This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft File: g2CfK50khvNujNKd-ip1akjefFE.mft (raw, json) Hash identifier: d3oqHc2MtGZAOIp+W5wGSWpO0oZzCTRLWAj87VObkbI= Subject key identifier: 9C:33:23:F4:4B:F3:F6:C4:FA:A6:29:B8:74:C6:35:AE:8C:5E:F0:AE Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51 Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51 Certificate serial: 019AF0F5E5B314119F80812E709A1029B820 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 00:00:38 +0000 Manifest this update: Sat 06 Dec 2025 00:00:38 +0000 Manifest next update: Sun 07 Dec 2025 00:00:38 +0000 Files and hashes: 1: GxR7z8RKcSPGLTL-vNXCK33Iesc.roa (hash: YLGDTkKd+pthF6v4ZZ4TjrJJjHHjvrONsu/e4skdHWA=) 2: g2CfK50khvNujNKd-ip1akjefFE.crl (hash: CddnaU17DWI9gAKhNE3wc7CjVU6JqoUN5u0X6kdkPTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e5:b3:14:11:9f:80:81:2e:70:9a:10:29:b8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51 Validity Not Before: Dec 6 00:00:38 2025 GMT Not After : Dec 7 00:00:38 2025 GMT Subject: CN=9c3323f44bf3f6c4faa629b874c635ae8c5ef0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:71:70:46:43:fc:1f:98:58:35:7f:9f:28:0e: 50:2f:2e:eb:4e:54:b8:27:84:47:53:87:00:e2:d4: a3:6c:08:ae:5f:da:52:59:cc:c3:7a:4b:98:0a:73: 2c:16:76:06:69:39:1b:fa:92:0e:bf:e8:53:09:45: e7:c0:e8:6e:96:c3:bc:14:b5:ad:67:a8:01:bd:61: 28:c3:29:39:b2:d2:9e:ac:11:5d:38:1b:27:5b:df: 7b:16:99:1c:18:03:0f:0a:e9:b5:bd:aa:6e:63:a4: be:8d:d9:b9:2c:65:bd:8a:e7:95:4e:30:02:7e:ca: 8b:e4:52:63:32:66:81:f1:65:6e:8e:f2:df:c1:a8: 5f:5c:58:bf:01:76:c5:a0:c0:c6:bc:4d:7a:93:f7: a4:94:bf:d1:62:be:58:f8:b3:bd:45:f5:63:93:f9: dc:dc:a4:89:b8:dd:6a:32:f9:aa:14:f6:92:94:9d: 28:fd:b6:1e:18:9f:a5:b9:37:31:76:53:34:00:fc: 9a:6d:ad:58:b9:1d:76:30:81:ff:3e:79:2e:1b:44: 06:60:36:73:e4:99:9c:6f:66:e6:a9:b4:ce:80:d2: 83:18:2c:cc:08:06:cc:8b:a3:be:90:61:9c:ff:75: b4:a7:ae:de:0b:f5:9a:b7:f0:38:a4:5c:f0:5b:07: 28:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:33:23:F4:4B:F3:F6:C4:FA:A6:29:B8:74:C6:35:AE:8C:5E:F0:AE X509v3 Authority Key Identifier: keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:2d:84:bc:b9:da:4a:30:34:29:b6:bf:4e:1d:9e:2b:f3:c0: d7:11:7d:91:f6:68:75:b7:38:67:af:49:a1:f4:d3:19:d5:b1: 12:d7:f7:4c:bf:5c:5a:85:07:b3:9d:52:8d:d8:c4:35:94:59: 53:aa:6c:d9:0a:83:53:77:45:3d:e1:dc:3b:6d:e4:aa:e1:ca: a0:99:9a:43:3b:17:61:9b:a8:36:28:ca:d4:ef:ee:9a:b4:9f: 00:dc:f1:28:32:cf:af:85:68:92:1a:8f:cf:e7:fe:b5:ec:c4: f1:12:f8:f1:06:50:62:11:58:3c:f3:65:d4:cb:94:66:a4:1b: 43:70:bd:9e:ef:9d:b2:bc:98:bc:e2:47:58:d3:45:53:e8:ef: 40:bc:e4:45:7d:8b:69:c7:b0:37:40:8b:0a:8a:25:0a:d2:90: 73:bd:c1:3f:80:b2:c5:52:99:44:fd:66:18:bc:5e:24:90:7c: 88:14:d2:2a:c4:07:1c:c4:cc:c4:4e:71:80:03:b7:a1:4f:ee: be:e3:3c:ba:e5:da:c8:71:08:90:e4:5c:7e:08:2f:0a:a3:a2: 2d:c6:42:42:18:c3:d0:c1:79:82:3c:ff:ed:c4:e2:a8:99:88: c8:6b:68:98:ee:86:dd:01:6d:e3:f1:37:6c:3e:44:d8:1e:53: fe:56:57:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9eWzFBGfgIEucJoQKbggMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjA5ZjJiOWQyNDg2ZjM2ZThjZDI5ZGZhMmE3NTZhNDhk ZTdjNTEwHhcNMjUxMjA2MDAwMDM4WhcNMjUxMjA3MDAwMDM4WjAzMTEwLwYDVQQD Eyg5YzMzMjNmNDRiZjNmNmM0ZmFhNjI5Yjg3NGM2MzVhZThjNWVmMGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43FwRkP8H5hYNX+fKA5QLy7rTlS4 J4RHU4cA4tSjbAiuX9pSWczDekuYCnMsFnYGaTkb+pIOv+hTCUXnwOhulsO8FLWt Z6gBvWEowyk5stKerBFdOBsnW997FpkcGAMPCum1vapuY6S+jdm5LGW9iueVTjAC fsqL5FJjMmaB8WVujvLfwahfXFi/AXbFoMDGvE16k/eklL/RYr5Y+LO9RfVjk/nc 3KSJuN1qMvmqFPaSlJ0o/bYeGJ+luTcxdlM0APyaba1YuR12MIH/PnkuG0QGYDZz 5Jmcb2bmqbTOgNKDGCzMCAbMi6O+kGGc/3W0p67eC/Wat/A4pFzwWwcoVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwzI/RL8/bE+qYpuHTGNa6MXvCuMB8GA1UdIwQY MBaAFINgnyudJIbzbozSnfoqdWpI3nxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9kNmVjM2ItZTcxNy00YzNkLWIwYWUt NWU2MGY2ZGEyYjA5LzEvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9kNmVjM2ItZTcxNy00YzNkLWIwYWUtNWU2MGY2ZGEyYjA5 LzEvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJy2EvLna SjA0Kba/Th2eK/PA1xF9kfZodbc4Z69JofTTGdWxEtf3TL9cWoUHs51SjdjENZRZ U6ps2QqDU3dFPeHcO23kquHKoJmaQzsXYZuoNijK1O/umrSfANzxKDLPr4VokhqP z+f+tezE8RL48QZQYhFYPPNl1MuUZqQbQ3C9nu+dsryYvOJHWNNFU+jvQLzkRX2L acewN0CLCoolCtKQc73BP4CyxVKZRP1mGLxeJJB8iBTSKsQHHMTMxE5xgAO3oU/u vuM8uuXayHEIkORcfggvCqOiLcZCQhjD0MF5gjz/7cTiqJmIyGtomO6G3QFt4/E3 bD5E2B5T/lZXeA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:51 2025 by rpki-client