This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft File: rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft (raw, json) Hash identifier: fEU5SxhqK83I5UEC2HG9/b/3tnaEFpDGASpqmLNN08Y= Subject key identifier: 61:D1:F9:8A:5B:29:9C:5E:A3:6E:17:10:B6:4D:B8:19:09:DC:13:1F Authority key identifier: AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34 Certificate issuer: /CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434 Certificate serial: 019B3B6B60E2C05C2BE0B3168D3440ADBB1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 11:00:51 +0000 Manifest this update: Sat 20 Dec 2025 11:00:51 +0000 Manifest next update: Sun 21 Dec 2025 11:00:51 +0000 Files and hashes: 1: AwXuQoOBDpLkL6JkvNNI78Almh8.roa (hash: rgsGgbJMkxlD2Xt53P3qCIDlwFDG3I1YNJZMV8rGCso=) 2: rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl (hash: tSlgF7sZNll64Bpll74odC65YvrlE8UqD0Lmc+Kz6/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:60:e2:c0:5c:2b:e0:b3:16:8d:34:40:ad:bb:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434 Validity Not Before: Dec 20 11:00:51 2025 GMT Not After : Dec 21 11:00:51 2025 GMT Subject: CN=61d1f98a5b299c5ea36e1710b64db81909dc131f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6c:2c:33:63:38:9d:ff:4f:ba:a5:ff:78:6d: 6b:09:92:d7:7c:28:3c:fd:8b:50:33:55:dd:10:89: af:e0:cc:df:c5:ff:e2:30:65:09:e7:82:4c:b6:65: 82:b4:f0:ac:97:50:38:e0:e7:67:4f:90:96:d9:fc: 16:61:c8:6d:ad:e5:e8:3c:95:54:70:16:13:d7:66: 2e:1f:77:a9:2b:84:73:13:8c:53:d2:1f:33:7d:03: 03:67:46:6f:60:12:42:e1:50:ec:b1:35:bc:06:a7: 4e:38:3c:ef:34:32:f9:35:68:f2:15:82:5c:fd:fe: bd:a0:fe:ac:90:43:e9:db:77:f1:f1:ad:50:62:b3: 1a:78:64:be:83:9a:e1:a7:28:60:5a:f3:60:3e:81: b1:98:58:9e:98:3a:c3:01:f9:e7:1e:bb:61:f4:e6: 05:63:89:db:92:61:72:10:7a:55:e3:55:88:0e:47: f2:ab:52:82:c3:f4:6d:f2:a9:b0:df:b3:3b:cf:a3: 7b:f0:80:3b:62:5f:10:44:fc:1b:3e:b6:2b:61:4f: 74:ca:7f:a6:b5:6a:af:d2:21:87:e6:7c:b2:a3:c2: 7a:72:8f:9b:0f:63:b1:18:26:fe:af:50:ec:0f:de: 1c:2c:39:3e:3d:2e:24:74:7e:d7:83:d4:4b:4c:75: d5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D1:F9:8A:5B:29:9C:5E:A3:6E:17:10:B6:4D:B8:19:09:DC:13:1F X509v3 Authority Key Identifier: keyid:AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8c:89:98:b5:c3:73:69:02:4f:e2:34:7d:b3:7e:69:bc:cc: 6d:5f:6c:84:83:3f:da:3e:0a:00:b2:b3:67:82:dd:5e:97:77: