This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft File: rUS-GO4-DSdHZwVV6GsACWXoE5s.mft (raw, json) Hash identifier: 9ohxIIsHO4LyaY6JxLUd2V8/FSKZ5pPa8JZlSbJ2wUE= Subject key identifier: 1D:ED:8A:E6:ED:FF:43:BA:27:31:2D:42:5C:1A:52:78:D6:84:EB:A4 Authority key identifier: AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B Certificate issuer: /CN=ad44be18ee3e0d2747670555e86b000965e8139b Certificate serial: 019B2EFA94307904A2E107B290828530DB88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 01:02:12 +0000 Manifest this update: Thu 18 Dec 2025 01:02:12 +0000 Manifest next update: Fri 19 Dec 2025 01:02:12 +0000 Files and hashes: 1: kX62bL3xBVpkyK0FphmC5iQUK74.roa (hash: GEBZd8qkO5malJhFWg729yyTB3o+issIVlA3FLkcy9o=) 2: rUS-GO4-DSdHZwVV6GsACWXoE5s.crl (hash: 4sRzdkEkhtu6TmgkjpzZq3hMy1sGs1DC0R9wQafThR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:94:30:79:04:a2:e1:07:b2:90:82:85:30:db:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad44be18ee3e0d2747670555e86b000965e8139b Validity Not Before: Dec 18 01:02:12 2025 GMT Not After : Dec 19 01:02:12 2025 GMT Subject: CN=1ded8ae6edff43ba27312d425c1a5278d684eba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:87:be:f5:77:3d:74:04:17:be:56:bd:16:c5: fa:c5:59:cb:96:71:34:48:2f:e6:db:9a:42:53:06: f3:01:b5:0d:dc:5c:d3:6c:46:2e:ac:07:b1:eb:30: 73:9a:7d:72:2a:53:2d:68:8f:32:4b:a4:77:00:ba: d5:6f:7e:68:72:36:e5:6a:8e:cb:d9:49:69:94:2f: d9:8b:00:1f:f6:33:2c:31:75:46:59:69:48:b8:b2: b3:ee:9a:e8:28:a8:87:a7:52:f4:2e:e3:1f:bc:b2: 8c:c2:58:3c:da:69:3e:47:8e:2a:11:c3:bb:f0:7d: 9d:e8:64:c0:80:58:a7:1c:9a:ae:30:d0:18:4f:ce: 25:48:0f:4c:f7:0c:9a:de:02:72:79:17:e6:d9:5a: 17:59:a7:83:96:d9:53:ad:a0:f8:73:6e:c2:98:7c: 7e:ef:8b:6d:f4:e0:dd:b1:82:c9:34:0b:18:7c:c3: 05:e1:6f:4b:6e:02:01:0a:13:27:8e:cc:98:bd:c6: dc:dc:5a:04:16:0b:78:2d:1d:06:4f:bc:ca:92:f7: 70:08:97:7c:7b:03:88:7b:9a:24:3e:9d:2d:a8:59: a5:38:f0:bd:bc:48:81:c7:87:f7:71:80:68:b1:26: 0f:e6:ba:03:be:e4:da:00:bc:14:5c:dc:97:0e:b4: 1e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:ED:8A:E6:ED:FF:43:BA:27:31:2D:42:5C:1A:52:78:D6:84:EB:A4 X509v3 Authority Key Identifier: keyid:AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:37:99:80:a3:8b:a5:0f:b0:44:8b:e3:c4:3e:57:1e:5e:90: 61:20:53:6f:b6:9c:21:71:0b:f9:97:62:90:a9:41:7a:f0:19: