This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft File: rUS-GO4-DSdHZwVV6GsACWXoE5s.mft (raw, json) Hash identifier: +czZH+KuQkoOan3f6bi/ay5lLEWoVDXS3GTb5N7Hc/k= Subject key identifier: AA:8B:91:67:DC:43:AE:A1:C6:EE:33:9D:F6:51:A6:EB:99:4D:A6:57 Authority key identifier: AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B Certificate issuer: /CN=ad44be18ee3e0d2747670555e86b000965e8139b Certificate serial: 019B3A902103EC1AA5D1EC2C352740975FA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 07:01:22 +0000 Manifest this update: Sat 20 Dec 2025 07:01:22 +0000 Manifest next update: Sun 21 Dec 2025 07:01:22 +0000 Files and hashes: 1: kX62bL3xBVpkyK0FphmC5iQUK74.roa (hash: GEBZd8qkO5malJhFWg729yyTB3o+issIVlA3FLkcy9o=) 2: rUS-GO4-DSdHZwVV6GsACWXoE5s.crl (hash: Ba1BfW5qmKWfADUoYXBF7Ufdkf6jjP79qUvCimEtzLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:21:03:ec:1a:a5:d1:ec:2c:35:27:40:97:5f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad44be18ee3e0d2747670555e86b000965e8139b Validity Not Before: Dec 20 07:01:22 2025 GMT Not After : Dec 21 07:01:22 2025 GMT Subject: CN=aa8b9167dc43aea1c6ee339df651a6eb994da657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:6d:90:54:dc:92:c1:7d:bc:ee:59:cf:f5: 0e:4b:96:31:bd:76:3b:98:d3:d1:e9:a2:0d:3a:d9: 80:d9:d4:64:d0:02:67:e5:40:b1:af:b4:c9:71:9c: 14:b7:80:88:06:b3:8c:63:88:ee:21:99:db:0e:cc: cf:c4:b0:80:cc:1a:08:e2:74:8a:dc:9b:7c:6d:ea: d6:de:af:d8:04:2e:89:37:43:e8:83:27:5a:f3:e1: 3b:c0:70:83:54:fd:40:00:d7:5a:8f:6d:82:b9:81: fb:ff:0e:93:b4:74:91:99:f6:65:de:4c:2c:4a:06: 60:88:aa:5c:3b:34:47:e5:89:1f:b3:7b:32:43:ba: 0a:eb:d8:9d:4c:d5:48:bc:9a:36:c9:b3:1a:4f:b0: b1:01:48:2f:22:4c:28:62:8c:70:de:93:f4:17:2c: f4:41:12:e4:1c:f7:dc:a4:4c:d2:94:fc:82:8a:c7: 77:b6:ba:aa:5e:b3:e3:2a:da:73:f7:c7:f8:a6:04: 47:8c:af:cd:36:86:76:ab:84:2c:95:c1:0b:78:27: 36:1c:1b:e1:9e:ea:60:41:9a:ce:68:8a:bb:5e:f3: b4:51:3f:c7:7d:dd:cf:4f:a8:69:35:25:5d:05:f5: 21:0a:fa:08:1d:85:5e:42:a8:81:7d:83:5d:70:a5: 79:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8B:91:67:DC:43:AE:A1:C6:EE:33:9D:F6:51:A6:EB:99:4D:A6:57 X509v3 Authority Key Identifier: keyid:AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:65:02:25:fa:4a:31:e0:71:cd:b4:a0:09:99:d7:bb:68:af: 18:3a:00:97:52:f9:9d:62:f1:f9:74:7d:9e:7b:c8:1c:09:0a: