This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft File: G82c0xYDmcHjyAzwdIZ6cp991Pk.mft (raw, json) Hash identifier: SK9yyzQ/shTR4nwWm+Z5UarkIIP5idZ0t7LoQQEu3YY= Subject key identifier: 98:6E:28:96:4D:FF:39:AC:AD:0A:EA:AB:5E:1D:90:DB:B1:1D:82:9D Authority key identifier: 1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9 Certificate issuer: /CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9 Certificate serial: 019AF208E927BF41978B5B73A210D5E928C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:01 +0000 Manifest this update: Sat 06 Dec 2025 05:01:01 +0000 Manifest next update: Sun 07 Dec 2025 05:01:01 +0000 Files and hashes: 1: 65jp3a6f2gh4Tkpte2rBeESresA.roa (hash: 07jq7hxGRgJkHsgPxiO4p+naJnzzp9QCQTCf5Ueq5Sc=) 2: G82c0xYDmcHjyAzwdIZ6cp991Pk.crl (hash: UmMGz9legjslynpwGvbPVNYPAnkCR++1m3T3nSjTNUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e9:27:bf:41:97:8b:5b:73:a2:10:d5:e9:28:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9 Validity Not Before: Dec 6 05:01:01 2025 GMT Not After : Dec 7 05:01:01 2025 GMT Subject: CN=986e28964dff39acad0aeaab5e1d90dbb11d829d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:5f:d0:ba:bf:2d:88:20:4a:c0:63:55:88: 5b:0f:42:47:dc:8d:52:17:31:36:f4:38:28:bf:ac: 71:1c:94:4c:03:26:f5:cf:5d:44:fe:bb:e0:09:a4: 9e:ce:fa:70:4d:7c:42:90:d5:cb:1a:c4:00:49:15: 7a:61:45:e9:7a:32:dd:51:ac:5d:30:90:24:3b:e5: 88:a4:19:b9:3c:42:7b:6f:d0:a6:cf:c9:33:a6:b4: e5:8e:a7:da:09:2c:d2:51:dd:13:8e:09:6b:51:79: 55:3f:ec:9a:d3:62:a4:dd:0a:06:c9:fa:4e:9d:e3: 98:f0:d8:55:57:4a:cc:15:bd:02:cd:ba:64:4f:52: 40:12:66:1d:99:74:b8:07:5e:56:05:64:63:76:4b: 5e:48:96:ec:b7:f3:38:79:67:4f:86:f1:c6:60:ee: dd:4e:78:be:17:5f:67:fa:08:51:66:54:0d:80:fb: 9a:14:40:f6:24:34:e0:75:0c:53:1a:9e:3b:94:39: 00:fe:80:f9:94:b8:c9:8f:d2:6d:13:a7:2e:5c:04: 5c:81:4e:8a:6c:3a:f0:9e:64:7d:cd:ae:b5:cf:c4: 28:13:ce:80:29:43:d9:8c:ea:b0:2d:04:84:45:3c: 10:0a:c6:3b:7f:15:1c:32:aa:c9:b4:ff:ee:4f:04: 1b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6E:28:96:4D:FF:39:AC:AD:0A:EA:AB:5E:1D:90:DB:B1:1D:82:9D X509v3 Authority Key Identifier: keyid:1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:cf:b6:3a:8e:9f:ce:ca:0a:0c:c1:6f:78:24:a4:51:7e:44: 5b:d1:49:72:7e:93:31:8d:97:53:0c:ff:6f:60:d0:a7:bb:59: 19:e1:05:52:a4:92:2a:f8:f1:1f:cc:55:7d:09:e2:62:4e:c6: 