ca:3c:d7:0c:00:4d:f4:6f:2d:3f:70:6d:b0:94:18:d3:b8:e9: af:e1:b3:b6:ec:69:29:83:ce:09:3e:f4:e1:18:e3:15:a9:f1: 44:7c:55:40:36:4e:38:93:48:44:69:34:23:b8:6e:2a:ad:5a: 18:86:e7:da:96:10:0c:e8:eb:bb:6d:1f:da:27:e7:8c:31:d0: 83:aa:dc:66:8a:f4:30:61:7d:ce:91:4f:3e:54:21:51:97:ae: 8d:8f:fd:02:e0:60:96:43:25:cd:70:e8:cf:98:8a:d8:dd:65: c7:b7:67:5b:f2:59:9c:e6:ac:18:60:02:c8:39:79:79:fb:be: 4b:5e:d3:2b:c6:bb:85:d3:9e:43:76:fd:19:ca:71:a3:e8:69: d0:f8:35:02:de:3c:de:b3:25:a4:d0:b1:1d:ee:61:bf:4a:8a: 36:e2:db:50:a8:fd:ca:68:66:8f:ae:54:a9:16:73:da:d3:f3: c6:b3:8c:29:0d:ff:34:42:ac:af:40:6d:14:eb:aa:9b:8e:91: ae:cc:f5:d0:26:19:86:be:6d:bf:7d:63:a8:3e:4b:d1:da:9b: 6c:84:33:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+pQweQSi4QeykIKFMNuIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNDRiZTE4ZWUzZTBkMjc0NzY3MDU1NWU4NmIwMDA5NjVl ODEzOWIwHhcNMjUxMjE4MDEwMjEyWhcNMjUxMjE5MDEwMjEyWjAzMTEwLwYDVQQD EygxZGVkOGFlNmVkZmY0M2JhMjczMTJkNDI1YzFhNTI3OGQ2ODRlYmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYe+9Xc9dAQXvla9FsX6xVnLlnE0 SC/m25pCUwbzAbUN3FzTbEYurAex6zBzmn1yKlMtaI8yS6R3ALrVb35ocjblao7L 2UlplC/ZiwAf9jMsMXVGWWlIuLKz7proKKiHp1L0LuMfvLKMwlg82mk+R44qEcO7 8H2d6GTAgFinHJquMNAYT84lSA9M9wya3gJyeRfm2VoXWaeDltlTraD4c27CmHx+ 74tt9ODdsYLJNAsYfMMF4W9LbgIBChMnjsyYvcbc3FoEFgt4LR0GT7zKkvdwCJd8 ewOIe5okPp0tqFmlOPC9vEiBx4f3cYBosSYP5roDvuTaALwUXNyXDrQewwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3tiubt/0O6JzEtQlwaUnjWhOukMB8GA1UdIwQY MBaAFK1EvhjuPg0nR2cFVehrAAll6BObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclVTLUdPNC1EU2RIWndWVjZHc0FDV1hvRTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mOGNmNTctNTcxZi00OWVlLWE3NmQt MTNhOGNiMjU4N2Q0LzEvclVTLUdPNC1EU2RIWndWVjZHc0FDV1hvRTVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9mOGNmNTctNTcxZi00OWVlLWE3NmQtMTNhOGNiMjU4N2Q0 LzEvclVTLUdPNC1EU2RIWndWVjZHc0FDV1hvRTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTeZgKOL pQ+wRIvjxD5XHl6QYSBTb7acIXEL+ZdikKlBevAZyjzXDABN9G8tP3BtsJQY07jp r+GztuxpKYPOCT704RjjFanxRHxVQDZOOJNIRGk0I7huKq1aGIbn2pYQDOjru20f 2ifnjDHQg6rcZor0MGF9zpFPPlQhUZeujY/9AuBglkMlzXDoz5iK2N1lx7dnW/JZ nOasGGACyDl5efu+S17TK8a7hdOeQ3b9Gcpxo+hp0Pg1At483rMlpNCxHe5hv0qK NuLbUKj9ymhmj65UqRZz2tPzxrOMKQ3/NEKsr0BtFOuqm46Rrsz10CYZhr5tv31j qD5L0dqbbIQzaw== -----END CERTIFICATE-----Generated at Thu Dec 18 05:04:59 2025 by rpki-client