This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft File: G04-M_1PbZy08TyiI3HjCzbPp3Y.mft (raw, json) Hash identifier: s4gFSOOkTWD1CNM+zyvypEWKSiy1ExtvUIExz107rcM= Subject key identifier: C5:CC:AF:FD:F5:5C:05:65:21:C2:BE:E7:CD:14:DC:55:0A:34:43:FC Authority key identifier: 1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76 Certificate issuer: /CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776 Certificate serial: 019B5BD1F21B71C85CF09ADFB938F1B1C98B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 18:00:44 +0000 Manifest this update: Fri 26 Dec 2025 18:00:44 +0000 Manifest next update: Sat 27 Dec 2025 18:00:44 +0000 Files and hashes: 1: G04-M_1PbZy08TyiI3HjCzbPp3Y.crl (hash: HI0MAhWc03rNr21q/1F+b2sbmckSKQsXHiMwqxzD/UM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 18:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d1:f2:1b:71:c8:5c:f0:9a:df:b9:38:f1:b1:c9:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776 Validity Not Before: Dec 26 18:00:44 2025 GMT Not After : Dec 27 18:00:44 2025 GMT Subject: CN=c5ccaffdf55c056521c2bee7cd14dc550a3443fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:94:f8:eb:27:31:9e:d2:14:eb:2f:32:0e:f2: 99:81:83:db:bc:da:ed:04:79:5a:54:9e:59:24:eb: a6:a3:e0:b2:35:5b:dc:54:80:8f:43:2c:d4:b4:28: 87:8a:71:94:78:21:5d:8d:e0:05:ae:2c:da:05:70: 88:f5:cb:c6:d5:41:6f:7a:e3:a9:83:05:eb:26:63: e4:f5:72:e7:c4:f7:bc:2f:0f:57:8f:ad:aa:bb:d2: f4:ba:d9:b7:2d:fb:cb:a1:e6:2b:e6:68:f6:4e:e0: 0f:09:fa:42:6e:0a:14:02:77:f5:a6:34:ad:96:e7: f8:3e:c6:36:2a:5f:ba:9d:9d:6c:b0:b9:8b:19:b7: 75:5a:26:95:03:37:6b:5d:bf:a3:c4:9c:2b:10:85: 9e:81:4b:a9:7a:f0:f4:19:cd:75:b3:90:c8:30:52: e9:31:40:87:c2:08:98:01:60:70:0c:cb:ed:cc:ff: df:ee:b3:09:86:2d:62:81:92:d5:a2:fa:cc:61:16: 71:7f:6e:0b:31:6b:93:73:46:e1:5d:8e:60:38:58: 7d:69:71:f5:13:d9:03:21:56:09:ef:94:81:96:b8: bf:09:8c:a4:20:93:05:8e:b6:5f:da:81:e2:71:0b: 79:a7:e7:d9:6b:96:8b:71:28:c2:72:fa:21:31:7b: 71:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CC:AF:FD:F5:5C:05:65:21:C2:BE:E7:CD:14:DC:55:0A:34:43:FC X509v3 Authority Key Identifier: keyid:1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:83:2e:28:3a:30:ba:74:a6:7b:be:72:87:7b:c7:32:51:3b: 0f:8c:1d:f8:fb:cc:16:6e:cd:e6:17:b1:62:dc:eb:d3:4c:de: b3:da:8b:65:cf:04:6c:1b:d4:6e:dd:9c:ad:42:76:8f:81:0b: 38:60:f7:29:da:02:54:ae:db:07:37:ca:45:e1:64:4c:15:79: 6e:af:8d:15:33:54:17:23:33:51:c8:86:fa:6e:9a:a0:67:1f: 25:ba:a3:a2:7c:59:5a:92:68:de:b5:7c:16:e7:b0:b8:96:c7: e7:d6:b5:b3:50:89:52:da:fd:62:cd:9d:6e:d7:a1:37:5b:6b: 58:06:64:95:89:b2:bc:ed:55:a3:39:6e:34:1c:09:7b:52:3d: 7e:46:4f:f8:f0:9e:86:98:96:c9:cc:45:27:56:dc:7b:a8:80: cd:48:fb:8d:df:36:5c:ee:66:d6:dd:5e:20:28:00:12:ba:d5: fb:79:dd:31:89:0a:7c:b8:0f:4d:a1:86:4b:26:61:09:8e:67: d1:cc:bd:a2:12:c7:fa:61:f3:83:af:dd:6f:90:c1:64:3a:ef: ac:b0:33:f9:eb:dc:e2:cf:0a:c0:6a:45:5b:24:91:e7:29:c4: 27:e4:9a:b6:38:66:28:29:cb:9a:48:9d:ec:72:3c:0e:f1:a1: a5:e2:58:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0fIbcchc8JrfuTjxscmLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNGUzZTMzZmQ0ZjZkOWNiNGYxM2NhMjIzNzFlMzBiMzZj ZmE3NzYwHhcNMjUxMjI2MTgwMDQ0WhcNMjUxMjI3MTgwMDQ0WjAzMTEwLwYDVQQD EyhjNWNjYWZmZGY1NWMwNTY1MjFjMmJlZTdjZDE0ZGM1NTBhMzQ0M2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZT46ycxntIU6y8yDvKZgYPbvNrt BHlaVJ5ZJOumo+CyNVvcVICPQyzUtCiHinGUeCFdjeAFrizaBXCI9cvG1UFveuOp gwXrJmPk9XLnxPe8Lw9Xj62qu9L0utm3LfvLoeYr5mj2TuAPCfpCbgoUAnf1pjSt luf4PsY2Kl+6nZ1ssLmLGbd1WiaVAzdrXb+jxJwrEIWegUupevD0Gc11s5DIMFLp MUCHwgiYAWBwDMvtzP/f7rMJhi1igZLVovrMYRZxf24LMWuTc0bhXY5gOFh9aXH1 E9kDIVYJ75SBlri/CYykIJMFjrZf2oHicQt5p+fZa5aLcSjCcvohMXtxLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXMr/31XAVlIcK+580U3FUKNEP8MB8GA1UdIwQY MBaAFBtOPjP9T22ctPE8oiNx4ws2z6d2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzA0LU1fMVBiWnkwOFR5aUkzSGpDemJQcDNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jOGE0MDQtNWU3Ni00ZWY0LWJiMDct MDI2YzI2YjVkMzk1LzEvRzA0LU1fMVBiWnkwOFR5aUkzSGpDemJQcDNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jOGE0MDQtNWU3Ni00ZWY0LWJiMDctMDI2YzI2YjVkMzk1 LzEvRzA0LU1fMVBiWnkwOFR5aUkzSGpDemJQcDNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoMuKDow unSme75yh3vHMlE7D4wd+PvMFm7N5hexYtzr00zes9qLZc8EbBvUbt2crUJ2j4EL OGD3KdoCVK7bBzfKReFkTBV5bq+NFTNUFyMzUciG+m6aoGcfJbqjonxZWpJo3rV8 FuewuJbH59a1s1CJUtr9Ys2dbtehN1trWAZklYmyvO1VozluNBwJe1I9fkZP+PCe hpiWycxFJ1bce6iAzUj7jd82XO5m1t1eICgAErrV+3ndMYkKfLgPTaGGSyZhCY5n 0cy9ohLH+mHzg6/db5DBZDrvrLAz+evc4s8KwGpFWySR5ynEJ+SatjhmKCnLmkid 7HI8DvGhpeJYVQ== -----END CERTIFICATE-----Generated at Sat Dec 27 02:15:12 2025 by rpki-client