50:d2:be:a1:bd:41:09:29:ed:50:da:e3:9a:f8:cf:3c:2e:b1: 73:d2:84:cf:df:46:0a:86:66:8c:13:ec:2c:e1:9d:64:8b:57: 87:e2:52:c3:70:b3:81:53:ca:2c:c5:52:07:d8:82:be:75:96: df:94:9a:67:e4:e8:8e:3f:52:b4:b7:db:87:ce:f5:a4:21:71: 02:98:4a:7f:7a:0c:dd:51:77:23:02:c8:75:0f:fe:9b:9f:dd: dd:0b:41:67:7c:e9:a6:a6:ee:fb:7e:88:13:ed:06:a4:d1:03: aa:62:9e:48:5e:47:88:5d:06:39:ff:7e:f5:e6:67:ac:ba:08: 5b:40:50:e7:1e:f4:6b:e0:f0:c0:2c:9e:1a:64:c6:00:aa:48: 45:b4:f1:d0:97:d8:08:1f:de:11:72:89:76:0b:76:80:0f:bd: 7b:89:a0:6f:95:43:61:e6:9b:f2:1b:18:9f:c4:b7:2c:0a:2e: c7:f2:4a:82:18:87:27:46:be:69:90:ba:b6:f6:c6:9d:d0:09: 8a:2b:4f:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOknv0GXi1tzohDV6SjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiY2Q5Y2QzMTYwMzk5YzFlM2M4MGNmMDc0ODY3YTcyOWY3 ZGQ0ZjkwHhcNMjUxMjA2MDUwMTAxWhcNMjUxMjA3MDUwMTAxWjAzMTEwLwYDVQQD Eyg5ODZlMjg5NjRkZmYzOWFjYWQwYWVhYWI1ZTFkOTBkYmIxMWQ4MjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtItf0Lq/LYggSsBjVYhbD0JH3I1S FzE29Dgov6xxHJRMAyb1z11E/rvgCaSezvpwTXxCkNXLGsQASRV6YUXpejLdUaxd MJAkO+WIpBm5PEJ7b9Cmz8kzprTljqfaCSzSUd0TjglrUXlVP+ya02Kk3QoGyfpO neOY8NhVV0rMFb0CzbpkT1JAEmYdmXS4B15WBWRjdkteSJbst/M4eWdPhvHGYO7d Tni+F19n+ghRZlQNgPuaFED2JDTgdQxTGp47lDkA/oD5lLjJj9JtE6cuXARcgU6K bDrwnmR9za61z8QoE86AKUPZjOqwLQSERTwQCsY7fxUcMqrJtP/uTwQbQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhuKJZN/zmsrQrqq14dkNuxHYKdMB8GA1UdIwQY MBaAFBvNnNMWA5nB48gM8HSGenKffdT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzgyYzB4WURtY0hqeUF6d2RJWjZjcDk5MVBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS80Mjc0NTYtNDk1Ny00ZDMzLTljNjQt MTZmNDA1N2ZhYzI2LzEvRzgyYzB4WURtY0hqeUF6d2RJWjZjcDk5MVBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS80Mjc0NTYtNDk1Ny00ZDMzLTljNjQtMTZmNDA1N2ZhYzI2 LzEvRzgyYzB4WURtY0hqeUF6d2RJWjZjcDk5MVBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIc+2Oo6f zsoKDMFveCSkUX5EW9FJcn6TMY2XUwz/b2DQp7tZGeEFUqSSKvjxH8xVfQniYk7G UNK+ob1BCSntUNrjmvjPPC6xc9KEz99GCoZmjBPsLOGdZItXh+JSw3CzgVPKLMVS B9iCvnWW35SaZ+Tojj9StLfbh871pCFxAphKf3oM3VF3IwLIdQ/+m5/d3QtBZ3zp pqbu+36IE+0GpNEDqmKeSF5HiF0GOf9+9eZnrLoIW0BQ5x70a+DwwCyeGmTGAKpI RbTx0JfYCB/eEXKJdgt2gA+9e4mgb5VDYeab8hsYn8S3LAoux/JKghiHJ0a+aZC6 tvbGndAJiitPNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:35 2025 by rpki-client