This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft File: g_rANRxoqaHdZA2oY9hnrYX3ipE.mft (raw, json) Hash identifier: MkcpbXD27N9hf+qwSyEptyS+KguNjxX15pzDZrKkByc= Subject key identifier: 91:A6:A3:A7:D1:4F:66:83:B0:43:2F:64:A9:73:C3:C0:36:E1:39:38 Authority key identifier: 83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91 Certificate issuer: /CN=83fac0351c68a9a1dd640da863d867ad85f78a91 Certificate serial: 019AF9F94796F18E13C3BD75684861A9A2D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft Manifest number: A4 Signing time: Sun 07 Dec 2025 18:00:54 +0000 Manifest this update: Sun 07 Dec 2025 18:00:54 +0000 Manifest next update: Mon 08 Dec 2025 18:00:54 +0000 Files and hashes: 1: Ifp7fQ7mKS2UADFnL-dEcvfRDTE.roa (hash: zAV7cpAaiTXY8jJp2Gcf8CxnC05s7OAa7rmlAr6seaI=) 2: g_rANRxoqaHdZA2oY9hnrYX3ipE.crl (hash: f7vLt4Mq2famM1hP++L33MiEr2IQlJXHlRPdZlznU1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:f9:47:96:f1:8e:13:c3:bd:75:68:48:61:a9:a2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83fac0351c68a9a1dd640da863d867ad85f78a91 Validity Not Before: Dec 7 18:00:54 2025 GMT Not After : Dec 8 18:00:54 2025 GMT Subject: CN=91a6a3a7d14f6683b0432f64a973c3c036e13938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:46:ad:45:09:c7:8f:40:e2:f8:22:5d:47: 2f:7f:bc:9a:45:34:df:1b:99:d6:b6:2c:07:fb:e3: 91:93:45:fe:21:4b:64:6e:93:09:87:02:c6:db:83: 5e:80:1f:21:70:19:ed:31:4c:cd:e0:b8:23:11:82: 40:a9:75:15:38:41:7b:4e:55:0d:5d:f7:f8:7a:c6: 95:07:07:08:d7:dd:d7:ad:a9:c7:05:e4:59:0d:9f: cb:ed:86:0d:b2:c5:83:bd:de:5b:92:23:39:23:cc: b1:f0:02:92:1f:99:83:a6:5b:be:dd:c3:6a:3c:f6: 79:4a:b9:fd:33:73:24:ed:b7:b9:a9:07:22:e5:af: 2f:d1:66:80:05:48:60:73:a1:db:19:70:23:7a:9d: 93:f0:a3:7a:21:d6:fe:f6:1b:5c:7c:43:34:fa:ce: 2e:f8:72:e9:41:e6:1e:46:14:72:21:11:e5:78:27: 72:7e:5f:2b:f2:6f:84:b4:45:3a:d3:9c:76:ff:34: 24:87:b5:5f:85:a7:fa:7f:dc:ab:ba:25:23:18:cf: 01:30:75:f0:9c:5b:e8:1f:65:c0:e1:c2:6a:90:c1: 70:03:65:db:dd:04:12:76:2a:f4:ec:96:5a:3b:2d: b3:27:3f:0e:4a:8f:b1:4e:03:8c:ed:00:fc:12:05: 89:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A6:A3:A7:D1:4F:66:83:B0:43:2F:64:A9:73:C3:C0:36:E1:39:38 X509v3 Authority Key Identifier: keyid:83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:8c:41:9b:cc:c5:a1:59:2c:13:eb:dd:7a:a1:ac:bc:a8:eb: 45:00:2b:5f:11:a7:a3:31:94:5d:f3:42:e3:e8:5e:88:56:f5: 