This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft File: g_s0shoO-MQBkcDgfDtFJOMjss8.mft (raw, json) Hash identifier: qXr+p5Fbofgp9kEFQuLMK2H+hd8Ct3CswXCWqpmvS6Q= Subject key identifier: E2:0A:6B:E9:23:27:F5:6D:46:D4:CF:09:7B:B1:40:13:B9:AF:BB:3A Authority key identifier: 83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF Certificate issuer: /CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf Certificate serial: 019AF208ED054033F20378A5606FAE6F47B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft Manifest number: 1469 Signing time: Sat 06 Dec 2025 05:01:02 +0000 Manifest this update: Sat 06 Dec 2025 05:01:02 +0000 Manifest next update: Sun 07 Dec 2025 05:01:02 +0000 Files and hashes: 1: DobE_GDwj6LglTHnTGTNO49HHQg.roa (hash: BUWVPFb7JdXBEYo3ia6vx/6Nxlayi+TmF4VDb5fiITc=) 2: g_s0shoO-MQBkcDgfDtFJOMjss8.crl (hash: bsrDRUDx4R2eotlmP96rd3N5JReJpmyAyDiADWtjfdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ed:05:40:33:f2:03:78:a5:60:6f:ae:6f:47:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf Validity Not Before: Dec 6 05:01:02 2025 GMT Not After : Dec 7 05:01:02 2025 GMT Subject: CN=e20a6be92327f56d46d4cf097bb14013b9afbb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:d9:f0:ab:41:c9:d1:c6:d2:ed:cf:d5:b7: 57:05:56:a5:27:f9:15:21:e3:78:8a:11:ee:4e:d9: cd:86:0d:52:b6:e4:44:9e:27:12:15:28:be:02:66: 1c:42:0a:7b:09:7e:78:cd:d6:2e:d6:d9:42:5d:5d: 9e:28:9d:65:39:2b:42:c2:73:22:88:71:56:4f:af: e1:95:25:33:07:01:3d:bf:c9:ba:08:21:51:b2:be: 1c:19:94:58:c5:b5:ee:b2:a6:c2:d9:92:79:12:02: 2f:dd:fb:b7:ec:4f:54:21:db:fc:68:77:72:56:49: 48:35:a8:26:5d:59:14:9d:8f:ff:3f:fc:34:58:f1: 7f:66:91:d3:2b:1d:7f:6e:d1:27:cb:e1:cd:96:6e: 45:bf:22:6e:9c:b0:02:e7:45:5f:d9:d9:4a:2e:dc: 69:36:9f:96:e0:23:e7:31:e3:3b:99:03:31:47:7c: 7b:86:6d:43:3b:27:36:8d:8e:47:ba:4b:15:c6:09: 91:5a:55:b5:9e:b4:49:9d:d0:37:50:a0:2b:e1:8e: 1e:be:f1:93:88:ad:4f:21:b5:4e:d3:9f:75:85:cf: 20:02:f6:5d:ff:c3:81:93:aa:a5:cb:9d:69:00:23: 84:b1:89:b0:02:5b:6b:4a:90:0c:5f:61:58:00:a6: 62:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0A:6B:E9:23:27:F5:6D:46:D4:CF:09:7B:B1:40:13:B9:AF:BB:3A X509v3 Authority Key Identifier: keyid:83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:4a:9d:bf:91:29:69:bb:9d:5e:3f:c3:3a:85:cf:6c:30:7c: 0e:a8:e8:47:ec:e5:0c:1d:7b:6e:1c:3a:64:e0:32:1e:93:d3: