This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft File: g_2WfGwZoxt-OOnlycqPoN49YUk.mft (raw, json) Hash identifier: 6y0mgoWY/hz4639sMMNyFyaOnkN7JG3bm/pqhttAWoU= Subject key identifier: 27:D4:7C:FA:EA:8C:C5:5C:A6:DF:5E:7C:AB:86:DB:6F:2F:4A:DD:0F Authority key identifier: 83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49 Certificate issuer: /CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149 Certificate serial: 019AF31C9D9023ADD6B8D3E5CD3BF3458753 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft Manifest number: 12DD Signing time: Sat 06 Dec 2025 10:02:10 +0000 Manifest this update: Sat 06 Dec 2025 10:02:10 +0000 Manifest next update: Sun 07 Dec 2025 10:02:10 +0000 Files and hashes: 1: UGrR__PyRipPzdjGAZBG7BppT8M.roa (hash: iYevY5/kIjNolOqwa16r2Chgd87dJ+qeTiEz7+9fEjM=) 2: g_2WfGwZoxt-OOnlycqPoN49YUk.crl (hash: 4elmWekMeuncVids+b2rYL17qw4oxNTjDFEHZxx3/xc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:9d:90:23:ad:d6:b8:d3:e5:cd:3b:f3:45:87:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149 Validity Not Before: Dec 6 10:02:10 2025 GMT Not After : Dec 7 10:02:10 2025 GMT Subject: CN=27d47cfaea8cc55ca6df5e7cab86db6f2f4add0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:93:df:bc:50:c1:94:b2:20:fd:fa:c9:51:30: 72:1d:08:1f:7c:07:14:65:41:cb:08:4f:c4:5e:fc: c9:43:b8:db:2a:dc:16:62:04:65:62:59:38:3b:2d: 48:32:1c:c2:5b:17:92:08:85:63:6f:27:57:76:97: 15:44:aa:5d:fe:a4:9c:c4:7b:d5:31:80:e8:fe:f9: 3e:ec:55:1d:e6:14:5f:08:f5:95:89:92:83:64:f4: b0:db:1a:e5:c8:5d:3d:e3:36:09:0b:5a:4d:7e:5c: e5:aa:54:e5:18:0c:5e:40:92:53:4f:ee:ca:27:80: 10:25:68:20:b7:4a:54:18:35:41:ab:d9:30:0f:24: de:1b:51:99:8e:db:17:c7:63:9b:45:67:a1:7d:79: 69:c0:48:26:f6:94:f6:df:3b:56:dd:70:c9:46:80: 25:9c:ae:dd:de:6b:fa:40:fb:a8:75:47:a2:51:29: 9e:68:aa:19:ba:c3:4d:46:7c:df:dc:fb:d5:22:64: 8a:86:dc:72:13:e6:d9:2a:ff:b5:f0:5b:46:6e:52: 6a:79:98:a1:f8:36:ae:a2:84:a1:01:7a:06:c6:00: 97:48:0c:05:43:c1:29:a7:72:7b:c8:ec:35:32:06: 1e:de:cc:ef:fc:fd:17:66:92:8d:0e:73:9c:b2:37: 48:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D4:7C:FA:EA:8C:C5:5C:A6:DF:5E:7C:AB:86:DB:6F:2F:4A:DD:0F X509v3 Authority Key Identifier: keyid:83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:0f:cb:d8:a7:31:32:13:06:8b:9c:c7:be:46:86:18:04:0c: 73:1b:ef:72:f9:aa:c6:03:4e:ac:0d:c4:79:d9:1b:21:13:6f: 