Mel3s=) 2: 56FwlKZ7KIhARLPC6HlmmMABBnU.roa (hash: Z+1GZvGlxeBEP1crVQ4oVXjpJKgbOm4WDdf1clBCOOM=) 3: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: mTZImm8bKGqAp8/PH1fqqq8ZfFDffiVOUQ/GFzlFyMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:6e:0e:bd:c5:6f:27:fa:c6:8f:51:93:cb:fe:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561 Validity Not Before: Dec 24 07:01:13 2025 GMT Not After : Dec 25 07:01:13 2025 GMT Subject: CN=92ece46f4861c0bd0bb98ba4742a02d32368d5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3b:74:bb:d5:e2:d2:d8:1d:a1:33:58:59:2b: e9:d0:4a:31:70:47:ad:3f:53:0c:18:e6:08:9e:f9: f4:9f:71:09:a1:76:6f:df:f3:a5:f0:c5:70:88:53: 95:53:c4:c5:f4:4d:97:1a:b0:0e:12:82:72:02:3e: ff:34:d6:c2:86:85:2f:a0:75:ee:2f:30:6a:22:cc: 11:4c:bd:5c:e7:e7:7f:c9:ee:43:d7:2d:1e:89:16: 52:74:c8:e9:6b:c7:b9:46:61:91:a6:3c:8a:4d:61: 6b:a7:42:ad:40:dd:fd:68:ea:0b:b0:65:bc:b4:8e: 18:1d:69:f2:71:39:b6:be:a2:5d:81:b5:2e:e5:79: d4:80:e3:dd:6a:e5:a4:b3:38:db:81:ad:e4:a3:6b: 1b:96:c8:f1:a9:fa:92:86:0e:a7:fc:5d:1c:7a:64: 1c:52:97:9c:9f:b7:0c:ce:61:50:fe:03:cf:f5:82: 60:5a:f5:49:37:59:63:84:57:18:6b:c4:35:cf:91: 2b:89:56:f9:7c:a0:e7:89:67:be:22:67:aa:7e:f7: 36:72:4d:ab:fd:51:1d:93:90:12:42:53:eb:4b:c8: dd:a8:2a:54:86:01:7e:39:0f:82:ad:91:93:41:fa: 7e:52:e3:24:4b:21:9c:8b:11:6b:27:b0:a7:37:1e: 8d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EC:E4:6F:48:61:C0:BD:0B:B9:8B:A4:74:2A:02:D3:23:68:D5:E0 X509v3 Authority Key Identifier: keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2f:5f:84:7e:da:82:eb:55:8a:11:fc:b6:67:b3:a8:8a:9c: 1d:b2:7f:7a:f9:b3:25:40:0d:c5:7b:27:de:54:37:fb:44:2e: 4b:cf:fb:98:b9:fb:92:79:be:7e:ea:43:f0:be:28:e9:04:31: 09:a0:00:37:30:12:f8:d3:36:7e:83:68:ac:e4:37:c3:bc:36: 37:e3:c3:75:a7:ba:6c:1c:fc:49:fb:72:0b:cd:f1:3b:2c:10: 9a:cd:95:a2:be:15:9e:08:2e:3c:2f:8e:72:75:1f:64:2d:3d: 9e:2b:58:47:ed:f0:f9:09:56:f2:25:d0:e7:bd:40:7e:7e:58: 7f:7c:13:db:cb:df:b1:77:63:12:87:46:1e:c5:76:54:70:ee: 54:b0:6b:78:78:2e:84:a9:9f:d9:9d:e2:d4:f4:1e:1e:4e:ad: ec:68:dd:76:98:3c:b7:03:8c:43:94:3a:9f:34:14:77:7f:ae: 11:bc:fa:51:94:fd:ec:32:01:79:7a:44:39:65:ab:e5:f8:4d: 0c:73:2e:dc:c1:db:dc:69:99:8f:a3:58:60:96:c1:bd:28:d6: 2d:e3:6d:0f:48:86:54:5d:f6:5f:08:64:7e:0a:5e:9b:ac:4e: 5d:6a:aa:83:be:dc:03:c7:98:68:e7:46:e9:e8:c7:d7:7b:09: cd:a3:8b:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKW4OvcVvJ/rGj1GTy/4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZTVkOTAzMDFkM2NmNjdiODhmZWU0MmRkNTQ1YWZjZjE0 ZWE1NjEwHhcNMjUxMjI0MDcwMTEzWhcNMjUxMjI1MDcwMTEzWjAzMTEwLwYDVQQD Eyg5MmVjZTQ2ZjQ4NjFjMGJkMGJiOThiYTQ3NDJhMDJkMzIzNjhkNWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjt0u9Xi0tgdoTNYWSvp0EoxcEet P1MMGOYInvn0n3EJoXZv3/Ol8MVwiFOVU8TF9E2XGrAOEoJyAj7/NNbChoUvoHXu LzBqIswRTL1c5+d/ye5D1y0eiRZSdMjpa8e5RmGRpjyKTWFrp0KtQN39aOoLsGW8 tI4YHWnycTm2vqJdgbUu5XnUgOPdauWkszjbga3ko2sblsjxqfqShg6n/F0cemQc Upecn7cMzmFQ/gPP9YJgWvVJN1ljhFcYa8Q1z5EriVb5fKDniWe+Imeqfvc2ck2r /VEdk5ASQlPrS8jdqCpUhgF+OQ+CrZGTQfp+UuMkSyGcixFrJ7CnNx6NWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLs5G9IYcC9C7mLpHQqAtMjaNXgMB8GA1UdIwQY MBaAFIPl2QMB089nuI/uQt1UWvzxTqVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2It NzgyYjgyZWJjYWFlLzEvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2ItNzgyYjgyZWJjYWFl LzEvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASi9fhH7a gutVihH8tmezqIqcHbJ/evmzJUANxXsn3lQ3+0QuS8/7mLn7knm+fupD8L4o6QQx CaAANzAS+NM2foNorOQ3w7w2N+PDdae6bBz8SftyC83xOywQms2Vor4VngguPC+O cnUfZC09nitYR+3w+QlW8iXQ571Afn5Yf3wT28vfsXdjEodGHsV2VHDuVLBreHgu hKmf2Z3i1PQeHk6t7Gjddpg8twOMQ5Q6nzQUd3+uEbz6UZT97DIBeXpEOWWr5fhN DHMu3MHb3GmZj6NYYJbBvSjWLeNtD0iGVF32Xwhkfgpem6xOXWqqg77cA8eYaOdG 6ejH13sJzaOLeA== -----END CERTIFICATE-----Generated at Wed Dec 24 11:31:55 2025 by rpki-client