This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft File: g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json) Hash identifier: 4qN1Vs6F5T3auIeTZvHRLq4c41Q49Rj0xYAGQ/Q4sZk= Subject key identifier: FD:4A:30:42:7F:FB:C2:79:53:1B:BF:AF:67:92:43:F4:C5:8B:75:FE Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC Certificate issuer: /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac Certificate serial: 019AF50BD44FF5977B80A9E1F6393C8C91F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft Manifest number: 0C5D Signing time: Sat 06 Dec 2025 19:03:04 +0000 Manifest this update: Sat 06 Dec 2025 19:03:04 +0000 Manifest next update: Sun 07 Dec 2025 19:03:04 +0000 Files and hashes: 1: VgjHvOxBU8eTA_iP_fNUCn81xQg.roa (hash: JJu0mzqFx7iO9SO/UVIC5Bf9dy6p0refWuwflirPpkA=) 2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: cIxORujVZKcw1aJb0o7gkCCTThKF24J6A0xTCG1/QbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:d4:4f:f5:97:7b:80:a9:e1:f6:39:3c:8c:91:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac Validity Not Before: Dec 6 19:03:04 2025 GMT Not After : Dec 7 19:03:04 2025 GMT Subject: CN=fd4a30427ffbc279531bbfaf679243f4c58b75fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:46:49:ea:7c:56:ad:74:f3:1b:40:44:f2:a3: c8:cb:49:a8:59:fe:e7:eb:e5:78:fe:66:63:46:ed: 1b:a4:ad:3d:70:40:3f:f9:a7:b7:f8:1c:fd:cf:9a: 48:d2:79:40:b3:7c:2f:78:a0:aa:82:ba:58:31:1c: 23:e2:d8:e3:6e:5e:90:6e:70:f8:07:86:37:53:2f: 87:2d:26:79:f8:3f:b7:d7:9c:83:aa:58:e5:1c:ae: 5d:30:02:6d:51:c1:54:d0:3f:68:78:e7:eb:71:9c: aa:c2:d8:fd:bc:9b:6c:24:80:7b:9e:4d:0b:bc:e3: 5b:c2:38:d3:b3:ba:e2:fc:4d:e1:a9:bf:2b:14:19: 27:43:7a:31:85:3b:6f:2d:92:22:1e:c7:47:d7:35: 0b:ef:3b:8e:ba:38:ed:b5:c5:28:7b:31:31:2f:db: 8a:6b:a6:09:96:a4:c8:d9:07:a1:46:8d:d1:bc:12: b2:db:dd:65:7b:4d:c1:d3:a2:c7:15:92:8a:f8:a8: 07:1f:3b:da:69:88:de:5e:78:8a:af:ff:29:4a:9e: 8b:6f:4b:f3:5a:55:60:65:07:94:ab:1a:91:8d:c3: 26:54:69:68:d2:66:16:c6:d8:9c:9d:09:e8:7f:57: 8f:23:cb:a6:08:77:2e:77:67:36:a8:20:fb:6b:93: 15:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4A:30:42:7F:FB:C2:79:53:1B:BF:AF:67:92:43:F4:C5:8B:75:FE X509v3 Authority Key Identifier: keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fb:40:77:32:34:e9:e3:a5:5d:e5:93:bf:04:c5:17:4c:94: f9:ce:80:97:99:3a:23:f0:b5:c1:61:0f:d4:97:1f:f7:20:e6: d6:a6:8a:49:3e:22:b4:a4:be:67:42:f8:85:47:fb:c2:7e:f2: cc:46:f7:d8:3e:0f:4e:dd:27:ea:1d:52:b8:bb:a7:02:66:e6: b9:1d:7c:f7:b1:68:15:61:ba:08:ed:d8:b9:6c:42:c4:17:f6: cd:d0:70:0c:a6:f7:f0:c0:77:5f:7a:f8:a4:ee:9b:38:d6:e6: 91:14:8e:08:f3:61:b2:78:69:c1:2d:78:84:80:cf:07:74:33: f7:c6:67:74:4a:91:23:4d:e0:23:99:07:3c:d2:ca:d3:a4:30: 40:e0:5b:d5:36:86:21:1c:82:d5:8b:43:b9:b6:4a:8a:b8:07: 61:75:53:ca:c6:8c:57:3c:0e:c3:6c:35:bc:63:0c:e3:46:49: e6:49:a2:97:3d:1a:8d:32:de:75:a6:2a:0f:3d:92:48:95:67: 2f:33:23:24:d9:ba:e6:62:00:e9:ec:d4:a9:b1:b3:ea:22:f1: 95:6e:ca:44:8a:e5:aa:d0:b3:96:94:71:1e:e6:e8:a6:b6:b2: ef:17:25:39:06:df:95:1b:b0:49:f2:ff:43:7b:05:26:ce:95: 06:08:1e:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C9RP9Zd7gKnh9jk8jJH0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYzZjYTg2NTE5YjU2ZDRkMTg3M2FmNmUyNTdkZTdlOTdm M2M4YWMwHhcNMjUxMjA2MTkwMzA0WhcNMjUxMjA3MTkwMzA0WjAzMTEwLwYDVQQD EyhmZDRhMzA0MjdmZmJjMjc5NTMxYmJmYWY2NzkyNDNmNGM1OGI3NWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UZJ6nxWrXTzG0BE8qPIy0moWf7n 6+V4/mZjRu0bpK09cEA/+ae3+Bz9z5pI0nlAs3wveKCqgrpYMRwj4tjjbl6QbnD4 B4Y3Uy+HLSZ5+D+315yDqljlHK5dMAJtUcFU0D9oeOfrcZyqwtj9vJtsJIB7nk0L vONbwjjTs7ri/E3hqb8rFBknQ3oxhTtvLZIiHsdH1zUL7zuOujjttcUoezExL9uK a6YJlqTI2QehRo3RvBKy291le03B06LHFZKK+KgHHzvaaYjeXniKr/8pSp6Lb0vz WlVgZQeUqxqRjcMmVGlo0mYWxticnQnof1ePI8umCHcud2c2qCD7a5MVOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1KMEJ/+8J5Uxu/r2eSQ/TFi3X+MB8GA1UdIwQY MBaAFIPGyoZRm1bU0Yc69uJX3n6X88isMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85OTgyOTYtOTQ2NC00ZmIyLTk4ZTYt Y2E4YWY0ZjUzNTZjLzEvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85OTgyOTYtOTQ2NC00ZmIyLTk4ZTYtY2E4YWY0ZjUzNTZj LzEvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvtAdzI0 6eOlXeWTvwTFF0yU+c6Al5k6I/C1wWEP1Jcf9yDm1qaKST4itKS+Z0L4hUf7wn7y zEb32D4PTt0n6h1SuLunAmbmuR1897FoFWG6CO3YuWxCxBf2zdBwDKb38MB3X3r4 pO6bONbmkRSOCPNhsnhpwS14hIDPB3Qz98ZndEqRI03gI5kHPNLK06QwQOBb1TaG IRyC1YtDubZKirgHYXVTysaMVzwOw2w1vGMM40ZJ5kmilz0ajTLedaYqDz2SSJVn LzMjJNm65mIA6ezUqbGz6iLxlW7KRIrlqtCzlpRxHubopray7xclOQbflRuwSfL/ Q3sFJs6VBggemA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:30:59 2025 by rpki-client