This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft File: G04-M_1PbZy08TyiI3HjCzbPp3Y.mft (raw, json) Hash identifier: kb8WXg96Z5YtgswqvlkD9zh8Lw1Pd6AnLLXKXL75G1k= Subject key identifier: 9B:38:C6:E0:9B:04:A8:CA:8B:EB:66:49:79:1C:7B:1A:5A:E3:E7:35 Authority key identifier: 1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76 Certificate issuer: /CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776 Certificate serial: 019B59E424982FA799A0102D2662AF57CA70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft Manifest number: 1793 Signing time: Fri 26 Dec 2025 09:01:22 +0000 Manifest this update: Fri 26 Dec 2025 09:01:22 +0000 Manifest next update: Sat 27 Dec 2025 09:01:22 +0000 Files and hashes: 1: G04-M_1PbZy08TyiI3HjCzbPp3Y.crl (hash: qgcCBTJafqTGMAQgHiu7ekxdfk9aamwggt9O8dI24dI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:24:98:2f:a7:99:a0:10:2d:26:62:af:57:ca:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776 Validity Not Before: Dec 26 09:01:22 2025 GMT Not After : Dec 27 09:01:22 2025 GMT Subject: CN=9b38c6e09b04a8ca8beb6649791c7b1a5ae3e735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fd:b0:b9:75:d9:49:42:55:f5:c8:d0:35:14: 56:13:11:56:e3:bb:ef:db:41:86:97:9f:0e:bd:90: f7:22:a3:eb:4f:77:3a:ab:43:4e:5d:64:64:ae:e1: 06:1b:c5:f2:ac:af:13:85:56:fd:f4:fe:7f:9c:a0: 31:91:db:75:80:fe:6b:91:b6:d0:48:96:37:11:58: 4b:49:03:ae:cf:27:a9:b5:a7:55:ba:72:33:73:f5: a6:f6:8c:14:5b:ec:d1:48:c1:5f:8f:c9:e5:57:98: 39:f3:bc:50:42:69:42:09:2e:b9:bb:e6:78:63:ce: a1:be:50:6b:c5:b5:d0:40:f8:37:ce:f3:22:be:87: f4:3c:3e:80:bc:68:21:06:83:43:b3:b3:13:1a:89: 70:08:0c:fe:98:02:01:e8:8d:e6:cf:87:8f:26:e7: 68:ef:5f:08:90:3b:02:a1:3f:02:c4:99:6f:9a:92: c4:33:8a:49:b3:5e:9a:59:eb:ad:48:a5:f8:e5:9e: d8:a8:38:ba:50:95:18:7c:6d:db:3a:0a:f5:3b:b8: 70:97:4f:e4:40:e4:21:d5:a2:d9:cb:76:e1:28:33: 6a:83:a9:00:d0:bd:82:aa:85:c6:f6:94:57:eb:60: 1a:e2:e5:2a:e8:f4:a9:db:96:d7:c5:6f:e5:12:b3: 2b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:38:C6:E0:9B:04:A8:CA:8B:EB:66:49:79:1C:7B:1A:5A:E3:E7:35 X509v3 Authority Key Identifier: keyid:1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:69:51:99:93:b6:bd:fb:e6:0c:f7:6c:76:c8:54:9c:41:73: 7b:16:77:1b:11:24:d2:0b:ca:06:c0:72:05:ef:03:8b:27:3e: 61:10:64:e7:ce:b8:cc:c1:79:87:fd:3a:43:42:4c:b1:16:c4: e6:c8:21:1b:12:08:c7:75:54:41:6b:35:f8:80:da:ca:52:06: 7b:07:13:93:a7:66:80:73:4a:5d:fb:c1:e1:e2:8b:25:7d:82: d6:fa:9f:19:ab:4e:c9:fa:27:1e:a5:9f:8c:95:60:5d:5f:ba: 61:0f:0c:ba:9b:ce:3e:85:72:bf:86:9e:7e:b4:6b:00:23:ba: 0b:4c:39:2d:37:ec:24:3e:4f:e8:f1:ed:e3:36:de:24:bc:cc: 0d:64:51:73:f8:54:3a:97:22:45:dd:1f:7d:69:4d:ec:ea:ea: 05:76:72:96:5d:73:c2:47:b7:c6:cf:65:33:c3:2e:57:77:3c: bb:e8:75:f2:e2:23:69:43:3e:44:1d:60:d1:70:9b:fa:44:97: 96:13:56:d9:ef:d0:f4:1b:85:05:43:90:51:9d:9d:38:c4:66: 92:19:30:44:45:70:8b:00:87:91:b6:20:07:f2:50:7d:17:e0: 4f:aa:69:da:5a:ea:ba:5a:2e:12:75:97:e4:6b:33:a2:2b:75: 5c:b9:c1:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5CSYL6eZoBAtJmKvV8pwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNGUzZTMzZmQ0ZjZkOWNiNGYxM2NhMjIzNzFlMzBiMzZj ZmE3NzYwHhcNMjUxMjI2MDkwMTIyWhcNMjUxMjI3MDkwMTIyWjAzMTEwLwYDVQQD Eyg5YjM4YzZlMDliMDRhOGNhOGJlYjY2NDk3OTFjN2IxYTVhZTNlNzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf2wuXXZSUJV9cjQNRRWExFW47vv 20GGl58OvZD3IqPrT3c6q0NOXWRkruEGG8XyrK8ThVb99P5/nKAxkdt1gP5rkbbQ SJY3EVhLSQOuzyeptadVunIzc/Wm9owUW+zRSMFfj8nlV5g587xQQmlCCS65u+Z4 Y86hvlBrxbXQQPg3zvMivof0PD6AvGghBoNDs7MTGolwCAz+mAIB6I3mz4ePJudo 718IkDsCoT8CxJlvmpLEM4pJs16aWeutSKX45Z7YqDi6UJUYfG3bOgr1O7hwl0/k QOQh1aLZy3bhKDNqg6kA0L2CqoXG9pRX62Aa4uUq6PSp25bXxW/lErMrcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJs4xuCbBKjKi+tmSXkcexpa4+c1MB8GA1UdIwQY MBaAFBtOPjP9T22ctPE8oiNx4ws2z6d2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzA0LU1fMVBiWnkwOFR5aUkzSGpDemJQcDNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jOGE0MDQtNWU3Ni00ZWY0LWJiMDct MDI2YzI2YjVkMzk1LzEvRzA0LU1fMVBiWnkwOFR5aUkzSGpDemJQcDNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jOGE0MDQtNWU3Ni00ZWY0LWJiMDctMDI2YzI2YjVkMzk1 LzEvRzA0LU1fMVBiWnkwOFR5aUkzSGpDemJQcDNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmlRmZO2 vfvmDPdsdshUnEFzexZ3GxEk0gvKBsByBe8Diyc+YRBk5864zMF5h/06Q0JMsRbE 5sghGxIIx3VUQWs1+IDaylIGewcTk6dmgHNKXfvB4eKLJX2C1vqfGatOyfonHqWf jJVgXV+6YQ8MupvOPoVyv4aefrRrACO6C0w5LTfsJD5P6PHt4zbeJLzMDWRRc/hU OpciRd0ffWlN7OrqBXZyll1zwke3xs9lM8MuV3c8u+h18uIjaUM+RB1g0XCb+kSX lhNW2e/Q9BuFBUOQUZ2dOMRmkhkwREVwiwCHkbYgB/JQfRfgT6pp2lrqulouEnWX 5Gszoit1XLnBSA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:56 2025 by rpki-client