This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft File: g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft (raw, json) Hash identifier: h5IB2us/PfaSEUzBAsda/J/9oELgou/a4V7Us1fe/S4= Subject key identifier: 9A:AE:4E:E0:9A:87:B9:E5:70:EF:71:B4:1A:17:26:20:BB:20:5E:82 Authority key identifier: 83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0 Certificate issuer: /CN=83c966da5eead50905091c3b599c9a44074739d0 Certificate serial: 019B3268A8A9D23440114115ED327AE4A586 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft Manifest number: 0D4E Signing time: Thu 18 Dec 2025 17:01:18 +0000 Manifest this update: Thu 18 Dec 2025 17:01:18 +0000 Manifest next update: Fri 19 Dec 2025 17:01:18 +0000 Files and hashes: 1: EvTzLNAJ6H7qRnNSh82gSKiMMgg.roa (hash: qhUzbtll1fZR91tCmRG4V9VmK3ep2kPWk4uvDeplZCU=) 2: g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl (hash: szhENdsglGeJLdQdicdWpgpnyTLgHwhVkcLRPIzeTk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:a8:a9:d2:34:40:11:41:15:ed:32:7a:e4:a5:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83c966da5eead50905091c3b599c9a44074739d0 Validity Not Before: Dec 18 17:01:18 2025 GMT Not After : Dec 19 17:01:18 2025 GMT Subject: CN=9aae4ee09a87b9e570ef71b41a172620bb205e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:30:a6:54:e6:2f:a3:e3:0c:a2:c4:2b:c5:0a: b3:6e:61:6a:4a:ef:7b:a2:8b:65:d0:03:33:4a:ba: 82:f9:fe:34:83:31:9b:38:57:ea:ae:a9:fb:7f:c7: 87:c3:6f:98:b6:da:ed:95:e2:ae:17:9d:18:0e:7f: 1e:02:a3:62:c6:3c:e4:ab:36:57:44:b2:d5:1b:cb: 06:8d:92:fa:48:85:93:ef:c4:10:a7:1e:bc:a6:8e: 2f:1c:be:ed:76:ba:b9:42:2f:98:cc:45:3b:8e:c9: a2:df:c2:e0:13:08:37:3a:37:de:cc:0b:d7:ee:d7: ee:a5:5d:69:cb:08:01:ee:eb:f2:02:e1:54:38:08: 7b:d8:4b:b4:18:ed:cb:56:93:4d:55:36:0a:87:8d: 62:62:30:f7:2d:4d:45:c3:d5:6e:a1:cf:e6:ab:57: d6:72:24:4b:78:fa:ed:aa:c5:75:c3:e0:08:26:d4: c6:bb:4f:a3:aa:bb:95:c1:c2:f4:a2:50:3a:ab:9f: cf:51:4d:59:bc:01:e9:3a:33:ca:06:76:35:23:4d: a3:1e:bc:34:62:34:c7:39:9a:a9:26:88:0a:83:03: 89:9b:b5:a8:2e:6e:64:c1:66:e5:ab:42:29:f1:29: 4d:8e:94:87:52:85:de:a8:e5:d7:fd:a0:ac:0c:85: 44:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AE:4E:E0:9A:87:B9:E5:70:EF:71:B4:1A:17:26:20:BB:20:5E:82 X509v3 Authority Key Identifier: keyid:83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:d4:42:4f:db:87:c9:37:ec:56:19:3f:da:7d:09:3c:cb:ad: 