46:a2:15:49:9d:39:5e:92:15:e8:6b:dc:bd:8d:e2:7b:6e:71: b1:fb:ab:4c:d0:c6:d8:2a:ca:45:3e:d4:56:60:5f:08:b5:e9: 42:37:b6:df:9e:1b:3e:88:39:9e:65:f9:fe:91:d9:f6:fc:a8: 6e:2c:b3:7a:98:43:d6:b6:ec:75:9c:ca:f1:d7:7e:a2:2c:09: 90:80:73:7d:48:54:04:95:10:b0:a7:3a:f7:7f:fa:50:35:db: 20:77:79:40:78:7d:2e:a7:6a:81:71:41:93:51:4f:fb:32:dd: 93:d0:21:7f:6c:15:7d:c1:21:f4:ab:5d:d4:49:f6:12:ed:37: d7:ac:48:0b:42:d1:88:ef:1e:76:54:ac:e9:b6:21:e6:4d:a4: 2a:2d:4a:61:07:5e:41:23:52:5c:f5:a6:7c:ac:79:40:88:3f: 26:a2:b2:cf:ed:80:1c:11:bd:f6:d5:b5:e6:d3:6c:fb:ba:3c: e8:ca:16:da:c3:33:9a:1d:f7:bd:19:64:62:a4:07:4c:c8:bf: 1a:03:8b:15:ec:8c:aa:a8:7b:b3:0f:df:52:e0:71:01:da:8a: b9:15:62:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5+UeW8Y4Tw711aEhhqaLRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZmFjMDM1MWM2OGE5YTFkZDY0MGRhODYzZDg2N2FkODVm NzhhOTEwHhcNMjUxMjA3MTgwMDU0WhcNMjUxMjA4MTgwMDU0WjAzMTEwLwYDVQQD Eyg5MWE2YTNhN2QxNGY2NjgzYjA0MzJmNjRhOTczYzNjMDM2ZTEzOTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyydGrUUJx49A4vgiXUcvf7yaRTTf G5nWtiwH++ORk0X+IUtkbpMJhwLG24NegB8hcBntMUzN4LgjEYJAqXUVOEF7TlUN Xff4esaVBwcI193XranHBeRZDZ/L7YYNssWDvd5bkiM5I8yx8AKSH5mDplu+3cNq PPZ5Srn9M3Mk7be5qQci5a8v0WaABUhgc6HbGXAjep2T8KN6Idb+9htcfEM0+s4u +HLpQeYeRhRyIRHleCdyfl8r8m+EtEU605x2/zQkh7Vfhaf6f9yruiUjGM8BMHXw nFvoH2XA4cJqkMFwA2Xb3QQSdir07JZaOy2zJz8OSo+xTgOM7QD8EgWJywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGmo6fRT2aDsEMvZKlzw8A24Tk4MB8GA1UdIwQY MBaAFIP6wDUcaKmh3WQNqGPYZ62F94qRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ19yQU5SeG9xYUhkWkEyb1k5aG5yWVgzaXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9jNzJjZjctMzU3Yi00ZmM3LTlmNjEt ZGZmN2U2MzQ4ZmZmLzEvZ19yQU5SeG9xYUhkWkEyb1k5aG5yWVgzaXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9jNzJjZjctMzU3Yi00ZmM3LTlmNjEtZGZmN2U2MzQ4ZmZm LzEvZ19yQU5SeG9xYUhkWkEyb1k5aG5yWVgzaXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABoxBm8zF oVksE+vdeqGsvKjrRQArXxGnozGUXfNC4+heiFb1RqIVSZ05XpIV6GvcvY3ie25x sfurTNDG2CrKRT7UVmBfCLXpQje2354bPog5nmX5/pHZ9vyobiyzephD1rbsdZzK 8dd+oiwJkIBzfUhUBJUQsKc693/6UDXbIHd5QHh9LqdqgXFBk1FP+zLdk9Ahf2wV fcEh9Ktd1En2Eu0316xIC0LRiO8edlSs6bYh5k2kKi1KYQdeQSNSXPWmfKx5QIg/ JqKyz+2AHBG99tW15tNs+7o86MoW2sMzmh33vRlkYqQHTMi/GgOLFeyMqqh7sw/f UuBxAdqKuRViLQ== -----END CERTIFICATE-----Generated at Sun Dec 7 21:41:54 2025 by rpki-client