This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft File: ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json) Hash identifier: TUMKe9orRh4jirOaTuoh8DmVSU8Lt3yyvjemSQLjNeM= Subject key identifier: FE:91:4E:77:37:11:51:28:06:3A:AD:1B:88:E5:EE:94:26:31:58:27 Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3 Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3 Certificate serial: 019AF12D76859CD93BE3EB564E6243AC6CD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft Manifest number: 08BC Signing time: Sat 06 Dec 2025 01:01:19 +0000 Manifest this update: Sat 06 Dec 2025 01:01:19 +0000 Manifest next update: Sun 07 Dec 2025 01:01:19 +0000 Files and hashes: 1: PWVVCu9dDfBo5aJQ6tlPGGlV6B0.roa (hash: 7Oj98eAXsnZMzEk2r6cNh4fSjsZETDRb2EQ95CICh04=) 2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: RinqazEfi241ZoVEjlEk1yUFb0OXehkvY+DkwrFeYWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:76:85:9c:d9:3b:e3:eb:56:4e:62:43:ac:6c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3 Validity Not Before: Dec 6 01:01:19 2025 GMT Not After : Dec 7 01:01:19 2025 GMT Subject: CN=fe914e7737115128063aad1b88e5ee9426315827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:51:e3:59:69:5f:2f:be:da:58:35:15:df:ba: a7:85:5d:c3:d9:96:11:29:52:6b:93:f8:a9:11:38: c3:0c:a4:2c:78:19:57:12:f5:3c:81:e0:73:cc:9b: ba:13:d7:84:ff:ea:ab:35:c7:07:ce:e5:96:38:cd: ff:bb:6f:99:ca:b8:d6:5a:31:ae:da:65:57:da:30: 37:aa:3c:0e:b5:32:d6:33:fa:da:f1:2a:0e:af:4d: ed:94:a6:6b:63:e0:eb:65:9f:e9:e2:3b:a5:2d:21: 6a:0d:eb:70:0e:57:e3:34:82:06:89:26:a7:33:5e: a1:ea:5b:52:aa:7e:00:dc:63:7e:f6:b9:8d:b0:87: 29:13:a0:8c:12:d9:03:9c:be:5c:ae:5e:20:f8:a2: 3b:c0:bc:10:ad:e3:21:5b:a2:2b:6e:c8:9e:d8:34: 45:1b:19:b7:02:8f:98:fc:2a:df:0f:7c:e6:73:1a: 01:47:ad:cf:4d:d0:be:db:a2:4d:0f:17:a5:c3:c8: 55:b1:0c:d5:01:1a:4b:ba:2e:c3:8c:b8:bd:f1:db: 56:32:f0:f1:c2:90:cf:18:73:cf:90:a2:7c:db:8a: 06:6d:03:53:42:ee:31:ec:53:8b:f8:17:8f:5d:10: 24:b4:21:7c:f3:86:a8:bb:b8:93:b9:c4:63:27:81: 7f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:91:4E:77:37:11:51:28:06:3A:AD:1B:88:E5:EE:94:26:31:58:27 X509v3 Authority Key Identifier: keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:86:a2:d9:e3:77:42:76:47:47:89:29:ec:85:68:30:ee:51: b0:39:43:e5:73:f1:66:54:7b:5a:92:b3:2b:7a:e0:67:7e:41: c9:d9:94:c2:0a:69:ac:94:be:e9:8b:eb:c1:59:db:7b:23:0d: 0a:d6:ad:91:a9:b3:f0:24:fb:67:d8:7a:d0:1c:92:ed:cf:a3: 74:ff:80:b6:41:e7:cd:d5:4b:ea:23:27:12:7c:18:75:99:dc: 63:99:20:0e:a8:7f:7a:e8:c5:28:9b:e3:1a:7a:92:c8:21:f8: 25:a4:62:d5:b4:27:3f:9c:ea:69:31:03:98:8a:64:4c:14:3e: a0:7e:18:26:c0:69:2b:94:23:15:9c:20:6d:bb:9c:f9:72:0f: ba:57:53:2f:b7:29:e4:c3:e8:e8:50:ff:45:2f:fd:fb:12:8f: 27:a0:2e:d5:28:fe:2f:86:d8:f6:5a:39:f7:82:38:d8:73:85: 50:62:b6:8e:48:1c:7e:6c:c4:41:e7:68:53:21:bf:9a:86:8c: cb:77:98:51:67:c0:62:f9:ad:d2:5d:d6:12:e0:c6:68:f8:49: a1:a9:0b:7b:34:a4:dd:34:30:36:25:32:74:8c:ec:f4:88:fe: ac:e0:30:d7:60:4d:ea:9e:6e:e6:db:7a:47:e3:a0:9d:08:6d: fa:50:1e:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXaFnNk74+tWTmJDrGzTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYWU3MGRmZDQzMDUyNzM2ZmU4NWYwMGQyOTg0Y2UzNzZi NzZlYjMwHhcNMjUxMjA2MDEwMTE5WhcNMjUxMjA3MDEwMTE5WjAzMTEwLwYDVQQD EyhmZTkxNGU3NzM3MTE1MTI4MDYzYWFkMWI4OGU1ZWU5NDI2MzE1ODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVHjWWlfL77aWDUV37qnhV3D2ZYR KVJrk/ipETjDDKQseBlXEvU8geBzzJu6E9eE/+qrNccHzuWWOM3/u2+ZyrjWWjGu 2mVX2jA3qjwOtTLWM/ra8SoOr03tlKZrY+DrZZ/p4julLSFqDetwDlfjNIIGiSan M16h6ltSqn4A3GN+9rmNsIcpE6CMEtkDnL5crl4g+KI7wLwQreMhW6Irbsie2DRF Gxm3Ao+Y/CrfD3zmcxoBR63PTdC+26JNDxelw8hVsQzVARpLui7DjLi98dtWMvDx wpDPGHPPkKJ824oGbQNTQu4x7FOL+BePXRAktCF884aou7iTucRjJ4F/BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6RTnc3EVEoBjqtG4jl7pQmMVgnMB8GA1UdIwQY MBaAFIGucN/UMFJzb+hfANKYTON2t26zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82ZWExNmMtYjkyZi00MDQxLWE1MDgt YmI1ODkzYTZhYzkxLzEvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS82ZWExNmMtYjkyZi00MDQxLWE1MDgtYmI1ODkzYTZhYzkx LzEvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIai2eN3 QnZHR4kp7IVoMO5RsDlD5XPxZlR7WpKzK3rgZ35BydmUwgpprJS+6YvrwVnbeyMN Ctatkamz8CT7Z9h60ByS7c+jdP+AtkHnzdVL6iMnEnwYdZncY5kgDqh/eujFKJvj GnqSyCH4JaRi1bQnP5zqaTEDmIpkTBQ+oH4YJsBpK5QjFZwgbbuc+XIPuldTL7cp 5MPo6FD/RS/9+xKPJ6Au1Sj+L4bY9lo594I42HOFUGK2jkgcfmzEQedoUyG/moaM y3eYUWfAYvmt0l3WEuDGaPhJoakLezSk3TQwNiUydIzs9Ij+rOAw12BN6p5u5tt6 R+OgnQht+lAejQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:57 2025 by rpki-client