This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft File: 4GyK0oU47eC0x-GnHpypianwPxA.mft (raw, json) Hash identifier: dtgtsCKZHOLNBTToeTKxeyMgAFwIcw0fa75r+9/punU= Subject key identifier: 51:5D:7C:3D:6D:AF:A1:04:4D:86:F1:F7:A2:02:32:3D:C5:7C:CB:EE Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10 Certificate issuer: /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10 Certificate serial: 019B435C29BA6FE5BCF48964F80605A8D610 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft Manifest number: 08B8 Signing time: Mon 22 Dec 2025 00:01:11 +0000 Manifest this update: Mon 22 Dec 2025 00:01:11 +0000 Manifest next update: Tue 23 Dec 2025 00:01:11 +0000 Files and hashes: 1: 4GyK0oU47eC0x-GnHpypianwPxA.crl (hash: bzxsNz83+cQkfzqOSLsy5Opa/ppJS3iSHrhMEVacwjA=) 2: Y17oOJ4cy2XAOGSF7cV-mvshqNg.roa (hash: WzuVM00RV4G9sz/56LZ6o+LxunxTuItSjJs5x2gRuZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:29:ba:6f:e5:bc:f4:89:64:f8:06:05:a8:d6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10 Validity Not Before: Dec 22 00:01:11 2025 GMT Not After : Dec 23 00:01:11 2025 GMT Subject: CN=515d7c3d6dafa1044d86f1f7a202323dc57ccbee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:df:3f:e5:33:eb:bb:fe:a1:68:c8:5c:43:ec: 9c:19:05:d3:39:1c:75:6f:b5:d4:0e:82:94:44:f3: 81:e1:44:c8:7e:7c:0c:13:5f:38:31:bf:4e:99:ec: 83:38:71:8f:f0:40:4b:89:64:d4:5d:ef:26:5f:ee: 4c:f4:66:9d:37:41:06:52:df:bf:ce:45:e3:75:45: 55:07:60:06:1d:a8:c0:cb:b5:e8:fb:a1:3b:61:8a: 60:fe:45:f2:0e:59:01:80:1c:13:c9:85:b1:da:6c: c2:c8:a5:c1:d5:a8:e6:ac:67:2f:15:6d:2d:76:22: 32:fa:a3:12:84:98:fa:af:31:8f:44:23:5c:ca:22: 64:b3:e2:ad:d6:49:92:b5:f3:4e:f0:2f:d8:3f:56: 3c:96:f2:95:9e:b9:ee:c7:ce:5d:52:48:04:16:7f: db:b1:2b:1d:69:06:8f:32:d7:87:f1:f1:c4:f2:5a: 83:e4:2b:d8:8e:e7:58:d6:44:d2:a1:88:20:2d:fc: d0:6d:91:55:ac:98:24:f9:ee:cd:e9:82:fc:9e:42: f6:2e:c3:19:ad:1a:e1:ce:e0:10:ae:fe:2a:d1:7b: d2:d8:8e:a8:5f:6e:12:76:6d:7a:64:7e:78:2b:9a: e0:8e:7b:68:82:e6:3c:5b:bf:bd:16:71:20:1e:07: ed:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5D:7C:3D:6D:AF:A1:04:4D:86:F1:F7:A2:02:32:3D:C5:7C:CB:EE X509v3 Authority Key Identifier: keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:4a:fe:3b:bc:e8:75:7f:94:6f:59:29:7a:14:ee:3b:ea:ef: 59:5e:9a:77:ad:50:16:44:55:07:74:6b:6f:7f:b4:be:fe:e8: