This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json) Hash identifier: EYo9/AuV5yJhzfRfgsMWrXIEwWw13LAYMUYk8vFPuEY= Subject key identifier: 04:3F:58:AA:F6:89:FB:4F:95:D6:A2:09:11:FC:7E:7D:70:C0:45:9A Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67 Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267 Certificate serial: 019AF163DF8E90EC12DE8BB1966EBD552CBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft Manifest number: 10FA Signing time: Sat 06 Dec 2025 02:00:45 +0000 Manifest this update: Sat 06 Dec 2025 02:00:45 +0000 Manifest next update: Sun 07 Dec 2025 02:00:45 +0000 Files and hashes: 1: 0L_x5KrJ0yONYZL6OhXnnI9ON0g.roa (hash: pLDQ94A0tCs3zB2hMsSvw81lpJnRZzCDTURKCYOZ0g4=) 2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: Tva/ZCDDuy6Jdz2CWgxDMo/i2z42blNeChPr+ROpNOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:df:8e:90:ec:12:de:8b:b1:96:6e:bd:55:2c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267 Validity Not Before: Dec 6 02:00:45 2025 GMT Not After : Dec 7 02:00:45 2025 GMT Subject: CN=043f58aaf689fb4f95d6a20911fc7e7d70c0459a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:97:9e:62:5b:bd:c3:5d:95:32:b9:d0:10:1e: b9:c2:e1:b7:cb:e4:45:46:7b:4d:38:2a:78:5d:ff: 15:3a:4c:91:9d:da:3f:db:7f:c2:36:b4:ed:37:78: a7:aa:43:a7:61:4b:96:c6:93:5b:f3:aa:bd:e1:53: 35:7e:ce:28:cd:5a:18:ec:f2:8f:65:bb:e9:8a:61: af:ea:35:e5:bd:0a:fc:8d:1c:62:22:22:09:4c:e3: f1:fc:b2:03:60:9c:29:d2:f4:1a:e1:40:41:ed:1d: 7a:bc:14:38:58:7b:4e:84:fc:97:3e:79:59:71:d2: 05:1e:aa:43:9d:2f:77:43:41:e8:59:fd:46:f4:56: ba:e8:34:14:ae:7e:1c:91:d0:f2:fb:03:1c:82:c1: 86:7d:f8:86:0a:cf:aa:a7:80:a3:0e:e3:4d:52:bf: aa:72:61:fe:db:5d:61:bd:16:e4:b9:cf:98:e0:51: 8b:cf:64:5e:7b:81:b4:df:f7:bb:5a:e8:a4:f0:2a: 0a:45:bd:b7:61:17:b3:66:ee:e6:9b:96:65:1a:5f: 68:d1:f4:13:c3:0c:5b:07:40:b0:48:aa:83:2e:13: 15:d3:0d:1d:e9:27:65:c8:1b:f1:c2:86:fa:c0:ad: 3b:8b:5d:1c:83:18:56:a4:53:02:1a:b2:23:33:eb: b2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3F:58:AA:F6:89:FB:4F:95:D6:A2:09:11:FC:7E:7D:70:C0:45:9A X509v3 Authority Key Identifier: keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:fa:2c:a3:85:ed:12:70:05:bc:95:a1:b4:25:94:e9:4b:ff: d9:58:d7:24:89:2a:42:ef:05:a8:21:ae:36:a0:d8:0a:09:67: b8:79:dc:65:21:ee:49:d6:ac:09:18:40:90:99:0a:fc:8e:8a: b8:06:c6:90:19:02:60:77:99:3b:0e:73:f9:6f:20:11:76:07: e9:75:4e:2b:77:fb:c5:5b:84:25:b2:2a:31:a9:38:d0:34:98: fa:0d:5a:84:66:0a:bd:3e:b2:4d:8e:c7:94:f8:9f:b4:f3:9d: 10:84:8d:c0:80:db:e8:2b:f7:59:33:1f:69:87:42:95:81:70: 7a:23:08:97:19:d2:c0:d3:f0:51:1c:93:a1:c2:da:92:cd:07: 84:d8:cc:e8:f5:d1:35:35:2e:49:86:ea:e2:ea:23:69:5e:f8: 0e:ee:b9:fe:38:a5:f0:d9:04:ed:ac:20:fc:0d:20:e0:d7:67: 2c:af:b7:3e:c9:10:e8:b9:4d:2b:20:e7:f8:cf:92:c0:1c:60: 23:95:c5:b5:89:2d:6a:d2:fc:52:ee:e7:51:89:6f:f5:c6:23: 79:19:c8:e3:aa:a1:58:aa:a1:5c:60:fc:f5:83:6d:62:42:77: 2a:c4:dc:6a:5f:a4:bc:76:61:d8:23:8b:d9:fb:ec:3c:03:9e: 1a:ff:56:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9+OkOwS3ouxlm69VSy8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNDJhMTQxM2IwY2NlMzRlM2Y3ZmJmMGU3ZjM4ZTBhMzcw YTYyNjcwHhcNMjUxMjA2MDIwMDQ1WhcNMjUxMjA3MDIwMDQ1WjAzMTEwLwYDVQQD EygwNDNmNThhYWY2ODlmYjRmOTVkNmEyMDkxMWZjN2U3ZDcwYzA0NTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpeeYlu9w12VMrnQEB65wuG3y+RF RntNOCp4Xf8VOkyRndo/23/CNrTtN3inqkOnYUuWxpNb86q94VM1fs4ozVoY7PKP ZbvpimGv6jXlvQr8jRxiIiIJTOPx/LIDYJwp0vQa4UBB7R16vBQ4WHtOhPyXPnlZ cdIFHqpDnS93Q0HoWf1G9Fa66DQUrn4ckdDy+wMcgsGGffiGCs+qp4CjDuNNUr+q cmH+211hvRbkuc+Y4FGLz2Ree4G03/e7Wuik8CoKRb23YRezZu7mm5ZlGl9o0fQT wwxbB0CwSKqDLhMV0w0d6SdlyBvxwob6wK07i10cgxhWpFMCGrIjM+uyKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQ/WKr2iftPldaiCRH8fn1wwEWaMB8GA1UdIwQY MBaAFINCoUE7DM404/f78Ofzjgo3CmJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzBLaFFUc016alRqOV92dzVfT09DamNLWW1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81NGU3OTctZGJlMy00OTQ1LWE4MzUt NjQ4YjkyMjc2MDE0LzEvZzBLaFFUc016alRqOV92dzVfT09DamNLWW1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81NGU3OTctZGJlMy00OTQ1LWE4MzUtNjQ4YjkyMjc2MDE0 LzEvZzBLaFFUc016alRqOV92dzVfT09DamNLWW1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvoso4Xt EnAFvJWhtCWU6Uv/2VjXJIkqQu8FqCGuNqDYCglnuHncZSHuSdasCRhAkJkK/I6K uAbGkBkCYHeZOw5z+W8gEXYH6XVOK3f7xVuEJbIqMak40DSY+g1ahGYKvT6yTY7H lPiftPOdEISNwIDb6Cv3WTMfaYdClYFweiMIlxnSwNPwURyTocLaks0HhNjM6PXR NTUuSYbq4uojaV74Du65/jil8NkE7awg/A0g4NdnLK+3PskQ6LlNKyDn+M+SwBxg I5XFtYktatL8Uu7nUYlv9cYjeRnI46qhWKqhXGD89YNtYkJ3KsTcal+kvHZh2COL 2fvsPAOeGv9WTw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:10 2025 by rpki-client