e2:24:7f:ee:cd:c2:9e:e7:1a:73:84:d7:d3:20:7d:f7:86:25: 33:b4:e1:b7:f8:ac:3b:26:25:eb:01:f9:00:de:21:5a:52:a2: 34:9f:b1:a5:ff:6c:dc:74:c3:9d:42:08:26:ac:57:45:0d:98: e1:db:81:9e:c4:07:d3:dd:c6:05:3d:29:be:39:a7:1f:bb:61: de:39:1e:89:c7:73:5d:9c:ec:f8:93:01:43:f4:c5:b4:76:b7: 7c:e9:0f:d1:d5:59:44:7b:fd:37:fe:0b:40:0f:27:7d:cb:85: bd:31:77:30:2b:12:34:f4:84:00:7c:5b:f1:f3:2e:d5:80:61: 32:ad:34:21:25:40:c0:0f:28:d0:8a:e7:e0:e8:0a:3c:13:cc: 0a:10:2e:fd:89:2f:18:3c:5f:5e:30:09:bc:7d:d8:bd:d0:87: e7:96:3c:68:95:48:e7:b7:f8:ed:06:f2:1e:52:79:14:c5:28: 35:c8:cb:66:ed:5a:95:f9:e5:49:49:d9:bf:2e:17:24:ae:39: ed:c0:4a:27:84:c0:e8:98:30:ab:3c:34:a7:0f:20:c1:1f:b7: e0:e5:fc:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kCED7Bql0ewsNSdAl1+lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNDRiZTE4ZWUzZTBkMjc0NzY3MDU1NWU4NmIwMDA5NjVl ODEzOWIwHhcNMjUxMjIwMDcwMTIyWhcNMjUxMjIxMDcwMTIyWjAzMTEwLwYDVQQD EyhhYThiOTE2N2RjNDNhZWExYzZlZTMzOWRmNjUxYTZlYjk5NGRhNjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuJtkFTcksF9vO5Zz/UOS5YxvXY7 mNPR6aINOtmA2dRk0AJn5UCxr7TJcZwUt4CIBrOMY4juIZnbDszPxLCAzBoI4nSK 3Jt8berW3q/YBC6JN0Pogyda8+E7wHCDVP1AANdaj22CuYH7/w6TtHSRmfZl3kws SgZgiKpcOzRH5Ykfs3syQ7oK69idTNVIvJo2ybMaT7CxAUgvIkwoYoxw3pP0Fyz0 QRLkHPfcpEzSlPyCisd3trqqXrPjKtpz98f4pgRHjK/NNoZ2q4QslcELeCc2HBvh nupgQZrOaIq7XvO0UT/Hfd3PT6hpNSVdBfUhCvoIHYVeQqiBfYNdcKV52wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqLkWfcQ66hxu4znfZRpuuZTaZXMB8GA1UdIwQY MBaAFK1EvhjuPg0nR2cFVehrAAll6BObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclVTLUdPNC1EU2RIWndWVjZHc0FDV1hvRTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mOGNmNTctNTcxZi00OWVlLWE3NmQt MTNhOGNiMjU4N2Q0LzEvclVTLUdPNC1EU2RIWndWVjZHc0FDV1hvRTVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9mOGNmNTctNTcxZi00OWVlLWE3NmQtMTNhOGNiMjU4N2Q0 LzEvclVTLUdPNC1EU2RIWndWVjZHc0FDV1hvRTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmUCJfpK MeBxzbSgCZnXu2ivGDoAl1L5nWLx+XR9nnvIHAkK4iR/7s3Cnucac4TX0yB994Yl M7Tht/isOyYl6wH5AN4hWlKiNJ+xpf9s3HTDnUIIJqxXRQ2Y4duBnsQH093GBT0p vjmnH7th3jkeicdzXZzs+JMBQ/TFtHa3fOkP0dVZRHv9N/4LQA8nfcuFvTF3MCsS NPSEAHxb8fMu1YBhMq00ISVAwA8o0Irn4OgKPBPMChAu/YkvGDxfXjAJvH3YvdCH 55Y8aJVI57f47QbyHlJ5FMUoNcjLZu1alfnlSUnZvy4XJK457cBKJ4TA6Jgwqzw0 pw8gwR+34OX8Mg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:04:06 2025 by rpki-client