ae:6c:c1:99:5b:9b:2e:db:1b:59:a6:59:7d:87:95:20:ac:78: cb:f1:01:b7:f8:dd:f4:82:05:2f:e1:fc:b1:ab:be:7e:18:62: d7:39:c4:54:d0:3f:40:e2:86:0b:2d:e1:1c:0c:64:62:3c:17: 95:68:ef:6c:65:b6:c7:39:16:03:93:3d:bd:89:31:31:bd:31: c8:f4:cb:f7:cf:a4:23:40:77:90:0e:79:0d:8c:72:78:3b:b2: 3b:bb:09:5d:e7:c0:40:ad:0d:08:8b:8a:c2:a8:a6:bc:e3:a2: 53:bf:a6:8a:60:ef:41:a5:c5:d3:34:0c:75:d0:43:13:47:ce: 1a:73:cf:bd:5a:53:d9:64:f0:1c:21:7d:75:88:a6:b4:16:9b: 01:53:8a:a7:1e:57:3b:36:86:10:dd:7c:55:52:3e:ff:ab:3f: 50:2c:a8:5e:34:e0:e2:94:c2:ec:ad:fa:14:1e:98:6e:1a:76: 2a:36:4c:00:e9:88:c0:eb:0d:7a:96:5a:59:77:f5:14:b7:8f: f4:14:0c:de:6d:a5:24:89:a9:33:2a:ef:75:90:da:c0:cc:05: 0d:5c:cd:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a2DiwFwr4LMWjTRArbseMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNmUzZTEzMTExNDM5MTQ3ZjY1ZDMzN2Q1ZjBiMWJjMmVk Nzk0MzQwHhcNMjUxMjIwMTEwMDUxWhcNMjUxMjIxMTEwMDUxWjAzMTEwLwYDVQQD Eyg2MWQxZjk4YTViMjk5YzVlYTM2ZTE3MTBiNjRkYjgxOTA5ZGMxMzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2wsM2M4nf9PuqX/eG1rCZLXfCg8 /YtQM1XdEImv4Mzfxf/iMGUJ54JMtmWCtPCsl1A44OdnT5CW2fwWYchtreXoPJVU cBYT12YuH3epK4RzE4xT0h8zfQMDZ0ZvYBJC4VDssTW8BqdOODzvNDL5NWjyFYJc /f69oP6skEPp23fx8a1QYrMaeGS+g5rhpyhgWvNgPoGxmFiemDrDAfnnHrth9OYF Y4nbkmFyEHpV41WIDkfyq1KCw/Rt8qmw37M7z6N78IA7Yl8QRPwbPrYrYU90yn+m tWqv0iGH5nyyo8J6co+bD2OxGCb+r1DsD94cLDk+PS4kdH7Xg9RLTHXVSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHR+YpbKZxeo24XELZNuBkJ3BMfMB8GA1UdIwQY MBaAFKxuPhMRFDkUf2XTN9Xwsbwu15Q0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckc0LUV4RVVPUlJfWmRNMzFmQ3h2QzdYbERRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xMmJhMmEtMGNjYS00MzdhLTk4NWQt ZmVmZTg1N2ZlYTgwLzEvckc0LUV4RVVPUlJfWmRNMzFmQ3h2QzdYbERRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xMmJhMmEtMGNjYS00MzdhLTk4NWQtZmVmZTg1N2ZlYTgw LzEvckc0LUV4RVVPUlJfWmRNMzFmQ3h2QzdYbERRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoyJmLXD c2kCT+I0fbN+abzMbV9shIM/2j4KALKzZ4LdXpd3rmzBmVubLtsbWaZZfYeVIKx4 y/EBt/jd9IIFL+H8sau+fhhi1znEVNA/QOKGCy3hHAxkYjwXlWjvbGW2xzkWA5M9 vYkxMb0xyPTL98+kI0B3kA55DYxyeDuyO7sJXefAQK0NCIuKwqimvOOiU7+mimDv QaXF0zQMddBDE0fOGnPPvVpT2WTwHCF9dYimtBabAVOKpx5XOzaGEN18VVI+/6s/ UCyoXjTg4pTC7K36FB6Ybhp2KjZMAOmIwOsNepZaWXf1FLeP9BQM3m2lJImpMyrv dZDawMwFDVzNJQ== -----END CERTIFICATE-----Generated at Sat Dec 20 15:26:59 2025 by rpki-client