This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json) Hash identifier: 94mW/tj/AJL2M5nHRme+Cjqjm32a7jra23cu/dxvpAk= Subject key identifier: 8F:48:AE:62:DC:95:42:A2:89:42:18:5A:05:09:4A:1E:E4:8F:53:B2 Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c Certificate serial: 019AF5AF07E79492A552265BC77523F40A2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 22:01:19 +0000 Manifest this update: Sat 06 Dec 2025 22:01:19 +0000 Manifest next update: Sun 07 Dec 2025 22:01:19 +0000 Files and hashes: 1: ZBzIfVthsK0IsXsJf3cg7sZHKWM.roa (hash: QAbyT2QSC2brj0n8JNXKmo27qkYMllHPEba5ZlKG1ys=) 2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: h/gWe9Dr8wM1yv+OvJHwBaj//ocAqEZd6w0Q+F/PXJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:07:e7:94:92:a5:52:26:5b:c7:75:23:f4:0a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c Validity Not Before: Dec 6 22:01:19 2025 GMT Not After : Dec 7 22:01:19 2025 GMT Subject: CN=8f48ae62dc9542a28942185a05094a1ee48f53b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:ca:59:50:7f:52:21:a4:9d:fa:72:c2:ee: 4c:80:e0:a0:31:1f:98:d5:22:d3:56:15:18:43:ea: ff:63:f5:01:c7:07:ff:ef:dd:06:0e:67:bb:e0:1b: c6:e4:7d:71:db:eb:e1:15:64:15:ec:43:ab:d5:ac: a7:c6:b4:52:7a:e7:a3:18:e4:c0:ca:c7:f5:f2:d9: 04:ae:b8:fe:3f:64:e9:39:06:15:13:0d:e1:a9:08: 09:cd:3a:f1:03:48:ed:31:be:d2:5f:8b:b3:fc:be: 31:b8:18:5f:50:ce:76:db:56:5c:b9:3d:02:53:6d: b9:a6:e1:30:97:28:02:7d:27:e2:0a:74:ad:d2:1f: 1b:e9:91:96:f0:71:4c:a9:ab:a3:a0:e7:3c:29:64: 65:99:ac:29:62:1d:a8:11:e8:29:3a:a8:4c:a3:11: fc:1f:2e:de:76:2b:7d:52:b4:65:6c:5c:29:bd:dd: fd:83:23:79:c7:98:a8:3a:5e:33:e8:a9:dc:4d:38: 71:43:ea:79:c5:b1:de:8d:56:8e:14:6d:6e:44:da: 6f:c6:69:8e:77:6f:0e:13:fa:3e:43:b5:3d:87:33: 36:81:d6:d2:ae:07:be:3d:ba:21:62:ea:44:a9:b8: 85:51:29:12:79:97:43:53:b9:92:7d:b8:d0:c8:51: 72:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:48:AE:62:DC:95:42:A2:89:42:18:5A:05:09:4A:1E:E4:8F:53:B2 X509v3 Authority Key Identifier: keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:9f:39:ef:9e:03:d1:d1:e6:ee:eb:02:ea:43:46:ab:d7:a5: 32:14:82:60:11:58:92:87:83:d6:bc:3c:65:8b:b9:d0:91:ac: 8e:5b:0f:2a:41:f2:c8:66:85:da:46:0f:4d:55:c4:10:27:2d: 67:5c:0f:34:24:03:3c:8c:a3:fb:a5:5c:e8:20:80:d6:67:11: 9c:ee:ec:4e:ce:ca:2f:71:76:ea:30:89:86:be:34:6e:6f:23: cb:1d:df:ec:18:a2:a2:e7:58:54:60:10:93:53:1f:06:70:b0: 6b:dd:65:ed:c1:2f:3d:98:8e:eb:3d:75:cb:f2:7d:bd:00:79: e1:39:e7:70:fe:b2:66:74:b8:5d:e6:86:cb:a4:05:97:7e:71: 83:b9:92:1a:de:3f:73:3a:8a:af:1c:95:b6:cb:69:f8:1c:8f: 5b:b7:f7:61:39:ba:ba:97:69:09:da:81:b7:65:34:f6:ec:bc: b0:c1:6f:0c:1e:09:a9:2b:81:08:b6:0c:9d:87:53:9a:5f:c0: 9c:f8:4e:3c:99:a8:cf:b4:f6:26:49:75:52:33:94:f5:ef:44: 7e:e3:8e:84:eb:5f:f6:91:79:a4:b8:d1:29:54:76:6e:2a:58: 2d:a0:74:8f:43:e8:11:c5:87:d9:ef:8e:11:5a:1d:48:68:2b: 21:e5:49:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rwfnlJKlUiZbx3Uj9AotMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZTYzNWZlY2VmMTcxMDllMWFjNzhiMmZiNzIyNDEwZDg0 NzdhOWMwHhcNMjUxMjA2MjIwMTE5WhcNMjUxMjA3MjIwMTE5WjAzMTEwLwYDVQQD Eyg4ZjQ4YWU2MmRjOTU0MmEyODk0MjE4NWEwNTA5NGExZWU0OGY1M2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMfKWVB/UiGknfpywu5MgOCgMR+Y 1SLTVhUYQ+r/Y/UBxwf/790GDme74BvG5H1x2+vhFWQV7EOr1aynxrRSeuejGOTA ysf18tkErrj+P2TpOQYVEw3hqQgJzTrxA0jtMb7SX4uz/L4xuBhfUM5221ZcuT0C U225puEwlygCfSfiCnSt0h8b6ZGW8HFMqaujoOc8KWRlmawpYh2oEegpOqhMoxH8 Hy7edit9UrRlbFwpvd39gyN5x5ioOl4z6KncTThxQ+p5xbHejVaOFG1uRNpvxmmO d28OE/o+Q7U9hzM2gdbSrge+PbohYupEqbiFUSkSeZdDU7mSfbjQyFFyxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9IrmLclUKiiUIYWgUJSh7kj1OyMB8GA1UdIwQY MBaAFILmNf7O8XEJ4ax4svtyJBDYR3qcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3VZMV9zN3hjUW5ockhpeS0zSWtFTmhIZXB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85Zjk4NTgtNjIwOS00Y2Y1LWI1NDEt YTI2MDUwZWYwNDdlLzEvZ3VZMV9zN3hjUW5ockhpeS0zSWtFTmhIZXB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS85Zjk4NTgtNjIwOS00Y2Y1LWI1NDEtYTI2MDUwZWYwNDdl LzEvZ3VZMV9zN3hjUW5ockhpeS0zSWtFTmhIZXB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZ85754D 0dHm7usC6kNGq9elMhSCYBFYkoeD1rw8ZYu50JGsjlsPKkHyyGaF2kYPTVXEECct Z1wPNCQDPIyj+6Vc6CCA1mcRnO7sTs7KL3F26jCJhr40bm8jyx3f7BiioudYVGAQ k1MfBnCwa91l7cEvPZiO6z11y/J9vQB54TnncP6yZnS4XeaGy6QFl35xg7mSGt4/ czqKrxyVtstp+ByPW7f3YTm6updpCdqBt2U09uy8sMFvDB4JqSuBCLYMnYdTml/A nPhOPJmoz7T2Jkl1UjOU9e9EfuOOhOtf9pF5pLjRKVR2bipYLaB0j0PoEcWH2e+O EVodSGgrIeVJGw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:31:29 2025 by rpki-client