This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft File: g4fa4eZQhWzIVx5GLr2evrZccDg.mft (raw, json) Hash identifier: a2fM8N5WqD0Oa1j3hs5akocuadIB2ZIwBna75ILpxAc= Subject key identifier: 11:1C:AE:CB:60:81:21:B4:5B:51:57:3F:05:4D:DD:B9:B2:2F:6D:24 Authority key identifier: 83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38 Certificate issuer: /CN=8387dae1e650856cc8571e462ebd9ebeb65c7038 Certificate serial: 019B0E2562A2B9CEE0B0D5ED15AE3B08DB3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft Manifest number: 176D Signing time: Thu 11 Dec 2025 16:01:29 +0000 Manifest this update: Thu 11 Dec 2025 16:01:29 +0000 Manifest next update: Fri 12 Dec 2025 16:01:29 +0000 Files and hashes: 1: g4fa4eZQhWzIVx5GLr2evrZccDg.crl (hash: YFl6aEz1b32lqKO5qjUMSq0wf/dfQSH4sVxb1agAttk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:62:a2:b9:ce:e0:b0:d5:ed:15:ae:3b:08:db:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8387dae1e650856cc8571e462ebd9ebeb65c7038 Validity Not Before: Dec 11 16:01:29 2025 GMT Not After : Dec 12 16:01:29 2025 GMT Subject: CN=111caecb608121b45b51573f054dddb9b22f6d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:56:6e:42:5a:e0:79:d3:5e:a3:63:29:a8:bd: 3a:70:c4:e8:82:07:c3:2c:55:22:4a:6a:32:8b:4e: e4:46:e8:f5:3c:f2:62:58:7b:df:a6:71:92:6c:54: 8d:1d:0f:04:18:31:8a:ae:06:09:93:45:71:ee:03: 27:da:5c:07:34:07:3d:5a:0f:f3:5a:71:bc:f8:db: 4b:7d:16:bc:93:63:23:10:51:02:15:92:c2:c8:53: c4:aa:5c:01:cc:43:2a:f4:db:f0:c1:5d:b4:4d:3f: 85:51:bc:00:ca:bd:6f:54:23:05:e3:69:4d:23:4e: 9a:72:96:6f:10:fc:86:a2:53:52:91:dd:fa:12:26: 6f:87:50:41:73:06:7c:9e:76:37:5d:0f:a8:43:4b: b3:e3:40:0b:be:b8:eb:22:50:f3:d9:ac:5c:16:49: d1:b3:d2:20:44:3f:65:fa:ff:f5:ba:8a:ae:a1:5b: 25:42:1a:e9:1d:00:8b:4a:36:86:cb:a7:46:7d:83: 18:9d:43:88:67:54:b0:4e:c5:ff:13:19:31:b8:a4: e5:31:58:8a:f6:09:63:b8:26:0c:61:37:6d:05:28: e8:e6:c7:14:3f:d2:77:b5:34:9f:d4:22:fc:1a:ad: fe:d0:8c:7f:8a:44:48:0e:44:81:f9:bc:e3:89:22: eb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1C:AE:CB:60:81:21:B4:5B:51:57:3F:05:4D:DD:B9:B2:2F:6D:24 X509v3 Authority Key Identifier: keyid:83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:63:49:0f:d9:ce:6e:5c:95:86:eb:b7:57:bd:50:2e:3c:6c: 0c:77:22:7a:de:d9:28:37:b5:56:dc:94:a0:d2:1f:f1:fb:e6: 13:f1:f1:69:80:5c:0b:95:ab:6a:d6:3d:6f:b8:e5:c6:31:90: 