This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft File: 04G3AXBRkLnOnRsYRTU4TnHKMWU.mft (raw, json) Hash identifier: hiDoHZqGVCC9pAUaLRl/MtfCGTmq7/0M1Lbkz4S2kvo= Subject key identifier: 3C:5D:E6:D4:3F:6F:86:DA:64:9C:19:07:33:52:55:AE:F6:62:BB:53 Authority key identifier: D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65 Certificate issuer: /CN=d381b701705190b9ce9d1b184535384e71ca3165 Certificate serial: 019B6AD6FF0A4ED1B537D56287501B0F05B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft Manifest number: 179E Signing time: Mon 29 Dec 2025 16:00:33 +0000 Manifest this update: Mon 29 Dec 2025 16:00:33 +0000 Manifest next update: Tue 30 Dec 2025 16:00:33 +0000 Files and hashes: 1: 04G3AXBRkLnOnRsYRTU4TnHKMWU.crl (hash: RPZkG1/cPsO9kgXGW6ocixWGkzhiFG8+gRfuFCMQOvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 16:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d6:ff:0a:4e:d1:b5:37:d5:62:87:50:1b:0f:05:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d381b701705190b9ce9d1b184535384e71ca3165 Validity Not Before: Dec 29 16:00:33 2025 GMT Not After : Dec 30 16:00:33 2025 GMT Subject: CN=3c5de6d43f6f86da649c1907335255aef662bb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e7:f1:c9:ba:e8:c6:03:cc:0d:7b:c8:29:ac: a8:93:b0:90:c2:84:9e:e7:65:50:bf:78:b1:8f:37: d7:31:80:ea:c6:8e:9f:6f:02:03:b9:59:6b:87:14: 66:49:bf:aa:6e:d0:29:93:19:af:d3:c0:e7:16:e6: e3:bf:7e:ef:10:10:c4:e8:74:45:06:71:8c:aa:6a: 7c:1b:1c:c7:a4:99:a6:d3:4d:1a:45:21:b3:6e:3f: 81:41:23:5c:5c:df:a4:8e:85:4c:09:d8:fd:94:af: e1:46:1d:f9:9d:ad:cf:36:06:a5:3f:e6:15:63:c2: 04:a5:74:1a:02:20:6e:a2:89:d8:70:43:5b:72:1a: f8:d8:ce:27:74:77:71:85:d8:b3:f4:e2:36:bb:8e: f2:01:3c:d0:e9:ae:c9:f0:00:9f:54:2c:17:a5:28: 32:25:cb:51:87:87:ca:74:64:d2:86:03:94:24:13: 79:05:80:04:2b:17:d0:73:09:b8:a9:18:06:67:61: 5d:a3:1b:90:82:49:fc:7c:d1:91:33:b5:3b:8a:4b: 09:ae:69:55:c5:1e:91:fd:27:87:e6:11:c6:e8:f8: a4:f0:f4:a7:93:df:a6:87:f6:5a:6d:59:cf:bc:83: ae:44:f1:42:f4:66:85:76:f8:57:9e:e6:45:53:c4: b2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5D:E6:D4:3F:6F:86:DA:64:9C:19:07:33:52:55:AE:F6:62:BB:53 X509v3 Authority Key Identifier: keyid:D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:22:99:49:3f:70:92:cf:03:b8:a2:68:01:e9:b6:ce:d7:b6: d7:69:ad:3e:5f:d1:f7:26:d5:ed:61:c1:bf:3d:32:64:7e:22: