This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft File: g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft (raw, json) Hash identifier: 9rhZnhUaoMlDzk/phCcoTcoVeddlo3KLwrb2BXkCelU= Subject key identifier: A1:DD:70:DC:6B:44:FF:AD:B6:87:C3:7D:2E:CE:F2:83:F2:86:2A:FA Authority key identifier: 83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE Certificate issuer: /CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be Certificate serial: 019AF12DF6AFB7475A789D8A6DCE2768EA28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft Manifest number: 0238 Signing time: Sat 06 Dec 2025 01:01:52 +0000 Manifest this update: Sat 06 Dec 2025 01:01:52 +0000 Manifest next update: Sun 07 Dec 2025 01:01:52 +0000 Files and hashes: 1: g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl (hash: E+3qJzi/B4xdiOhHEjb8/bJq2srNMehAwluKlPvJST4=) 2: msDEeS6sASlV5Nrug60HOmxHAjw.roa (hash: td9s2j9cTMVJ/N4A25CfBZ5lbq+TNEGFP43f11ycPe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f6:af:b7:47:5a:78:9d:8a:6d:ce:27:68:ea:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be Validity Not Before: Dec 6 01:01:52 2025 GMT Not After : Dec 7 01:01:52 2025 GMT Subject: CN=a1dd70dc6b44ffadb687c37d2ecef283f2862afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fc:3e:bb:8f:87:dc:a5:81:b5:34:ef:1c:7e: 5c:bc:9f:57:f5:25:89:bd:23:3d:da:51:48:49:32: b2:03:31:c6:5f:17:f3:79:78:bf:a3:4b:b1:e9:c4: 2c:8f:dd:04:2d:37:bb:75:37:07:89:52:d9:c2:98: 72:ea:10:0c:3a:d3:2b:92:17:f5:5d:0d:ec:7d:47: 12:91:78:13:48:43:ba:44:86:2f:1d:3f:05:44:ff: 03:ec:ce:d7:3a:ca:0b:4a:07:d6:90:94:23:79:cc: 65:47:6f:fa:a1:0f:ab:90:07:b1:fe:89:0a:8f:49: 84:80:5b:70:a7:66:16:e6:ca:40:84:cf:b6:86:0e: 3a:00:1a:15:8f:d0:07:c9:3e:73:dc:20:10:24:e3: 86:fb:be:c6:fe:5d:bc:f7:b2:2a:ed:a5:3b:2c:98: 6c:3c:d8:e1:3b:5b:dc:20:e3:63:ce:88:f0:f2:cd: 53:3d:39:0d:59:62:42:4d:cc:65:e2:7c:1d:aa:01: cf:4c:1e:a3:18:78:89:d9:4f:ee:b5:96:2f:fb:43: 98:1c:cd:bc:8b:36:21:f1:3a:82:2c:9b:50:fd:ba: 78:9d:61:25:d2:07:44:c6:af:3d:4d:c1:ad:4d:55: 20:f8:bb:26:ab:21:21:97:bb:1b:28:58:9e:a3:18: cb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DD:70:DC:6B:44:FF:AD:B6:87:C3:7D:2E:CE:F2:83:F2:86:2A:FA X509v3 Authority Key Identifier: keyid:83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f2:c9:b8:e5:15:d4:17:c0:fb:62:b0:c1:9d:7e:f5:b4:12: 2c:1c:fd:24:61:9c:66:08:8f:dc:14:d9:20:83:3d:51:94:c4: 