This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft File: g_j9dJOi_gViIttB7Wkwg7UOzPs.mft (raw, json) Hash identifier: mMyrja1UguVZJ7ggqHF8CN0wMa4x+YLJ0WIZ82jp7uQ= Subject key identifier: CE:57:33:F2:4E:02:F4:68:62:A8:F4:32:AD:8F:67:B9:04:26:F6:25 Authority key identifier: 83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB Certificate issuer: /CN=83f8fd7493a2fe056222db41ed693083b50eccfb Certificate serial: 019AF4D29B64CF677442495AC0B7B1EF47F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft Manifest number: 091A Signing time: Sat 06 Dec 2025 18:00:34 +0000 Manifest this update: Sat 06 Dec 2025 18:00:34 +0000 Manifest next update: Sun 07 Dec 2025 18:00:34 +0000 Files and hashes: 1: 4iFL4Rjk8z0J-TUPx3tyOCKNMCE.roa (hash: mD2TGVE+TeCfcEhfzrfNiwVtfpV6m0G/Os3vpZIoBGU=) 2: NKM0t8AsANzVWLHPsfCJliHXQOo.roa (hash: E/fHSKpRF7b8Xy50lx7xVy0qTXM3nr5MZmJsHZDti2g=) 3: gJteTM5QMHW5wPl49IU_gIV507E.roa (hash: XCSWumIAankP+Z2HvUJO+g0ggzGYq5l8sE0CZQXx1Ic=) 4: g_j9dJOi_gViIttB7Wkwg7UOzPs.crl (hash: bbZ/WKwa+wIHmy1yfnRoRsPB/aae5TGg2mMKuYE5Kwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:9b:64:cf:67:74:42:49:5a:c0:b7:b1:ef:47:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83f8fd7493a2fe056222db41ed693083b50eccfb Validity Not Before: Dec 6 18:00:34 2025 GMT Not After : Dec 7 18:00:34 2025 GMT Subject: CN=ce5733f24e02f46862a8f432ad8f67b90426f625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a0:7d:cc:d5:0f:04:df:21:e5:c4:63:b9:61: 80:74:89:7b:7b:a4:37:79:fb:e0:a8:39:72:46:18: c3:6a:97:5b:11:6f:db:eb:a2:b8:78:79:9c:58:15: 60:6b:68:79:61:b0:80:95:88:07:57:c8:cb:bc:61: 9f:f7:12:a1:85:0b:cd:42:87:6f:e4:8a:6e:5f:0e: e3:2d:39:d8:c7:e1:20:e3:9f:ed:15:f8:81:e1:56: d7:41:41:69:82:47:88:f7:11:47:ab:bc:fe:5a:54: c9:75:93:3d:0f:2d:f1:bb:49:bc:b7:03:f2:bb:c5: 22:6c:44:80:1b:a4:16:44:0f:8c:50:a1:8d:15:70: 0b:4a:96:72:63:88:be:2a:2a:02:2b:e9:c0:dd:27: 57:53:1d:23:aa:5d:37:34:37:e1:ca:21:25:5b:9e: 6a:fd:7c:01:35:0c:58:e5:d1:93:49:6f:dd:2a:e3: 09:c4:96:d4:84:d0:7c:05:61:b7:79:87:03:0a:da: 06:2c:01:39:11:3e:4e:4f:fe:bd:66:7d:e5:fb:57: 56:c5:01:f8:15:02:01:eb:f3:8f:a0:13:b3:75:c9: 98:80:0b:d3:5d:60:e7:ef:30:f2:b7:e5:c3:91:0f: 3e:36:8f:59:f5:60:fd:75:c8:00:5f:21:6b:52:72: 47:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:57:33:F2:4E:02:F4:68:62:A8:F4:32:AD:8F:67:B9:04:26:F6:25 X509v3 Authority Key Identifier: keyid:83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:2b:8b:85:cf:9c:d7:38:9b:1a:7e:ce:61:cc:ae:a4:61:af: 