This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft File: g4heOKx3ysBEgptTyzslq-Yen2Q.mft (raw, json) Hash identifier: JeposhwMYeLf7ojiGRkiA1GM/8FDw8LQQHDDkhecnKo= Subject key identifier: 4F:88:8B:76:FC:88:1E:C0:E7:EB:5D:11:A7:62:AF:F5:06:D7:09:71 Authority key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64 Certificate issuer: /CN=83885e38ac77cac044829b53cb3b25abe61e9f64 Certificate serial: 019AF465B0C2B1B89A5A8CE41860CDD66B50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft Manifest number: 0773 Signing time: Sat 06 Dec 2025 16:01:36 +0000 Manifest this update: Sat 06 Dec 2025 16:01:36 +0000 Manifest next update: Sun 07 Dec 2025 16:01:36 +0000 Files and hashes: 1: c8jr9RK1jYIIU9J_37XkvdpDKPQ.roa (hash: FypzDCTYnJOnd+60Jv/bTV7/TP6pt9nWegIKGFpscqo=) 2: g4heOKx3ysBEgptTyzslq-Yen2Q.crl (hash: Hkl5E8+6/9NQTfzamX54Qsl0kN/6kklZ8m6nT2apFhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:b0:c2:b1:b8:9a:5a:8c:e4:18:60:cd:d6:6b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83885e38ac77cac044829b53cb3b25abe61e9f64 Validity Not Before: Dec 6 16:01:36 2025 GMT Not After : Dec 7 16:01:36 2025 GMT Subject: CN=4f888b76fc881ec0e7eb5d11a762aff506d70971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a5:ec:63:b5:ef:d7:a9:1f:9d:25:c4:e2:dc: 59:02:bb:71:03:d4:1e:06:28:23:05:f7:03:94:61: 80:42:5d:b2:ac:cb:22:e1:f6:3c:9d:a0:50:a4:8e: 71:c4:f8:03:ad:90:2a:8d:5e:9d:de:02:15:9b:85: c0:7d:7f:78:a6:94:42:b5:f7:bc:03:50:3f:40:7e: ee:1f:92:0d:11:15:51:8e:d8:88:a6:75:c4:4f:a2: 7f:f8:aa:87:b1:bc:44:73:a7:72:da:52:e7:fe:8f: 39:0d:a9:f0:7c:00:07:42:13:82:db:e6:53:50:bd: 16:e3:ee:3b:9a:2b:82:ea:e8:4f:5f:a2:56:69:da: e9:cf:b8:0d:fc:ed:88:95:6e:f1:b1:5d:95:42:91: 42:97:a1:64:d2:65:12:b8:78:3f:10:15:5a:3a:25: f4:ce:58:00:46:92:7d:3e:3f:6f:0b:08:92:00:d8: 49:9e:99:66:d2:13:7d:e4:ed:f4:b0:9c:48:fd:8b: 79:bb:9b:9d:4e:a7:80:30:50:79:95:7e:fe:58:14: fd:6c:52:82:0d:f9:3a:2c:c1:2c:a2:c5:91:a8:03: d5:9e:d9:85:b9:b2:15:fd:26:cf:e9:4d:72:42:dd: 6d:4b:7c:c9:89:c4:9b:6e:6a:74:6b:0e:9c:39:a8: 2b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:88:8B:76:FC:88:1E:C0:E7:EB:5D:11:A7:62:AF:F5:06:D7:09:71 X509v3 Authority Key Identifier: keyid:83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:20:43:81:71:65:0b:36:db:d6:c6:7b:e8:17:3f:2a:9f:84: 