This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json) Hash identifier: mqVCsRECGtfS8uWtEOvhtbUlZjRS3rIP5c67oYFaWCk= Subject key identifier: 6E:07:6D:99:15:FA:4C:D5:80:49:34:78:C2:37:CF:C4:91:15:3B:0D Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61 Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461 Certificate serial: 019B4C962DDDDE6CF86503D590230928D8A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft Manifest number: 0F9F Signing time: Tue 23 Dec 2025 19:01:09 +0000 Manifest this update: Tue 23 Dec 2025 19:01:09 +0000 Manifest next update: Wed 24 Dec 2025 19:01:09 +0000 Files and hashes: 1: V6KVY7G6GgYfsN-YsqV35GGJJzk.roa (hash: eItdy8LiVFAx1foSIby+xCbrZCjTXV9gcCfQg6telps=) 2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: 8A8IXz8jTU5EH0aH0P5uUtwsQeblZSxt9jebHx6m6RM=) 3: nSZCrrugGYgpV2kpSk3jqr2LzfM.roa (hash: dkF/IyzVuAY00yNMBcnlRNr+PlCabKVgpyDEF61J7y4=) 4: va7G1Etlo6KFOzv3RXEcOofD7SM.roa (hash: rBy+ju7usynwUPKEj3xmeZHIvCFI48Q0Gca4wzYHCUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:96:2d:dd:de:6c:f8:65:03:d5:90:23:09:28:d8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461 Validity Not Before: Dec 23 19:01:09 2025 GMT Not After : Dec 24 19:01:09 2025 GMT Subject: CN=6e076d9915fa4cd580493478c237cfc491153b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:69:c7:9e:a3:8d:2d:a0:05:0d:9f:9d:f9:eb: 9a:fd:6a:4d:41:c7:c2:a6:7c:f7:52:9b:9e:cb:fa: 55:c8:a6:8a:6d:a6:a1:79:c7:34:65:66:a6:eb:f2: b8:be:4c:14:af:76:2f:fe:9c:f9:9d:d3:36:8a:ec: eb:17:56:a4:56:3e:4b:c7:91:56:60:d4:58:7d:01: ad:20:15:f9:b9:68:7b:53:cf:c5:4e:d9:1b:ca:37: 58:ca:43:6c:3a:f7:c0:7a:e3:b2:bd:c0:81:48:91: be:22:7c:54:4f:ff:b2:d6:0f:0a:a1:41:4c:26:e4: 5a:65:c9:ed:cb:53:d3:7b:09:fc:f1:02:8d:c1:eb: 9b:33:5d:8d:29:a6:21:da:f2:bd:36:1e:4a:5c:7d: 31:bb:34:6c:7d:10:e7:94:ed:47:d3:8b:74:a7:df: d9:12:70:5d:8b:f1:ae:f4:ad:75:10:a4:a4:c6:7c: dc:eb:4a:bb:40:b7:ac:4d:ea:3e:3c:d2:fe:53:a8: 62:7f:ce:2f:33:fa:9f:9f:90:b2:1a:f4:89:47:99: 85:0b:ab:68:20:2e:fc:52:2b:6b:41:40:71:97:a7: ab:c4:92:7e:56:79:bd:92:f0:d9:40:d7:89:49:c5: 0c:ed:a0:58:6f:10:e1:a3:df:1a:26:df:29:a4:38: f0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:07:6D:99:15:FA:4C:D5:80:49:34:78:C2:37:CF:C4:91:15:3B:0D X509v3 Authority Key Identifier: keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e5:c1:18:aa:b8:8b:c8:00:5c:15:f1:33:1c:67:ae:b2:36: 13:9f:b6:76:62:81:7a:49:ea:f7:40:b2:a7:e2:7d:24:14:de: 25:39:85:3f:47:04:51:dc:34:c7:00:cd:be:f1:54:00:5a:65: d9:1e:fc:9e:42:03:3f:1a:12:a9:ad:75:ae:3a:4c:42:55:2c: 66:8d:5f:a9:28:35:9e:80:cc:4e:48:77:64:e0:a4:19:f3:72: 41:f1:f4:c4:ff:56:2b:a6:47:8b:05:77:5d:15:28:a8:f7:06: 99:21:64:7d:dd:4a:63:ff:a0:97:e5:79:18:6a:43:1c:c5:75: d3:72:dd:4f:2c:ff:9e:2e:1c:4b:59:f4:23:db:09:e7:c5:c2: c2:8f:98:c3:19:a7:eb:32:cf:51:38:8b:45:79:04:e2:43:f9: 07:2a:bf:08:2a:32:fd:6b:fa:7d:0b:d6:29:9c:ca:f2:80:31: 0f:a0:61:97:27:fa:2d:cc:68:01:64:45:a4:f2:0a:fd:af:fc: 35:a5:26:fa:d5:47:3b:23:a2:9e:1a:b3:9d:6a:41:19:e1:ff: b7:ea:9f:a7:fe:9d:d1:72:04:8c:a4:8f:a6:2d:68:9f:da:01: aa:9f:d7:13:be:c7:db:7a:20:c9:5d:99:83:27:04:a7:6b:fe: df:92:01:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMli3d3mz4ZQPVkCMJKNipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzODdjMjE5Yzk4NDFlYmFmYWEzZDQwODA2Yzk4NGY5ZjNl NGU0NjEwHhcNMjUxMjIzMTkwMTA5WhcNMjUxMjI0MTkwMTA5WjAzMTEwLwYDVQQD Eyg2ZTA3NmQ5OTE1ZmE0Y2Q1ODA0OTM0NzhjMjM3Y2ZjNDkxMTUzYjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGnHnqONLaAFDZ+d+eua/WpNQcfC pnz3Upuey/pVyKaKbaahecc0ZWam6/K4vkwUr3Yv/pz5ndM2iuzrF1akVj5Lx5FW YNRYfQGtIBX5uWh7U8/FTtkbyjdYykNsOvfAeuOyvcCBSJG+InxUT/+y1g8KoUFM JuRaZcnty1PTewn88QKNweubM12NKaYh2vK9Nh5KXH0xuzRsfRDnlO1H04t0p9/Z EnBdi/Gu9K11EKSkxnzc60q7QLesTeo+PNL+U6hif84vM/qfn5CyGvSJR5mFC6to IC78UitrQUBxl6erxJJ+Vnm9kvDZQNeJScUM7aBYbxDho98aJt8ppDjwewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4HbZkV+kzVgEk0eMI3z8SRFTsNMB8GA1UdIwQY MBaAFIOHwhnJhB66+qPUCAbJhPnz5ORhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMt YmM5MWMwNjcwZDAzLzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMtYmM5MWMwNjcwZDAz LzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnuXBGKq4 i8gAXBXxMxxnrrI2E5+2dmKBeknq90Cyp+J9JBTeJTmFP0cEUdw0xwDNvvFUAFpl 2R78nkIDPxoSqa11rjpMQlUsZo1fqSg1noDMTkh3ZOCkGfNyQfH0xP9WK6ZHiwV3 XRUoqPcGmSFkfd1KY/+gl+V5GGpDHMV103LdTyz/ni4cS1n0I9sJ58XCwo+Ywxmn 6zLPUTiLRXkE4kP5Byq/CCoy/Wv6fQvWKZzK8oAxD6Bhlyf6LcxoAWRFpPIK/a/8 NaUm+tVHOyOinhqznWpBGeH/t+qfp/6d0XIEjKSPpi1on9oBqp/XE77H23ogyV2Z gycEp2v+35IB4Q== -----END CERTIFICATE-----Generated at Wed Dec 24 02:59:39 2025 by rpki-client