d1:89:2a:36:80:a7:ae:0a:b1:3d:64:ce:0a:80:ad:95:8b:52: 8b:00:ad:c2:b3:af:0e:4b:68:32:08:23:16:07:64:ab:e3:38: 72:08:ec:bf:75:29:bb:dc:77:fb:fe:79:69:f4:35:42:df:4c: 5b:21:8d:70:ca:5a:b7:99:d0:dd:e2:aa:96:c9:ce:f7:47:1e: f6:e6:89:f3:29:93:47:4d:49:8a:4b:83:46:a0:e2:e7:8e:0c: 6b:8c:5b:6b:bf:be:af:db:2a:fc:56:99:06:a1:79:3f:63:f3: e2:34:2c:be:21:f8:f4:e9:aa:c8:ea:dd:74:5b:83:5a:d7:22: 0d:e9:8d:f9:d8:39:5c:04:e4:6c:b6:1f:c9:7b:3b:c7:6a:9e: 53:cf:7c:ca:e8:fc:35:36:87:76:4c:f5:47:25:49:04:a4:ea: 76:58:bf:af:b9:21:33:0b:d1:3c:2c:c5:bc:c2:ff:49:3c:81: 17:a9:8d:6b:75:79:60:90:1c:c7:43:09:75:69:ab:5f:ac:0f: 28:99:8c:99:0b:96:5f:d3:3c:ed:7e:26:f3:b3:fa:86:d4:37: a4:c7:4f:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq1v8KTtG1N9Vih1AbDwWzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzODFiNzAxNzA1MTkwYjljZTlkMWIxODQ1MzUzODRlNzFj YTMxNjUwHhcNMjUxMjI5MTYwMDMzWhcNMjUxMjMwMTYwMDMzWjAzMTEwLwYDVQQD EygzYzVkZTZkNDNmNmY4NmRhNjQ5YzE5MDczMzUyNTVhZWY2NjJiYjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+fxybroxgPMDXvIKayok7CQwoSe 52VQv3ixjzfXMYDqxo6fbwIDuVlrhxRmSb+qbtApkxmv08DnFubjv37vEBDE6HRF BnGMqmp8GxzHpJmm000aRSGzbj+BQSNcXN+kjoVMCdj9lK/hRh35na3PNgalP+YV Y8IEpXQaAiBuoonYcENbchr42M4ndHdxhdiz9OI2u47yATzQ6a7J8ACfVCwXpSgy JctRh4fKdGTShgOUJBN5BYAEKxfQcwm4qRgGZ2FdoxuQgkn8fNGRM7U7iksJrmlV xR6R/SeH5hHG6Pik8PSnk9+mh/ZabVnPvIOuRPFC9GaFdvhXnuZFU8SyNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxd5tQ/b4baZJwZBzNSVa72YrtTMB8GA1UdIwQY MBaAFNOBtwFwUZC5zp0bGEU1OE5xyjFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDRHM0FYQlJrTG5PblJzWVJUVTRUbkhLTVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82MDNjNTgtMTAwMi00MDY5LTg5MTct NzA1NGViMmM0YzAwLzEvMDRHM0FYQlJrTG5PblJzWVJUVTRUbkhLTVdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS82MDNjNTgtMTAwMi00MDY5LTg5MTctNzA1NGViMmM0YzAw LzEvMDRHM0FYQlJrTG5PblJzWVJUVTRUbkhLTVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiKZST9w ks8DuKJoAem2zte212mtPl/R9ybV7WHBvz0yZH4i0YkqNoCnrgqxPWTOCoCtlYtS iwCtwrOvDktoMggjFgdkq+M4cgjsv3Upu9x3+/55afQ1Qt9MWyGNcMpat5nQ3eKq lsnO90ce9uaJ8ymTR01JikuDRqDi544Ma4xba7++r9sq/FaZBqF5P2Pz4jQsviH4 9OmqyOrddFuDWtciDemN+dg5XATkbLYfyXs7x2qeU898yuj8NTaHdkz1RyVJBKTq dli/r7khMwvRPCzFvML/STyBF6mNa3V5YJAcx0MJdWmrX6wPKJmMmQuWX9M87X4m 87P6htQ3pMdPGw== -----END CERTIFICATE-----Generated at Tue Dec 30 01:31:51 2025 by rpki-client