This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft File: grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft (raw, json) Hash identifier: /ikLTjZaOuMaic7WofH0XvTJropI073t0azJ5+UPVzU= Subject key identifier: A7:8A:64:08:BA:F9:DD:68:31:AE:A2:D5:52:3B:9B:D9:6B:72:92:DD Authority key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE Certificate issuer: /CN=82b53661f621b6f574a5f38f1162ca679c3b30ee Certificate serial: 019AF2E4341ACBF62C8592C8514AD385F37B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft Manifest number: 07A5 Signing time: Sat 06 Dec 2025 09:00:33 +0000 Manifest this update: Sat 06 Dec 2025 09:00:33 +0000 Manifest next update: Sun 07 Dec 2025 09:00:33 +0000 Files and hashes: 1: QOnOX-qgjRMjz_SNK9ZpG_NDO98.roa (hash: N/XUOamSaDoqkQC9NmUkQgS+Uf69LEs+brVxUPL9rfU=) 2: grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl (hash: abd2Fe+7VPfibMdda8Yz3XsT8jMsT260JxhUam/DRCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:34:1a:cb:f6:2c:85:92:c8:51:4a:d3:85:f3:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee Validity Not Before: Dec 6 09:00:33 2025 GMT Not After : Dec 7 09:00:33 2025 GMT Subject: CN=a78a6408baf9dd6831aea2d5523b9bd96b7292dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d7:d4:db:81:f0:c7:f2:87:19:1f:a8:c9:0f: 76:d7:07:31:49:2d:ab:2d:cc:2b:56:70:20:d2:8b: fd:b7:92:38:30:73:21:ef:f8:0e:2d:d9:fc:d5:09: a6:b9:38:bd:da:75:a9:99:00:f3:2b:9a:7d:ec:14: 10:ce:7c:f9:dd:33:bd:eb:ad:28:c0:dd:af:c0:2c: 51:20:4a:5e:e0:80:b0:1a:f0:23:7e:a3:20:bd:7c: ec:90:8c:a4:37:f2:d0:83:0f:3a:84:32:21:01:ff: 89:c1:b0:0f:a0:ed:23:7f:77:fc:9d:66:6d:94:bb: 34:c9:de:f3:83:e6:58:a4:b6:54:e2:2f:ed:bc:69: 04:06:18:1a:53:0b:e2:e5:e9:93:71:08:ad:c4:4e: 0e:a0:e0:f0:3c:81:fc:5b:2d:17:51:2c:51:b7:1b: 99:dd:7e:55:24:51:f1:ec:10:f0:43:8c:46:7d:ed: cd:b4:54:2e:3c:fd:3a:fb:42:e6:f2:94:fa:d7:c5: aa:85:c6:d4:0e:a7:34:f8:dc:37:c1:29:09:de:c3: af:b4:6f:f9:50:18:b1:e0:b2:21:b2:0a:86:4d:6c: 77:a2:97:fe:91:04:2f:4e:b5:be:b8:e0:5a:dd:8e: b0:3a:2b:af:fc:30:53:ff:27:e7:b3:49:35:ad:a4: 65:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8A:64:08:BA:F9:DD:68:31:AE:A2:D5:52:3B:9B:D9:6B:72:92:DD X509v3 Authority Key Identifier: keyid:82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:fe:aa:6c:19:7c:05:a5:f9:98:61:be:85:e7:e6:df:3e:f3: 20:ca:1c:fb:e1:c2:e4:b1:b7:7b:f9:05:e0:07:21:b2:af:3b: 44:a8:68:e2:83:6f:98:fa:83:15:d4:6a:b5:14:c0:65:6d:f1: eb:2a:40:8d:7c:53:4c:c2:48:ab:ff:08:d7:bb:31:b7:4e:10: aa:cb:07:8a:e0:85:2d:c7:bd:f8:ad:2e:72:0d:3a:98:d2:5d: 58:ff:4c:0b:3c:89:4b:b6:7e:74:62:72:7d:df:30:70:10:d1: 24:4c:d9:1a:30:5e:0d:a0:3b:9c:7c:a7:05:bf:bf:e2:0a:7d: 6b:e0:23:06:ed:bb:95:22:df:3f:25:22:f4:f4:bf:b0:6f:07: 24:60:35:f5:46:47:e2:15:92:da:e0:e2:d9:d4:d3:7c:2b:12: 62:eb:df:b2:f3:39:bd:fe:9a:1e:13:4a:e1:59:a5:43:b4:ec: 77:7b:cb:b2:85:a6:ff:6e:9b:60:9c:d4:7a:c8:e6:6b:d5:3c: 88:9b:57:8b:92:aa:fd:d1:70:08:83:65:8b:c9:7c:d8:16:41: cc:cb:48:bc:36:78:e3:59:80:67:be:0d:42:0a:40:1d:77:f8: a9:5b:2b:25:d7:bc:10:11:20:73:43:56:a5:a6:33:27:61:b3: 21:e8:c3:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5DQay/YshZLIUUrThfN7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYjUzNjYxZjYyMWI2ZjU3NGE1ZjM4ZjExNjJjYTY3OWMz YjMwZWUwHhcNMjUxMjA2MDkwMDMzWhcNMjUxMjA3MDkwMDMzWjAzMTEwLwYDVQQD EyhhNzhhNjQwOGJhZjlkZDY4MzFhZWEyZDU1MjNiOWJkOTZiNzI5MmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNfU24Hwx/KHGR+oyQ921wcxSS2r LcwrVnAg0ov9t5I4MHMh7/gOLdn81QmmuTi92nWpmQDzK5p97BQQznz53TO9660o wN2vwCxRIEpe4ICwGvAjfqMgvXzskIykN/LQgw86hDIhAf+JwbAPoO0jf3f8nWZt lLs0yd7zg+ZYpLZU4i/tvGkEBhgaUwvi5emTcQitxE4OoODwPIH8Wy0XUSxRtxuZ 3X5VJFHx7BDwQ4xGfe3NtFQuPP06+0Lm8pT618WqhcbUDqc0+Nw3wSkJ3sOvtG/5 UBix4LIhsgqGTWx3opf+kQQvTrW+uOBa3Y6wOiuv/DBT/yfns0k1raRl+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeKZAi6+d1oMa6i1VI7m9lrcpLdMB8GA1UdIwQY MBaAFIK1NmH2Ibb1dKXzjxFiymecOzDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iNzRhZDYtYWE1YS00OTQ5LWI4NjAt NjQ5YmZjNTQ4NTg3LzEvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iNzRhZDYtYWE1YS00OTQ5LWI4NjAtNjQ5YmZjNTQ4NTg3 LzEvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1f6qbBl8 BaX5mGG+hefm3z7zIMoc++HC5LG3e/kF4Achsq87RKho4oNvmPqDFdRqtRTAZW3x 6ypAjXxTTMJIq/8I17sxt04QqssHiuCFLce9+K0ucg06mNJdWP9MCzyJS7Z+dGJy fd8wcBDRJEzZGjBeDaA7nHynBb+/4gp9a+AjBu27lSLfPyUi9PS/sG8HJGA19UZH 4hWS2uDi2dTTfCsSYuvfsvM5vf6aHhNK4VmlQ7Tsd3vLsoWm/26bYJzUesjma9U8 iJtXi5Kq/dFwCINli8l82BZBzMtIvDZ441mAZ74NQgpAHXf4qVsrJde8EBEgc0NW paYzJ2GzIejDCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:38 2025 by rpki-client