This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft File: g0VE4aPiKMTTZH9iqdjJas6eLDE.mft (raw, json) Hash identifier: 6/IY6n7IK3/6yqtUyWTvOHqEzdIPTqNajyFgThe7wOA= Subject key identifier: 5B:25:44:1D:A9:78:18:7A:C1:21:5E:48:96:81:58:3F:7B:F5:A1:56 Authority key identifier: 83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31 Certificate issuer: /CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31 Certificate serial: 019AF57849A3C5948D4D53D3942A18160E15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft Manifest number: FE Signing time: Sat 06 Dec 2025 21:01:32 +0000 Manifest this update: Sat 06 Dec 2025 21:01:32 +0000 Manifest next update: Sun 07 Dec 2025 21:01:32 +0000 Files and hashes: 1: dIRpTlRdZwkzOjzMpDEo5Bfz7bk.roa (hash: C+FNl7OuHMU4htW0AknPyHxKy9e5ZPEt8r7b2jyiJx8=) 2: g0VE4aPiKMTTZH9iqdjJas6eLDE.crl (hash: JlCNmf2nnG8+/BoUCqJOuMuZSpusd3NAL+X+WTt4MeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:49:a3:c5:94:8d:4d:53:d3:94:2a:18:16:0e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31 Validity Not Before: Dec 6 21:01:32 2025 GMT Not After : Dec 7 21:01:32 2025 GMT Subject: CN=5b25441da978187ac1215e489681583f7bf5a156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:12:2d:d0:36:57:97:3a:25:38:7c:4f:1b: 94:91:3d:2e:df:69:2b:81:df:14:86:51:08:31:33: a8:93:1b:19:50:d2:4f:3d:4f:17:74:af:bd:77:7d: 2a:90:aa:ea:8f:b9:ce:bc:08:a5:53:c4:8d:45:25: a6:ea:62:b7:75:73:cc:4c:ae:14:1a:e1:fc:1a:d8: 8a:05:02:df:a7:1e:7c:e3:97:85:1e:69:12:c7:39: cc:fc:30:18:70:76:91:38:41:f4:c7:7c:23:c9:fd: aa:d4:ce:9c:eb:fe:8c:4f:f1:ff:7b:a0:9b:80:a4: db:00:30:50:39:71:01:be:f9:93:37:e2:b9:21:28: ea:17:5d:0f:c4:11:38:60:b7:89:8e:12:40:de:d6: 8c:b0:77:f0:6f:db:11:aa:af:a2:55:40:ea:8b:56: 04:5e:f9:4c:9b:a1:a8:66:e1:de:32:07:4b:01:e6: a3:92:d5:9e:07:c6:9a:60:86:47:e1:b7:30:d8:ed: 95:10:d1:82:ef:ce:de:84:f9:22:69:5c:cc:91:32: cb:a6:c3:74:69:44:44:37:cd:3e:b5:75:33:5d:d9: f6:b5:33:e5:01:f9:5e:0a:bb:cd:bf:b1:e4:6b:82: 60:94:6c:77:53:08:d1:9d:cc:58:8c:82:fa:9d:74: c4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:25:44:1D:A9:78:18:7A:C1:21:5E:48:96:81:58:3F:7B:F5:A1:56 X509v3 Authority Key Identifier: keyid:83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:19:39:83:d6:aa:87:5e:e9:ca:21:b2:f2:ca:89:a0:60:57: 9c:f5:4e:d0:58:4d:9c:a3:2a:7d:a7:2b:be:67:17:32:df:26: 