5a:69:c0:51:71:34:25:b4:03:78:60:4c:5d:dd:eb:a2:41:1d: 27:a8:f8:c2:80:cf:26:10:57:03:4c:53:b5:f4:8c:47:88:4b: ce:af:b3:5b:a0:c0:4b:b5:ed:fb:56:de:e4:26:75:38:f8:a1: 28:19:3b:4c:41:bc:f0:1f:09:59:18:47:85:46:93:88:47:39: 39:88:a0:a0:b6:dc:d9:64:27:ab:b0:10:dc:36:42:00:82:91: a9:8d:ba:24:ff:a5:d1:11:2d:d8:44:6a:02:5a:f6:cd:d3:4c: 2f:1f:4d:45:a2:de:8b:d3:73:e9:86:b2:4c:84:61:05:5e:00: 80:2b:0e:31:9d:d3:c9:21:63:a5:d1:9a:c3:13:06:a7:fb:d2: b3:87:40:8f:42:e6:22:c2:34:4a:26:0c:b6:3f:6b:39:b3:df: b0:be:6d:7f:76:b1:52:12:70:d0:fe:9d:ef:6b:ca:22:10:83: 63:b2:ad:64:54:4a:a3:7a:18:0e:d3:19:83:fa:52:66:25:e9: c3:1e:53:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJWKiuc7gsNXtFa47CNs+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzODdkYWUxZTY1MDg1NmNjODU3MWU0NjJlYmQ5ZWJlYjY1 YzcwMzgwHhcNMjUxMjExMTYwMTI5WhcNMjUxMjEyMTYwMTI5WjAzMTEwLwYDVQQD EygxMTFjYWVjYjYwODEyMWI0NWI1MTU3M2YwNTRkZGRiOWIyMmY2ZDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVZuQlrgedNeo2MpqL06cMToggfD LFUiSmoyi07kRuj1PPJiWHvfpnGSbFSNHQ8EGDGKrgYJk0Vx7gMn2lwHNAc9Wg/z WnG8+NtLfRa8k2MjEFECFZLCyFPEqlwBzEMq9NvwwV20TT+FUbwAyr1vVCMF42lN I06acpZvEPyGolNSkd36EiZvh1BBcwZ8nnY3XQ+oQ0uz40ALvrjrIlDz2axcFknR s9IgRD9l+v/1uoquoVslQhrpHQCLSjaGy6dGfYMYnUOIZ1SwTsX/ExkxuKTlMViK 9gljuCYMYTdtBSjo5scUP9J3tTSf1CL8Gq3+0Ix/ikRIDkSB+bzjiSLrDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEcrstggSG0W1FXPwVN3bmyL20kMB8GA1UdIwQY MBaAFIOH2uHmUIVsyFceRi69nr62XHA4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzRmYTRlWlFoV3pJVng1R0xyMmV2clpjY0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mZjRiYmItNzg1ZC00NmI2LWIyOWYt MmI4NWY3MGEzNjY2LzEvZzRmYTRlWlFoV3pJVng1R0xyMmV2clpjY0RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mZjRiYmItNzg1ZC00NmI2LWIyOWYtMmI4NWY3MGEzNjY2 LzEvZzRmYTRlWlFoV3pJVng1R0xyMmV2clpjY0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWNJD9nO blyVhuu3V71QLjxsDHciet7ZKDe1VtyUoNIf8fvmE/HxaYBcC5WratY9b7jlxjGQ WmnAUXE0JbQDeGBMXd3rokEdJ6j4woDPJhBXA0xTtfSMR4hLzq+zW6DAS7Xt+1be 5CZ1OPihKBk7TEG88B8JWRhHhUaTiEc5OYigoLbc2WQnq7AQ3DZCAIKRqY26JP+l 0REt2ERqAlr2zdNMLx9NRaLei9Nz6YayTIRhBV4AgCsOMZ3TySFjpdGawxMGp/vS s4dAj0LmIsI0SiYMtj9rObPfsL5tf3axUhJw0P6d72vKIhCDY7KtZFRKo3oYDtMZ g/pSZiXpwx5TQQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:35:39 2025 by rpki-client