This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft File: 4GyK0oU47eC0x-GnHpypianwPxA.mft (raw, json) Hash identifier: K2IKtedZyhbIIJlSu7QF0h8EqpEuc2Hu+mwgzU5GMiM= Subject key identifier: 08:74:82:43:52:8D:77:93:04:14:F5:7F:1F:1D:CE:7E:CA:82:0A:79 Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10 Certificate issuer: /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10 Certificate serial: 019B2287630BEDF354FA42D31B425E25CEF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft Manifest number: 08A7 Signing time: Mon 15 Dec 2025 15:00:56 +0000 Manifest this update: Mon 15 Dec 2025 15:00:56 +0000 Manifest next update: Tue 16 Dec 2025 15:00:56 +0000 Files and hashes: 1: 4GyK0oU47eC0x-GnHpypianwPxA.crl (hash: T35FH7MO//KwcX7iiOrow+9iN7xmIPm623HK7HH03zo=) 2: Y17oOJ4cy2XAOGSF7cV-mvshqNg.roa (hash: WzuVM00RV4G9sz/56LZ6o+LxunxTuItSjJs5x2gRuZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:63:0b:ed:f3:54:fa:42:d3:1b:42:5e:25:ce:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10 Validity Not Before: Dec 15 15:00:56 2025 GMT Not After : Dec 16 15:00:56 2025 GMT Subject: CN=08748243528d77930414f57f1f1dce7eca820a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:5b:06:3b:9f:07:ff:3a:69:b7:46:f0:db:aa: 8e:b1:93:89:6d:a6:75:a9:f2:fa:25:00:25:bc:c9: fb:06:17:d5:07:52:cd:08:ff:0b:e2:ad:d1:e9:f0: 9d:95:bd:9a:83:e2:ca:e5:39:c7:29:7a:3d:44:f0: 12:16:66:f7:f9:71:34:8e:8a:b8:af:c0:6b:14:bc: e2:67:0e:aa:19:a0:59:14:23:b1:ac:a9:bb:80:85: bd:30:be:e6:be:e8:fc:8f:35:af:87:5b:2e:88:6f: 56:11:42:33:d3:06:1b:77:8f:99:87:22:3c:fe:82: eb:34:7f:6f:b3:f4:11:5d:1f:28:b2:a0:49:5a:7c: 4f:35:0d:be:4e:6b:e7:37:d9:79:34:97:0c:1c:44: 95:a2:43:5f:81:72:3d:5d:c7:d1:7b:2d:47:5a:a7: 51:a2:12:11:7d:89:36:e1:6f:e9:47:c8:f9:4d:63: 15:fa:84:69:94:ac:a4:23:21:c7:c1:4c:e1:e4:3e: 80:b1:33:01:84:42:65:88:18:a3:38:79:6e:21:6f: 0e:0b:4b:e0:0e:65:bf:95:0c:29:a2:f4:de:bc:85: 4b:c8:69:df:d1:ca:b8:71:a2:cd:36:7a:f0:50:c0: 2c:0d:71:9f:85:20:4b:18:56:a8:ac:39:c2:bc:2e: ef:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:74:82:43:52:8D:77:93:04:14:F5:7F:1F:1D:CE:7E:CA:82:0A:79 X509v3 Authority Key Identifier: keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:b0:d8:1e:b8:fa:f3:43:0a:1e:46:6d:48:2a:31:e7:a3:36: 21:76:b1:2f:16:0b:1f:52:33:5e:01:a6:94:12:c8:83:50:74: