This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft File: 04m0GNo0qjk07N4rcx3x1O1-yA4.mft (raw, json) Hash identifier: n57oGDrrVT0SW6X8aaNO3ACmc56pXqFDJby0RJqZ/RA= Subject key identifier: 6B:5E:81:27:3A:4C:5B:74:8B:E7:0D:E7:75:8A:5D:78:27:11:AD:1E Authority key identifier: D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E Certificate issuer: /CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e Certificate serial: 019B3F48914E2E338180C7F1441FF9BA78DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft Manifest number: 149B Signing time: Sun 21 Dec 2025 05:01:18 +0000 Manifest this update: Sun 21 Dec 2025 05:01:18 +0000 Manifest next update: Mon 22 Dec 2025 05:01:18 +0000 Files and hashes: 1: 04m0GNo0qjk07N4rcx3x1O1-yA4.crl (hash: dHrROYpEl+yZyV7yixrCMvqIG8SDI0qajTV+9gqpDQA=) 2: cWwT1szK5NdnVm06LjbXvG6eYg4.roa (hash: W4zwG2oQXcpZIEG+6MYSyZ5G6TI/ulbfB+7HQbWQK/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:91:4e:2e:33:81:80:c7:f1:44:1f:f9:ba:78:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e Validity Not Before: Dec 21 05:01:18 2025 GMT Not After : Dec 22 05:01:18 2025 GMT Subject: CN=6b5e81273a4c5b748be70de7758a5d782711ad1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:76:81:85:37:9e:4b:19:55:e0:7c:5d:60:0c: 30:85:3d:61:7c:42:78:03:cf:e8:a1:ac:d8:3e:b4: 6c:0a:6e:3e:da:a7:e7:12:99:e1:b3:31:9b:58:e4: 02:0c:c8:14:ef:11:a1:91:e6:08:55:5b:df:06:d0: be:f1:d8:1c:9f:f9:15:b2:c9:5d:51:0c:53:88:b4: 91:f2:95:fd:ce:16:9b:2c:d2:0f:4b:05:82:85:90: 9b:d1:ce:90:64:7c:bf:23:4b:da:0f:38:af:62:6b: b4:05:77:3b:95:79:50:d4:9e:b5:01:c3:b2:2f:37: a6:97:18:26:ff:5b:43:4f:0a:49:52:92:e5:af:d1: be:dc:f2:ed:4e:85:8f:b5:75:c2:81:97:fd:2d:f4: f6:41:04:9f:e6:36:52:fd:ec:27:fc:ec:70:f9:fb: 93:c7:f4:22:3d:3a:8f:0f:be:66:79:7f:36:5f:88: de:12:da:43:aa:4b:86:8b:f0:3a:f6:a7:02:cb:20: 03:3b:f3:c0:3d:7a:73:fa:83:2d:9d:6f:30:ac:79: 85:9e:5b:3a:e9:9a:9b:ef:a9:47:fa:12:42:fe:a5: 81:19:6e:29:78:05:c3:4f:d6:d9:90:3a:4f:09:54: 25:8a:dd:23:ff:ed:55:92:c7:02:a3:fc:09:4b:d4: 0e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5E:81:27:3A:4C:5B:74:8B:E7:0D:E7:75:8A:5D:78:27:11:AD:1E X509v3 Authority Key Identifier: keyid:D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:96:6b:eb:c7:2b:a3:79:01:42:e4:63:37:91:9f:87:da:d0: 8c:59:a4:41:14:3d:5c:6c:b0:46:fe:48:65:23:59:ad:21:69: 