23:51:51:ff:14:aa:aa:64:eb:06:b0:81:24:6e:8c:4e:d6:48: 89:f8:f1:aa:c0:03:71:a8:b8:2f:70:f9:f8:e8:52:16:28:e6: d0:c9:eb:9a:41:3d:66:88:af:bb:12:53:d1:84:13:4f:0a:a0: 35:9a:f5:7f:2a:00:70:64:d1:be:3b:0a:27:c4:12:bf:52:4f: d5:e0:37:48:ac:0f:3d:a2:86:60:ed:0d:74:d9:85:b0:d3:98: 9f:a6:67:a4:4f:0a:e8:6f:1c:eb:a3:1d:38:3c:fb:1e:f4:de: 00:89:6f:94:04:4f:f0:5c:3a:e1:0b:ae:99:4e:0a:27:11:41: d6:09:56:2e:5f:d9:cb:85:6a:68:80:9d:a5:87:28:65:e6:0c: 72:7a:59:c8:5a:0e:3c:23:f1:a4:57:ed:82:3b:04:f3:31:f5: bc:c6:4e:04:7c:52:3a:7e:d9:42:50:95:70:26:17:c2:82:ac: d2:21:1b:49:9b:07:9f:4d:df:8c:bc:ca:10:db:97:53:0b:de: 48:3e:d9:b5:d8:f1:ba:3d:2e:57:42:7f:a9:94:5e:85:cd:ce: 29:0d:81:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfavt0daeJ2Kbc4naOooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZGYwY2FjYjlmZDUwZTFiZTdkZmJmM2QwYWM4NTRiZWVk Nzg2YmUwHhcNMjUxMjA2MDEwMTUyWhcNMjUxMjA3MDEwMTUyWjAzMTEwLwYDVQQD EyhhMWRkNzBkYzZiNDRmZmFkYjY4N2MzN2QyZWNlZjI4M2YyODYyYWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufw+u4+H3KWBtTTvHH5cvJ9X9SWJ vSM92lFISTKyAzHGXxfzeXi/o0ux6cQsj90ELTe7dTcHiVLZwphy6hAMOtMrkhf1 XQ3sfUcSkXgTSEO6RIYvHT8FRP8D7M7XOsoLSgfWkJQjecxlR2/6oQ+rkAex/okK j0mEgFtwp2YW5spAhM+2hg46ABoVj9AHyT5z3CAQJOOG+77G/l2897Iq7aU7LJhs PNjhO1vcIONjzojw8s1TPTkNWWJCTcxl4nwdqgHPTB6jGHiJ2U/utZYv+0OYHM28 izYh8TqCLJtQ/bp4nWEl0gdExq89TcGtTVUg+LsmqyEhl7sbKFieoxjLTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHdcNxrRP+ttofDfS7O8oPyhir6MB8GA1UdIwQY MBaAFIPfDKy5/VDhvn3789CshUvu14a+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzk4TXJMbjlVT0ctZmZ2ejBLeUZTLTdYaHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hYTFjNTEtOTI2NC00MDZlLWI3OTYt NGUwMGMzYjcwODc4LzEvZzk4TXJMbjlVT0ctZmZ2ejBLeUZTLTdYaHI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hYTFjNTEtOTI2NC00MDZlLWI3OTYtNGUwMGMzYjcwODc4 LzEvZzk4TXJMbjlVT0ctZmZ2ejBLeUZTLTdYaHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPLJuOUV 1BfA+2KwwZ1+9bQSLBz9JGGcZgiP3BTZIIM9UZTEI1FR/xSqqmTrBrCBJG6MTtZI ifjxqsADcai4L3D5+OhSFijm0MnrmkE9ZoivuxJT0YQTTwqgNZr1fyoAcGTRvjsK J8QSv1JP1eA3SKwPPaKGYO0NdNmFsNOYn6ZnpE8K6G8c66MdODz7HvTeAIlvlARP 8Fw64QuumU4KJxFB1glWLl/Zy4VqaICdpYcoZeYMcnpZyFoOPCPxpFftgjsE8zH1 vMZOBHxSOn7ZQlCVcCYXwoKs0iEbSZsHn03fjLzKENuXUwveSD7Ztdjxuj0uV0J/ qZRehc3OKQ2Brw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:51 2025 by rpki-client