This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft File: G04-M_1PbZy08TyiI3HjCzbPp3Y.mft (raw, json) Hash identifier: nyMYZWzsxIgtNW6jYqfF6Izkji56V1vfcR/wPOQTzLo= Subject key identifier: 83:0F:DD:25:65:53:32:C2:33:74:99:85:DD:A4:38:82:E9:62:8E:3B Authority key identifier: 1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76 Certificate issuer: /CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776 Certificate serial: 019AF389EF7962CCDD60225E96B3F871FD98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 12:01:34 +0000 Manifest this update: Sat 06 Dec 2025 12:01:34 +0000 Manifest next update: Sun 07 Dec 2025 12:01:34 +0000 Files and hashes: 1: G04-M_1PbZy08TyiI3HjCzbPp3Y.crl (hash: h8myzvMb0i6gg/gGLHpRjmIF4wZjIxjT60oY2AiL8Qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:ef:79:62:cc:dd:60:22:5e:96:b3:f8:71:fd:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776 Validity Not Before: Dec 6 12:01:34 2025 GMT Not After : Dec 7 12:01:34 2025 GMT Subject: CN=830fdd25655332c233749985dda43882e9628e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ad:be:cf:8f:fb:c2:0a:af:37:da:46:ca:eb: 91:d1:a1:28:7c:7b:cf:8e:3f:58:38:e4:44:a2:c1: 19:f8:5a:7b:b2:fa:db:a7:67:f7:bb:43:76:6e:ff: 6e:bf:0c:4b:56:20:1b:c0:9c:50:b6:6a:c4:fe:7c: b0:f0:ca:95:28:d6:db:98:eb:52:19:c3:4c:94:ff: 92:16:82:7a:09:a4:12:60:f2:6a:0c:6c:36:0b:10: c9:f3:6b:a3:36:2b:aa:13:7a:62:87:57:b3:14:3c: d7:0f:68:c6:58:c8:64:93:17:44:35:d6:4a:7c:4d: 2a:29:36:6c:f3:51:a6:c6:9d:09:ea:b5:0b:ed:ec: 93:f0:c4:23:8b:bf:06:c4:f9:5c:23:b4:f2:bd:56: 7f:ed:3d:18:3b:90:23:32:86:e0:91:82:05:4e:b0: fe:4c:4d:57:bb:ed:6e:ff:ab:b7:10:b4:31:04:b5: 1d:79:2c:40:4f:13:50:c1:b8:50:42:ab:6e:45:ea: ed:e2:95:ca:2c:2e:52:cb:49:57:dc:8d:20:81:26: ad:99:fe:16:90:6f:2c:e5:c4:9f:2f:2f:fa:32:66: 35:0e:b1:03:2c:dd:48:51:ec:8f:c7:8e:4c:7d:2c: c1:5a:69:2e:8f:25:c9:24:77:2c:3e:5c:c9:96:6a: 30:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0F:DD:25:65:53:32:C2:33:74:99:85:DD:A4:38:82:E9:62:8E:3B X509v3 Authority Key Identifier: keyid:1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:83:9c:a1:3e:88:c4:a4:6b:8b:68:00:a5:4e:27:2b:eb:53: 9b:fa:af:d3:11:6e:75:cf:3f:8f:8e:5f:ac:48:da:8c:5a:17: 49:5e:61:2d:94:49:da:83:09:7b:eb:5a:e9:0b:ea:3a:1b:53: 1d:13:b1:40:8b:f9:6e:4a:fd:73:93:70:0c:cd:0d:17:9e:57: e4:2d:fe:26:1f:b6:01:a2:69:1b:e0:4b:3f:a4:54:cf:ef:d5: c0:cd:d3:9c:0f:d5:64:d3:a8:c7:a0:4f:4f:d7:a8:b9:81:cb: cf:47:f3:9c:44:05:ef:1d:ad:68:9f:b8:0a:61:2e:6e:92:22: 52:55:75:da:80:b9:f8:e9:ed:3b:80:ce:14:8c:47:df:0c:f2: 89:09:ab:09:d6:78:b3:f8:f8:4c:fc:88:4e:ee:58:8c:30:93: 7c:97:00:fb:c7:20:ad:81:c6:f8:e3:c5:4e:c1:fe:ac:22:73: 57:e9:6e:42:b2:64:32:56:13:ea:28:53:4e:2f:c1:3a:30:79: d7:67:8c:d3:b6:79:bd:b2:fc:f6:97:14:81:46:14:04:f6:da: 9d:fc:33:87:5f:1a:4b:91:68:e7:3d:a8:58:ae:93:bb:28:1b: 1c:11:e1:8d:a3:70:07:b5:46:a1:77:7c:cb:6f:4c:dd:3a:73: 95:65:e0:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzie95YszdYCJelrP4cf2YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNGUzZTMzZmQ0ZjZkOWNiNGYxM2NhMjIzNzFlMzBiMzZj ZmE3NzYwHhcNMjUxMjA2MTIwMTM0WhcNMjUxMjA3MTIwMTM0WjAzMTEwLwYDVQQD Eyg4MzBmZGQyNTY1NTMzMmMyMzM3NDk5ODVkZGE0Mzg4MmU5NjI4ZTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq62+z4/7wgqvN9pGyuuR0aEofHvP jj9YOOREosEZ+Fp7svrbp2f3u0N2bv9uvwxLViAbwJxQtmrE/nyw8MqVKNbbmOtS GcNMlP+SFoJ6CaQSYPJqDGw2CxDJ82ujNiuqE3pih1ezFDzXD2jGWMhkkxdENdZK fE0qKTZs81Gmxp0J6rUL7eyT8MQji78GxPlcI7TyvVZ/7T0YO5AjMobgkYIFTrD+ TE1Xu+1u/6u3ELQxBLUdeSxATxNQwbhQQqtuRert4pXKLC5Sy0lX3I0ggSatmf4W kG8s5cSfLy/6MmY1DrEDLN1IUeyPx45MfSzBWmkujyXJJHcsPlzJlmowvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMP3SVlUzLCM3SZhd2kOILpYo47MB8GA1UdIwQY MBaAFBtOPjP9T22ctPE8oiNx4ws2z6d2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzA0LU1fMVBiWnkwOFR5aUkzSGpDemJQcDNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jOGE0MDQtNWU3Ni00ZWY0LWJiMDct MDI2YzI2YjVkMzk1LzEvRzA0LU1fMVBiWnkwOFR5aUkzSGpDemJQcDNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jOGE0MDQtNWU3Ni00ZWY0LWJiMDctMDI2YzI2YjVkMzk1 LzEvRzA0LU1fMVBiWnkwOFR5aUkzSGpDemJQcDNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeoOcoT6I xKRri2gApU4nK+tTm/qv0xFudc8/j45frEjajFoXSV5hLZRJ2oMJe+ta6QvqOhtT HROxQIv5bkr9c5NwDM0NF55X5C3+Jh+2AaJpG+BLP6RUz+/VwM3TnA/VZNOox6BP T9eouYHLz0fznEQF7x2taJ+4CmEubpIiUlV12oC5+OntO4DOFIxH3wzyiQmrCdZ4 s/j4TPyITu5YjDCTfJcA+8cgrYHG+OPFTsH+rCJzV+luQrJkMlYT6ihTTi/BOjB5 12eM07Z5vbL89pcUgUYUBPbanfwzh18aS5Fo5z2oWK6TuygbHBHhjaNwB7VGoXd8 y29M3TpzlWXgJg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:29:08 2025 by rpki-client