This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft File: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json) Hash identifier: uHww4V5iPNRZVDFY2G2aYGUMtON8pZrIDivoSOQ2fDQ= Subject key identifier: 5C:0A:F7:5A:18:15:5A:A3:A5:6A:3D:0D:43:84:E0:CF:CB:83:C9:1E Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84 Certificate issuer: /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684 Certificate serial: 019AF2093B73F2E4D8C4C500A0068EFBFB48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft Manifest number: 0667 Signing time: Sat 06 Dec 2025 05:01:22 +0000 Manifest this update: Sat 06 Dec 2025 05:01:22 +0000 Manifest next update: Sun 07 Dec 2025 05:01:22 +0000 Files and hashes: 1: ey_HbPVH-fdSqz0HYztvUA0UE4I.roa (hash: upy8JLus6gUmjxLyY05s4dKH4rsD9BpLxwpFWnLAb38=) 2: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: EOPStDE/Qk10ZohDyH7djsEm8kPKm0zHt/fptYaDl30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3b:73:f2:e4:d8:c4:c5:00:a0:06:8e:fb:fb:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684 Validity Not Before: Dec 6 05:01:22 2025 GMT Not After : Dec 7 05:01:22 2025 GMT Subject: CN=5c0af75a18155aa3a56a3d0d4384e0cfcb83c91e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4c:ad:26:26:2d:83:40:14:32:31:19:bb:36: 6d:b7:c4:93:d8:bc:67:e4:92:2b:25:ea:aa:69:28: cb:c0:b6:6d:30:a0:09:8d:be:4f:9a:16:e2:df:c7: 73:62:e1:b9:c1:5e:3a:66:11:a1:c3:0b:4c:d0:3a: 53:2c:ae:31:80:4e:33:0e:f4:6d:9c:c2:4c:db:9c: 29:65:c3:91:d1:dc:1c:bc:be:c6:de:e8:e5:10:25: f0:fd:71:30:f5:07:65:b7:86:c5:82:ba:72:d1:aa: 50:58:f8:c1:07:12:33:84:30:6f:9c:1f:50:b7:18: fe:9e:c7:03:38:12:5d:f3:55:df:be:f7:9e:28:f2: 03:0d:12:85:b2:9b:51:a3:e7:82:c3:67:3e:6c:c9: 7a:8a:4c:6a:70:58:1d:d2:7f:99:18:b0:b1:8c:b0: 70:ab:9f:0b:a3:b7:76:c1:f9:f6:f3:28:b1:a8:cd: d7:db:ba:7c:84:1a:9d:54:04:b2:e2:a3:92:af:57: 27:97:2f:65:2d:57:32:07:63:d4:1d:b4:24:8a:87: e3:50:aa:21:f5:47:59:19:66:97:0b:e6:e6:94:66: fe:ab:6e:de:30:64:02:11:c4:23:18:d5:62:dc:b1: d3:5a:1a:f3:e9:1c:ad:6b:c3:0f:25:6e:e0:f2:ca: 09:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0A:F7:5A:18:15:5A:A3:A5:6A:3D:0D:43:84:E0:CF:CB:83:C9:1E X509v3 Authority Key Identifier: keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:b0:fd:c7:d3:11:94:e2:44:b1:ba:1f:bc:b3:78:32:87:26: 00:d6:c7:09:cd:e9:db:b2:60:03:45:2b:2f:61:8e:3a:3d:b2: 3c:94:54:4d:51:7f:df:0f:ac:e2:f3:4f:57:0a:6d:fa:f7:09: 9c:ef:ec:92:64:17:f6:99:f3:05:91:d1:07:b1:13:4e:34:af: e1:ee:a3:19:13:99:87:78:33:e6:48:e1:34:f8:32:a6:29:05: cb:3d:0a:3c:11:f2:89:04:c1:85:71:d8:01:c7:af:37:7b:d6: 64:9f:6d:6a:06:97:5a:ee:db:a4:a8:5d:74:27:22:c9:1e:99: 62:b7:3e:6e:ef:60:c6:a0:5a:b7:16:eb:b5:d2:e0:39:64:28: f0:25:f2:fe:55:65:10:2f:ae:07:b9:42:3b:66:34:6c:d6:7f: 39:d1:69:87:b4:eb:18:d5:ea:84:d4:de:44:8e:9b:f8:d9:e4: dd:c1:29:13:ee:db:10:d1:66:68:89:3f:88:6d:7c:4d:9d:a8: 0b:27:16:70:47:2b:0b:87:01:f5:38:aa:c7:e5:11:b2:e7:a6: c5:b4:6b:19:a5:38:e6:2e:5c:62:3d:27:06:c6:18:c1:6e:2f: b7:4a:7e:c6:52:a5:18:18:da:74:0c:09:fd:17:5e:e8:25:6f: 65:8a:06:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTtz8uTYxMUAoAaO+/tIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYjViNDkxM2NjNzhlNDA4MDNjMDBiZWM2YjFhOWRjNDhm ZjM2ODQwHhcNMjUxMjA2MDUwMTIyWhcNMjUxMjA3MDUwMTIyWjAzMTEwLwYDVQQD Eyg1YzBhZjc1YTE4MTU1YWEzYTU2YTNkMGQ0Mzg0ZTBjZmNiODNjOTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUytJiYtg0AUMjEZuzZtt8ST2Lxn 5JIrJeqqaSjLwLZtMKAJjb5Pmhbi38dzYuG5wV46ZhGhwwtM0DpTLK4xgE4zDvRt nMJM25wpZcOR0dwcvL7G3ujlECXw/XEw9Qdlt4bFgrpy0apQWPjBBxIzhDBvnB9Q txj+nscDOBJd81XfvveeKPIDDRKFsptRo+eCw2c+bMl6ikxqcFgd0n+ZGLCxjLBw q58Lo7d2wfn28yixqM3X27p8hBqdVASy4qOSr1cnly9lLVcyB2PUHbQkiofjUKoh 9UdZGWaXC+bmlGb+q27eMGQCEcQjGNVi3LHTWhrz6Ryta8MPJW7g8soJswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwK91oYFVqjpWo9DUOE4M/Lg8keMB8GA1UdIwQY MBaAFIO1tJE8x45AgDwAvsaxqdxI/zaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kYzU3M2QtYTNkYi00MWY5LThjM2Yt ODY3OTY1ZWI1MGNhLzEvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9kYzU3M2QtYTNkYi00MWY5LThjM2YtODY3OTY1ZWI1MGNh LzEvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrD9x9MR lOJEsbofvLN4MocmANbHCc3p27JgA0UrL2GOOj2yPJRUTVF/3w+s4vNPVwpt+vcJ nO/skmQX9pnzBZHRB7ETTjSv4e6jGROZh3gz5kjhNPgypikFyz0KPBHyiQTBhXHY AcevN3vWZJ9tagaXWu7bpKhddCciyR6ZYrc+bu9gxqBatxbrtdLgOWQo8CXy/lVl EC+uB7lCO2Y0bNZ/OdFph7TrGNXqhNTeRI6b+Nnk3cEpE+7bENFmaIk/iG18TZ2o CycWcEcrC4cB9Tiqx+URsuemxbRrGaU45i5cYj0nBsYYwW4vt0p+xlKlGBjadAwJ /Rde6CVvZYoGUw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:33 2025 by rpki-client