This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json) Hash identifier: +UMfPEaVjR98aGFhn4EihZN7ZGnjOoEQYe0rgT4q4bY= Subject key identifier: 22:4E:73:BA:62:A4:15:C2:04:4A:51:C2:5B:F6:12:3E:E9:FE:99:38 Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61 Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461 Certificate serial: 019B10B843EF5CBEF21FBCFDB4BC3D5F3B59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft Manifest number: 0F80 Signing time: Fri 12 Dec 2025 04:01:09 +0000 Manifest this update: Fri 12 Dec 2025 04:01:09 +0000 Manifest next update: Sat 13 Dec 2025 04:01:09 +0000 Files and hashes: 1: V6KVY7G6GgYfsN-YsqV35GGJJzk.roa (hash: eItdy8LiVFAx1foSIby+xCbrZCjTXV9gcCfQg6telps=) 2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: sZvz4JGvtC+jiJUZ1Pdx1C8rmg/BJyifX6K3Nc2rQ78=) 3: nSZCrrugGYgpV2kpSk3jqr2LzfM.roa (hash: dkF/IyzVuAY00yNMBcnlRNr+PlCabKVgpyDEF61J7y4=) 4: va7G1Etlo6KFOzv3RXEcOofD7SM.roa (hash: rBy+ju7usynwUPKEj3xmeZHIvCFI48Q0Gca4wzYHCUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:43:ef:5c:be:f2:1f:bc:fd:b4:bc:3d:5f:3b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461 Validity Not Before: Dec 12 04:01:09 2025 GMT Not After : Dec 13 04:01:09 2025 GMT Subject: CN=224e73ba62a415c2044a51c25bf6123ee9fe9938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:01:17:2a:de:b7:65:dd:06:3e:1c:12:b4:b6: af:78:1b:54:b4:2e:fd:75:2e:50:67:57:10:0b:04: 9a:b7:66:10:d6:43:79:0e:d6:f7:d2:ba:7e:69:83: 18:9b:75:f3:49:f6:90:95:83:02:72:f9:fe:a9:6b: 9a:bd:7b:86:d1:cc:66:5e:ba:24:72:31:28:cc:7f: 59:b9:35:4d:bd:d0:55:d4:ff:fa:7c:19:ea:c2:58: 26:c9:15:66:ed:d6:93:ef:0d:c4:cf:cd:b8:cf:c1: 41:d8:2b:b8:bf:05:a3:c1:1c:e5:bd:5a:2e:00:c8: dc:5c:96:4a:37:b2:02:bc:2c:89:be:f9:fb:4d:fa: 4c:59:04:7a:3a:c1:17:0e:ea:f2:70:8b:4c:b6:92: 1a:66:a9:9f:4d:d1:6d:4f:58:a5:f2:16:3b:82:76: a5:c3:d7:dc:11:b2:8e:92:ce:5f:40:02:99:91:b2: 4b:9c:55:bd:05:02:3a:5a:20:56:7b:42:4d:d0:83: 94:93:43:f1:c0:d1:91:2b:b8:c8:18:c8:90:b1:2b: 70:05:c5:c0:f7:1d:a3:c9:5f:36:16:37:d3:0c:4e: 83:8d:72:fc:d0:46:39:be:c2:d0:96:5a:e4:0a:63: 4c:0e:45:af:0e:6f:41:7f:e2:93:8c:cd:d3:df:21: ce:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4E:73:BA:62:A4:15:C2:04:4A:51:C2:5B:F6:12:3E:E9:FE:99:38 X509v3 Authority Key Identifier: keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2a:a5:6c:25:0a:e6:0e:48:dc:98:e9:95:53:b6:5a:30:1f: fe:63:e4:42:63:8d:d6:69:4b:02:6b:a2:ac:6c:26:13:88:4e: d7:54:f3:90:11:b9:34:95:6a:74:c7:58:c6:b0:1c:8b:d8:61: a0:4d:3c:de:ff:bf:ac:dd:be:62:d6:5e:83:cb:98:0e:29:0e: 11:02:02:69:f4:ed:0c:73:ed:33:23:c4:b9:ba:16:08:2c:9b: 29:97:95:55:52:7b:1a:3c:51:02:2d:11:be:bd:2b:be:24:28: d0:2e:3d:d1:d9:31:e9:61:f9:58:91:62:cc:0a:1d:c7:5e:da: e8:d3:59:af:5c:4a:0e:50:ce:7f:c2:20:9d:7f:a8:ca:61:b7: 51:b6:4b:5a:da:23:64:24:e9:00:b7:b9:fc:94:69:d4:b9:f0: 45:8a:c7:ed:72:73:34:c0:e1:72:73:aa:f6:30:4d:df:06:2b: 12:66:08:1f:23:89:6e:59:7a:b3:8c:f6:d2:81:bb:4d:51:37: c0:1a:57:a9:4d:fe:76:68:42:8a:2b:35:d3:1e:4f:f2:5f:04: b1:f5:3e:04:85:28:39:97:78:fa:d2:9f:40:7e:c3:ce:c1:9a: 47:1d:9a:7f:33:6e:95:98:7e:5f:3e:97:1c:15:b4:90:2d:3a: e8:9f:91:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuEPvXL7yH7z9tLw9XztZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzODdjMjE5Yzk4NDFlYmFmYWEzZDQwODA2Yzk4NGY5ZjNl NGU0NjEwHhcNMjUxMjEyMDQwMTA5WhcNMjUxMjEzMDQwMTA5WjAzMTEwLwYDVQQD EygyMjRlNzNiYTYyYTQxNWMyMDQ0YTUxYzI1YmY2MTIzZWU5ZmU5OTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgEXKt63Zd0GPhwStLaveBtUtC79 dS5QZ1cQCwSat2YQ1kN5Dtb30rp+aYMYm3XzSfaQlYMCcvn+qWuavXuG0cxmXrok cjEozH9ZuTVNvdBV1P/6fBnqwlgmyRVm7daT7w3Ez824z8FB2Cu4vwWjwRzlvVou AMjcXJZKN7ICvCyJvvn7TfpMWQR6OsEXDurycItMtpIaZqmfTdFtT1il8hY7gnal w9fcEbKOks5fQAKZkbJLnFW9BQI6WiBWe0JN0IOUk0PxwNGRK7jIGMiQsStwBcXA 9x2jyV82FjfTDE6DjXL80EY5vsLQllrkCmNMDkWvDm9Bf+KTjM3T3yHOmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJOc7pipBXCBEpRwlv2Ej7p/pk4MB8GA1UdIwQY MBaAFIOHwhnJhB66+qPUCAbJhPnz5ORhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMt YmM5MWMwNjcwZDAzLzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMtYmM5MWMwNjcwZDAz LzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCqlbCUK 5g5I3JjplVO2WjAf/mPkQmON1mlLAmuirGwmE4hO11TzkBG5NJVqdMdYxrAci9hh oE083v+/rN2+YtZeg8uYDikOEQICafTtDHPtMyPEuboWCCybKZeVVVJ7GjxRAi0R vr0rviQo0C490dkx6WH5WJFizAodx17a6NNZr1xKDlDOf8IgnX+oymG3UbZLWtoj ZCTpALe5/JRp1LnwRYrH7XJzNMDhcnOq9jBN3wYrEmYIHyOJbll6s4z20oG7TVE3 wBpXqU3+dmhCiis10x5P8l8EsfU+BIUoOZd4+tKfQH7DzsGaRx2afzNulZh+Xz6X HBW0kC066J+RVA== -----END CERTIFICATE-----Generated at Fri Dec 12 08:00:03 2025 by rpki-client