bc:05:77:1e:21:6c:bf:3d:b7:4a:75:f5:79:06:ab:20:40:27: c2:6e:23:99:6f:20:9d:8d:a5:30:2a:65:b9:29:90:4d:ed:a0: 9c:3f:92:61:99:87:4b:58:cb:92:3c:1d:11:3d:92:ba:50:9e: 68:a7:e0:7e:60:df:45:41:5a:f0:0d:6d:c7:65:ab:c3:0d:93: 7c:be:99:12:33:f8:92:e7:fb:b7:a2:b4:ea:f8:86:5d:72:1f: 49:4b:d3:ca:d4:35:9e:c5:9c:6a:f8:b3:d3:19:e4:ac:7f:02: 7e:99:72:be:43:59:5e:7a:12:d3:84:5c:0a:fc:b4:40:1b:8d: 11:ca:c2:59:f6:74:50:50:d8:c6:57:e9:ff:d3:7a:0f:83:bc: ed:9c:36:27:3d:04:ee:06:94:3c:96:a0:31:91:d5:4a:2e:12: 4f:28:b5:fe:3e:b6:27:92:50:2f:57:6a:e5:81:10:b2:3a:a8: a4:9f:c4:8d:d2:6e:a0:ed:93:64:44:62:c7:74:0f:ed:cc:9f: 02:2b:c2:62:8a:df:ad:6e:c1:17:b0:e1:4b:eb:0b:78:6d:ca: c4:49:94:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih2ML7fNU+kLTG0JeJc75MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNmM4YWQyODUzOGVkZTBiNGM3ZTFhNzFlOWNhOTg5YTlm MDNmMTAwHhcNMjUxMjE1MTUwMDU2WhcNMjUxMjE2MTUwMDU2WjAzMTEwLwYDVQQD EygwODc0ODI0MzUyOGQ3NzkzMDQxNGY1N2YxZjFkY2U3ZWNhODIwYTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+FsGO58H/zppt0bw26qOsZOJbaZ1 qfL6JQAlvMn7BhfVB1LNCP8L4q3R6fCdlb2ag+LK5TnHKXo9RPASFmb3+XE0joq4 r8BrFLziZw6qGaBZFCOxrKm7gIW9ML7mvuj8jzWvh1suiG9WEUIz0wYbd4+ZhyI8 /oLrNH9vs/QRXR8osqBJWnxPNQ2+TmvnN9l5NJcMHESVokNfgXI9XcfRey1HWqdR ohIRfYk24W/pR8j5TWMV+oRplKykIyHHwUzh5D6AsTMBhEJliBijOHluIW8OC0vg DmW/lQwpovTevIVLyGnf0cq4caLNNnrwUMAsDXGfhSBLGFaorDnCvC7vHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAh0gkNSjXeTBBT1fx8dzn7Kggp5MB8GA1UdIwQY MBaAFOBsitKFOO3gtMfhpx6cqYmp8D8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEd5SzBvVTQ3ZUMweC1HbkhweXBpYW53UHhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDAwNmYtNTY3MC00MmE2LTg1YTkt MzFiMmM2NjZiMmRjLzEvNEd5SzBvVTQ3ZUMweC1HbkhweXBpYW53UHhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9mMDAwNmYtNTY3MC00MmE2LTg1YTktMzFiMmM2NjZiMmRj LzEvNEd5SzBvVTQ3ZUMweC1HbkhweXBpYW53UHhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs7DYHrj6 80MKHkZtSCox56M2IXaxLxYLH1IzXgGmlBLIg1B0vAV3HiFsvz23SnX1eQarIEAn wm4jmW8gnY2lMCpluSmQTe2gnD+SYZmHS1jLkjwdET2SulCeaKfgfmDfRUFa8A1t x2Wrww2TfL6ZEjP4kuf7t6K06viGXXIfSUvTytQ1nsWcaviz0xnkrH8CfplyvkNZ XnoS04RcCvy0QBuNEcrCWfZ0UFDYxlfp/9N6D4O87Zw2Jz0E7gaUPJagMZHVSi4S Tyi1/j62J5JQL1dq5YEQsjqopJ/EjdJuoO2TZERix3QP7cyfAivCYorfrW7BF7Dh S+sLeG3KxEmUwg== -----END CERTIFICATE-----Generated at Mon Dec 15 23:32:47 2025 by rpki-client