67:95:32:3b:f2:ad:d5:0f:ef:bb:d2:de:22:3f:1c:5a:08:b8: 34:be:91:2a:d6:42:34:45:f1:cb:e8:42:4b:bf:69:c7:b9:b4: 61:91:91:6c:b3:d4:31:be:20:22:ee:e9:ed:d1:ee:7f:79:eb: 08:05:e4:48:ab:ca:b8:3d:ae:1b:36:9f:e2:64:a3:24:7b:6f: fe:95:56:d5:a8:b2:c0:53:56:a6:c4:b1:0f:c0:8d:1b:63:a1: 20:c2:87:30:4c:46:33:e3:ac:77:25:3a:a2:a0:5f:84:7b:73: 5e:2f:c3:f8:80:6d:4c:a4:4b:54:4d:50:34:7b:60:53:1e:39: 5e:d5:90:e2:d7:d1:81:99:f7:3d:70:2a:51:cd:a7:92:fb:41: fd:f9:7a:76:b6:d5:a0:8c:1b:cd:c0:50:07:bc:ef:99:c0:92: 77:ac:81:b9:66:88:80:54:34:57:98:83:0b:a6:d2:4e:1c:6e: 8a:2b:93:55:93:32:28:a0:00:ca:39:80:b5:bb:73:f6:fd:bc: 08:d4:ab:d5:9c:94:92:fe:a0:54:1c:4a:be:6b:6c:38:19:02: 68:8c:7f:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJ2QI63WuNPlzTvzRYdTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZmQ5NjdjNmMxOWEzMWI3ZTM4ZTllNWM5Y2E4ZmEwZGUz ZDYxNDkwHhcNMjUxMjA2MTAwMjEwWhcNMjUxMjA3MTAwMjEwWjAzMTEwLwYDVQQD EygyN2Q0N2NmYWVhOGNjNTVjYTZkZjVlN2NhYjg2ZGI2ZjJmNGFkZDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JPfvFDBlLIg/frJUTByHQgffAcU ZUHLCE/EXvzJQ7jbKtwWYgRlYlk4Oy1IMhzCWxeSCIVjbydXdpcVRKpd/qScxHvV MYDo/vk+7FUd5hRfCPWViZKDZPSw2xrlyF094zYJC1pNflzlqlTlGAxeQJJTT+7K J4AQJWggt0pUGDVBq9kwDyTeG1GZjtsXx2ObRWehfXlpwEgm9pT23ztW3XDJRoAl nK7d3mv6QPuodUeiUSmeaKoZusNNRnzf3PvVImSKhtxyE+bZKv+18FtGblJqeZih +DauooShAXoGxgCXSAwFQ8Epp3J7yOw1MgYe3szv/P0XZpKNDnOcsjdIuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfUfPrqjMVcpt9efKuG228vSt0PMB8GA1UdIwQY MBaAFIP9lnxsGaMbfjjp5cnKj6DePWFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ18yV2ZHd1pveHQtT09ubHljcVBvTjQ5WVVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hOGRmNTgtZWFiYy00NWQ0LTk0Mzct YjU3NjE2MTM2YWI2LzEvZ18yV2ZHd1pveHQtT09ubHljcVBvTjQ5WVVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hOGRmNTgtZWFiYy00NWQ0LTk0MzctYjU3NjE2MTM2YWI2 LzEvZ18yV2ZHd1pveHQtT09ubHljcVBvTjQ5WVVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQ/L2Kcx MhMGi5zHvkaGGAQMcxvvcvmqxgNOrA3EedkbIRNvZ5UyO/Kt1Q/vu9LeIj8cWgi4 NL6RKtZCNEXxy+hCS79px7m0YZGRbLPUMb4gIu7p7dHuf3nrCAXkSKvKuD2uGzaf 4mSjJHtv/pVW1aiywFNWpsSxD8CNG2OhIMKHMExGM+OsdyU6oqBfhHtzXi/D+IBt TKRLVE1QNHtgUx45XtWQ4tfRgZn3PXAqUc2nkvtB/fl6drbVoIwbzcBQB7zvmcCS d6yBuWaIgFQ0V5iDC6bSThxuiiuTVZMyKKAAyjmAtbtz9v28CNSr1ZyUkv6gVBxK vmtsOBkCaIx/SQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:33:00 2025 by rpki-client