d2:07:17:a6:51:2f:97:93:46:2b:ea:ea:a4:b9:50:a8:d4:6d: b4:78:6a:60:7c:76:37:18:31:bb:44:51:19:06:42:89:96:07: 00:a3:d6:de:78:74:b5:0b:0b:d4:30:cb:d8:cb:c8:4d:3c:4d: 3f:50:db:0a:84:8a:b1:3d:ca:0c:5b:6d:fe:f8:49:9a:98:01: db:e5:77:19:de:35:1c:b4:a5:27:52:75:37:c6:b1:e0:62:16: a0:38:3b:9e:33:20:f8:eb:19:15:2b:74:19:fb:a0:33:44:f4: f0:47:e6:5d:94:50:c6:69:20:a7:72:43:94:00:4f:5e:8d:f3: 46:89:4a:07:62:fc:e7:fb:b2:b1:f9:7d:88:6b:e0:ed:19:1d: f8:0a:48:fe:a0:fa:60:b1:d2:4a:86:cc:89:20:e7:15:6e:80: cd:67:c8:33:5b:e3:7e:ca:07:72:79:65:04:12:1d:fa:f7:fe: 51:f0:c7:41:ca:54:9d:bd:b3:d4:c0:50:7a:dc:f5:90:78:26: ff:9c:32:67:58:2d:b3:1e:c9:cb:fe:e5:b8:bc:e0:0c:58:ff: 3d:44:e7:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXCm6b+W89Ilk+AYFqNYQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNmM4YWQyODUzOGVkZTBiNGM3ZTFhNzFlOWNhOTg5YTlm MDNmMTAwHhcNMjUxMjIyMDAwMTExWhcNMjUxMjIzMDAwMTExWjAzMTEwLwYDVQQD Eyg1MTVkN2MzZDZkYWZhMTA0NGQ4NmYxZjdhMjAyMzIzZGM1N2NjYmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit8/5TPru/6haMhcQ+ycGQXTORx1 b7XUDoKURPOB4UTIfnwME184Mb9OmeyDOHGP8EBLiWTUXe8mX+5M9GadN0EGUt+/ zkXjdUVVB2AGHajAy7Xo+6E7YYpg/kXyDlkBgBwTyYWx2mzCyKXB1ajmrGcvFW0t diIy+qMShJj6rzGPRCNcyiJks+Kt1kmStfNO8C/YP1Y8lvKVnrnux85dUkgEFn/b sSsdaQaPMteH8fHE8lqD5CvYjudY1kTSoYggLfzQbZFVrJgk+e7N6YL8nkL2LsMZ rRrhzuAQrv4q0XvS2I6oX24Sdm16ZH54K5rgjntoguY8W7+9FnEgHgft0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFdfD1tr6EETYbx96ICMj3FfMvuMB8GA1UdIwQY MBaAFOBsitKFOO3gtMfhpx6cqYmp8D8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEd5SzBvVTQ3ZUMweC1HbkhweXBpYW53UHhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDAwNmYtNTY3MC00MmE2LTg1YTkt MzFiMmM2NjZiMmRjLzEvNEd5SzBvVTQ3ZUMweC1HbkhweXBpYW53UHhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9mMDAwNmYtNTY3MC00MmE2LTg1YTktMzFiMmM2NjZiMmRj LzEvNEd5SzBvVTQ3ZUMweC1HbkhweXBpYW53UHhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0r+O7zo dX+Ub1kpehTuO+rvWV6ad61QFkRVB3Rrb3+0vv7o0gcXplEvl5NGK+rqpLlQqNRt tHhqYHx2Nxgxu0RRGQZCiZYHAKPW3nh0tQsL1DDL2MvITTxNP1DbCoSKsT3KDFtt /vhJmpgB2+V3Gd41HLSlJ1J1N8ax4GIWoDg7njMg+OsZFSt0GfugM0T08EfmXZRQ xmkgp3JDlABPXo3zRolKB2L85/uysfl9iGvg7Rkd+ApI/qD6YLHSSobMiSDnFW6A zWfIM1vjfsoHcnllBBId+vf+UfDHQcpUnb2z1MBQetz1kHgm/5wyZ1gtsx7Jy/7l uLzgDFj/PUTnVQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:32:07 2025 by rpki-client