This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft File: 4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json) Hash identifier: S/l5E/sFS5ntbgmi9eGfmouhFX5tCOR66Sum7YXWzPI= Subject key identifier: 2E:5E:2B:6C:46:F0:54:51:03:91:F2:C6:93:D0:8C:6E:16:37:5F:35 Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99 Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899 Certificate serial: 019AF42E4F9069E5868454CFF7D4274F8665 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft Manifest number: 0FD0 Signing time: Sat 06 Dec 2025 15:01:07 +0000 Manifest this update: Sat 06 Dec 2025 15:01:07 +0000 Manifest next update: Sun 07 Dec 2025 15:01:07 +0000 Files and hashes: 1: 0mSInaOcQzcUaKnk3U9INfBb53Q.roa (hash: qM+YFRRYDhlfBg0HbT486tTWhmPISPFkNx0SGBRbZjE=) 2: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: xRbBqO+YTpZexpBc4k3Tzxxy+jAu0VD7UaO5VwNzP0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:4f:90:69:e5:86:84:54:cf:f7:d4:27:4f:86:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899 Validity Not Before: Dec 6 15:01:07 2025 GMT Not After : Dec 7 15:01:07 2025 GMT Subject: CN=2e5e2b6c46f054510391f2c693d08c6e16375f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a4:90:55:43:8a:e1:c2:64:f7:1c:02:56:ae: 36:25:1e:d7:69:e2:13:5e:01:67:89:47:8e:1c:ce: 28:3f:1e:b2:51:7e:41:48:52:12:84:18:e3:2b:cb: 48:f7:32:90:11:f1:99:1c:e4:10:fb:a0:91:2f:5c: 2f:d6:e1:d9:67:02:23:97:32:c4:47:7a:2a:6b:db: 87:76:67:ab:53:00:84:1d:60:a3:0e:d9:59:55:33: 7e:fb:5a:d0:f5:3e:43:c6:66:b9:01:66:f6:7b:23: 9f:99:4b:b8:db:bd:68:cb:d6:f6:98:2d:51:78:e7: f9:72:80:0b:2d:ee:3c:f1:96:4e:5c:4b:8a:51:84: 4f:c7:82:bf:7b:a0:b5:62:9f:15:3e:c0:7f:46:f4: ca:94:6c:2d:2b:e2:3c:8a:5a:46:1f:23:b5:c1:3d: 0c:ce:fb:41:b9:26:94:18:e6:3b:03:44:21:24:9e: 58:97:6c:6b:cc:b4:0f:24:5e:8e:85:eb:9d:81:46: 4e:b6:90:99:03:ea:73:a8:66:8b:83:1f:9a:a8:d2: 08:95:01:95:42:ab:b4:d8:d2:72:4c:e4:6d:fe:07: 7a:5f:77:0b:f2:39:fd:38:71:0f:2b:a9:01:70:d1: 1a:54:6d:ce:6c:3a:bf:fd:af:5c:28:d4:11:5b:b6: 54:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5E:2B:6C:46:F0:54:51:03:91:F2:C6:93:D0:8C:6E:16:37:5F:35 X509v3 Authority Key Identifier: keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:56:64:04:ea:e7:e4:50:49:6f:91:53:5e:9d:08:da:75:c0: 67:c1:3a:5f:10:e8:b7:07:c7:5e:b8:24:de:26:ee:04:c7:3a: 73:60:f0:48:b3:9e:f6:a5:31:93:df:ce:18:59:4b:a7:91:3e: 83:48:7f:09:e9:62:73:4a:9a:ec:c4:c2:b7:ab:91:f9:61:be: be:84:52:47:bf:57:32:03:a2:f4:89:06:07:70:f1:1c:62:d9: d3:ce:2f:60:35:f7:ab:bc:0b:d6:86:76:d7:d4:cc:81:8d:f5: 1b:5d:63:6f:62:38:ba:b6:fe:44:ad:1c:19:fb:30:92:5f:93: 48:1f:ad:81:80:60:7d:21:c9:b2:58:60:45:d3:b6:56:d8:e2: 41:16:5d:ca:ba:cb:93:d1:60:72:e3:27:9a:0e:49:64:6f:1c: c8:6e:47:a2:c8:5a:2d:9a:c9:e7:91:9f:52:1d:c1:c3:d8:5f: 98:b2:07:2c:25:03:88:4f:99:af:07:cc:ff:5e:6f:ff:3d:a3: 45:49:b1:85:3c:80:cf:32:45:d3:10:4c:d7:a2:4c:fa:1e:8d: 1e:de:5e:55:00:df:5b:50:aa:1a:45:48:2a:49:f8:e9:b4:54: ec:82:68:05:08:36:95:b6:d3:50:77:09:18:1b:db:eb:51:75: b2:8b:cc:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lk+QaeWGhFTP99QnT4ZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZjE5Y2M1ZTM4ZDhmOWMxZDY1NDcxNzc2NjVmODkyMTFk ZWM4OTkwHhcNMjUxMjA2MTUwMTA3WhcNMjUxMjA3MTUwMTA3WjAzMTEwLwYDVQQD EygyZTVlMmI2YzQ2ZjA1NDUxMDM5MWYyYzY5M2QwOGM2ZTE2Mzc1ZjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraSQVUOK4cJk9xwCVq42JR7XaeIT XgFniUeOHM4oPx6yUX5BSFIShBjjK8tI9zKQEfGZHOQQ+6CRL1wv1uHZZwIjlzLE R3oqa9uHdmerUwCEHWCjDtlZVTN++1rQ9T5Dxma5AWb2eyOfmUu4271oy9b2mC1R eOf5coALLe488ZZOXEuKUYRPx4K/e6C1Yp8VPsB/RvTKlGwtK+I8ilpGHyO1wT0M zvtBuSaUGOY7A0QhJJ5Yl2xrzLQPJF6OheudgUZOtpCZA+pzqGaLgx+aqNIIlQGV Qqu02NJyTORt/gd6X3cL8jn9OHEPK6kBcNEaVG3ObDq//a9cKNQRW7ZU4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5eK2xG8FRRA5HyxpPQjG4WN181MB8GA1UdIwQY MBaAFOPxnMXjjY+cHWVHF3Zl+JIR3siZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9HY3hlT05qNXdkWlVjWGRtWDRraEhleUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8xYTg1YTgtZTRmOC00OThiLWE1YWUt YTRiZTE3MmM3NmJhLzEvNF9HY3hlT05qNXdkWlVjWGRtWDRraEhleUprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8xYTg1YTgtZTRmOC00OThiLWE1YWUtYTRiZTE3MmM3NmJh LzEvNF9HY3hlT05qNXdkWlVjWGRtWDRraEhleUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFZkBOrn 5FBJb5FTXp0I2nXAZ8E6XxDotwfHXrgk3ibuBMc6c2DwSLOe9qUxk9/OGFlLp5E+ g0h/Celic0qa7MTCt6uR+WG+voRSR79XMgOi9IkGB3DxHGLZ084vYDX3q7wL1oZ2 19TMgY31G11jb2I4urb+RK0cGfswkl+TSB+tgYBgfSHJslhgRdO2VtjiQRZdyrrL k9FgcuMnmg5JZG8cyG5HoshaLZrJ55GfUh3Bw9hfmLIHLCUDiE+ZrwfM/15v/z2j RUmxhTyAzzJF0xBM16JM+h6NHt5eVQDfW1CqGkVIKkn46bRU7IJoBQg2lbbTUHcJ GBvb61F1sovMXg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:49:45 2025 by rpki-client