This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft File: g_W9I77F0GOYM6kUGYXMV1OIbhY.mft (raw, json) Hash identifier: x0NAWWi5GLDWlgUd7opscKSOeb5wc9V8+pO9CYHdEu4= Subject key identifier: B7:AB:B6:7E:56:F4:20:54:55:04:3B:2C:8B:F6:46:14:1D:E0:6F:40 Authority key identifier: 83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16 Certificate issuer: /CN=83f5bd23bec5d0639833a9141985cc5753886e16 Certificate serial: 019AF12EA021ADB74FFD1F6CA394DA4B69F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:02:35 +0000 Manifest this update: Sat 06 Dec 2025 01:02:35 +0000 Manifest next update: Sun 07 Dec 2025 01:02:35 +0000 Files and hashes: 1: 1H2Y74rOLQCMhy2O3X9ouFiEkFY.roa (hash: fzT1x1Cd9KzjMSBAyqcBMyBoif3guu8C9asSN6fBGTo=) 2: g_W9I77F0GOYM6kUGYXMV1OIbhY.crl (hash: sb6UJkdzRIkp2VvkNQzj2cB6c/zEVVEaWTL+jQSVtrk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a0:21:ad:b7:4f:fd:1f:6c:a3:94:da:4b:69:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83f5bd23bec5d0639833a9141985cc5753886e16 Validity Not Before: Dec 6 01:02:35 2025 GMT Not After : Dec 7 01:02:35 2025 GMT Subject: CN=b7abb67e56f4205455043b2c8bf646141de06f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:65:49:ba:59:f4:35:96:11:c2:67:81:fe: c3:f7:24:cd:6f:78:0c:8b:a0:fd:0f:12:ea:9d:ef: 23:b5:d4:53:54:f7:19:33:7b:c1:e6:b6:12:9a:ed: ce:49:e4:c4:06:80:65:85:06:f3:1a:18:dc:21:6a: fe:bf:60:b7:34:69:ec:68:4a:00:d7:48:74:00:c2: e9:1d:79:ff:bf:98:11:11:11:43:45:06:ea:46:27: 8c:28:6a:d8:79:ed:bc:ca:c0:ef:37:ba:27:c6:92: 69:f6:64:66:e0:a8:a9:f2:4d:be:ad:fc:45:67:7f: d9:1d:79:d5:24:53:83:f9:d3:3d:21:99:ec:72:86: e1:62:b4:f5:c1:be:18:da:b8:d8:b3:ed:e8:f1:59: 50:cf:52:ca:0b:f8:95:cf:71:db:46:e6:02:72:72: 6b:b8:e6:7b:0a:6c:9a:5f:a0:88:24:cb:fb:da:e7: 65:4c:73:c7:d2:f6:1f:93:28:f7:6c:23:b7:10:8c: a3:95:ef:0e:f3:c8:51:43:66:a8:71:2f:f6:d8:f4: 3e:29:bf:38:62:17:0d:e9:59:5b:56:23:e5:af:53: a1:7b:a7:68:7c:09:c8:71:19:d6:34:cb:b0:0d:1f: bb:f5:0e:6a:4a:14:8b:10:8d:25:ac:bd:06:6d:7a: 30:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AB:B6:7E:56:F4:20:54:55:04:3B:2C:8B:F6:46:14:1D:E0:6F:40 X509v3 Authority Key Identifier: keyid:83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:82:eb:bc:fc:24:16:fd:a6:10:f5:f7:c2:ba:37:8a:09:bd: 73:e5:c0:cb:ee:35:b3:b9:4e:d4:f7:f0:41:7b:c9:43:f8:5d: