This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft File: g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft (raw, json) Hash identifier: bBcsMD1yWs48UCEeIm7I+uQc2ciuitvxtLjmroDchAg= Subject key identifier: 2D:0E:E4:D1:17:14:19:14:5B:29:DD:F2:4B:24:BC:DC:29:C1:5F:60 Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE Certificate issuer: /CN=83608851202328dce5fc01bf9dd292520530d9fe Certificate serial: 019AF1641C9B421A45D3FDBB94A1A2295345 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft Manifest number: 070C Signing time: Sat 06 Dec 2025 02:01:01 +0000 Manifest this update: Sat 06 Dec 2025 02:01:01 +0000 Manifest next update: Sun 07 Dec 2025 02:01:01 +0000 Files and hashes: 1: 9ZuULR-c9rvN4U_Qezt0ck4tz_4.roa (hash: NvC05zdhztqBgGL0x7IrDtfQb3ZiSTjs+SHJkAWRFb8=) 2: g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl (hash: DVExY3e99d1IBf932e6u3pLHJufFhS2y9QRYLyrKkYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:1c:9b:42:1a:45:d3:fd:bb:94:a1:a2:29:53:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe Validity Not Before: Dec 6 02:01:01 2025 GMT Not After : Dec 7 02:01:01 2025 GMT Subject: CN=2d0ee4d1171419145b29ddf24b24bcdc29c15f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:56:ce:32:9f:d2:ba:08:78:f7:89:7c:54:dc: 0c:ac:bf:66:6a:5c:c3:d0:46:b6:d4:d9:71:08:ce: 7e:42:36:02:db:fa:73:75:d3:7c:e6:1c:93:a0:c2: 57:59:47:82:83:42:ca:8e:37:9d:fd:f6:59:87:76: 36:8d:00:9f:a4:66:a8:88:8c:55:56:f4:c3:37:12: 08:5f:57:92:4e:48:ce:19:c0:e8:54:e0:ce:6e:d0: ad:2d:6c:48:90:39:a2:31:87:25:ea:32:61:36:c9: 20:a5:2a:94:d4:23:99:52:73:61:97:fb:37:3a:4f: f2:b2:2c:50:b1:c0:10:93:34:15:8e:df:f9:5e:45: 70:56:84:00:4f:dd:dc:1c:e1:44:49:68:f9:f5:50: f8:57:07:e8:bc:ac:91:77:14:6f:3a:cb:64:13:e9: 95:67:ec:4a:dc:1a:7f:7e:37:5f:99:0f:47:d9:98: b9:6d:6e:e9:fe:9c:3c:af:fe:e5:ad:93:21:a6:41: f7:dc:c7:21:51:71:97:08:aa:c4:f6:d6:53:22:55: 2f:39:c4:40:4d:08:95:d8:4b:5a:14:d1:0a:29:22: 11:97:37:30:dd:88:49:ab:7b:40:07:67:54:d4:30: 0a:a2:f7:42:1b:4e:c2:7d:13:a0:cd:2b:1c:d4:c5: b6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0E:E4:D1:17:14:19:14:5B:29:DD:F2:4B:24:BC:DC:29:C1:5F:60 X509v3 Authority Key Identifier: keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:73:e9:71:70:f5:8a:0b:ac:84:67:c8:62:8b:85:42:fa:c1: 59:5c:08:a7:de:36:b0:39:4d:9d:37:9b:23:ed:82:a0:51:29: c7:ac:c0:5e:ad:ad:0d:bf:53:2f:5e:e1:7a:aa:7a:22:80:8d: 82:7b:ce:45:59:64:99:a3:0f:06:7f:c3:16:b2:ba:20:bf:7d: c5:9e:6b:92:5b:62:1a:27:17:fa:e5:37:04:30:25:f8:0a:65: 1d:80:05:a2:37:6e:8f:f4:79:eb:c2:2b:18:f7:f1:7c:6b:e8: 75:2c:fc:b3:20:22:d6:ce:33:9b:56:5c:5b:36:e7:6c:1a:eb: b4:43:50:7f:86:e6:01:89:0c:81:80:79:fa:71:ec:a9:90:4f: 5f:9f:81:c8:e6:5a:24:f2:e0:89:4f:47:4e:61:6e:30:43:7e: ad:a9:0c:45:64:47:ce:8c:56:36:cf:08:7b:89:d9:c6:7d:07: d0:fd:2a:83:5b:be:3d:39:1c:70:7c:a1:a7:a4:e2:91:06:b9: ac:fa:3f:ea:d8:b2:95:b3:a8:3b:63:2e:f6:37:5d:5b:5e:b2: 8f:83:b2:5b:3d:7d:48:be:ff:cc:df:22:40:c0:2b:b9:dd:50: 5c:2f:a5:cc:53:1b:d2:ce:70:92:c6:fe:73:c1:15:7b:7e:52: 6e:81:6b:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBybQhpF0/27lKGiKVNFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjA4ODUxMjAyMzI4ZGNlNWZjMDFiZjlkZDI5MjUyMDUz MGQ5ZmUwHhcNMjUxMjA2MDIwMTAxWhcNMjUxMjA3MDIwMTAxWjAzMTEwLwYDVQQD EygyZDBlZTRkMTE3MTQxOTE0NWIyOWRkZjI0YjI0YmNkYzI5YzE1ZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VbOMp/Sugh494l8VNwMrL9malzD 0Ea21NlxCM5+QjYC2/pzddN85hyToMJXWUeCg0LKjjed/fZZh3Y2jQCfpGaoiIxV VvTDNxIIX1eSTkjOGcDoVODObtCtLWxIkDmiMYcl6jJhNskgpSqU1COZUnNhl/s3 Ok/ysixQscAQkzQVjt/5XkVwVoQAT93cHOFESWj59VD4VwfovKyRdxRvOstkE+mV Z+xK3Bp/fjdfmQ9H2Zi5bW7p/pw8r/7lrZMhpkH33MchUXGXCKrE9tZTIlUvOcRA TQiV2EtaFNEKKSIRlzcw3YhJq3tAB2dU1DAKovdCG07CfROgzSsc1MW2ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0O5NEXFBkUWynd8kskvNwpwV9gMB8GA1UdIwQY MBaAFINgiFEgIyjc5fwBv53SklIFMNn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80NTM1NDItMDhiMi00Mzk5LWJjNWMt Yzc1NmFlMDFmYThhLzEvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80NTM1NDItMDhiMi00Mzk5LWJjNWMtYzc1NmFlMDFmYThh LzEvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs3PpcXD1 igushGfIYouFQvrBWVwIp942sDlNnTebI+2CoFEpx6zAXq2tDb9TL17heqp6IoCN gnvORVlkmaMPBn/DFrK6IL99xZ5rkltiGicX+uU3BDAl+AplHYAFojduj/R568Ir GPfxfGvodSz8syAi1s4zm1ZcWzbnbBrrtENQf4bmAYkMgYB5+nHsqZBPX5+ByOZa JPLgiU9HTmFuMEN+rakMRWRHzoxWNs8Ie4nZxn0H0P0qg1u+PTkccHyhp6TikQa5 rPo/6tiylbOoO2Mu9jddW16yj4OyWz19SL7/zN8iQMArud1QXC+lzFMb0s5wksb+ c8EVe35SboFrOw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:48 2025 by rpki-client