1e:bf:b6:e9:c5:33:88:0a:91:57:cf:e8:d1:f7:9c:7a:34:15: c7:1b:4e:c2:3c:08:3e:7d:96:79:67:50:c9:09:4f:c0:c7:bd: 1c:a8:9f:62:4a:4e:56:91:a8:18:b1:da:61:96:16:a1:dd:4d: 9b:f2:b2:ee:e0:88:13:a7:47:fb:35:22:7a:00:45:f2:99:5e: 3a:9a:84:88:a6:58:c2:c9:b3:b6:50:73:b1:86:28:cd:8b:99: c2:04:f7:a7:a3:96:1e:77:f3:3e:97:2e:58:fa:f1:33:53:08: 18:69:ab:18:71:7f:e4:6b:57:63:c9:73:0c:5c:ce:17:50:2e: cd:b0:dd:50:e7:be:10:43:32:83:ef:6e:49:0e:d8:23:f2:b8: 77:02:d6:16:16:13:8b:d0:3b:0c:f0:9b:da:10:c3:24:ad:6d: b5:f2:07:29:d9:08:53:18:c7:3f:80:29:33:2a:26:ea:bf:41: ab:2f:03:4d:71:97:33:8a:2a:fb:51:9b:8f:47:1b:e4:55:49: 9d:63:d0:b9:4b:2e:fa:80:8c:50:55:92:21:89:a5:34:94:60: a1:b5:e4:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SJFOLjOBgMfxRB/5unjdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzODliNDE4ZGEzNGFhMzkzNGVjZGUyYjczMWRmMWQ0ZWQ3 ZWM4MGUwHhcNMjUxMjIxMDUwMTE4WhcNMjUxMjIyMDUwMTE4WjAzMTEwLwYDVQQD Eyg2YjVlODEyNzNhNGM1Yjc0OGJlNzBkZTc3NThhNWQ3ODI3MTFhZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3aBhTeeSxlV4HxdYAwwhT1hfEJ4 A8/ooazYPrRsCm4+2qfnEpnhszGbWOQCDMgU7xGhkeYIVVvfBtC+8dgcn/kVssld UQxTiLSR8pX9zhabLNIPSwWChZCb0c6QZHy/I0vaDzivYmu0BXc7lXlQ1J61AcOy Lzemlxgm/1tDTwpJUpLlr9G+3PLtToWPtXXCgZf9LfT2QQSf5jZS/ewn/Oxw+fuT x/QiPTqPD75meX82X4jeEtpDqkuGi/A69qcCyyADO/PAPXpz+oMtnW8wrHmFnls6 6Zqb76lH+hJC/qWBGW4peAXDT9bZkDpPCVQlit0j/+1VkscCo/wJS9QOlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtegSc6TFt0i+cN53WKXXgnEa0eMB8GA1UdIwQY MBaAFNOJtBjaNKo5NOzeK3Md8dTtfsgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDRtMEdObzBxamswN040cmN4M3gxTzEteUE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kNDcxNjMtODBlYS00NDRhLWE3OWYt MDNhYTI5YjZhNzZhLzEvMDRtMEdObzBxamswN040cmN4M3gxTzEteUE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kNDcxNjMtODBlYS00NDRhLWE3OWYtMDNhYTI5YjZhNzZh LzEvMDRtMEdObzBxamswN040cmN4M3gxTzEteUE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5Zr68cr o3kBQuRjN5Gfh9rQjFmkQRQ9XGywRv5IZSNZrSFpHr+26cUziAqRV8/o0fecejQV xxtOwjwIPn2WeWdQyQlPwMe9HKifYkpOVpGoGLHaYZYWod1Nm/Ky7uCIE6dH+zUi egBF8pleOpqEiKZYwsmztlBzsYYozYuZwgT3p6OWHnfzPpcuWPrxM1MIGGmrGHF/ 5GtXY8lzDFzOF1AuzbDdUOe+EEMyg+9uSQ7YI/K4dwLWFhYTi9A7DPCb2hDDJK1t tfIHKdkIUxjHP4ApMyom6r9Bqy8DTXGXM4oq+1Gbj0cb5FVJnWPQuUsu+oCMUFWS IYmlNJRgobXk4w== -----END CERTIFICATE-----Generated at Sun Dec 21 10:36:02 2025 by rpki-client