This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json) Hash identifier: /vJrzqtNdc16yQXD15j77l1p1pVpvqzBMK+4lU+S8Tw= Subject key identifier: AF:CA:07:4A:B0:B0:0F:F1:DA:A3:BC:D3:E6:A9:98:5E:91:B8:EB:83 Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32 Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232 Certificate serial: 019AF277222D332871295907A2E3F8CE8D5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft Manifest number: 10FC Signing time: Sat 06 Dec 2025 07:01:24 +0000 Manifest this update: Sat 06 Dec 2025 07:01:24 +0000 Manifest next update: Sun 07 Dec 2025 07:01:24 +0000 Files and hashes: 1: PNY0bopVkefbLxgLSsZnVYV7eHU.roa (hash: kYhkbg5jATuw8BE/PYkSTUN7eKPVKmi+NIGEx/Z0W7M=) 2: _DwTrJ6Rj1PQPQ3EZ7Z_NHmoK80.roa (hash: WIzgi3FHup1BX82atvYWveM/B2LQRKi9b5BQedkaQlM=) 3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: tsL2oI9uYY+YXNWObXjsXutDfSFSLqk0Q7VYYaQ0JS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:22:2d:33:28:71:29:59:07:a2:e3:f8:ce:8d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232 Validity Not Before: Dec 6 07:01:24 2025 GMT Not After : Dec 7 07:01:24 2025 GMT Subject: CN=afca074ab0b00ff1daa3bcd3e6a9985e91b8eb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:36:bf:5d:0d:77:99:0a:b8:24:19:5b:5a: 6c:82:1c:72:6e:56:c9:b9:0b:1f:03:b7:94:1f:f1: b2:25:2b:d8:42:72:43:a7:48:e3:54:dc:e9:39:69: d3:85:6f:93:29:9c:0c:dd:0f:4d:d9:f8:9a:f2:6d: f5:9f:71:8e:07:68:48:7c:76:eb:81:ab:b5:79:b2: d8:cd:ec:a8:8f:ec:97:9d:57:4e:27:65:cd:5a:3a: 44:7f:5e:9c:3f:36:99:76:59:2c:29:69:28:ad:48: a3:c9:50:60:bb:b6:0c:7b:79:86:59:29:e4:fa:68: 7a:77:7f:f2:8c:1d:99:fe:d2:ee:26:ff:f4:1d:74: 27:d4:61:94:74:dc:2b:9a:c5:ba:cf:51:a6:11:78: 16:4f:e1:65:aa:e6:8c:61:fc:c7:2a:fa:68:eb:40: bf:11:5c:47:ce:0c:2f:08:65:12:f6:a9:4a:e6:99: a5:5e:8c:91:ab:93:83:50:8e:8e:bd:30:e2:b0:d2: e1:00:83:ad:13:7b:9a:63:cb:84:b2:74:a9:45:73: 3d:df:de:52:9b:37:51:b4:d3:b6:75:4b:f4:1f:44: d2:92:09:3c:94:37:1b:9d:fc:d0:e5:a6:c2:4d:ca: d5:8b:9d:eb:29:cf:e3:aa:b3:88:b1:f6:48:15:4b: f6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CA:07:4A:B0:B0:0F:F1:DA:A3:BC:D3:E6:A9:98:5E:91:B8:EB:83 X509v3 Authority Key Identifier: keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c8:69:e5:89:e5:71:55:51:87:91:dc:3a:a3:51:98:eb:70: c9:ff:34:fc:9f:28:4a:5a:fa:15:88:2a:e5:a4:82:ac:78:a2: 0d:ab:7e:af:32:22:a1:8b:ec:8e:d6:2b:69:65:a1:5a:31:54: 93:f4:58:9c:51:88:6f:70:c1:88:ad:e4:44:40:a3:9c:3a:ab: ad:ea:51:ef:b9:bb:38:40:50:09:d2:c6:9b:75:91:70:14:5f: c7:9c:db:d8:4d:38:95:65:f7:24:7b:20:c1:93:6c:ef:e3:0f: 2d:03:ba:7f:ad:e2:b2:6e:92:2e:ff:f4:fe:30:21:c6:ed:c8: 72:e6:77:16:47:b2:a7:2f:db:ff:75:24:bb:b0:de:7e:8d:9d: 96:8e:61:49:d7:04:64:da:ec:3d:c8:19:47:64:c8:4d:47:83: dc:a8:37:9f:3d:e2:78:9b:b7:aa:13:1f:f8:52:be:84:6b:89: 23:3e:de:05:7d:67:38:bb:15:0b:ea:c9:ee:e2:68:68:2e:71: e9:8e:d4:1a:86:f4:47:85:3c:5b:ba:96:5d:49:06:fb:87:27: 56:11:24:f0:67:3d:4d:e1:07:49:5e:7d:68:6d:3e:0f:96:c7: 7d:0b:ae:42:8d:e2:81:e3:14:e7:42:4d:d8:e2:ae:7d:b1:93: 86:ed:52:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyItMyhxKVkHouP4zo1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZTIzNDBlZjVjNGE0OTUyZWI0MTNkMjg4YzI5ZDkzNzgz NDIyMzIwHhcNMjUxMjA2MDcwMTI0WhcNMjUxMjA3MDcwMTI0WjAzMTEwLwYDVQQD EyhhZmNhMDc0YWIwYjAwZmYxZGFhM2JjZDNlNmE5OTg1ZTkxYjhlYjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFM2v10Nd5kKuCQZW1psghxyblbJ uQsfA7eUH/GyJSvYQnJDp0jjVNzpOWnThW+TKZwM3Q9N2fia8m31n3GOB2hIfHbr gau1ebLYzeyoj+yXnVdOJ2XNWjpEf16cPzaZdlksKWkorUijyVBgu7YMe3mGWSnk +mh6d3/yjB2Z/tLuJv/0HXQn1GGUdNwrmsW6z1GmEXgWT+FlquaMYfzHKvpo60C/ EVxHzgwvCGUS9qlK5pmlXoyRq5ODUI6OvTDisNLhAIOtE3uaY8uEsnSpRXM9395S mzdRtNO2dUv0H0TSkgk8lDcbnfzQ5abCTcrVi53rKc/jqrOIsfZIFUv2twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/KB0qwsA/x2qO80+apmF6RuOuDMB8GA1UdIwQY MBaAFIPiNA71xKSVLrQT0ojCnZN4NCIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kNGQyZjgtOGRjMS00MDcwLTk3N2Ut YTZjZWMwNDU5NWY4LzEvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kNGQyZjgtOGRjMS00MDcwLTk3N2UtYTZjZWMwNDU5NWY4 LzEvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhshp5Ynl cVVRh5HcOqNRmOtwyf80/J8oSlr6FYgq5aSCrHiiDat+rzIioYvsjtYraWWhWjFU k/RYnFGIb3DBiK3kRECjnDqrrepR77m7OEBQCdLGm3WRcBRfx5zb2E04lWX3JHsg wZNs7+MPLQO6f63ism6SLv/0/jAhxu3IcuZ3Fkeypy/b/3Uku7Defo2dlo5hSdcE ZNrsPcgZR2TITUeD3Kg3nz3ieJu3qhMf+FK+hGuJIz7eBX1nOLsVC+rJ7uJoaC5x 6Y7UGob0R4U8W7qWXUkG+4cnVhEk8Gc9TeEHSV59aG0+D5bHfQuuQo3igeMU50JN 2OKufbGThu1S6A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:59:42 2025 by rpki-client