This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft File: g9Nuy69V5GTgCzmH2lJktq8tz4g.mft (raw, json) Hash identifier: 7X6Po7qMXACi8LGFc1T44qChZf7+Bs1fG1i0e7Ab1xM= Subject key identifier: DD:F3:1F:2B:46:86:7C:34:D3:17:BD:84:A4:B9:1B:64:D8:68:CE:E5 Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88 Certificate issuer: /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88 Certificate serial: 019AF208F65AD52ABCCB8B6060884981F32C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft Manifest number: 0C4E Signing time: Sat 06 Dec 2025 05:01:04 +0000 Manifest this update: Sat 06 Dec 2025 05:01:04 +0000 Manifest next update: Sun 07 Dec 2025 05:01:04 +0000 Files and hashes: 1: Ep6x42DXRSqizolUteEfvKxUcLA.roa (hash: R7QtcNnXyeV8OJfFTG/3xT0jdYWPM+BRX6IIEmRZyXk=) 2: g9Nuy69V5GTgCzmH2lJktq8tz4g.crl (hash: kQ/V8lp8Mrvbir/92fTZlDcVoszOXHgrNLY8eyXBdwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f6:5a:d5:2a:bc:cb:8b:60:60:88:49:81:f3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88 Validity Not Before: Dec 6 05:01:04 2025 GMT Not After : Dec 7 05:01:04 2025 GMT Subject: CN=ddf31f2b46867c34d317bd84a4b91b64d868cee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c6:06:c0:31:06:99:cb:71:38:c2:28:8c:42: 67:94:6b:f0:43:38:c1:1e:89:0a:b5:8a:c6:67:7f: 21:4e:d6:75:bf:ec:e0:01:28:49:65:06:56:f2:dd: 87:40:df:b0:56:cb:de:5a:f6:c6:bc:c2:a2:17:e0: 35:24:17:b6:f4:55:3c:7a:e0:93:6f:c2:7b:51:06: 95:c9:bc:01:cf:b8:b0:75:80:49:a7:6f:60:b6:53: a3:9d:0d:ee:bd:9a:35:12:57:16:51:48:5a:b6:8c: a8:4d:0c:fb:64:87:d9:7e:74:eb:f2:35:2b:20:ce: 3b:a3:db:fa:fd:66:a9:a7:c1:4e:0d:0c:d0:55:f1: 48:24:c3:75:e5:45:d4:24:4a:a6:9c:ea:bb:37:98: 5f:47:e1:dc:13:2d:40:53:f1:cb:43:55:a5:b9:ba: ed:40:59:31:8e:39:bc:38:6c:c5:b1:36:a7:81:eb: 80:92:ac:91:bf:1b:f7:3e:f6:09:26:f4:bd:6f:ba: 52:cf:52:2c:c3:a7:e2:b2:3c:74:28:d5:16:76:f6: ea:93:47:1a:dd:89:92:5e:f8:a5:6f:0b:0b:27:66: d9:e3:6b:6e:f4:fb:63:71:18:a4:b5:96:e1:04:a6: b4:3e:1f:bc:0c:0d:29:c3:b1:d8:25:b4:19:3b:69: 4a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F3:1F:2B:46:86:7C:34:D3:17:BD:84:A4:B9:1B:64:D8:68:CE:E5 X509v3 Authority Key Identifier: keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a0:8f:c9:30:b2:08:f5:b6:3f:53:af:cf:03:10:ec:de:3b: 33:82:f3:eb:68:12:11:02:3a:22:6d:86:8e:0b:bc:e4:a9:91: 2b:66:d2:04:5d:a1:c4:34:4b:82:19:2f:ff:b0:98:06:f3:6b: 87:7e:80:c3:a3:d1:33:53:42:f7:f7:b9:74:c1:a2:9c:6f:2f: 9d:d1:6d:6e:a1:46:ec:6e:00:5a:8a:8e:4d:17:51:4c:d6:df: cc:80:50:53:c0:bc:60:08:7d:cf:6f:86:36:3b:16:91:57:80: 74:f2:99:67:d5:da:b5:62:19:d9:3e:59:ac:0d:97:c4:01:fb: 4f:fe:9d:7c:48:ee:e2:b7:f1:6c:b4:8c:b0:7a:15:40:2f:83: d8:9f:92:e4:8e:21:df:d7:8a:fe:08:8e:42:a0:08:e2:f8:57: 75:ea:c2:5c:18:3b:da:ac:22:80:bf:0a:f1:53:06:97:e2:ed: ed:c5:7d:19:60:b7:ba:9a:36:1e:43:bc:af:93:22:91:13:de: 90:98:d6:8a:e1:bd:d5:2b:ab:07:d2:64:56:81:8b:4b:96:7d: a0:ef:b0:b1:a8:f4:12:59:9c:da:59:ce:2d:b2:b0:ba:9d:73: 86:af:16:0c:95:55:78:52:b1:44:5d:ac:91:b6:ae:fd:62:21: 34:d6:04:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPZa1Sq8y4tgYIhJgfMsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZDM2ZWNiYWY1NWU0NjRlMDBiMzk4N2RhNTI2NGI2YWYy ZGNmODgwHhcNMjUxMjA2MDUwMTA0WhcNMjUxMjA3MDUwMTA0WjAzMTEwLwYDVQQD EyhkZGYzMWYyYjQ2ODY3YzM0ZDMxN2JkODRhNGI5MWI2NGQ4NjhjZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicYGwDEGmctxOMIojEJnlGvwQzjB HokKtYrGZ38hTtZ1v+zgAShJZQZW8t2HQN+wVsveWvbGvMKiF+A1JBe29FU8euCT b8J7UQaVybwBz7iwdYBJp29gtlOjnQ3uvZo1ElcWUUhatoyoTQz7ZIfZfnTr8jUr IM47o9v6/Wapp8FODQzQVfFIJMN15UXUJEqmnOq7N5hfR+HcEy1AU/HLQ1Wlubrt QFkxjjm8OGzFsTangeuAkqyRvxv3PvYJJvS9b7pSz1Isw6fisjx0KNUWdvbqk0ca 3YmSXvilbwsLJ2bZ42tu9PtjcRiktZbhBKa0Ph+8DA0pw7HYJbQZO2lK4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3zHytGhnw00xe9hKS5G2TYaM7lMB8GA1UdIwQY MBaAFIPTbsuvVeRk4As5h9pSZLavLc+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMmJlZjAtNzU2MS00MzdiLTk0OTAt OTY1MzFkMTYzMzFiLzEvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8xMmJlZjAtNzU2MS00MzdiLTk0OTAtOTY1MzFkMTYzMzFi LzEvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqCPyTCy CPW2P1OvzwMQ7N47M4Lz62gSEQI6Im2Gjgu85KmRK2bSBF2hxDRLghkv/7CYBvNr h36Aw6PRM1NC9/e5dMGinG8vndFtbqFG7G4AWoqOTRdRTNbfzIBQU8C8YAh9z2+G NjsWkVeAdPKZZ9XatWIZ2T5ZrA2XxAH7T/6dfEju4rfxbLSMsHoVQC+D2J+S5I4h 39eK/giOQqAI4vhXderCXBg72qwigL8K8VMGl+Lt7cV9GWC3upo2HkO8r5MikRPe kJjWiuG91SurB9JkVoGLS5Z9oO+wsaj0Elmc2lnOLbKwup1zhq8WDJVVeFKxRF2s kbau/WIhNNYEKw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:44 2025 by rpki-client