91:d0:08:8c:de:ea:fc:39:3d:76:e4:2f:f1:ba:b4:97:12:4d: 1b:4e:43:9c:83:af:19:fb:fa:33:0d:99:24:f4:ac:6a:37:79: 6b:a4:db:eb:87:27:b0:a1:fb:08:8c:18:c2:9f:ae:4a:fa:b5: be:9d:3b:96:8e:b3:67:29:4e:19:26:17:78:bc:23:1e:d3:31: d9:5e:cb:8e:77:4c:f9:dd:83:2f:49:ac:d1:ea:08:0c:0b:55: 7c:54:94:41:46:f9:92:59:f5:6d:e3:a7:3c:49:0c:21:67:38: b7:34:6c:d4:d3:41:44:fc:1f:f3:c1:2f:f8:55:c4:e8:b4:11: 99:16:32:9e:18:8e:64:ad:08:63:a1:6e:59:ec:89:79:90:97: 40:f0:d9:b8:ae:6c:1b:a5:89:dc:1f:fc:d7:be:53:1a:b5:9d: 1a:e1:c3:f3:34:04:99:92:17:28:bd:ac:ef:3d:9b:e8:1e:f1: 17:6a:73:d1:40:c1:79:ff:28:18:68:c2:c3:98:02:41:a6:f0: ef:74:c3:48:ae:d0:d1:ca:78:f3:7e:fd:7c:94:9e:45:09:e4: 72:d5:43:13:d1:75:a6:7b:68:5c:00:54:1e:2c:e2:68:45:c7: ff:09:7f:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZbDCsbiaWozkGGDN1mtQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzODg1ZTM4YWM3N2NhYzA0NDgyOWI1M2NiM2IyNWFiZTYx ZTlmNjQwHhcNMjUxMjA2MTYwMTM2WhcNMjUxMjA3MTYwMTM2WjAzMTEwLwYDVQQD Eyg0Zjg4OGI3NmZjODgxZWMwZTdlYjVkMTFhNzYyYWZmNTA2ZDcwOTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaXsY7Xv16kfnSXE4txZArtxA9Qe BigjBfcDlGGAQl2yrMsi4fY8naBQpI5xxPgDrZAqjV6d3gIVm4XAfX94ppRCtfe8 A1A/QH7uH5INERVRjtiIpnXET6J/+KqHsbxEc6dy2lLn/o85DanwfAAHQhOC2+ZT UL0W4+47miuC6uhPX6JWadrpz7gN/O2IlW7xsV2VQpFCl6Fk0mUSuHg/EBVaOiX0 zlgARpJ9Pj9vCwiSANhJnplm0hN95O30sJxI/Yt5u5udTqeAMFB5lX7+WBT9bFKC Dfk6LMEsosWRqAPVntmFubIV/SbP6U1yQt1tS3zJicSbbmp0aw6cOagr+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+Ii3b8iB7A5+tdEadir/UG1wlxMB8GA1UdIwQY MBaAFIOIXjisd8rARIKbU8s7JavmHp9kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80NjM2ODYtY2U0OC00ODdjLWJjM2Qt YTJmNTllYWU4NmQwLzEvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC80NjM2ODYtY2U0OC00ODdjLWJjM2QtYTJmNTllYWU4NmQw LzEvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSBDgXFl Czbb1sZ76Bc/Kp+EkdAIjN7q/Dk9duQv8bq0lxJNG05DnIOvGfv6Mw2ZJPSsajd5 a6Tb64cnsKH7CIwYwp+uSvq1vp07lo6zZylOGSYXeLwjHtMx2V7LjndM+d2DL0ms 0eoIDAtVfFSUQUb5kln1beOnPEkMIWc4tzRs1NNBRPwf88Ev+FXE6LQRmRYynhiO ZK0IY6FuWeyJeZCXQPDZuK5sG6WJ3B/8175TGrWdGuHD8zQEmZIXKL2s7z2b6B7x F2pz0UDBef8oGGjCw5gCQabw73TDSK7Q0cp48379fJSeRQnkctVDE9F1pntoXABU HiziaEXH/wl/ww== -----END CERTIFICATE-----Generated at Sat Dec 6 21:41:51 2025 by rpki-client