This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft File: grEuz7IvKdYKPjG3nzYt1gwtTBA.mft (raw, json) Hash identifier: scjpB0Jy6ED6d5UuLbDK5pKOaDTRSNrO2pynAKO1yFo= Subject key identifier: 96:0A:E7:79:40:8C:60:02:DE:D0:AB:A7:AA:BE:AE:A3:9B:50:95:21 Authority key identifier: 82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10 Certificate issuer: /CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10 Certificate serial: 019AF3F7D2E67E45EE4CD11DC56AB2A32C48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft Manifest number: 0EFB Signing time: Sat 06 Dec 2025 14:01:36 +0000 Manifest this update: Sat 06 Dec 2025 14:01:36 +0000 Manifest next update: Sun 07 Dec 2025 14:01:36 +0000 Files and hashes: 1: 1-q5t5dbXJQJPAbEiSYfDN9-Kp_0.roa (hash: jh5W+EA/au2yjcrCCgbD+iZSjQ/AqIbIhccnO7LERWE=) 2: grEuz7IvKdYKPjG3nzYt1gwtTBA.crl (hash: l32tBeGIqeaObcPphmX2hb/Ew0vfThemHZwxWPyDP2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:d2:e6:7e:45:ee:4c:d1:1d:c5:6a:b2:a3:2c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10 Validity Not Before: Dec 6 14:01:36 2025 GMT Not After : Dec 7 14:01:36 2025 GMT Subject: CN=960ae779408c6002ded0aba7aabeaea39b509521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9b:0c:0c:bd:72:7d:10:88:47:fc:bc:bb:26: 7f:04:26:6e:76:0c:f8:0d:e1:cf:ab:d9:45:66:d2: e6:a3:a4:70:70:38:cb:96:71:9b:a8:3b:9f:05:fb: 95:39:7f:58:5e:54:77:95:5f:7e:ac:ae:75:d3:13: 92:b0:e3:e7:ac:a6:b3:51:88:28:04:81:cb:ec:d9: 92:b6:cb:3c:c3:2b:71:88:41:73:85:27:26:82:ed: 71:54:95:a6:2d:af:cf:f8:63:60:4b:37:27:9b:0d: f4:fe:ac:ac:cd:42:58:19:d6:1d:ab:03:c2:f7:75: 55:94:29:0e:17:c2:8f:bb:e5:f9:6d:fa:36:cb:5b: 70:74:7c:ba:ec:54:e9:e6:25:43:5c:da:83:86:00: e2:9d:23:2d:3e:ea:fa:72:6b:8a:0b:8b:6a:3d:40: 9c:b4:e0:a0:0b:1f:11:15:9c:52:c2:e7:c8:df:87: 93:d3:f9:58:8a:a2:17:e6:4a:55:7a:53:0d:cf:41: 48:9d:f3:1a:1a:c1:be:cc:15:4b:d5:de:4c:e2:03: ad:e0:dd:80:71:21:b2:fe:3e:b8:82:0a:af:81:da: 7b:b3:e1:74:01:d0:50:63:ae:c8:a1:b1:3b:0f:33: b4:70:88:8a:b2:48:47:1a:5f:80:f1:b7:0f:97:7c: 23:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0A:E7:79:40:8C:60:02:DE:D0:AB:A7:AA:BE:AE:A3:9B:50:95:21 X509v3 Authority Key Identifier: keyid:82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e4:be:b3:cf:81:2a:1c:7f:b9:0f:96:55:12:ea:c1:94:0a: 13:ac:38:5e:ba:99:9d:37:40:75:4c:8a:61:95:28:d6:1a:3a: