This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft File: P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft (raw, json) Hash identifier: y2n5yT8GnONQlURPW8pTULA51lt2w13VP/TznNDi4uM= Subject key identifier: 3C:AD:AE:9F:9B:B1:CE:AD:82:14:AD:7D:7C:E7:67:23:40:B7:2F:D5 Authority key identifier: 3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF Certificate issuer: /CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf Certificate serial: 019B59AC7A7A475304630021B9480FEDD2C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 08:00:34 +0000 Manifest this update: Fri 26 Dec 2025 08:00:34 +0000 Manifest next update: Sat 27 Dec 2025 08:00:34 +0000 Files and hashes: 1: P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl (hash: crIBzNRuOXcrQRUVYup4NASQ+i+V3rEOObLwJAKLZ2k=) 2: xxFhvD1_C6pipJEBTKl033yHEF0.roa (hash: wMvUINT+XWfdQDveaENdYgbkPPqi3fpmXNh+RaQEiM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:7a:7a:47:53:04:63:00:21:b9:48:0f:ed:d2:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf Validity Not Before: Dec 26 08:00:34 2025 GMT Not After : Dec 27 08:00:34 2025 GMT Subject: CN=3cadae9f9bb1cead8214ad7d7ce7672340b72fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2f:40:8e:6e:eb:f3:36:0f:0d:87:90:0b:91: 16:22:5a:5b:97:dc:b3:81:f1:60:c5:a9:f0:ba:fd: 15:80:23:5c:81:db:5a:e7:a6:73:5c:c7:ff:ed:40: da:60:63:22:ab:72:e6:76:d0:d4:ba:9e:1c:f8:ee: aa:8e:8d:80:4c:dc:50:b8:63:5a:55:c5:6f:ad:f6: 68:80:da:51:81:87:1f:61:03:d7:78:f7:d9:96:31: 3a:aa:ac:31:2c:54:e9:ae:70:73:31:4c:d1:de:37: 38:54:77:2c:56:1a:d6:5c:e4:1a:e4:a4:79:c2:2e: 3f:41:2a:0a:62:4b:a7:4f:41:7b:58:29:9a:0d:dc: 3a:a5:2b:18:98:91:9d:00:80:89:e1:67:33:46:61: 4c:a8:50:cc:cf:f6:0d:32:c4:4f:60:44:1c:43:0b: 74:4b:b0:6e:b6:cf:d3:07:c1:93:06:1b:17:a4:73: df:84:8d:35:5f:0d:ac:a8:be:d2:6e:e7:ec:45:a3: 23:ce:f4:66:83:2c:1a:8d:fc:c8:06:c3:b4:0e:40: d6:5a:b5:d8:68:47:50:b0:a1:d9:22:77:0a:ce:4d: fe:3d:7f:c4:22:76:dd:03:d4:78:af:19:45:e2:9e: 09:95:7b:44:be:35:b4:76:3b:3b:6f:1c:51:f5:8f: 1f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AD:AE:9F:9B:B1:CE:AD:82:14:AD:7D:7C:E7:67:23:40:B7:2F:D5 X509v3 Authority Key Identifier: keyid:3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e6:e2:86:57:a9:b1:51:db:89:66:51:bf:c7:1e:33:0c:5c: f9:62:5c:88:34:a5:a5:12:a9:94:e7:d9:6a:7d:95:7d:3b:3b: 3d:bd:78:86:dc:f5:b1:45:b5:74:2a:f4:04:8f:a9:0b:f0:26: 2a:c3:3d:60:46:2f:dc:cd:77:ff:34:bd:f2:33:2e:28:b7:26: d8:bc:ef:64:ee:f1:34:58:43:30:f8:1f:bf:1d:17:e3:24:5c: 56:dd:ec:d9:9b:96:26:a6:2e:3f:d0:bd:41:cf:5c:cd:4f:50: 63:d3:1f:d8:06:47:07:23:7a:b9:70:6a:82:06:ff:a2:bb:16: 62:2b:e0:bd:5a:51:73:3f:01:36:71:11:a6:77:a8:8b:f2:b8: 0c:a5:8c:fa:32:fc:1d:6c:65:0c:77:37:01:f7:00:76:fa:71: 52:2b:70:54:73:92:bd:f1:c3:49:c1:42:31:ed:5c:96:00:8e: 8c:a3:3e:2e:06:18:41:69:9f:e9:7a:65:39:a7:db:c7:ad:21: 48:04:ae:4b:4d:fc:ac:78:43:fe:ef:80:d5:3f:22:ff:c6:05: 02:32:2c:5b:f7:e9:a3:7f:5c:64:66:d9:18:6f:7a:91:d6:f6: 72:5c:c7:51:d2:6c:a7:c8:3a:66:04:f1:53:80:65:c0:2f:54: 0e:c7:9b:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrHp6R1MEYwAhuUgP7dLCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmODFhOGU4Yzc1YjU4ZjdkMWVmZDRjM2U2NTIyZDI3ODYz ZjljY2YwHhcNMjUxMjI2MDgwMDM0WhcNMjUxMjI3MDgwMDM0WjAzMTEwLwYDVQQD EygzY2FkYWU5ZjliYjFjZWFkODIxNGFkN2Q3Y2U3NjcyMzQwYjcyZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS9Ajm7r8zYPDYeQC5EWIlpbl9yz gfFgxanwuv0VgCNcgdta56ZzXMf/7UDaYGMiq3LmdtDUup4c+O6qjo2ATNxQuGNa VcVvrfZogNpRgYcfYQPXePfZljE6qqwxLFTprnBzMUzR3jc4VHcsVhrWXOQa5KR5 wi4/QSoKYkunT0F7WCmaDdw6pSsYmJGdAICJ4WczRmFMqFDMz/YNMsRPYEQcQwt0 S7Buts/TB8GTBhsXpHPfhI01Xw2sqL7SbufsRaMjzvRmgywajfzIBsO0DkDWWrXY aEdQsKHZIncKzk3+PX/EInbdA9R4rxlF4p4JlXtEvjW0djs7bxxR9Y8fTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDytrp+bsc6tghStfXznZyNAty/VMB8GA1UdIwQY MBaAFD+BqOjHW1j30e/Uw+ZSLSeGP5zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDRHbzZNZGJXUGZSNzlURDVsSXRKNFlfbk04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lYjdmN2UtYTg4MC00OTdiLWI1NGMt YjcwOGM0MGE2NjdmLzEvUDRHbzZNZGJXUGZSNzlURDVsSXRKNFlfbk04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9lYjdmN2UtYTg4MC00OTdiLWI1NGMtYjcwOGM0MGE2Njdm LzEvUDRHbzZNZGJXUGZSNzlURDVsSXRKNFlfbk04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASubihlep sVHbiWZRv8ceMwxc+WJciDSlpRKplOfZan2VfTs7Pb14htz1sUW1dCr0BI+pC/Am KsM9YEYv3M13/zS98jMuKLcm2LzvZO7xNFhDMPgfvx0X4yRcVt3s2ZuWJqYuP9C9 Qc9czU9QY9Mf2AZHByN6uXBqggb/orsWYivgvVpRcz8BNnERpneoi/K4DKWM+jL8 HWxlDHc3AfcAdvpxUitwVHOSvfHDScFCMe1clgCOjKM+LgYYQWmf6XplOafbx60h SASuS038rHhD/u+A1T8i/8YFAjIsW/fpo39cZGbZGG96kdb2clzHUdJsp8g6ZgTx U4BlwC9UDsebQg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:06 2025 by rpki-client