dc:fa:89:bf:2d:fb:27:61:61:c5:82:bf:cc:68:34:01:db:2e: f6:a7:21:da:0d:4c:0d:4f:e9:76:60:cd:f2:6e:05:94:bd:ec: 88:81:ee:42:ed:2f:16:b1:9b:f3:24:1b:26:c7:f5:05:07:c2: 14:4e:1c:f1:8f:e7:a7:d6:ae:75:54:5a:30:99:f8:09:38:28: 8e:67:49:7f:12:4f:c6:99:d2:dd:82:33:99:89:79:b9:2c:4f: 2e:0c:62:8e:a3:36:a4:fd:27:ab:13:b7:c5:29:ea:ba:59:67: 4b:f1:6e:45:81:22:f2:b9:8c:22:1d:a0:70:03:81:a6:07:0b: 3c:db:fd:02:6e:77:cc:a5:fe:45:cf:d9:4d:74:02:29:4d:53: be:1b:06:b9:7c:73:5e:72:48:b0:59:b8:4b:0b:ac:e9:9a:f4: 0e:89:54:83:11:13:79:55:51:b8:6d:52:bf:97:3d:51:84:cc: e5:9d:83:66:88:8a:7c:b0:51:df:b6:95:0e:d9:c2:9d:f0:cf: bb:5f:4c:c6:5e:b1:f3:fc:43:d4:a1:26:25:b1:80:66:2f:d0: 39:1e:c5:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqAhrbdP/R9so5TaS2n1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZjViZDIzYmVjNWQwNjM5ODMzYTkxNDE5ODVjYzU3NTM4 ODZlMTYwHhcNMjUxMjA2MDEwMjM1WhcNMjUxMjA3MDEwMjM1WjAzMTEwLwYDVQQD EyhiN2FiYjY3ZTU2ZjQyMDU0NTUwNDNiMmM4YmY2NDYxNDFkZTA2ZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliRlSbpZ9DWWEcJngf7D9yTNb3gM i6D9DxLqne8jtdRTVPcZM3vB5rYSmu3OSeTEBoBlhQbzGhjcIWr+v2C3NGnsaEoA 10h0AMLpHXn/v5gRERFDRQbqRieMKGrYee28ysDvN7onxpJp9mRm4Kip8k2+rfxF Z3/ZHXnVJFOD+dM9IZnscobhYrT1wb4Y2rjYs+3o8VlQz1LKC/iVz3HbRuYCcnJr uOZ7CmyaX6CIJMv72udlTHPH0vYfkyj3bCO3EIyjle8O88hRQ2aocS/22PQ+Kb84 YhcN6VlbViPlr1Ohe6dofAnIcRnWNMuwDR+79Q5qShSLEI0lrL0GbXowtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLertn5W9CBUVQQ7LIv2RhQd4G9AMB8GA1UdIwQY MBaAFIP1vSO+xdBjmDOpFBmFzFdTiG4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ19XOUk3N0YwR09ZTTZrVUdZWE1WMU9JYmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iMjM5N2MtYjM2ZC00NmEzLWEyNDAt MWQ5YTE5ZjEyOTViLzEvZ19XOUk3N0YwR09ZTTZrVUdZWE1WMU9JYmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9iMjM5N2MtYjM2ZC00NmEzLWEyNDAtMWQ5YTE5ZjEyOTVi LzEvZ19XOUk3N0YwR09ZTTZrVUdZWE1WMU9JYmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4LrvPwk Fv2mEPX3wro3igm9c+XAy+41s7lO1PfwQXvJQ/hd3PqJvy37J2FhxYK/zGg0Adsu 9qch2g1MDU/pdmDN8m4FlL3siIHuQu0vFrGb8yQbJsf1BQfCFE4c8Y/np9audVRa MJn4CTgojmdJfxJPxpnS3YIzmYl5uSxPLgxijqM2pP0nqxO3xSnqullnS/FuRYEi 8rmMIh2gcAOBpgcLPNv9Am53zKX+Rc/ZTXQCKU1TvhsGuXxzXnJIsFm4Swus6Zr0 DolUgxETeVVRuG1Sv5c9UYTM5Z2DZoiKfLBR37aVDtnCnfDPu19Mxl6x8/xD1KEm JbGAZi/QOR7F2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:18 2025 by rpki-client