This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft File: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json) Hash identifier: LZ8lxouQVSKqT+eWDeSxyKgnFJu878ARmHI+Y3RTVFY= Subject key identifier: 08:2C:67:80:6A:1A:17:0F:5F:48:5A:F1:98:77:81:62:DA:B2:BA:BC Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84 Certificate issuer: /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684 Certificate serial: 019B2BF8F9DAB917AFFEB4B82751ACD6E243 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft Manifest number: 0685 Signing time: Wed 17 Dec 2025 11:01:35 +0000 Manifest this update: Wed 17 Dec 2025 11:01:35 +0000 Manifest next update: Thu 18 Dec 2025 11:01:35 +0000 Files and hashes: 1: ey_HbPVH-fdSqz0HYztvUA0UE4I.roa (hash: upy8JLus6gUmjxLyY05s4dKH4rsD9BpLxwpFWnLAb38=) 2: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: sdJ6UmfdgxJ5R/BXYUbWoheLaBSNU4g5N8vuNm2HFvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:f9:da:b9:17:af:fe:b4:b8:27:51:ac:d6:e2:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684 Validity Not Before: Dec 17 11:01:35 2025 GMT Not After : Dec 18 11:01:35 2025 GMT Subject: CN=082c67806a1a170f5f485af198778162dab2babc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:af:2b:1d:ff:55:e7:1a:1e:fe:1f:9f:c8:41: c1:fa:70:57:85:08:30:03:a4:d1:df:97:86:72:5c: 04:2c:97:08:0b:a4:25:23:e5:f5:98:d4:b6:e3:5c: 41:2a:ea:63:b9:ae:76:e2:3c:de:da:48:d8:8b:45: ec:3d:eb:7c:a0:6e:4a:83:a7:63:29:5e:6e:7b:44: 04:d9:1d:75:68:ce:a1:6a:86:39:15:ea:63:6e:51: ff:44:8f:81:de:6b:9f:f3:19:0b:c7:6c:12:42:6b: 94:13:8d:5b:a5:73:31:1a:41:f6:90:0f:eb:76:85: 01:78:4b:10:24:13:08:e0:1d:f3:a3:3e:0d:03:8c: de:bf:27:19:c6:ba:62:61:5d:f9:8b:34:41:d3:02: 0d:24:e1:b1:c4:b4:7d:b5:07:3f:ba:7d:f6:07:d6: e6:36:31:14:87:86:0c:3d:ea:61:04:11:5c:b9:5d: c0:c2:81:dc:e2:b2:98:d6:4c:6a:94:af:41:5c:0a: 3a:ac:8b:8c:e4:59:7a:af:e9:74:67:47:ff:13:8b: cd:f6:e4:66:ae:fe:68:22:c1:5b:93:6a:b1:1f:db: e1:47:bd:a8:bf:bb:19:14:fe:46:a0:13:1e:04:24: 73:29:d8:db:9a:84:20:b0:0d:64:79:24:41:47:0c: d1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2C:67:80:6A:1A:17:0F:5F:48:5A:F1:98:77:81:62:DA:B2:BA:BC X509v3 Authority Key Identifier: keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:33:5d:0b:8d:58:1e:a7:17:c6:98:05:26:b2:78:bd:44:33: dc:a4:a8:48:e9:18:78:7b:f1:31:bf:d9:e4:59:51:05:65:04: 2f:7e:39:89:c3:0e:a8:5c:74:f5:c1:be:65:11:9e:b4:6a:e8: 14:4f:ae:8d:64:34:8c:26:f0:f9:d6:2a:f8:bb:a1:1b:22:cf: 5f:86:c1:7f:cc:76:4f:ef:be:52:62:f8:40:8a:d7:13:a0:a9: 65:4d:44:29:e9:92:48:d6:95:e0:ed:af:97:75:09:02:f6:78: 75:76:b9:56:41:4f:d2:92:cf:b1:82:d5:dd:f8:1f:68:9b:ec: 3d:95:76:3a:60:fe:df:5f:22:59:a1:f2:b5:c5:fd:15:86:23: 09:a8:26:2c:62:92:bd:9e:ce:50:8f:98:e5:2b:d0:4d:86:65: 5c:2c:09:6a:7f:06:39:4d:72:89:8a:af:b9:bc:82:25:0e:51: a6:d3:f9:28:a8:9d:6b:37:97:ba:87:19:28:ef:21:e4:e0:1a: 08:43:2d:4b:85:0f:ab:df:d5:24:fe:a5:95:e1:77:93:ca:fd: 70:74:96:c2:4f:2c:6c:2e:87:a7:df:2c:96:b7:15:bb:db:f7: 5c:9d:e0:06:4e:98:4b:a1:c0:16:ee:c6:ed:ed:73:e1:1f:ee: 79:b0:c7:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+PnauRev/rS4J1Gs1uJDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYjViNDkxM2NjNzhlNDA4MDNjMDBiZWM2YjFhOWRjNDhm ZjM2ODQwHhcNMjUxMjE3MTEwMTM1WhcNMjUxMjE4MTEwMTM1WjAzMTEwLwYDVQQD EygwODJjNjc4MDZhMWExNzBmNWY0ODVhZjE5ODc3ODE2MmRhYjJiYWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna8rHf9V5xoe/h+fyEHB+nBXhQgw A6TR35eGclwELJcIC6QlI+X1mNS241xBKupjua524jze2kjYi0XsPet8oG5Kg6dj KV5ue0QE2R11aM6haoY5FepjblH/RI+B3muf8xkLx2wSQmuUE41bpXMxGkH2kA/r doUBeEsQJBMI4B3zoz4NA4zevycZxrpiYV35izRB0wINJOGxxLR9tQc/un32B9bm NjEUh4YMPephBBFcuV3AwoHc4rKY1kxqlK9BXAo6rIuM5Fl6r+l0Z0f/E4vN9uRm rv5oIsFbk2qxH9vhR72ov7sZFP5GoBMeBCRzKdjbmoQgsA1keSRBRwzRvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgsZ4BqGhcPX0ha8Zh3gWLasrq8MB8GA1UdIwQY MBaAFIO1tJE8x45AgDwAvsaxqdxI/zaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kYzU3M2QtYTNkYi00MWY5LThjM2Yt ODY3OTY1ZWI1MGNhLzEvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9kYzU3M2QtYTNkYi00MWY5LThjM2YtODY3OTY1ZWI1MGNh LzEvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjNdC41Y HqcXxpgFJrJ4vUQz3KSoSOkYeHvxMb/Z5FlRBWUEL345icMOqFx09cG+ZRGetGro FE+ujWQ0jCbw+dYq+LuhGyLPX4bBf8x2T+++UmL4QIrXE6CpZU1EKemSSNaV4O2v l3UJAvZ4dXa5VkFP0pLPsYLV3fgfaJvsPZV2OmD+318iWaHytcX9FYYjCagmLGKS vZ7OUI+Y5SvQTYZlXCwJan8GOU1yiYqvubyCJQ5RptP5KKidazeXuocZKO8h5OAa CEMtS4UPq9/VJP6lleF3k8r9cHSWwk8sbC6Hp98slrcVu9v3XJ3gBk6YS6HAFu7G 7e1z4R/uebDHnw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:39:36 2025 by rpki-client