5f:79:6f:b3:8b:ca:b1:1b:ab:79:ee:2a:6a:3e:54:1f:ca:98: eb:1f:5c:19:22:99:9d:5a:f2:4d:96:4e:30:b1:80:5d:c8:0c: 62:5f:6b:e4:d1:da:fe:b5:1c:2b:a2:7a:7e:ee:be:81:00:4d: 36:41:34:77:79:af:da:04:27:bb:8b:9d:ef:92:98:77:f0:5b: de:05:bb:b1:b3:7d:f4:29:19:69:46:fd:58:81:5d:80:4d:78: eb:56:6c:8e:95:e9:f0:68:9c:1f:36:54:09:b6:05:e9:cb:6d: c7:fc:b9:32:4d:d6:72:9b:f4:59:4b:18:a2:ad:b8:f8:83:78: 29:0a:3e:86:94:c9:b5:e1:3c:ca:2b:cc:93:63:ab:ba:67:51: 53:60:45:47:b1:3b:91:81:07:a5:6f:11:e8:6b:3a:25:1c:63: 7e:b1:53:3b:62:07:6a:b7:36:01:65:c1:53:d8:6a:7b:67:f9: 15:97:35:b9:10:5d:54:88:82:69:31:ba:a3:2a:73:28:38:02: 7f:12:ba:cd:0d:a9:32:4f:68:4f:5c:31:81:e4:f9:10:22:4c: b8:b0:29:a3:ff:39:c2:a3:a7:59:92:dc:8b:22:14:99:64:e9: c3:80:20:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00ptkz2d0QklawLex70fzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZjhmZDc0OTNhMmZlMDU2MjIyZGI0MWVkNjkzMDgzYjUw ZWNjZmIwHhcNMjUxMjA2MTgwMDM0WhcNMjUxMjA3MTgwMDM0WjAzMTEwLwYDVQQD EyhjZTU3MzNmMjRlMDJmNDY4NjJhOGY0MzJhZDhmNjdiOTA0MjZmNjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6B9zNUPBN8h5cRjuWGAdIl7e6Q3 efvgqDlyRhjDapdbEW/b66K4eHmcWBVga2h5YbCAlYgHV8jLvGGf9xKhhQvNQodv 5IpuXw7jLTnYx+Eg45/tFfiB4VbXQUFpgkeI9xFHq7z+WlTJdZM9Dy3xu0m8twPy u8UibESAG6QWRA+MUKGNFXALSpZyY4i+KioCK+nA3SdXUx0jql03NDfhyiElW55q /XwBNQxY5dGTSW/dKuMJxJbUhNB8BWG3eYcDCtoGLAE5ET5OT/69Zn3l+1dWxQH4 FQIB6/OPoBOzdcmYgAvTXWDn7zDyt+XDkQ8+No9Z9WD9dcgAXyFrUnJHSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5XM/JOAvRoYqj0Mq2PZ7kEJvYlMB8GA1UdIwQY MBaAFIP4/XSTov4FYiLbQe1pMIO1Dsz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ19qOWRKT2lfZ1ZpSXR0QjdXa3dnN1VPelBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xMmQ2ZjItZjQ4MS00OWZkLThmMjAt YTA0M2MyMzBmMzBkLzEvZ19qOWRKT2lfZ1ZpSXR0QjdXa3dnN1VPelBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8xMmQ2ZjItZjQ4MS00OWZkLThmMjAtYTA0M2MyMzBmMzBk LzEvZ19qOWRKT2lfZ1ZpSXR0QjdXa3dnN1VPelBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCuLhc+c 1zibGn7OYcyupGGvX3lvs4vKsRuree4qaj5UH8qY6x9cGSKZnVryTZZOMLGAXcgM Yl9r5NHa/rUcK6J6fu6+gQBNNkE0d3mv2gQnu4ud75KYd/Bb3gW7sbN99CkZaUb9 WIFdgE1461ZsjpXp8GicHzZUCbYF6cttx/y5Mk3Wcpv0WUsYoq24+IN4KQo+hpTJ teE8yivMk2OrumdRU2BFR7E7kYEHpW8R6Gs6JRxjfrFTO2IHarc2AWXBU9hqe2f5 FZc1uRBdVIiCaTG6oypzKDgCfxK6zQ2pMk9oT1wxgeT5ECJMuLApo/85wqOnWZLc iyIUmWTpw4Ag4A== -----END CERTIFICATE-----Generated at Sun Dec 7 02:45:17 2025 by rpki-client