This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft File: g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft (raw, json) Hash identifier: Cu64K5QkYR3T0U0rWQFEmr0eKebBlXgaOOlPBu7sMIs= Subject key identifier: AC:10:FA:E8:67:05:54:62:A1:38:27:FD:DA:C2:0B:4F:C3:22:7F:99 Authority key identifier: 83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9 Certificate issuer: /CN=838c4f810d7a20a783a4fab1c034467b825051b9 Certificate serial: 019B262D7F464B20DD2ECE75628523D9959C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft Manifest number: 177B Signing time: Tue 16 Dec 2025 08:01:14 +0000 Manifest this update: Tue 16 Dec 2025 08:01:14 +0000 Manifest next update: Wed 17 Dec 2025 08:01:14 +0000 Files and hashes: 1: JRNBLXBQWgTuBg1-jZxrM7iYCuQ.roa (hash: A/80zWYF3RYk10mzwst52/4Qz1yzT35DfBM28lDeN+s=) 2: g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl (hash: bvZQvwpXwqQ9QXnqcZY3Fl/Z9UZemlIWZeLpHgL+qPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:7f:46:4b:20:dd:2e:ce:75:62:85:23:d9:95:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=838c4f810d7a20a783a4fab1c034467b825051b9 Validity Not Before: Dec 16 08:01:14 2025 GMT Not After : Dec 17 08:01:14 2025 GMT Subject: CN=ac10fae867055462a13827fddac20b4fc3227f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:02:3e:46:a6:b5:b8:63:97:ac:7c:5e:cf:3b: 16:f5:04:0c:a8:04:e6:7e:66:f3:dd:e4:2a:d8:07: 52:9b:c7:8d:b8:22:f9:d1:f3:4a:52:0b:46:a8:05: 21:f6:8c:fd:95:27:e1:a1:83:f7:54:7c:79:53:9b: 49:5b:2e:13:40:49:32:84:cf:a0:ae:fa:1f:96:5f: 0c:51:1c:6a:dd:9b:c8:e4:62:93:73:e9:48:b8:02: 66:73:6a:07:9a:e4:45:7a:50:62:b3:bb:99:08:bc: 11:e8:71:9c:6d:47:84:2a:cc:10:4a:50:83:49:ea: db:1b:ad:11:8a:52:82:d7:d4:bc:2e:60:63:4b:d6: 2c:72:99:69:56:86:14:59:91:25:fb:25:19:69:63: de:e3:27:df:da:ef:5e:7d:09:c3:01:e7:cb:9a:50: da:39:1e:39:99:bf:f2:9b:bb:8f:1a:fd:69:c6:0d: cf:5c:08:6d:eb:95:0e:b7:88:cd:00:60:c7:8a:18: 4e:43:59:bd:e1:63:0c:7f:9e:84:b6:b5:ee:f1:6b: ad:8c:12:fd:48:d1:cd:e2:4d:af:b8:2e:81:27:34: f2:27:f9:bc:35:7f:3b:93:13:e6:89:eb:4e:ae:87: ba:df:ca:ed:ac:29:00:a5:cf:30:cb:1f:e3:bc:3b: d2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:10:FA:E8:67:05:54:62:A1:38:27:FD:DA:C2:0B:4F:C3:22:7F:99 X509v3 Authority Key Identifier: keyid:83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c8:d9:a1:7f:a6:00:d8:46:f7:71:cd:10:b1:1a:0f:a8:ce: 