03:7e:74:bb:61:c3:26:c3:3c:e7:a1:24:29:db:f9:58:71:7f: f1:e6:53:04:f8:45:f2:da:9f:91:0c:e9:0e:4a:ae:ca:15:4b: ee:12:44:65:fe:dd:65:3d:2d:f6:7b:c5:36:31:6e:79:fd:8b: c0:57:24:de:32:41:cf:9d:af:80:9e:44:bd:b8:4a:26:18:ed: dd:6b:7a:f9:2a:74:3c:46:93:bd:c7:3d:c3:5f:83:07:a2:14: 08:9b:05:6e:e3:c2:62:8c:34:dd:45:59:f0:49:f5:1e:61:b5: 3e:e0:e8:a3:72:3f:5c:d7:ee:a1:22:57:6a:ee:b0:af:62:6b: c9:0c:aa:1b:8a:4b:3f:a7:93:18:f5:3d:9b:c8:f5:c4:84:ab: 74:90:e5:9c:ce:98:f8:d7:59:b4:2c:38:d4:ff:93:b5:c9:43: c5:cf:f7:7e:9e:6b:e2:46:4f:16:92:a5:2d:ea:47:c4:c9:7b: 4e:e4:39:b2:fa:20:4a:ed:18:c4:07:39:22:d7:e1:a2:f2:01: 62:ee:66:86:b0:53:a4:46:49:f9:3b:b9:b7:a2:5e:12:7a:78: 10:d3:cc:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eEmjxZSNTVPTlCoYFg4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNDU0NGUxYTNlMjI4YzRkMzY0N2Y2MmE5ZDhjOTZhY2U5 ZTJjMzEwHhcNMjUxMjA2MjEwMTMyWhcNMjUxMjA3MjEwMTMyWjAzMTEwLwYDVQQD Eyg1YjI1NDQxZGE5NzgxODdhYzEyMTVlNDg5NjgxNTgzZjdiZjVhMTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrcSLdA2V5c6JTh8TxuUkT0u32kr gd8UhlEIMTOokxsZUNJPPU8XdK+9d30qkKrqj7nOvAilU8SNRSWm6mK3dXPMTK4U GuH8GtiKBQLfpx5845eFHmkSxznM/DAYcHaROEH0x3wjyf2q1M6c6/6MT/H/e6Cb gKTbADBQOXEBvvmTN+K5ISjqF10PxBE4YLeJjhJA3taMsHfwb9sRqq+iVUDqi1YE XvlMm6GoZuHeMgdLAeajktWeB8aaYIZH4bcw2O2VENGC787ehPkiaVzMkTLLpsN0 aUREN80+tXUzXdn2tTPlAfleCrvNv7Hka4JglGx3UwjRncxYjIL6nXTE7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFslRB2peBh6wSFeSJaBWD979aFWMB8GA1UdIwQY MBaAFINFROGj4ijE02R/YqnYyWrOniwxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzBWRTRhUGlLTVRUWkg5aXFkakphczZlTERFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iMmVhYTgtODk4Yi00ZjMzLWFmYjkt ODkyNjdlNTI4MDA5LzEvZzBWRTRhUGlLTVRUWkg5aXFkakphczZlTERFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9iMmVhYTgtODk4Yi00ZjMzLWFmYjktODkyNjdlNTI4MDA5 LzEvZzBWRTRhUGlLTVRUWkg5aXFkakphczZlTERFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxk5g9aq h17pyiGy8sqJoGBXnPVO0FhNnKMqfacrvmcXMt8mA350u2HDJsM856EkKdv5WHF/ 8eZTBPhF8tqfkQzpDkquyhVL7hJEZf7dZT0t9nvFNjFuef2LwFck3jJBz52vgJ5E vbhKJhjt3Wt6+Sp0PEaTvcc9w1+DB6IUCJsFbuPCYow03UVZ8En1HmG1PuDoo3I/ XNfuoSJXau6wr2JryQyqG4pLP6eTGPU9m8j1xISrdJDlnM6Y+NdZtCw41P+TtclD xc/3fp5r4kZPFpKlLepHxMl7TuQ5svogSu0YxAc5ItfhovIBYu5mhrBTpEZJ+Tu5 t6JeEnp4ENPMyA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:04 2025 by rpki-client