This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft File: g4heOKx3ysBEgptTyzslq-Yen2Q.mft (raw, json) Hash identifier: J8CeXnsYYY7yJucV0qj5ny5CdNg5QEJ+nIpwSWz2DQU= Subject key identifier: BA:66:64:31:41:1E:36:AF:33:65:AD:03:EA:94:60:D5:1D:16:5A:C4 Authority key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64 Certificate issuer: /CN=83885e38ac77cac044829b53cb3b25abe61e9f64 Certificate serial: 019B3231C2A8CCDEF7D2622133462D7F7F52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft Manifest number: 0793 Signing time: Thu 18 Dec 2025 16:01:20 +0000 Manifest this update: Thu 18 Dec 2025 16:01:20 +0000 Manifest next update: Fri 19 Dec 2025 16:01:20 +0000 Files and hashes: 1: c8jr9RK1jYIIU9J_37XkvdpDKPQ.roa (hash: FypzDCTYnJOnd+60Jv/bTV7/TP6pt9nWegIKGFpscqo=) 2: g4heOKx3ysBEgptTyzslq-Yen2Q.crl (hash: 3bp+n1eFs5i5hMfuKjJMNsDVyUHWxJkyvSPtA1uqcGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:c2:a8:cc:de:f7:d2:62:21:33:46:2d:7f:7f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83885e38ac77cac044829b53cb3b25abe61e9f64 Validity Not Before: Dec 18 16:01:20 2025 GMT Not After : Dec 19 16:01:20 2025 GMT Subject: CN=ba666431411e36af3365ad03ea9460d51d165ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:83:dd:c5:4f:25:82:a2:ca:18:24:1c:79:e3: cf:3a:be:9d:0d:4e:34:f0:96:fd:0a:60:8e:d2:55: 3e:10:e7:9f:1f:3e:b6:22:17:d9:4d:e6:3e:c9:06: f9:01:bc:0f:5c:0a:7a:7c:50:96:4a:b4:a9:f1:f2: 24:96:1f:5c:0f:3b:c9:d7:be:cd:1a:e4:1a:bf:6e: d4:47:8b:47:eb:53:bd:a4:67:7a:ab:cf:02:c9:b1: 27:87:f9:84:59:d3:e1:dc:52:9d:f9:38:75:09:19: 80:a8:21:4e:5c:68:8d:41:d7:88:b2:a4:ea:84:da: 27:62:36:a3:6e:67:97:e4:6b:80:84:2e:c0:8c:4e: 52:94:71:93:52:6f:2d:06:63:de:d6:3e:cd:1a:1f: 1a:0c:52:73:d0:90:9d:8e:49:e3:06:0a:99:e7:c7: c9:26:db:43:cf:20:06:30:d9:46:38:8a:51:ba:1e: 95:97:15:8e:54:ae:dd:4e:8d:12:99:9a:60:8f:00: 1c:80:34:70:ab:25:ba:bd:78:c7:9e:4b:39:2f:5b: 8d:79:85:12:db:89:51:f3:e6:41:3b:43:b9:01:b2: 73:25:41:95:4d:0a:d2:a2:45:a1:64:ed:61:be:5d: 03:85:77:2b:d8:f7:32:15:5d:04:11:a3:c1:95:b3: c7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:66:64:31:41:1E:36:AF:33:65:AD:03:EA:94:60:D5:1D:16:5A:C4 X509v3 Authority Key Identifier: keyid:83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:c7:fd:91:70:a9:df:93:48:6c:6c:92:86:85:8c:39:90:b4: b7:f4:12:1b:a6:24:2b:49:e2:ff:2b:4d:c6:22:87:17:17:8e: 39:46:7c:7b:cb:3e:1f:03:39:e3:8a:25:e5:96:3a:7f:9d:14: 8e:cc:69:32:e9:5d:13:db:36:f5:07:37:8d:06:f2:07:1f:a6: 76:15:ab:ce:8c:e1:13:64:f7:bc:39:f1:a8:af:08:5c:8f:61: 87:34:fd:f4:9e:3c:b4:e0:1d:9e:ed:39:fb:95:b4:86:5f:1d: 77:17:cd:a7:27:d6:e1:a5:8f:e4:e7:84:c0:72:ec:1b:bb:36: e4:91:16:10:cf:9e:dd:a6:98:fe:7f:f0:49:71:ef:05:60:4f: 6f:b5:82:5c:0a:19:9d:80:8f:e4:12:ea:71:d4:1c:0d:5f:25: ab:86:3e:ae:d2:41:a9:8a:6d:6b:4d:4d:38:8e:ce:a2:92:cb: d2:2f:d9:21:8b:1d:de:fd:2c:05:68:98:7e:1c:8d:25:5f:e8: a0:fb:5e:f6:a3:69:33:56:3a:62:18:67:a8:0e:56:86:d2:49: b5:46:07:99:fb:8d:60:d5:b1:1a:7c:44:98:39:c7:dd:e1:a7: 3e:01:62:6b:ce:51:17:a6:e1:f0:59:58:9c:e1:d2:02:5c:47: 1b:80:47:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMcKozN730mIhM0Ytf39SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzODg1ZTM4YWM3N2NhYzA0NDgyOWI1M2NiM2IyNWFiZTYx ZTlmNjQwHhcNMjUxMjE4MTYwMTIwWhcNMjUxMjE5MTYwMTIwWjAzMTEwLwYDVQQD EyhiYTY2NjQzMTQxMWUzNmFmMzM2NWFkMDNlYTk0NjBkNTFkMTY1YWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYPdxU8lgqLKGCQceePPOr6dDU40 8Jb9CmCO0lU+EOefHz62IhfZTeY+yQb5AbwPXAp6fFCWSrSp8fIklh9cDzvJ177N GuQav27UR4tH61O9pGd6q88CybEnh/mEWdPh3FKd+Th1CRmAqCFOXGiNQdeIsqTq hNonYjajbmeX5GuAhC7AjE5SlHGTUm8tBmPe1j7NGh8aDFJz0JCdjknjBgqZ58fJ JttDzyAGMNlGOIpRuh6VlxWOVK7dTo0SmZpgjwAcgDRwqyW6vXjHnks5L1uNeYUS 24lR8+ZBO0O5AbJzJUGVTQrSokWhZO1hvl0DhXcr2PcyFV0EEaPBlbPHZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpmZDFBHjavM2WtA+qUYNUdFlrEMB8GA1UdIwQY MBaAFIOIXjisd8rARIKbU8s7JavmHp9kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80NjM2ODYtY2U0OC00ODdjLWJjM2Qt YTJmNTllYWU4NmQwLzEvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC80NjM2ODYtY2U0OC00ODdjLWJjM2QtYTJmNTllYWU4NmQw LzEvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsf9kXCp 35NIbGyShoWMOZC0t/QSG6YkK0ni/ytNxiKHFxeOOUZ8e8s+HwM544ol5ZY6f50U jsxpMuldE9s29Qc3jQbyBx+mdhWrzozhE2T3vDnxqK8IXI9hhzT99J48tOAdnu05 +5W0hl8ddxfNpyfW4aWP5OeEwHLsG7s25JEWEM+e3aaY/n/wSXHvBWBPb7WCXAoZ nYCP5BLqcdQcDV8lq4Y+rtJBqYpta01NOI7OopLL0i/ZIYsd3v0sBWiYfhyNJV/o oPte9qNpM1Y6YhhnqA5WhtJJtUYHmfuNYNWxGnxEmDnH3eGnPgFia85RF6bh8FlY nOHSAlxHG4BHIA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:31:04 2025 by rpki-client