84:86:a4:93:51:46:c9:eb:1d:ef:fa:2f:19:97:77:8e:b1:6d: 64:3c:4d:97:0e:37:a3:7a:b7:5b:54:8a:7f:51:bf:86:8b:9b: f5:70:5d:85:1e:e6:f7:f5:76:24:59:e9:e3:69:81:0a:07:e8: be:2a:5d:2e:84:78:b5:c7:97:63:39:e7:f0:41:87:50:60:e0: 53:ee:00:5d:18:18:7f:5f:5c:12:61:22:81:c7:52:df:a3:bc: 8a:6c:0f:47:5e:c4:89:46:d8:60:11:3d:8b:f4:16:31:10:25: 49:12:6d:08:65:98:94:bc:2f:87:1d:72:e3:a2:29:63:76:32: 9d:42:fa:29:d1:00:b3:ca:d9:6a:4a:6f:f1:44:2e:6b:60:c4: 5c:b6:40:54:71:82:c4:d8:54:fe:19:cd:6a:29:7f:89:b0:88: ad:73:bd:00:69:62:ae:df:fb:80:b2:bf:0f:7c:2d:72:16:62: bf:7e:3e:e0:ba:31:b0:8b:e3:42:90:f2:3b:ae:66:05:30:5a: 56:ff:e7:f5:6b:fd:b7:d1:a9:a7:ae:08:49:e8:7f:82:75:58: b4:72:81:c2:35:f8:50:2f:1a:73:5e:c3:62:49:96:66:e5:27: 5e:09:95:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLX9GSyDdLs51YoUj2ZWcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOGM0ZjgxMGQ3YTIwYTc4M2E0ZmFiMWMwMzQ0NjdiODI1 MDUxYjkwHhcNMjUxMjE2MDgwMTE0WhcNMjUxMjE3MDgwMTE0WjAzMTEwLwYDVQQD EyhhYzEwZmFlODY3MDU1NDYyYTEzODI3ZmRkYWMyMGI0ZmMzMjI3Zjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AI+Rqa1uGOXrHxezzsW9QQMqATm fmbz3eQq2AdSm8eNuCL50fNKUgtGqAUh9oz9lSfhoYP3VHx5U5tJWy4TQEkyhM+g rvofll8MURxq3ZvI5GKTc+lIuAJmc2oHmuRFelBis7uZCLwR6HGcbUeEKswQSlCD SerbG60RilKC19S8LmBjS9YscplpVoYUWZEl+yUZaWPe4yff2u9efQnDAefLmlDa OR45mb/ym7uPGv1pxg3PXAht65UOt4jNAGDHihhOQ1m94WMMf56EtrXu8WutjBL9 SNHN4k2vuC6BJzTyJ/m8NX87kxPmietOroe638rtrCkApc8wyx/jvDvSfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwQ+uhnBVRioTgn/drCC0/DIn+ZMB8GA1UdIwQY MBaAFIOMT4ENeiCng6T6scA0RnuCUFG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzR4UGdRMTZJS2VEcFBxeHdEUkdlNEpRVWJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yNTA0MjMtZmE5MS00YTIyLWI4M2Et ODNlNDc1ODBiM2VjLzEvZzR4UGdRMTZJS2VEcFBxeHdEUkdlNEpRVWJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8yNTA0MjMtZmE5MS00YTIyLWI4M2EtODNlNDc1ODBiM2Vj LzEvZzR4UGdRMTZJS2VEcFBxeHdEUkdlNEpRVWJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsjZoX+m ANhG93HNELEaD6jOhIakk1FGyesd7/ovGZd3jrFtZDxNlw43o3q3W1SKf1G/houb 9XBdhR7m9/V2JFnp42mBCgfovipdLoR4tceXYznn8EGHUGDgU+4AXRgYf19cEmEi gcdS36O8imwPR17EiUbYYBE9i/QWMRAlSRJtCGWYlLwvhx1y46IpY3YynUL6KdEA s8rZakpv8UQua2DEXLZAVHGCxNhU/hnNail/ibCIrXO9AGlirt/7gLK/D3wtchZi v34+4LoxsIvjQpDyO65mBTBaVv/n9Wv9t9Gpp64ISeh/gnVYtHKBwjX4UC8ac17D YkmWZuUnXgmVBg== -----END CERTIFICATE-----Generated at Tue Dec 16 10:37:57 2025 by rpki-client