This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft File: g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json) Hash identifier: sxREiLweJefCe1Cc1tua5rq7xjvh4rwjMfLH4WrefqE= Subject key identifier: 38:80:3C:47:AF:95:9D:55:B9:C6:78:DB:CB:9B:91:66:12:CF:38:52 Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61 Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561 Certificate serial: 019AF08857DFF8F6CBCDCF322676999BC117 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft Manifest number: 0DCF Signing time: Fri 05 Dec 2025 22:00:58 +0000 Manifest this update: Fri 05 Dec 2025 22:00:58 +0000 Manifest next update: Sat 06 Dec 2025 22:00:58 +0000 Files and hashes: 1: 1-eVtiZIJZtejkcxnJZbMOuqtkvM.roa (hash: /dozujzBruht/lOgqwCLtQNFBrpieolWDy5kZ5Mel3s=) 2: 56FwlKZ7KIhARLPC6HlmmMABBnU.roa (hash: Z+1GZvGlxeBEP1crVQ4oVXjpJKgbOm4WDdf1clBCOOM=) 3: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: mih/3/RPMVR6ywlcHxOmgCD/ejYsAqmSKkG1C1B21pM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:57:df:f8:f6:cb:cd:cf:32:26:76:99:9b:c1:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561 Validity Not Before: Dec 5 22:00:58 2025 GMT Not After : Dec 6 22:00:58 2025 GMT Subject: CN=38803c47af959d55b9c678dbcb9b916612cf3852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:79:28:9e:4f:9b:ca:9e:ed:d4:15:47:81:55: 93:3b:3b:56:f7:ca:66:cc:66:85:b4:30:ea:64:1b: fe:94:8a:5a:bc:5e:3b:b3:86:4b:8c:69:8e:d8:de: 6c:f8:3c:66:41:39:76:b5:93:0d:98:d7:de:ad:05: e5:11:7d:33:32:76:fb:15:c4:92:39:b3:cf:38:5d: 8d:c1:a1:fd:58:fb:30:36:6c:e5:91:c3:5b:b2:5f: 8a:60:06:69:90:9d:57:59:07:2f:22:bc:4a:0b:61: 7a:7f:6d:17:95:14:82:48:c1:eb:b2:38:2c:1c:2c: 03:bb:c8:a9:00:a8:bf:d2:fe:e8:d0:f6:50:5c:df: 73:6a:ed:e1:91:35:f1:b8:47:f1:03:f6:3e:95:c6: 87:bf:65:5c:80:7b:8c:ca:65:6b:96:70:4c:0e:c4: 9d:86:43:31:fb:d5:06:82:97:da:3c:61:7d:9d:ee: 40:08:cf:23:7e:09:e8:49:a5:8f:d1:14:5f:33:1f: fe:88:db:05:28:df:7b:48:93:0c:1c:87:95:59:63: 82:0f:8e:44:d4:c8:6b:0d:2b:fb:f1:52:18:e4:9f: be:dd:22:42:29:2b:ab:f5:80:ca:78:c9:51:31:ac: af:a2:c5:f6:98:77:3b:6e:6d:87:05:83:41:4a:0e: ca:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:80:3C:47:AF:95:9D:55:B9:C6:78:DB:CB:9B:91:66:12:CF:38:52 X509v3 Authority Key Identifier: keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ad:20:93:8e:29:21:9d:e6:23:31:b5:70:f1:d2:d9:5a:2f: a5:2a:b5:50:24:2d:08:62:2c:d8:09:c5:21:5c:a4:de:54:0b: 65:0d:35:e4:d0:94:05:bd:dc:90:f1:e0:df:26:3e:5f:25:0c: 1f:48:60:1c:3a:a9:5c:54:84:80:eb:20:f8:f7:e6:fd:e2:cd: 9b:14:54:fd:1b:6f:27:ee:f2:ed:e1:43:aa:25:7a:eb:a6:2b: 5d:67:f7:73:82:d4:f8:23:ed:b5:e0:41:e7:b8:47:a1:55:5a: d4:81:37:ed:b1:14:f4:20:cc:0d:92:1a:69:90:4c:c4:6a:ad: 07:30:7b:ca:5f:76:fd:91:6a:eb:97:8d:45:8a:87:01:73:61: 94:92:a4:51:98:54:aa:ab:6a:6c:a2:ae:6f:6e:49:e7:f9:d5: e9:40:48:ab:d9:56:24:5c:c4:78:a1:f3:a0:3a:5d:43:f6:57: 78:15:5c:18:a8:0c:35:96:d9:91:bd:93:e8:98:a4:7e:54:50: 78:2b:03:cd:18:7e:09:f6:fb:c4:4e:26:99:a5:c0:2b:70:92: 74:58:5d:16:77:10:13:3b:b4:1c:ba:46:ff:9d:92:3a:c1:57: ca:32:69:98:c9:c8:5f:e7:34:9b:2e:44:ed:cd:44:84:72:a7: 2c:66:3c:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiFff+PbLzc8yJnaZm8EXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZTVkOTAzMDFkM2NmNjdiODhmZWU0MmRkNTQ1YWZjZjE0 ZWE1NjEwHhcNMjUxMjA1MjIwMDU4WhcNMjUxMjA2MjIwMDU4WjAzMTEwLwYDVQQD EygzODgwM2M0N2FmOTU5ZDU1YjljNjc4ZGJjYjliOTE2NjEyY2YzODUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnkonk+byp7t1BVHgVWTOztW98pm zGaFtDDqZBv+lIpavF47s4ZLjGmO2N5s+DxmQTl2tZMNmNferQXlEX0zMnb7FcSS ObPPOF2NwaH9WPswNmzlkcNbsl+KYAZpkJ1XWQcvIrxKC2F6f20XlRSCSMHrsjgs HCwDu8ipAKi/0v7o0PZQXN9zau3hkTXxuEfxA/Y+lcaHv2VcgHuMymVrlnBMDsSd hkMx+9UGgpfaPGF9ne5ACM8jfgnoSaWP0RRfMx/+iNsFKN97SJMMHIeVWWOCD45E 1MhrDSv78VIY5J++3SJCKSur9YDKeMlRMayvosX2mHc7bm2HBYNBSg7KxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDiAPEevlZ1VucZ428ubkWYSzzhSMB8GA1UdIwQY MBaAFIPl2QMB089nuI/uQt1UWvzxTqVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2It NzgyYjgyZWJjYWFlLzEvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2ItNzgyYjgyZWJjYWFl LzEvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASa0gk44p IZ3mIzG1cPHS2VovpSq1UCQtCGIs2AnFIVyk3lQLZQ015NCUBb3ckPHg3yY+XyUM H0hgHDqpXFSEgOsg+Pfm/eLNmxRU/RtvJ+7y7eFDqiV666YrXWf3c4LU+CPtteBB 57hHoVVa1IE37bEU9CDMDZIaaZBMxGqtBzB7yl92/ZFq65eNRYqHAXNhlJKkUZhU qqtqbKKub25J5/nV6UBIq9lWJFzEeKHzoDpdQ/ZXeBVcGKgMNZbZkb2T6JikflRQ eCsDzRh+Cfb7xE4mmaXAK3CSdFhdFncQEzu0HLpG/52SOsFXyjJpmMnIX+c0my5E 7c1EhHKnLGY8rg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:15 2025 by rpki-client