This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft File: g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json) Hash identifier: Bgf2YBwS16EHQju95qv5XwxQptPoDHAiRNDkYWA4tRE= Subject key identifier: 45:37:63:E2:B2:9B:EC:42:F6:E3:5A:EC:8A:83:68:A3:18:93:AF:65 Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7 Certificate issuer: /CN=836528e152b6dcba1571241ac55be5bce01118b7 Certificate serial: 019AF31B3ADF67C544E6B0AEF3F27C5020A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 10:00:39 +0000 Manifest this update: Sat 06 Dec 2025 10:00:39 +0000 Manifest next update: Sun 07 Dec 2025 10:00:39 +0000 Files and hashes: 1: CvGHepAgyhQF29vgwO5RLU27Tig.roa (hash: MTqSAP2ijcRiLN3/AxskccxaBqUIlze/F2fZZstIpd0=) 2: LG2MEPQP4SA0RYNet0_i-TbLVOA.roa (hash: Q0AqpzK5pnfc1Ye6ZvO737eSRCPhdfmTWDd+EoGA7/k=) 3: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: F2juB5ZcZw+vjyJXJfAhiH82545CZnFZHVYn1gsYXtA=) 4: mM8VTopJZmHymxZODgrdAS9tCB0.roa (hash: xbQXqlIoaX+7utbFJ34rZdlVmArTuhCKQpdLZlu7I7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:3a:df:67:c5:44:e6:b0:ae:f3:f2:7c:50:20:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7 Validity Not Before: Dec 6 10:00:39 2025 GMT Not After : Dec 7 10:00:39 2025 GMT Subject: CN=453763e2b29bec42f6e35aec8a8368a31893af65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:40:86:a8:65:2d:61:4a:f6:4a:11:37:2e:69: a6:94:e5:70:5d:cb:9c:7b:f0:1e:2a:27:81:eb:7f: f2:dc:ae:a0:c1:b3:22:34:ac:1a:68:b3:28:42:24: db:11:b9:2a:61:7e:52:3b:71:1e:d2:9d:17:c5:0e: d3:9b:c7:8c:2a:82:32:9d:4c:b1:18:94:81:9d:58: 87:36:ca:b9:9a:b2:6f:00:be:fa:f3:10:4c:1e:53: f2:e9:7d:38:48:6f:7e:f8:a4:99:75:ec:6f:89:ef: 94:29:e9:6c:aa:09:bb:7e:c7:55:4f:05:50:42:9b: cc:5d:f4:cd:1f:2d:a3:6f:5f:7a:f3:e6:ef:22:89: 87:be:c0:69:da:ae:c0:4d:42:4a:dc:35:2b:78:52: 5c:db:82:9b:02:6b:34:02:8f:70:31:b0:28:cd:0c: 1f:6f:8b:5a:97:18:12:15:ce:a1:af:f0:fc:49:2e: 62:21:44:db:fe:08:97:b9:92:0b:5f:aa:ed:8e:ee: 37:88:ba:20:81:a6:c8:2a:28:3f:80:df:7a:81:61: 46:85:7d:ba:4c:6c:9b:69:3f:38:f5:c9:b2:a0:ba: 36:09:d3:1a:0c:87:5d:d3:77:8c:67:98:91:ee:a3: 3d:67:28:d7:db:06:a0:03:aa:4e:4f:f9:65:00:72: ec:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:37:63:E2:B2:9B:EC:42:F6:E3:5A:EC:8A:83:68:A3:18:93:AF:65 X509v3 Authority Key Identifier: keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2c:fa:54:d6:44:92:88:df:24:78:77:2f:ed:af:c0:b9:dc: aa:cd:fc:d6:3b:3d:82:49:a5:19:c3:49:7e:59:83:a1:68:11: f9:a2:a8:f7:4b:5c:f5:23:e1:9b:b0:e0:a2:6f:5f:34:63:dc: 7d:bd:17:53:af:26:ae:77:31:50:cb:f1:c3:34:05:c5:cd:ba: ac:f9:f8:4d:f8:d7:78:4c:71:eb:f1:5e:87:d2:5d:00:e5:60: 62:a8:4b:2d:42:fb:3f:14:25:74:52:bf:8a:9b:5e:d9:6c:8d: e6:e8:91:aa:2e:fa:44:52:ff:88:1d:d7:b9:a9:65:5d:41:62: 95:a3:1c:c9:87:0d:f5:1e:40:83:95:1b:8f:24:a4:38:75:94: 32:e6:a4:00:1e:69:dc:d7:3c:7d:fd:61:30:90:f6:82:b8:ca: e0:a6:75:e9:42:a1:d0:8a:f4:95:fd:db:57:c9:4c:40:b4:20: 80:eb:28:5d:92:28:44:46:40:ae:36:f3:1c:2c:a3:19:f9:ab: c0:29:3f:9c:37:d5:82:a6:f4:44:72:e8:7e:d0:fb:e1:d5:87: bc:8f:12:9f:bb:33:37:83:02:5e:f1:45:14:c9:0d:70:18:aa: 71:aa:48:fc:f2:58:83:0a:60:52:af:b7:1b:3e:5a:b0:49:d3: fc:98:3d:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzrfZ8VE5rCu8/J8UCCoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjUyOGUxNTJiNmRjYmExNTcxMjQxYWM1NWJlNWJjZTAx MTE4YjcwHhcNMjUxMjA2MTAwMDM5WhcNMjUxMjA3MTAwMDM5WjAzMTEwLwYDVQQD Eyg0NTM3NjNlMmIyOWJlYzQyZjZlMzVhZWM4YTgzNjhhMzE4OTNhZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kCGqGUtYUr2ShE3LmmmlOVwXcuc e/AeKieB63/y3K6gwbMiNKwaaLMoQiTbEbkqYX5SO3Ee0p0XxQ7Tm8eMKoIynUyx GJSBnViHNsq5mrJvAL768xBMHlPy6X04SG9++KSZdexvie+UKelsqgm7fsdVTwVQ QpvMXfTNHy2jb1968+bvIomHvsBp2q7ATUJK3DUreFJc24KbAms0Ao9wMbAozQwf b4talxgSFc6hr/D8SS5iIUTb/giXuZILX6rtju43iLoggabIKig/gN96gWFGhX26 TGybaT849cmyoLo2CdMaDIdd03eMZ5iR7qM9ZyjX2wagA6pOT/llAHLseQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEU3Y+Kym+xC9uNa7IqDaKMYk69lMB8GA1UdIwQY MBaAFINlKOFStty6FXEkGsVb5bzgERi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2Mt ZWI5NDE1ZWM1NDhhLzEvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2MtZWI5NDE1ZWM1NDhh LzEvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmiz6VNZE kojfJHh3L+2vwLncqs381js9gkmlGcNJflmDoWgR+aKo90tc9SPhm7Dgom9fNGPc fb0XU68mrncxUMvxwzQFxc26rPn4TfjXeExx6/Feh9JdAOVgYqhLLUL7PxQldFK/ ipte2WyN5uiRqi76RFL/iB3XuallXUFilaMcyYcN9R5Ag5UbjySkOHWUMuakAB5p 3Nc8ff1hMJD2grjK4KZ16UKh0Ir0lf3bV8lMQLQggOsoXZIoREZArjbzHCyjGfmr wCk/nDfVgqb0RHLoftD74dWHvI8Sn7szN4MCXvFFFMkNcBiqcapI/PJYgwpgUq+3 Gz5asEnT/Jg9Jg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:43 2025 by rpki-client