This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft File: 04m0GNo0qjk07N4rcx3x1O1-yA4.mft (raw, json) Hash identifier: ijcoK5RICuLQvFknnG1lmXs02r8iCB1VaR4wkl21XqA= Subject key identifier: AF:1F:06:47:BE:9A:4B:2F:E4:C2:45:89:72:D9:DA:06:C5:18:DF:CA Authority key identifier: D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E Certificate issuer: /CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e Certificate serial: 019B18A8E4CDCE2C8B6E097E1C6694090CC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft Manifest number: 1487 Signing time: Sat 13 Dec 2025 17:01:20 +0000 Manifest this update: Sat 13 Dec 2025 17:01:20 +0000 Manifest next update: Sun 14 Dec 2025 17:01:20 +0000 Files and hashes: 1: 04m0GNo0qjk07N4rcx3x1O1-yA4.crl (hash: 4BEBrVOAZEUFFJ+9QKH2EKjBxUi5YkyE9wTodCamevc=) 2: cWwT1szK5NdnVm06LjbXvG6eYg4.roa (hash: W4zwG2oQXcpZIEG+6MYSyZ5G6TI/ulbfB+7HQbWQK/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:e4:cd:ce:2c:8b:6e:09:7e:1c:66:94:09:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e Validity Not Before: Dec 13 17:01:20 2025 GMT Not After : Dec 14 17:01:20 2025 GMT Subject: CN=af1f0647be9a4b2fe4c2458972d9da06c518dfca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ed:02:31:71:8a:91:ba:9f:d6:f0:01:c6:21: a2:51:ef:85:38:cc:4b:6b:77:85:cc:e9:f2:aa:a3: dc:f3:fe:e1:fa:10:39:d4:fd:7c:e6:f4:9e:a4:25: 29:b0:c8:a3:31:87:e1:8c:84:5c:0c:1e:b3:fb:41: 07:7b:c2:c5:f1:f7:b6:3c:60:fd:95:48:f5:34:05: 2c:c0:1c:3c:92:0e:f7:e3:0d:b3:4b:82:bc:52:1f: 3b:be:43:87:13:08:c1:2d:0c:5e:80:d8:10:d4:2d: 34:2c:2e:44:d2:de:8d:65:54:a8:61:84:98:00:80: ab:a0:82:d6:8d:9a:72:1a:fc:6e:65:58:a2:1d:5e: 49:fd:ef:81:2a:74:da:c9:83:7e:9b:83:6c:6b:8c: ef:63:c5:a3:7a:5a:4a:cd:ca:61:99:03:bf:10:59: bb:fd:65:e9:5d:61:7f:2c:fd:44:f7:2a:ef:cf:70: ea:de:d4:f7:9d:0b:b1:64:66:53:d7:17:e0:55:da: 32:b5:ed:a2:e4:71:3d:dc:12:9d:1f:29:35:20:72: aa:3a:94:62:c0:f2:54:8b:b2:fd:3e:70:db:f8:18: f7:c4:4c:7f:3d:70:24:c6:c9:ea:cc:71:c2:b9:2a: c3:7c:dd:aa:a3:0e:fc:30:8e:e4:8c:b4:f8:bd:3a: da:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1F:06:47:BE:9A:4B:2F:E4:C2:45:89:72:D9:DA:06:C5:18:DF:CA X509v3 Authority Key Identifier: keyid:D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:64:fd:3d:6b:e5:d7:68:ba:0a:c5:8e:09:70:d8:9d:9f:a7: cf:0a:d6:8b:f9:46:1c:ef:7d:7c:11:66:76:e1:b6:64:55:27: