This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft File: g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json) Hash identifier: 73f46hOsr6m+2G/bx3HXn6ExXeFa1op8xv+oldnykD4= Subject key identifier: AE:93:CC:E6:32:CB:D9:25:A8:67:43:F1:FA:F6:5E:10:7C:72:61:2A Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E Certificate issuer: /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e Certificate serial: 019AF19B2E8BF4BE13903C8A81FA18CA631C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft Manifest number: 1294 Signing time: Sat 06 Dec 2025 03:01:10 +0000 Manifest this update: Sat 06 Dec 2025 03:01:10 +0000 Manifest next update: Sun 07 Dec 2025 03:01:10 +0000 Files and hashes: 1: Db2mHELjbKafmmak8MMgrVJ9q6s.roa (hash: 0wtkW6LztiP4K0i9kH54ddtGh234DUMSdImFiKp9l5M=) 2: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: SVcf4DbGpjbqoYWMk5WyhD+/d5fBU9OVvhKRKFbM4Q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2e:8b:f4:be:13:90:3c:8a:81:fa:18:ca:63:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e Validity Not Before: Dec 6 03:01:10 2025 GMT Not After : Dec 7 03:01:10 2025 GMT Subject: CN=ae93cce632cbd925a86743f1faf65e107c72612a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ae:2d:20:02:f6:d9:57:24:59:3e:50:fd:8a: fa:5f:f6:d9:43:73:87:d6:e3:57:7e:2d:cd:ea:f3: 45:c9:b8:72:65:fb:2d:70:f1:b4:fa:9a:3a:1c:08: f2:6e:67:9e:d7:76:7b:2f:61:b5:f7:d2:59:8b:75: f9:f8:ce:3a:7a:5c:e9:74:de:0a:18:f5:65:7f:9c: 09:d8:13:05:0c:39:45:d9:86:46:4c:67:e7:ff:b5: 1f:97:9f:a0:9c:e0:43:9a:f6:ff:67:4f:ec:13:e2: 12:12:7b:d3:52:9e:a3:84:ea:18:6a:34:ad:d9:0e: a7:a8:2c:9f:33:e5:27:ef:3a:8b:b5:33:6c:b2:00: 46:98:fc:7a:21:05:27:91:54:cf:80:b4:63:ad:c9: 81:9d:f3:45:3e:e0:9f:4d:22:a9:87:e3:a2:25:d7: 81:04:8d:a3:62:cf:ad:6f:79:ef:00:92:b0:db:9f: 10:3e:c8:49:29:27:f8:2a:9d:5b:05:cc:6b:7b:b2: 5a:6f:63:a3:63:a3:7d:3e:76:aa:e4:16:2f:a1:e3: 8c:d5:46:f3:c2:16:7f:00:09:04:4f:56:df:3c:61: 30:6a:e1:39:3c:ee:d6:f2:88:3e:e3:21:31:35:e0: a2:52:6e:c1:72:b0:c5:95:39:b4:9a:d3:24:92:80: f5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:93:CC:E6:32:CB:D9:25:A8:67:43:F1:FA:F6:5E:10:7C:72:61:2A X509v3 Authority Key Identifier: keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:86:f2:8a:6f:ff:e8:5e:bc:07:41:fe:53:9f:08:7f:2d:78: fd:c4:57:85:b5:8d:81:14:f0:de:09:45:ce:d7:47:21:e8:5d: 79:fb:4e:8a:a2:e9:17:60:dc:b3:c7:8e:20:3f:85:d9:46:76: 1c:2d:a0:5b:f0:57:1f:be:c3:b1:98:db:7c:4e:82:17:d2:1a: 91:a6:a5:92:6a:f0:ae:31:9b:87:1c:d9:b1:e1:eb:7d:0f:9f: cd:23:dc:de:8b:7c:3f:1b:02:a1:23:e5:28:65:64:4e:cc:7c: 27:c0:3d:5d:10:fc:52:88:19:10:aa:58:4d:00:3b:c4:d7:a3: 47:61:69:e6:28:6c:69:d2:83:43:42:da:f5:60:ca:61:d3:f7: 56:cf:aa:e4:18:3d:1e:17:98:ec:cb:7f:52:7f:02:4a:56:27: eb:ee:af:a0:3a:31:f6:49:92:54:06:07:60:a0:ad:57:7c:b3: 1e:7c:07:c6:8c:25:4a:15:04:07:84:ec:e4:d7:11:57:b7:f1: ac:c0:9c:87:33:06:07:01:e0:23:47:2c:61:7b:9a:a4:4e:38: 28:e3:ed:de:e1:2c:2b:36:d0:37:b6:0a:01:35:fd:6f:f0:1e: 7b:54:d3:12:83:53:03:e1:3e:88:c0:77:cc:68:44:fd:30:2f: 2f:08:16:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmy6L9L4TkDyKgfoYymMcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYmYzNmViMThlZjlhNTdjNWZiNjAzYWRhNDAwZmU2YjY2 ODhlNmUwHhcNMjUxMjA2MDMwMTEwWhcNMjUxMjA3MDMwMTEwWjAzMTEwLwYDVQQD EyhhZTkzY2NlNjMyY2JkOTI1YTg2NzQzZjFmYWY2NWUxMDdjNzI2MTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a4tIAL22VckWT5Q/Yr6X/bZQ3OH 1uNXfi3N6vNFybhyZfstcPG0+po6HAjybmee13Z7L2G199JZi3X5+M46elzpdN4K GPVlf5wJ2BMFDDlF2YZGTGfn/7Ufl5+gnOBDmvb/Z0/sE+ISEnvTUp6jhOoYajSt 2Q6nqCyfM+Un7zqLtTNssgBGmPx6IQUnkVTPgLRjrcmBnfNFPuCfTSKph+OiJdeB BI2jYs+tb3nvAJKw258QPshJKSf4Kp1bBcxre7Jab2OjY6N9Pnaq5BYvoeOM1Ubz whZ/AAkET1bfPGEwauE5PO7W8og+4yExNeCiUm7BcrDFlTm0mtMkkoD16wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6TzOYyy9klqGdD8fr2XhB8cmEqMB8GA1UdIwQY MBaAFIO/NusY75pXxftgOtpAD+a2aI5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mNzdkNTEtZWUxYy00N2E5LTkwYmMt ZTBkMmExYjZlOGFjLzEvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mNzdkNTEtZWUxYy00N2E5LTkwYmMtZTBkMmExYjZlOGFj LzEvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYbyim// 6F68B0H+U58Ify14/cRXhbWNgRTw3glFztdHIehdeftOiqLpF2Dcs8eOID+F2UZ2 HC2gW/BXH77DsZjbfE6CF9IakaalkmrwrjGbhxzZseHrfQ+fzSPc3ot8PxsCoSPl KGVkTsx8J8A9XRD8UogZEKpYTQA7xNejR2Fp5ihsadKDQ0La9WDKYdP3Vs+q5Bg9 HheY7Mt/Un8CSlYn6+6voDox9kmSVAYHYKCtV3yzHnwHxowlShUEB4Ts5NcRV7fx rMCchzMGBwHgI0csYXuapE44KOPt3uEsKzbQN7YKATX9b/Aee1TTEoNTA+E+iMB3 zGhE/TAvLwgWHw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:38:58 2025 by rpki-client