This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft File: g-k154ofll0QiRUhXQ8Et2tzPlg.mft (raw, json) Hash identifier: I1ckeigxURF0g8lMm+zdNAlhzsMZkOIuGlh3TrBjrFc= Subject key identifier: E5:39:1B:D9:94:F0:2C:D6:04:DE:DD:79:31:77:B7:0E:77:84:7B:80 Authority key identifier: 83:E9:35:E7:8A:1F:96:5D:10:89:15:21:5D:0F:04:B7:6B:73:3E:58 Certificate issuer: /CN=83e935e78a1f965d108915215d0f04b76b733e58 Certificate serial: 019AF12CC6B32D21778271D29E37FE7F5D97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:00:34 +0000 Manifest this update: Sat 06 Dec 2025 01:00:34 +0000 Manifest next update: Sun 07 Dec 2025 01:00:34 +0000 Files and hashes: 1: g-k154ofll0QiRUhXQ8Et2tzPlg.crl (hash: IGDTw5bhhdPiX+89thnCIOGPEsYZQOVouEP8tqsu/No=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c6:b3:2d:21:77:82:71:d2:9e:37:fe:7f:5d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83e935e78a1f965d108915215d0f04b76b733e58 Validity Not Before: Dec 6 01:00:34 2025 GMT Not After : Dec 7 01:00:34 2025 GMT Subject: CN=e5391bd994f02cd604dedd793177b70e77847b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0e:1f:cd:33:45:9a:1e:be:bc:4e:fc:5b:90: 7d:d6:02:cf:7a:7e:b2:12:0f:b2:01:bf:cf:10:6f: a9:f8:f6:c1:9a:10:bd:df:81:74:c0:90:24:a5:e9: 46:25:d1:2e:4c:a3:a9:1c:66:aa:fd:92:b5:84:75: 7f:70:84:0f:0c:b0:80:26:52:d2:02:34:00:dd:d6: fd:0a:5b:1a:55:ac:e1:69:47:66:c6:4e:41:4a:40: b3:61:41:40:c4:87:03:3a:83:d5:e4:a2:01:47:cd: b9:ab:51:d4:0e:8a:23:11:5c:33:ed:31:47:68:14: eb:46:0c:a5:5e:d0:34:a2:2c:dc:11:f9:c9:e6:0d: 96:7c:17:bd:b9:3a:2d:6b:7c:f4:e2:15:30:2c:a0: cd:94:33:07:1d:73:76:63:a9:5f:01:95:1e:0a:60: 6f:ca:8f:b7:ce:f6:c9:eb:1a:6b:95:ec:d2:75:0a: 3c:b6:57:7e:b1:24:36:f1:64:4c:d8:6e:5c:fa:f7: db:95:62:d4:d2:cb:de:56:8a:76:0f:86:58:ad:e5: 64:76:e4:f1:d4:04:63:d1:88:91:33:c1:05:28:76: 28:ad:20:d7:3f:c4:b0:46:97:28:50:b6:47:22:6f: 55:65:d3:b3:86:5e:04:b1:9f:b6:38:e3:1a:ea:cb: 9e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:39:1B:D9:94:F0:2C:D6:04:DE:DD:79:31:77:B7:0E:77:84:7B:80 X509v3 Authority Key Identifier: keyid:83:E9:35:E7:8A:1F:96:5D:10:89:15:21:5D:0F:04:B7:6B:73:3E:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:34:f8:ee:de:c9:eb:1c:47:00:f5:59:0e:3c:26:92:b4:da: a5:74:0e:e0:24:13:6a:16:2d:70:83:c3:9a:ef:d5:33:06:fe: 9c:96:28:28:38:44:8e:2a:cf:28:d7:2e:32:56:8d:06:6d:03: 