ee:d3:da:10:1b:d0:45:c7:3e:d3:e8:6c:94:99:48:4d:f1:da: 00:f9:8c:2e:3d:2f:01:fa:ce:a9:f5:c6:e1:b4:d5:6c:fa:a5: d2:0f:76:d8:d2:e0:e6:44:8a:6c:77:13:c5:93:5e:fc:49:a5: 0f:3e:4a:22:a0:68:bc:26:3d:f9:53:9e:dd:76:1c:bd:cd:0f: c2:44:0d:ab:79:40:f0:ed:c0:9b:b2:da:72:e5:30:8b:01:75: a4:56:77:a0:76:db:bb:c8:52:2b:65:a7:49:73:42:7c:cb:97: 58:3d:b5:a6:aa:9e:0c:7e:38:a8:b8:65:12:96:01:2d:6f:ba: 20:9d:db:35:9f:ff:ce:ea:7f:df:08:50:35:f8:3d:03:aa:e0: 76:eb:03:cb:1e:ad:f0:7b:4b:7d:b4:e0:4a:bf:24:ca:14:d9: ef:d4:49:6c:63:80:6c:32:2c:13:dc:09:a7:29:2a:2a:92:14: ab:10:2c:80:a2:5b:c1:c2:e4:36:ee:a3:a9:31:a6:88:c1:d7: 8e:72:df:ee:81:68:ee:68:e2:ab:64:78:83:e9:7b:bd:31:10: 13:cc:53:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqOTNziyLbgl+HGaUCQzAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzODliNDE4ZGEzNGFhMzkzNGVjZGUyYjczMWRmMWQ0ZWQ3 ZWM4MGUwHhcNMjUxMjEzMTcwMTIwWhcNMjUxMjE0MTcwMTIwWjAzMTEwLwYDVQQD EyhhZjFmMDY0N2JlOWE0YjJmZTRjMjQ1ODk3MmQ5ZGEwNmM1MThkZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+0CMXGKkbqf1vABxiGiUe+FOMxL a3eFzOnyqqPc8/7h+hA51P185vSepCUpsMijMYfhjIRcDB6z+0EHe8LF8fe2PGD9 lUj1NAUswBw8kg734w2zS4K8Uh87vkOHEwjBLQxegNgQ1C00LC5E0t6NZVSoYYSY AICroILWjZpyGvxuZViiHV5J/e+BKnTayYN+m4Nsa4zvY8WjelpKzcphmQO/EFm7 /WXpXWF/LP1E9yrvz3Dq3tT3nQuxZGZT1xfgVdoyte2i5HE93BKdHyk1IHKqOpRi wPJUi7L9PnDb+Bj3xEx/PXAkxsnqzHHCuSrDfN2qow78MI7kjLT4vTra9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8fBke+mksv5MJFiXLZ2gbFGN/KMB8GA1UdIwQY MBaAFNOJtBjaNKo5NOzeK3Md8dTtfsgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDRtMEdObzBxamswN040cmN4M3gxTzEteUE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kNDcxNjMtODBlYS00NDRhLWE3OWYt MDNhYTI5YjZhNzZhLzEvMDRtMEdObzBxamswN040cmN4M3gxTzEteUE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kNDcxNjMtODBlYS00NDRhLWE3OWYtMDNhYTI5YjZhNzZh LzEvMDRtMEdObzBxamswN040cmN4M3gxTzEteUE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuGT9PWvl 12i6CsWOCXDYnZ+nzwrWi/lGHO99fBFmduG2ZFUn7tPaEBvQRcc+0+hslJlITfHa APmMLj0vAfrOqfXG4bTVbPql0g922NLg5kSKbHcTxZNe/EmlDz5KIqBovCY9+VOe 3XYcvc0PwkQNq3lA8O3Am7LacuUwiwF1pFZ3oHbbu8hSK2WnSXNCfMuXWD21pqqe DH44qLhlEpYBLW+6IJ3bNZ//zup/3whQNfg9A6rgdusDyx6t8HtLfbTgSr8kyhTZ 79RJbGOAbDIsE9wJpykqKpIUqxAsgKJbwcLkNu6jqTGmiMHXjnLf7oFo7mjiq2R4 g+l7vTEQE8xTLA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:12:44 2025 by rpki-client