68:08:70:d7:91:21:c1:ba:af:29:63:ce:89:e1:e1:b2:be:dd: 11:9f:c6:91:4f:09:a0:ea:82:51:a0:ba:c9:33:e6:fe:8b:4c: 0a:1c:7f:49:63:3c:c5:2e:01:cc:5c:4f:3a:b1:da:af:ae:50: 06:4f:5f:28:4b:37:0b:70:ea:65:a0:8d:1a:a4:05:e7:49:d6: 54:95:65:2d:5e:b4:71:6e:dc:e8:ca:aa:7a:d0:84:48:a4:c7: cc:28:76:18:ea:03:51:99:61:e6:ed:64:6d:5c:db:ea:50:a1: b7:d9:41:9f:60:e3:9c:40:98:d8:43:da:67:cf:68:d3:07:9d: af:89:95:ac:12:92:fb:ec:2a:f0:a0:de:48:c0:5b:d3:ab:11: c3:f4:ae:17:db:d4:7f:cb:a3:a2:ba:cc:cd:ca:88:20:d5:20: 6a:ef:56:20:ba:62:5a:50:d9:31:dc:9d:fb:b7:e5:7f:1f:a8: 64:83:32:14:98:c4:ba:b5:70:d6:72:62:c2:95:b5:ef:3f:6f: 09:1f:d3:5f:f3:bd:4c:56:60:9e:8f:58:fc:ab:b5:70:ab:b4: b8:8d:87:a0:e2:5e:78:06:63:38:b3:6a:18:d2:9c:f1:bb:e0: a1:e0:e2:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaKip0jRAEUEV7TJ65KWGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYzk2NmRhNWVlYWQ1MDkwNTA5MWMzYjU5OWM5YTQ0MDc0 NzM5ZDAwHhcNMjUxMjE4MTcwMTE4WhcNMjUxMjE5MTcwMTE4WjAzMTEwLwYDVQQD Eyg5YWFlNGVlMDlhODdiOWU1NzBlZjcxYjQxYTE3MjYyMGJiMjA1ZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9jCmVOYvo+MMosQrxQqzbmFqSu97 ootl0AMzSrqC+f40gzGbOFfqrqn7f8eHw2+YttrtleKuF50YDn8eAqNixjzkqzZX RLLVG8sGjZL6SIWT78QQpx68po4vHL7tdrq5Qi+YzEU7jsmi38LgEwg3OjfezAvX 7tfupV1pywgB7uvyAuFUOAh72Eu0GO3LVpNNVTYKh41iYjD3LU1Fw9Vuoc/mq1fW ciRLePrtqsV1w+AIJtTGu0+jqruVwcL0olA6q5/PUU1ZvAHpOjPKBnY1I02jHrw0 YjTHOZqpJogKgwOJm7WoLm5kwWblq0Ip8SlNjpSHUoXeqOXX/aCsDIVE1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJquTuCah7nlcO9xtBoXJiC7IF6CMB8GA1UdIwQY MBaAFIPJZtpe6tUJBQkcO1mcmkQHRznQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzhsbTJsN3ExUWtGQ1J3N1daeWFSQWRIT2RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80Yjk5YjgtMDY1Ny00MTYyLWFiMDQt ZjU3MmEwZmNlMGVlLzEvZzhsbTJsN3ExUWtGQ1J3N1daeWFSQWRIT2RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC80Yjk5YjgtMDY1Ny00MTYyLWFiMDQtZjU3MmEwZmNlMGVl LzEvZzhsbTJsN3ExUWtGQ1J3N1daeWFSQWRIT2RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1dRCT9uH yTfsVhk/2n0JPMutaAhw15EhwbqvKWPOieHhsr7dEZ/GkU8JoOqCUaC6yTPm/otM Chx/SWM8xS4BzFxPOrHar65QBk9fKEs3C3DqZaCNGqQF50nWVJVlLV60cW7c6Mqq etCESKTHzCh2GOoDUZlh5u1kbVzb6lCht9lBn2DjnECY2EPaZ89o0wedr4mVrBKS ++wq8KDeSMBb06sRw/SuF9vUf8ujorrMzcqIINUgau9WILpiWlDZMdyd+7flfx+o ZIMyFJjEurVw1nJiwpW17z9vCR/TX/O9TFZgno9Y/Ku1cKu0uI2HoOJeeAZjOLNq GNKc8bvgoeDiPw== -----END CERTIFICATE-----Generated at Thu Dec 18 21:50:15 2025 by rpki-client