This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft File: g103QIoiXxqJZPjXK8mdm75TMjQ.mft (raw, json) Hash identifier: jzmr1x9H7IyIVFWzbh+kLpcOy/ELJuRA5lTi47iFbYQ= Subject key identifier: 24:A1:BB:22:FF:65:EE:DC:81:89:CD:39:A6:69:74:3A:3D:2A:9F:17 Authority key identifier: 83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34 Certificate issuer: /CN=835d37408a225f1a8964f8d72bc99d9bbe533234 Certificate serial: 019AF12DD30AEEEF7731442E9CBFDDDD9009 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft Manifest number: 1731 Signing time: Sat 06 Dec 2025 01:01:43 +0000 Manifest this update: Sat 06 Dec 2025 01:01:43 +0000 Manifest next update: Sun 07 Dec 2025 01:01:43 +0000 Files and hashes: 1: g103QIoiXxqJZPjXK8mdm75TMjQ.crl (hash: 8JRDloOIwNrBqpfNr4lMo+i/j5IU9Ju7BaE4S3+C0Aw=) 2: wmXlcNkh_2vesQLMJed5vd6SqTE.roa (hash: yFr4o4FxK8GJrbTrCTeUvkik35biGf8xB3yfWuA7Ue8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d3:0a:ee:ef:77:31:44:2e:9c:bf:dd:dd:90:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=835d37408a225f1a8964f8d72bc99d9bbe533234 Validity Not Before: Dec 6 01:01:43 2025 GMT Not After : Dec 7 01:01:43 2025 GMT Subject: CN=24a1bb22ff65eedc8189cd39a669743a3d2a9f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d5:c6:84:0a:6a:59:e7:be:1e:0d:8c:80:71: 9e:44:a2:1a:10:f1:92:70:0f:a1:2b:e6:28:79:b4: 0c:8d:49:3e:32:54:3f:cc:df:98:79:fb:d1:34:32: 67:6a:c4:43:cf:1c:fb:1f:2e:ea:c4:8b:99:73:63: ca:3a:31:61:aa:3d:7b:ec:ca:d3:30:f2:74:4a:06: cf:9e:3b:00:0b:15:e4:c9:2f:60:78:50:33:53:9d: 98:5e:3a:f7:ee:12:52:93:25:52:73:39:47:b2:86: 71:49:07:ca:e6:c9:4e:ec:fa:0b:25:5f:07:d5:28: 8f:6c:37:14:a1:21:de:92:76:c5:51:87:09:52:2d: bd:28:6b:1b:57:4a:79:ab:e3:98:1c:13:75:6c:14: ff:4d:1b:b1:52:fe:30:aa:cb:2c:f0:81:c3:07:58: c5:b9:60:a2:39:5a:86:a3:67:88:4f:5d:6d:01:42: 2d:79:01:92:bf:49:d9:ac:23:6c:30:af:93:76:bc: fb:06:f8:86:41:38:17:c8:63:81:a8:71:c6:2a:ac: ee:b9:dd:71:e1:ee:5d:56:60:f5:7a:ab:c1:cf:1e: 38:41:bf:36:fb:35:3a:f8:f9:92:1e:47:22:0a:42: f9:fa:9d:a9:b3:b2:6a:4b:62:b3:c1:42:42:88:43: 22:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A1:BB:22:FF:65:EE:DC:81:89:CD:39:A6:69:74:3A:3D:2A:9F:17 X509v3 Authority Key Identifier: keyid:83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:3e:42:2a:52:01:7e:7e:36:10:0f:7e:32:d5:bb:e3:93:a2: 0f:72:20:0f:47:7a:a2:a1:0b:e7:63:d6:5a:0c:21:48:13:5e: 