This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json) Hash identifier: XfWXU4qw6RdXXLNbae0U9ybfiAfSQSprUjidwEDcKu4= Subject key identifier: DE:6A:05:DD:DD:AC:3E:1C:EE:AF:0C:0C:6A:36:D6:AA:0A:25:27:CC Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61 Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461 Certificate serial: 019AF1D19ADCC0D8C62E60360A2EF35D1734 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft Manifest number: 0F70 Signing time: Sat 06 Dec 2025 04:00:36 +0000 Manifest this update: Sat 06 Dec 2025 04:00:36 +0000 Manifest next update: Sun 07 Dec 2025 04:00:36 +0000 Files and hashes: 1: V6KVY7G6GgYfsN-YsqV35GGJJzk.roa (hash: eItdy8LiVFAx1foSIby+xCbrZCjTXV9gcCfQg6telps=) 2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: Ixc5F9hSJNlQH8ejqZWmALcRPE+Do8i4JHvnVUUbrFk=) 3: nSZCrrugGYgpV2kpSk3jqr2LzfM.roa (hash: dkF/IyzVuAY00yNMBcnlRNr+PlCabKVgpyDEF61J7y4=) 4: va7G1Etlo6KFOzv3RXEcOofD7SM.roa (hash: rBy+ju7usynwUPKEj3xmeZHIvCFI48Q0Gca4wzYHCUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9a:dc:c0:d8:c6:2e:60:36:0a:2e:f3:5d:17:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461 Validity Not Before: Dec 6 04:00:36 2025 GMT Not After : Dec 7 04:00:36 2025 GMT Subject: CN=de6a05ddddac3e1ceeaf0c0c6a36d6aa0a2527cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:28:2f:65:7d:64:b4:01:63:9c:b1:62:97:fd: 53:f7:68:e9:e3:9f:20:3a:cc:47:31:60:7b:30:7a: 63:df:6d:05:f3:1b:44:e4:3c:23:b3:53:bd:d5:d2: c2:ae:59:ca:37:d6:68:75:fd:d7:93:2c:f1:dd:13: 5f:ae:97:03:ed:bb:94:aa:3f:d7:86:69:5d:a6:f8: f2:21:30:eb:a0:af:32:6b:8e:4e:58:8c:bc:43:6b: 79:9e:f6:ff:43:e3:a7:ac:18:5b:af:ad:bd:51:1a: ab:b8:1d:b2:4b:c9:ca:f5:64:09:e4:dc:b6:21:ea: 51:a9:dd:7b:d7:ab:05:a3:83:38:6d:7c:a1:4a:be: 39:ce:c6:c9:5c:36:9d:a5:36:b6:45:9b:3a:56:87: 94:8f:7e:ee:ba:7d:bc:1a:96:37:d1:1c:a7:fb:c4: c4:0c:1b:9a:65:04:8d:61:53:f7:40:1c:0c:d1:93: b0:40:03:e8:4c:e7:d5:15:9c:ce:1f:50:0c:a1:58: fd:88:af:30:b9:04:91:28:ff:b0:c1:7a:6c:9d:13: 0b:ac:04:91:fc:86:c4:6e:cd:2a:8f:1a:11:55:2f: 66:8a:dd:84:32:12:63:93:a5:17:40:d0:a6:0a:9b: 85:d1:2d:b4:fb:cf:14:57:bf:c3:53:f5:39:ec:dc: d3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6A:05:DD:DD:AC:3E:1C:EE:AF:0C:0C:6A:36:D6:AA:0A:25:27:CC X509v3 Authority Key Identifier: keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:af:3a:56:99:60:b7:7d:05:3c:c1:10:b0:d2:b3:9b:ae:f3: 86:ca:8f:4f:a1:98:b9:16:80:d5:38:2b:ea:e9:91:83:16:d1: 42:db:99:cd:c7:a8:72:8c:64:46:5b:83:04:57:e8:c0:f8:da: 67:81:70:d5:b1:61:0e:3c:8e:4c:4d:0a:bf:17:46:88:e5:a1: ea:bd:6f:41:53:43:40:95:74:71:60:0b:2f:db:be:03:ca:b1: dd:b8:8b:6f:db:2a:80:18:bd:65:3a:1f:27:e1:da:83:ae:76: d1:2d:31:de:29:62:12:1f:54:4d:bc:b5:19:37:e4:eb:24:86: d3:66:1f:67:f4:fd:80:bf:bb:d9:a6:dc:05:2a:09:57:24:16: f5:97:d7:5d:4e:51:45:02:ff:3c:53:af:54:65:ac:1b:4d:dd: 87:ac:fb:d8:de:39:8e:48:2b:b9:e9:62:35:85:25:82:a3:7c: c3:7d:f2:4b:62:48:0a:a3:9d:d9:83:a0:e5:91:9a:94:71:83: d3:4e:52:71:13:63:21:36:41:62:80:ed:7b:bd:27:4e:36:2a: fc:0f:86:ec:71:51:ee:19:17:f0:3a:9a:39:c1:7b:79:3b:85: 02:c5:a9:a5:86:f5:17:c1:5e:fd:4a:a7:73:be:49:29:15:75: 04:e0:c5:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZrcwNjGLmA2Ci7zXRc0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzODdjMjE5Yzk4NDFlYmFmYWEzZDQwODA2Yzk4NGY5ZjNl NGU0NjEwHhcNMjUxMjA2MDQwMDM2WhcNMjUxMjA3MDQwMDM2WjAzMTEwLwYDVQQD EyhkZTZhMDVkZGRkYWMzZTFjZWVhZjBjMGM2YTM2ZDZhYTBhMjUyN2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ygvZX1ktAFjnLFil/1T92jp458g OsxHMWB7MHpj320F8xtE5Dwjs1O91dLCrlnKN9Zodf3Xkyzx3RNfrpcD7buUqj/X hmldpvjyITDroK8ya45OWIy8Q2t5nvb/Q+OnrBhbr629URqruB2yS8nK9WQJ5Ny2 IepRqd1716sFo4M4bXyhSr45zsbJXDadpTa2RZs6VoeUj37uun28GpY30Ryn+8TE DBuaZQSNYVP3QBwM0ZOwQAPoTOfVFZzOH1AMoVj9iK8wuQSRKP+wwXpsnRMLrASR /IbEbs0qjxoRVS9mit2EMhJjk6UXQNCmCpuF0S20+88UV7/DU/U57NzT0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5qBd3drD4c7q8MDGo21qoKJSfMMB8GA1UdIwQY MBaAFIOHwhnJhB66+qPUCAbJhPnz5ORhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMt YmM5MWMwNjcwZDAzLzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMtYmM5MWMwNjcwZDAz LzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi686Vplg t30FPMEQsNKzm67zhsqPT6GYuRaA1Tgr6umRgxbRQtuZzceocoxkRluDBFfowPja Z4Fw1bFhDjyOTE0KvxdGiOWh6r1vQVNDQJV0cWALL9u+A8qx3biLb9sqgBi9ZTof J+Hag6520S0x3iliEh9UTby1GTfk6ySG02YfZ/T9gL+72abcBSoJVyQW9ZfXXU5R RQL/PFOvVGWsG03dh6z72N45jkgrueliNYUlgqN8w33yS2JICqOd2YOg5ZGalHGD 005ScRNjITZBYoDte70nTjYq/A+G7HFR7hkX8DqaOcF7eTuFAsWppYb1F8Fe/Uqn c75JKRV1BODFzA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:35 2025 by rpki-client