This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft File: rUS-GO4-DSdHZwVV6GsACWXoE5s.mft (raw, json) Hash identifier: OCbgCoojWp+/kgDEaIZLbUNFj9brxe2g+bM1/cQeQNY= Subject key identifier: CD:58:20:72:C2:17:66:14:0D:B2:CD:1F:AB:08:0C:49:9E:94:80:E0 Authority key identifier: AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B Certificate issuer: /CN=ad44be18ee3e0d2747670555e86b000965e8139b Certificate serial: 019AF6F86ACA27209257C32C9A7E70933F15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 04:01:06 +0000 Manifest this update: Sun 07 Dec 2025 04:01:06 +0000 Manifest next update: Mon 08 Dec 2025 04:01:06 +0000 Files and hashes: 1: kX62bL3xBVpkyK0FphmC5iQUK74.roa (hash: GEBZd8qkO5malJhFWg729yyTB3o+issIVlA3FLkcy9o=) 2: rUS-GO4-DSdHZwVV6GsACWXoE5s.crl (hash: /kzs/vGP4QfWiezExzOPA1cidu5wPFqJ4NW7WO0Ush0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:6a:ca:27:20:92:57:c3:2c:9a:7e:70:93:3f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad44be18ee3e0d2747670555e86b000965e8139b Validity Not Before: Dec 7 04:01:06 2025 GMT Not After : Dec 8 04:01:06 2025 GMT Subject: CN=cd582072c21766140db2cd1fab080c499e9480e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8c:e2:2a:7b:cd:4d:31:f8:f0:96:4b:b6:8f: ae:b1:a0:76:d2:37:30:c7:15:76:dc:1c:e8:a1:74: 53:b1:54:36:c0:e8:fb:09:84:f8:94:11:da:ae:09: 09:77:7d:04:35:39:e6:ab:42:22:ae:79:bc:d2:83: 0e:50:6f:9d:a6:07:7c:52:08:45:5b:91:c2:c1:f9: 00:18:30:f6:05:8c:2b:d7:bd:77:62:23:63:d1:d1: 71:ce:04:8d:42:de:cf:68:e4:b0:39:5d:51:e3:0d: 42:61:36:84:1e:d3:76:fe:89:e6:af:ec:59:be:b2: 19:30:6c:3a:e2:82:f8:68:97:d2:cb:51:9b:f6:f0: 1b:d6:c4:c1:59:fe:44:d8:74:61:a2:ef:f3:e6:11: 0f:6c:65:d4:ed:02:2f:06:d6:7a:1b:bf:9f:25:62: a9:14:ea:98:08:7a:c0:b0:52:ec:31:82:04:84:a3: 28:33:f0:03:9c:7e:fe:0f:9f:da:b7:57:fd:63:d0: 5d:a3:95:6d:09:bd:33:f5:00:d0:15:b1:7d:fc:46: 77:5a:e0:4c:08:41:93:fc:a9:f3:91:62:ca:fb:1b: 1f:8d:a9:c5:bf:a2:4c:f6:ec:69:96:2f:46:2c:07: ba:91:4b:97:f5:66:cb:9c:3d:d4:fb:71:e7:49:95: d9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:58:20:72:C2:17:66:14:0D:B2:CD:1F:AB:08:0C:49:9E:94:80:E0 X509v3 Authority Key Identifier: keyid:AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:93:16:11:6a:1a:96:b3:54:f1:12:d7:bb:d0:6f:2a:de:74: 35:41:82:8f:3a:07:e0:88:4d:93:62:9c:9e:d8:06:f4:2f:85: 