This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft File: g-uiXEochs51okt254VYyS-KA3I.mft (raw, json) Hash identifier: JPuSHv022mOpQhuzbOBKisB3dX4GTaaWrdxgj9NLrXQ= Subject key identifier: 47:91:F5:EC:4B:97:8C:D1:E5:3C:8F:C2:3E:46:6F:25:F4:BB:B4:8C Authority key identifier: 83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72 Certificate issuer: /CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372 Certificate serial: 019AF1D1BF05F0C248FB7BE743D1E68A9844 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft Manifest number: 0A7B Signing time: Sat 06 Dec 2025 04:00:46 +0000 Manifest this update: Sat 06 Dec 2025 04:00:46 +0000 Manifest next update: Sun 07 Dec 2025 04:00:46 +0000 Files and hashes: 1: aQM2rPZRgKrN-7qAHXUxMvpLO9s.roa (hash: 4EzmrUgObdb+dIaJZNcvbs9ezqSEEasVfq7N+SyDkGw=) 2: g-uiXEochs51okt254VYyS-KA3I.crl (hash: vMalceOK6fzchRDYyjo+c8PLtzKFVyzVcG8e/uQTmRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:bf:05:f0:c2:48:fb:7b:e7:43:d1:e6:8a:98:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372 Validity Not Before: Dec 6 04:00:46 2025 GMT Not After : Dec 7 04:00:46 2025 GMT Subject: CN=4791f5ec4b978cd1e53c8fc23e466f25f4bbb48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ec:30:20:47:13:54:0f:c7:06:bf:a8:76:cb: cc:bb:95:db:09:88:3c:b7:5d:d5:30:a0:8a:63:25: e4:fe:b2:96:ed:56:fb:af:e2:a8:0b:39:7d:36:15: bc:de:f1:98:81:18:9e:52:d2:3c:92:90:2e:ad:60: 88:62:67:9b:3c:a6:d6:cd:49:9d:dc:45:32:69:49: 75:74:a3:5b:57:d8:9b:67:42:71:6e:0f:08:da:16: db:3d:ea:75:ce:93:e1:dd:ca:d9:98:f6:9f:33:50: 58:6a:5e:6e:31:85:3b:f0:35:d5:83:0b:7f:d9:00: bd:d2:ed:1b:81:46:64:d7:12:58:a4:ce:ef:a2:2a: 4f:f5:7a:2b:f5:24:1c:4a:83:65:ae:99:35:f8:76: 9b:f1:24:52:0e:cf:2f:44:8d:77:f7:b3:21:b5:7f: 29:10:41:df:d8:2e:ff:a3:eb:84:85:6a:db:3b:96: 62:bb:e2:54:03:8f:bc:41:fc:33:6b:0b:04:13:94: 4d:c5:54:4b:ac:89:11:df:72:7b:68:21:48:9f:1b: 02:20:82:b5:f6:0e:fa:5d:cc:fe:30:b5:4c:23:1a: 1a:54:9c:37:d4:ba:3d:8c:9f:c0:6f:a7:13:82:ea: f6:40:f1:a1:6c:72:39:36:3c:a2:86:fc:b0:87:64: 70:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:91:F5:EC:4B:97:8C:D1:E5:3C:8F:C2:3E:46:6F:25:F4:BB:B4:8C X509v3 Authority Key Identifier: keyid:83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:68:a1:9a:c2:2a:08:a6:2f:fb:f5:81:0f:77:c1:5c:12:11: 6d:7a:af:c2:35:7d:b8:33:56:7c:51:e8:ce:10:c1:01:00:50: 