This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json) Hash identifier: HdBIXbfT0EQjeqZuGeA5Fz7xmxlBMnk1SBMaFLjj4oQ= Subject key identifier: 08:3B:E6:E0:BF:9D:25:89:F1:27:48:2F:A8:6A:5B:B9:7C:1F:90:7E Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61 Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461 Certificate serial: 019B3F11E53627489C0199380DBC7B4B471E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft Manifest number: 0F98 Signing time: Sun 21 Dec 2025 04:01:35 +0000 Manifest this update: Sun 21 Dec 2025 04:01:35 +0000 Manifest next update: Mon 22 Dec 2025 04:01:35 +0000 Files and hashes: 1: V6KVY7G6GgYfsN-YsqV35GGJJzk.roa (hash: eItdy8LiVFAx1foSIby+xCbrZCjTXV9gcCfQg6telps=) 2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: GqVacZR7e4tWD4mjc9qkII09GWDvMXoAYHaYYnq5v5Y=) 3: nSZCrrugGYgpV2kpSk3jqr2LzfM.roa (hash: dkF/IyzVuAY00yNMBcnlRNr+PlCabKVgpyDEF61J7y4=) 4: va7G1Etlo6KFOzv3RXEcOofD7SM.roa (hash: rBy+ju7usynwUPKEj3xmeZHIvCFI48Q0Gca4wzYHCUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:e5:36:27:48:9c:01:99:38:0d:bc:7b:4b:47:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461 Validity Not Before: Dec 21 04:01:35 2025 GMT Not After : Dec 22 04:01:35 2025 GMT Subject: CN=083be6e0bf9d2589f127482fa86a5bb97c1f907e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:23:c0:ce:80:e4:14:0f:b9:eb:c8:6f:74:bd: a1:23:cd:fe:5d:ad:85:a2:ce:ae:96:3e:64:06:5f: e8:02:36:4c:ed:18:1e:19:67:32:92:7e:9b:79:3d: 7c:47:25:13:40:0a:e6:46:c8:0f:c3:b5:27:5f:a3: e4:92:2e:84:05:fe:9b:65:2a:2d:d5:eb:6a:a3:1b: 48:79:bd:12:37:d0:22:e6:86:5c:e1:d6:82:60:c5: aa:e3:ec:94:8b:7a:98:fc:d2:32:47:7d:bd:a6:f1: 4b:a3:99:8c:0d:dd:5b:49:cd:46:e2:5e:9a:a6:73: d4:b9:fe:53:0d:40:d3:0c:95:33:2e:f7:59:9b:60: 36:e8:ca:2b:26:cc:d7:aa:8f:b9:b7:2c:7f:1a:32: 53:42:26:06:8d:97:5c:ac:29:ad:96:a1:fc:7f:65: 07:af:14:5b:54:6c:00:e9:b4:20:6c:e2:85:ce:89: b2:65:f1:22:ef:7b:7d:5d:6e:80:19:35:5f:43:d2: a9:23:3a:0a:22:97:91:b8:c7:4e:f0:b2:70:1d:1f: 18:40:bc:24:aa:e8:c0:ea:60:b0:d1:57:93:46:92: 30:f6:fc:d1:2f:ec:08:92:af:35:d4:7b:9e:ce:06: a5:8e:dc:d2:20:76:f3:22:cc:1d:28:7a:a0:6f:0d: d5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3B:E6:E0:BF:9D:25:89:F1:27:48:2F:A8:6A:5B:B9:7C:1F:90:7E X509v3 Authority Key Identifier: keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:10:32:5a:da:38:04:a1:00:e7:eb:1b:98:03:f4:01:f9:0f: 10:a7:c8:dd:d7:1e:e9:d1:b8:49:17:a2:ba:bd:43:ff:e5:b1: 7b:ed:80:31:61:ce:71:24:e6:3e:ac:be:9f:a6:28:b2:aa:77: d6:1f:52:3b:71:1f:07:e4:71:f7:e6:a6:ae:95:59:86:19:5d: 4f:ae:c2:f8:eb:09:98:32:dc:a8:66:4c:a2:f3:e0:00:de:69: 69:a7:a1:19:e5:b6:60:69:bc:9c:fa:9a:2a:e5:5d:8b:da:f0: 72:7e:18:0f:83:cd:a9:ec:6b:8c:fd:88:2d:ba:cf:d7:b7:02: 38:29:96:a2:82:63:a7:9c:3b:7d:fd:8a:c9:eb:63:f4:28:65: 13:39:a7:20:b2:cc:4c:07:8b:20:17:8d:33:33:65:42:62:bd: e4:45:ae:15:8e:e4:0a:30:14:bf:22:25:81:68:98:82:4d:db: 12:00:94:bc:a0:ed:e8:ef:c8:54:90:b3:34:00:74:70:9e:b9: b4:01:e4:b9:61:02:77:ad:4e:c0:b1:36:c4:b8:73:e1:4b:d0: 76:6d:c8:c1:1f:7a:a5:62:4d:6d:cc:84:f9:f0:7b:a7:42:28: f2:8a:95:f9:d6:dc:fe:42:a4:00:4d:38:8d:51:3f:cc:ad:00: a9:43:4f:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EeU2J0icAZk4Dbx7S0ceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzODdjMjE5Yzk4NDFlYmFmYWEzZDQwODA2Yzk4NGY5ZjNl NGU0NjEwHhcNMjUxMjIxMDQwMTM1WhcNMjUxMjIyMDQwMTM1WjAzMTEwLwYDVQQD EygwODNiZTZlMGJmOWQyNTg5ZjEyNzQ4MmZhODZhNWJiOTdjMWY5MDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CPAzoDkFA+568hvdL2hI83+Xa2F os6ulj5kBl/oAjZM7RgeGWcykn6beT18RyUTQArmRsgPw7UnX6Pkki6EBf6bZSot 1etqoxtIeb0SN9Ai5oZc4daCYMWq4+yUi3qY/NIyR329pvFLo5mMDd1bSc1G4l6a pnPUuf5TDUDTDJUzLvdZm2A26MorJszXqo+5tyx/GjJTQiYGjZdcrCmtlqH8f2UH rxRbVGwA6bQgbOKFzomyZfEi73t9XW6AGTVfQ9KpIzoKIpeRuMdO8LJwHR8YQLwk qujA6mCw0VeTRpIw9vzRL+wIkq811HuezgaljtzSIHbzIswdKHqgbw3V6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAg75uC/nSWJ8SdIL6hqW7l8H5B+MB8GA1UdIwQY MBaAFIOHwhnJhB66+qPUCAbJhPnz5ORhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMt YmM5MWMwNjcwZDAzLzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMtYmM5MWMwNjcwZDAz LzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRAyWto4 BKEA5+sbmAP0AfkPEKfI3dce6dG4SReiur1D/+Wxe+2AMWHOcSTmPqy+n6Yosqp3 1h9SO3EfB+Rx9+amrpVZhhldT67C+OsJmDLcqGZMovPgAN5paaehGeW2YGm8nPqa KuVdi9rwcn4YD4PNqexrjP2ILbrP17cCOCmWooJjp5w7ff2Kyetj9ChlEzmnILLM TAeLIBeNMzNlQmK95EWuFY7kCjAUvyIlgWiYgk3bEgCUvKDt6O/IVJCzNAB0cJ65 tAHkuWECd61OwLE2xLhz4UvQdm3IwR96pWJNbcyE+fB7p0Io8oqV+dbc/kKkAE04 jVE/zK0AqUNP2g== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:43 2025 by rpki-client