e8:10:5f:d3:46:59:8a:a0:61:5c:66:02:b5:2a:40:60:06:fb: 61:e4:1a:45:34:6d:fc:7d:45:0f:71:b9:dd:4c:61:0a:11:40: f2:b9:aa:9d:e6:3c:7d:17:ae:3f:61:05:6e:aa:9f:ac:e8:fe: f8:d0:2f:2e:2a:0f:db:7c:8e:1f:1e:11:6f:0c:4b:16:91:07: 85:73:bc:8f:b0:93:98:f3:bb:ad:2a:cd:5f:f7:67:88:d1:6a: 5b:87:68:4a:e3:56:fc:01:7a:6b:c0:e3:f9:76:da:6d:d3:06: ca:fd:fa:66:9d:7c:b6:6d:83:9d:c9:52:7e:ca:f7:c9:7b:a5: cd:35:51:ef:3d:99:80:aa:84:45:41:fc:b1:db:e7:fd:9f:fb: e4:e7:43:19:ef:00:5c:ca:3c:29:7f:db:89:b2:52:a2:e5:13: f2:e1:57:fe:82:c0:7f:75:49:dd:30:95:96:40:f5:08:43:42: e1:fd:bf:5d:6c:55:9b:61:db:92:5b:2e:c8:81:1a:bf:3a:8e: 76:35:ce:db:a7:8b:97:bb:a6:28:dc:59:27:37:f7:84:72:1a: d0:31:4a:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz99LmfkXuTNEdxWqyoyxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYjEyZWNmYjIyZjI5ZDYwYTNlMzFiNzlmMzYyZGQ2MGMy ZDRjMTAwHhcNMjUxMjA2MTQwMTM2WhcNMjUxMjA3MTQwMTM2WjAzMTEwLwYDVQQD Eyg5NjBhZTc3OTQwOGM2MDAyZGVkMGFiYTdhYWJlYWVhMzliNTA5NTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZsMDL1yfRCIR/y8uyZ/BCZudgz4 DeHPq9lFZtLmo6RwcDjLlnGbqDufBfuVOX9YXlR3lV9+rK510xOSsOPnrKazUYgo BIHL7NmStss8wytxiEFzhScmgu1xVJWmLa/P+GNgSzcnmw30/qyszUJYGdYdqwPC 93VVlCkOF8KPu+X5bfo2y1twdHy67FTp5iVDXNqDhgDinSMtPur6cmuKC4tqPUCc tOCgCx8RFZxSwufI34eT0/lYiqIX5kpVelMNz0FInfMaGsG+zBVL1d5M4gOt4N2A cSGy/j64ggqvgdp7s+F0AdBQY67IobE7DzO0cIiKskhHGl+A8bcPl3wj7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYK53lAjGAC3tCrp6q+rqObUJUhMB8GA1UdIwQY MBaAFIKxLs+yLynWCj4xt582LdYMLUwQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3JFdXo3SXZLZFlLUGpHM256WXQxZ3d0VEJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hNWM3MzgtM2RmNS00ZTAyLWFmMzEt MmIwZWFiM2QzZDM3LzEvZ3JFdXo3SXZLZFlLUGpHM256WXQxZ3d0VEJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9hNWM3MzgtM2RmNS00ZTAyLWFmMzEtMmIwZWFiM2QzZDM3 LzEvZ3JFdXo3SXZLZFlLUGpHM256WXQxZ3d0VEJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuS+s8+B Khx/uQ+WVRLqwZQKE6w4XrqZnTdAdUyKYZUo1ho66BBf00ZZiqBhXGYCtSpAYAb7 YeQaRTRt/H1FD3G53UxhChFA8rmqneY8fReuP2EFbqqfrOj++NAvLioP23yOHx4R bwxLFpEHhXO8j7CTmPO7rSrNX/dniNFqW4doSuNW/AF6a8Dj+XbabdMGyv36Zp18 tm2DnclSfsr3yXulzTVR7z2ZgKqERUH8sdvn/Z/75OdDGe8AXMo8KX/bibJSouUT 8uFX/oLAf3VJ3TCVlkD1CENC4f2/XWxVm2HbklsuyIEavzqOdjXO26eLl7umKNxZ Jzf3hHIa0DFKdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:38:40 2025 by rpki-client