1f:5f:51:f2:21:c8:16:2e:d3:a3:98:70:f5:0e:7c:70:75:dc: b9:27:22:6b:5c:82:3e:19:56:60:49:73:87:6b:e6:08:f2:14: 3d:e3:70:0a:b4:ed:28:7c:20:b2:9c:55:d4:5a:79:af:a6:dd: a7:bf:d1:74:f8:b7:af:40:03:22:65:30:64:cd:48:8f:63:12: 49:ed:eb:41:bc:66:0b:14:84:1f:40:55:8b:d4:d7:ef:43:77: 77:42:59:e5:10:38:f5:19:36:a0:c9:32:f3:40:df:0e:18:b0: ca:71:e0:3e:b4:0a:64:cc:f4:6d:88:2f:9b:95:ba:f6:cf:5f: e2:5a:04:77:a2:18:c4:17:87:02:ea:16:f3:ce:30:01:83:2e: 8d:5b:83:06:0f:6f:ea:70:c7:64:5f:cc:86:29:70:0c:09:75: 60:5c:36:8d:62:29:29:76:91:cb:9a:d6:b5:e0:8d:9f:6d:61: cd:a5:78:1a:3f:2c:f4:c6:4d:a1:1f:7d:b0:72:82:39:c8:34: 91:ed:57:6b:eb:50:1a:e5:73:56:ec:d6:02:5b:2a:31:3a:04: a3:cb:01:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0b8F8MJI+3vnQ9HmiphEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZWJhMjVjNGExYzg2Y2U3NWEyNGI3NmU3ODU1OGM5MmY4 YTAzNzIwHhcNMjUxMjA2MDQwMDQ2WhcNMjUxMjA3MDQwMDQ2WjAzMTEwLwYDVQQD Eyg0NzkxZjVlYzRiOTc4Y2QxZTUzYzhmYzIzZTQ2NmYyNWY0YmJiNDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOwwIEcTVA/HBr+odsvMu5XbCYg8 t13VMKCKYyXk/rKW7Vb7r+KoCzl9NhW83vGYgRieUtI8kpAurWCIYmebPKbWzUmd 3EUyaUl1dKNbV9ibZ0Jxbg8I2hbbPep1zpPh3crZmPafM1BYal5uMYU78DXVgwt/ 2QC90u0bgUZk1xJYpM7voipP9Xor9SQcSoNlrpk1+Hab8SRSDs8vRI1397MhtX8p EEHf2C7/o+uEhWrbO5Ziu+JUA4+8QfwzawsEE5RNxVRLrIkR33J7aCFInxsCIIK1 9g76Xcz+MLVMIxoaVJw31Lo9jJ/Ab6cTgur2QPGhbHI5Njyihvywh2RwZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeR9exLl4zR5TyPwj5GbyX0u7SMMB8GA1UdIwQY MBaAFIProlxKHIbOdaJLdueFWMkvigNyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy11aVhFb2NoczUxb2t0MjU0Vll5Uy1LQTNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jNTYxMmQtZTgxYi00M2JlLWFlN2Mt NTc3ZmFmODU1Mzk5LzEvZy11aVhFb2NoczUxb2t0MjU0Vll5Uy1LQTNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9jNTYxMmQtZTgxYi00M2JlLWFlN2MtNTc3ZmFmODU1Mzk5 LzEvZy11aVhFb2NoczUxb2t0MjU0Vll5Uy1LQTNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmihmsIq CKYv+/WBD3fBXBIRbXqvwjV9uDNWfFHozhDBAQBQH19R8iHIFi7To5hw9Q58cHXc uScia1yCPhlWYElzh2vmCPIUPeNwCrTtKHwgspxV1Fp5r6bdp7/RdPi3r0ADImUw ZM1Ij2MSSe3rQbxmCxSEH0BVi9TX70N3d0JZ5RA49Rk2oMky80DfDhiwynHgPrQK ZMz0bYgvm5W69s9f4loEd6IYxBeHAuoW884wAYMujVuDBg9v6nDHZF/MhilwDAl1 YFw2jWIpKXaRy5rWteCNn21hzaV4Gj8s9MZNoR99sHKCOcg0ke1Xa+tQGuVzVuzW AlsqMToEo8sBxg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:23 2025 by rpki-client