ed:6f:ea:29:ea:79:1d:19:40:65:bc:25:62:eb:41:59:fc:e6: 04:f1:5b:21:0c:e4:e9:46:ee:65:df:56:ee:8f:60:e9:ec:cf: 45:c8:13:22:fc:8b:1b:4d:97:8e:89:85:4c:0c:33:ec:6e:0f: f6:ab:1c:dc:3a:c4:d8:aa:a6:c1:ab:55:9a:1d:fe:c3:82:8e: 02:94:79:b6:84:25:ec:9b:d5:9f:eb:9c:81:2a:67:be:b6:76: ef:ae:25:5d:a1:3d:38:1c:7e:74:db:b9:72:46:1d:12:b0:fe: 47:32:56:52:ec:5e:95:ac:0b:cd:70:7d:81:aa:45:4e:86:3f: 59:55:e9:e3:1b:48:6a:df:d2:37:e9:73:3c:c0:ec:ed:a6:f6: 26:34:86:77:80:d2:9b:74:a2:21:12:ef:59:f9:b7:6e:f4:6a: d5:c1:aa:f9:68:59:d5:ef:29:c0:e7:59:7f:ac:88:d1:62:81: 84:4c:96:d2:00:af:83:6b:38:ab:4a:1b:39:10:a1:d8:ff:8e: 9a:5e:ff:da:83:28:ae:56:92:5c:86:26:6d:8f:4a:45:d8:eb: 6d:a9:d4:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCO0FQDPyA3ilYG+ub0ewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZmIzNGIyMWEwZWY4YzQwMTkxYzBlMDdjM2I0NTI0ZTMy M2IyY2YwHhcNMjUxMjA2MDUwMTAyWhcNMjUxMjA3MDUwMTAyWjAzMTEwLwYDVQQD EyhlMjBhNmJlOTIzMjdmNTZkNDZkNGNmMDk3YmIxNDAxM2I5YWZiYjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbfZ8KtBydHG0u3P1bdXBValJ/kV IeN4ihHuTtnNhg1StuREnicSFSi+AmYcQgp7CX54zdYu1tlCXV2eKJ1lOStCwnMi iHFWT6/hlSUzBwE9v8m6CCFRsr4cGZRYxbXusqbC2ZJ5EgIv3fu37E9UIdv8aHdy VklINagmXVkUnY//P/w0WPF/ZpHTKx1/btEny+HNlm5FvyJunLAC50Vf2dlKLtxp Np+W4CPnMeM7mQMxR3x7hm1DOyc2jY5HuksVxgmRWlW1nrRJndA3UKAr4Y4evvGT iK1PIbVO0591hc8gAvZd/8OBk6qly51pACOEsYmwAltrSpAMX2FYAKZirQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIKa+kjJ/VtRtTPCXuxQBO5r7s6MB8GA1UdIwQY MBaAFIP7NLIaDvjEAZHA4Hw7RSTjI7LPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ19zMHNob08tTVFCa2NEZ2ZEdEZKT01qc3M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wMDQyODQtZDRhNy00OTYyLTk2OTct ZjIzYjA3N2VkYjk2LzEvZ19zMHNob08tTVFCa2NEZ2ZEdEZKT01qc3M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8wMDQyODQtZDRhNy00OTYyLTk2OTctZjIzYjA3N2VkYjk2 LzEvZ19zMHNob08tTVFCa2NEZ2ZEdEZKT01qc3M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUqdv5Ep abudXj/DOoXPbDB8DqjoR+zlDB17bhw6ZOAyHpPT7W/qKep5HRlAZbwlYutBWfzm BPFbIQzk6UbuZd9W7o9g6ezPRcgTIvyLG02XjomFTAwz7G4P9qsc3DrE2KqmwatV mh3+w4KOApR5toQl7JvVn+ucgSpnvrZ2764lXaE9OBx+dNu5ckYdErD+RzJWUuxe lawLzXB9gapFToY/WVXp4xtIat/SN+lzPMDs7ab2JjSGd4DSm3SiIRLvWfm3bvRq 1cGq+WhZ1e8pwOdZf6yI0WKBhEyW0gCvg2s4q0obORCh2P+Oml7/2oMorlaSXIYm bY9KRdjrbanU8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:01 2025 by rpki-client