89:05:e1:76:c9:19:75:54:6d:4f:b0:ec:51:7d:e8:02:60:f8: f2:c2:55:6c:7e:58:75:da:9d:39:68:b0:a1:1b:bf:1b:d5:d4: 51:12:93:14:56:aa:1f:08:96:3a:20:92:90:d8:00:1c:e9:30: 80:11:07:55:fe:7e:a6:e0:21:9a:71:e8:50:f9:a9:19:55:3e: a1:de:98:8a:99:16:4c:cf:98:8b:a6:9b:a5:93:06:38:31:82: 7b:08:36:e2:1a:91:51:7e:90:23:93:73:ec:a6:4b:6d:61:1b: 07:3e:02:c1:95:c3:5c:75:03:97:57:da:f3:24:f1:88:f3:3d: b7:2c:2d:f5:f1:6e:bd:25:17:b9:5a:fb:37:b8:db:ff:40:48: 0b:85:91:11:1a:e7:1c:c0:3b:7f:e2:75:f9:50:75:10:dc:6c: de:c2:ae:03:fe:9a:e3:51:f8:e1:e1:88:a5:80:5d:db:41:cc: 26:c6:98:f0:0d:bd:c3:fe:16:af:6e:6e:64:e4:2c:12:36:c8: 5e:29:08:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMazLSF3gnHSnjf+f12XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZTkzNWU3OGExZjk2NWQxMDg5MTUyMTVkMGYwNGI3NmI3 MzNlNTgwHhcNMjUxMjA2MDEwMDM0WhcNMjUxMjA3MDEwMDM0WjAzMTEwLwYDVQQD EyhlNTM5MWJkOTk0ZjAyY2Q2MDRkZWRkNzkzMTc3YjcwZTc3ODQ3YjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ4fzTNFmh6+vE78W5B91gLPen6y Eg+yAb/PEG+p+PbBmhC934F0wJAkpelGJdEuTKOpHGaq/ZK1hHV/cIQPDLCAJlLS AjQA3db9ClsaVazhaUdmxk5BSkCzYUFAxIcDOoPV5KIBR825q1HUDoojEVwz7TFH aBTrRgylXtA0oizcEfnJ5g2WfBe9uTota3z04hUwLKDNlDMHHXN2Y6lfAZUeCmBv yo+3zvbJ6xprlezSdQo8tld+sSQ28WRM2G5c+vfblWLU0sveVop2D4ZYreVkduTx 1ARj0YiRM8EFKHYorSDXP8SwRpcoULZHIm9VZdOzhl4EsZ+2OOMa6suebQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOU5G9mU8CzWBN7deTF3tw53hHuAMB8GA1UdIwQY MBaAFIPpNeeKH5ZdEIkVIV0PBLdrcz5YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy1rMTU0b2ZsbDBRaVJVaFhROEV0MnR6UGxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNDIzYzctZmE3ZC00OWY4LWE2ZjMt MGE2N2YwMGZkZWRlLzEvZy1rMTU0b2ZsbDBRaVJVaFhROEV0MnR6UGxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9hNDIzYzctZmE3ZC00OWY4LWE2ZjMtMGE2N2YwMGZkZWRl LzEvZy1rMTU0b2ZsbDBRaVJVaFhROEV0MnR6UGxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDT47t7J 6xxHAPVZDjwmkrTapXQO4CQTahYtcIPDmu/VMwb+nJYoKDhEjirPKNcuMlaNBm0D iQXhdskZdVRtT7DsUX3oAmD48sJVbH5YddqdOWiwoRu/G9XUURKTFFaqHwiWOiCS kNgAHOkwgBEHVf5+puAhmnHoUPmpGVU+od6YipkWTM+Yi6abpZMGODGCewg24hqR UX6QI5Nz7KZLbWEbBz4CwZXDXHUDl1fa8yTxiPM9tywt9fFuvSUXuVr7N7jb/0BI C4WRERrnHMA7f+J1+VB1ENxs3sKuA/6a41H44eGIpYBd20HMJsaY8A29w/4Wr25u ZOQsEjbIXikI5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:26 2025 by rpki-client