2b:ba:1e:c6:69:f0:eb:80:52:d3:e5:89:c0:d5:56:e2:b7:7c: 96:e9:2e:dc:36:84:d8:29:90:e5:dd:1f:08:87:23:40:5b:36: 15:df:c8:58:aa:50:90:83:37:e7:51:06:97:4b:33:8d:9c:45: bb:b7:b9:73:06:11:f3:fd:49:9c:7f:cc:2f:e4:6a:96:98:51: fd:9c:df:3b:39:e5:c7:a7:76:b3:eb:2e:4a:57:15:47:5a:47: 44:ba:e0:67:97:da:9b:a8:38:0b:10:24:a1:73:67:70:47:f8: 99:51:e4:94:ba:ba:87:71:20:42:ba:7b:97:be:bc:4c:2a:a8: 16:4a:7a:99:60:43:bd:ca:fb:e5:f4:20:f6:40:63:2e:82:ef: b5:f6:0b:86:e3:bd:2a:c2:cd:e6:16:8f:f7:2c:b6:cc:72:d0: 9b:31:a1:77:8f:08:f7:50:99:4c:c7:64:e6:7e:c4:2c:10:8c: 16:08:26:0a:13:fe:08:2f:62:ce:3b:15:ee:a6:e7:2b:c4:e5: a4:b1:91:08:c7:23:1a:95:5c:ff:8b:80:d0:a5:ab:01:58:4a: 0c:43:8f:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+GrKJyCSV8Msmn5wkz8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNDRiZTE4ZWUzZTBkMjc0NzY3MDU1NWU4NmIwMDA5NjVl ODEzOWIwHhcNMjUxMjA3MDQwMTA2WhcNMjUxMjA4MDQwMTA2WjAzMTEwLwYDVQQD EyhjZDU4MjA3MmMyMTc2NjE0MGRiMmNkMWZhYjA4MGM0OTllOTQ4MGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4ziKnvNTTH48JZLto+usaB20jcw xxV23BzooXRTsVQ2wOj7CYT4lBHargkJd30ENTnmq0Iirnm80oMOUG+dpgd8UghF W5HCwfkAGDD2BYwr1713YiNj0dFxzgSNQt7PaOSwOV1R4w1CYTaEHtN2/onmr+xZ vrIZMGw64oL4aJfSy1Gb9vAb1sTBWf5E2HRhou/z5hEPbGXU7QIvBtZ6G7+fJWKp FOqYCHrAsFLsMYIEhKMoM/ADnH7+D5/at1f9Y9Bdo5VtCb0z9QDQFbF9/EZ3WuBM CEGT/KnzkWLK+xsfjanFv6JM9uxpli9GLAe6kUuX9WbLnD3U+3HnSZXZLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1YIHLCF2YUDbLNH6sIDEmelIDgMB8GA1UdIwQY MBaAFK1EvhjuPg0nR2cFVehrAAll6BObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclVTLUdPNC1EU2RIWndWVjZHc0FDV1hvRTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mOGNmNTctNTcxZi00OWVlLWE3NmQt MTNhOGNiMjU4N2Q0LzEvclVTLUdPNC1EU2RIWndWVjZHc0FDV1hvRTVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9mOGNmNTctNTcxZi00OWVlLWE3NmQtMTNhOGNiMjU4N2Q0 LzEvclVTLUdPNC1EU2RIWndWVjZHc0FDV1hvRTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5MWEWoa lrNU8RLXu9BvKt50NUGCjzoH4IhNk2KcntgG9C+FK7oexmnw64BS0+WJwNVW4rd8 luku3DaE2CmQ5d0fCIcjQFs2Fd/IWKpQkIM351EGl0szjZxFu7e5cwYR8/1JnH/M L+RqlphR/ZzfOznlx6d2s+suSlcVR1pHRLrgZ5fam6g4CxAkoXNncEf4mVHklLq6 h3EgQrp7l768TCqoFkp6mWBDvcr75fQg9kBjLoLvtfYLhuO9KsLN5haP9yy2zHLQ mzGhd48I91CZTMdk5n7ELBCMFggmChP+CC9izjsV7qbnK8TlpLGRCMcjGpVc/4uA 0KWrAVhKDEOPmw== -----END CERTIFICATE-----Generated at Sun Dec 7 05:59:54 2025 by rpki-client