23:81:33:50:09:ee:f3:a8:b3:4d:74:db:5e:1b:24:b4:e1:97: 69:83:31:d9:bf:2a:91:03:30:b7:ec:07:e1:e7:b7:5c:c0:db: fc:b7:d4:fa:ae:65:b7:41:3b:9a:cf:75:a7:cf:0e:85:c6:cd: d9:a8:c6:f6:c0:eb:54:34:5c:76:c9:49:95:60:d8:00:c8:12: 2b:1c:53:a0:60:f8:45:56:65:e0:2d:ea:9a:e0:53:c5:15:37: ec:61:97:95:c7:4a:6a:e4:24:91:e3:47:3a:b3:45:5b:de:c8: 10:c2:df:a0:f8:a1:63:8f:d2:bc:02:2d:ec:3f:2c:84:73:af: f9:4f:92:7c:0d:e5:9a:3a:b5:82:f6:eb:2b:85:5c:b3:d0:13: da:d1:49:54:5b:ec:60:4e:08:f9:5a:52:af:7c:2b:2a:34:a3: 82:ab:6d:ac:9c:8f:b5:2b:65:8c:fe:75:5f:0b:db:7b:a6:3f: 49:62:f7:27:07:18:17:25:9e:a1:56:74:25:31:32:35:44:a7: a6:9c:32:d2:2b:76:23:cb:cf:ba:30:04:4d:56:38:c6:31:6b: 10:5a:3c:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdMK7u93MUQunL/d3ZAJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNWQzNzQwOGEyMjVmMWE4OTY0ZjhkNzJiYzk5ZDliYmU1 MzMyMzQwHhcNMjUxMjA2MDEwMTQzWhcNMjUxMjA3MDEwMTQzWjAzMTEwLwYDVQQD EygyNGExYmIyMmZmNjVlZWRjODE4OWNkMzlhNjY5NzQzYTNkMmE5ZjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttXGhApqWee+Hg2MgHGeRKIaEPGS cA+hK+YoebQMjUk+MlQ/zN+YefvRNDJnasRDzxz7Hy7qxIuZc2PKOjFhqj177MrT MPJ0SgbPnjsACxXkyS9geFAzU52YXjr37hJSkyVSczlHsoZxSQfK5slO7PoLJV8H 1SiPbDcUoSHeknbFUYcJUi29KGsbV0p5q+OYHBN1bBT/TRuxUv4wqsss8IHDB1jF uWCiOVqGo2eIT11tAUIteQGSv0nZrCNsMK+Tdrz7BviGQTgXyGOBqHHGKqzuud1x 4e5dVmD1eqvBzx44Qb82+zU6+PmSHkciCkL5+p2ps7JqS2KzwUJCiEMiwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCShuyL/Ze7cgYnNOaZpdDo9Kp8XMB8GA1UdIwQY MBaAFINdN0CKIl8aiWT41yvJnZu+UzI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzEwM1FJb2lYeHFKWlBqWEs4bWRtNzVUTWpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wMjg0OTItZDYxOS00MmRhLWFhNjQt Y2I2YzY3NGM1YTNjLzEvZzEwM1FJb2lYeHFKWlBqWEs4bWRtNzVUTWpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8wMjg0OTItZDYxOS00MmRhLWFhNjQtY2I2YzY3NGM1YTNj LzEvZzEwM1FJb2lYeHFKWlBqWEs4bWRtNzVUTWpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAID5CKlIB fn42EA9+MtW745OiD3IgD0d6oqEL52PWWgwhSBNeI4EzUAnu86izTXTbXhsktOGX aYMx2b8qkQMwt+wH4ee3XMDb/LfU+q5lt0E7ms91p88OhcbN2ajG9sDrVDRcdslJ lWDYAMgSKxxToGD4RVZl4C3qmuBTxRU37GGXlcdKauQkkeNHOrNFW97IEMLfoPih Y4/SvAIt7D8shHOv+U+SfA3lmjq1gvbrK4Vcs9AT2tFJVFvsYE4I+VpSr3wrKjSj gqttrJyPtStljP51Xwvbe6Y/SWL3JwcYFyWeoVZ0JTEyNUSnppwy0it2I8vPujAE TVY4xjFrEFo8HA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:09 2025 by rpki-client