This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft File: 4gjsufNMH7w_NYlxCrPjSfxilcw.mft (raw, json) Hash identifier: gge8c61LuewvOJFRpnA8L4qGz0Tii4CQG/eaywzmEv8= Subject key identifier: 21:61:5F:E8:A2:60:11:10:75:68:E6:E4:39:9C:09:D1:E0:7B:27:55 Authority key identifier: E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC Certificate issuer: /CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc Certificate serial: 019AF2090333A47217B1C7EA8315F00C7DCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft Manifest number: 12F5 Signing time: Sat 06 Dec 2025 05:01:08 +0000 Manifest this update: Sat 06 Dec 2025 05:01:08 +0000 Manifest next update: Sun 07 Dec 2025 05:01:08 +0000 Files and hashes: 1: 39GioKK3WEGVHUJnnBWLgIR7aNY.roa (hash: 3gqoQOG5P9GOvXCGTNdrghx/0+bSTD9OjFYFlfXtSYU=) 2: 4gjsufNMH7w_NYlxCrPjSfxilcw.crl (hash: A3+UyQB6AnNuo58mi8hu0YcpXDi8Uj5G24rPzGjdWRM=) 3: TAZ0gc-5c5t3h8t0iwa-eHM3o3c.roa (hash: Xr3qy5kR4VkDonVYgHy7lT3Fh2h3GWbp6XrLzLyjUKY=) 4: kPsQz3rZGj0NaY5zaOwAOAGfhzw.roa (hash: t4mIO0DzkdS2UrnCzo5GKYBcHXxNS07JIm04JWEYKII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:03:33:a4:72:17:b1:c7:ea:83:15:f0:0c:7d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc Validity Not Before: Dec 6 05:01:08 2025 GMT Not After : Dec 7 05:01:08 2025 GMT Subject: CN=21615fe8a26011107568e6e4399c09d1e07b2755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:66:9a:d0:db:48:e5:d8:87:b9:7c:d4:4a:86: fa:0e:9b:d3:fd:72:8d:7b:e2:4d:8a:22:5b:36:12: 26:96:8d:69:2f:6e:2b:b6:13:40:c8:82:be:f2:55: 83:52:0a:96:2c:4d:84:69:32:de:71:24:ac:ad:d5: 9b:74:60:b1:eb:85:57:ca:d8:4a:a7:ee:15:86:58: 24:c0:3b:8c:b0:ac:33:5a:28:a2:d2:b1:73:71:fc: 99:e6:e2:f9:84:41:8c:1e:b3:1d:f4:05:cc:da:73: 7c:4d:f0:29:47:45:49:f1:e1:e2:38:86:fb:65:eb: a0:6e:06:a2:34:9a:6f:cf:df:61:d1:a9:cf:df:9a: 1b:ea:bf:b0:ce:7c:40:a6:d2:f4:d1:a6:79:61:bd: 67:7d:96:e3:fb:6c:12:83:32:4c:3b:55:b8:a5:75: c8:4a:b5:13:21:55:56:a7:b1:97:3b:29:fc:67:7f: 58:51:31:81:14:07:1d:bd:ce:2b:0c:fb:53:3e:b6: bc:9e:f6:a6:33:a3:1c:a0:28:75:18:2e:d3:ae:e6: ce:09:16:b0:2d:3a:af:30:c0:f3:91:72:f1:bf:ea: b6:3c:b5:bf:7f:98:e7:95:c4:e4:03:c8:6a:14:f2: 7b:d0:f0:1f:fa:1c:9f:49:4a:48:a5:2d:a6:33:9a: 9e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:61:5F:E8:A2:60:11:10:75:68:E6:E4:39:9C:09:D1:E0:7B:27:55 X509v3 Authority Key Identifier: keyid:E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:34:22:db:31:e8:b5:cd:95:69:45:60:15:54:8d:e9:a9:16: 8f:87:25:59:bb:9c:f4:bd:99:67:f8:8f:3b:78:8e:3f:3d:f5: 29:4d:5d:dc:64:48:c6:59:db:7e:ce:eb:78:8c:a7:7c:8e:44: 99:bf:bf:ab:7b:7c:70:04:1d:58:58:a5:1e:38:be:38:71:35: db:74:68:6b:5f:21:0d:ff:a6:9b:05:3d:ef:75:ea:eb:23:bc: a0:55:f0:62:f3:a8:07:de:7c:dd:08:78:6b:03:7c:64:f5:fa: f1:94:c1:f4:a8:aa:8b:09:c7:7d:3c:8c:04:ad:2c:47:26:a6: 77:34:7b:62:da:7c:46:39:d6:47:91:4d:6b:0f:1d:66:36:c0: fc:67:c1:52:5f:27:68:ea:ac:d9:18:3d:1f:c0:18:0a:17:4b: c1:f5:b8:ee:4e:c7:09:9a:f7:0e:38:57:91:4c:83:57:68:7b: 2f:80:6d:c4:4c:f1:2f:75:1d:90:ed:ab:d9:9f:25:c4:ab:60: e5:19:b0:08:52:23:ba:0f:87:ef:32:06:19:a2:a7:4e:a1:bc: d5:fa:16:c3:83:65:f8:8c:7f:14:8c:b8:c7:bf:59:fd:4b:35: f0:01:e1:59:16:a9:c2:98:87:ae:f1:e1:2a:f0:c0:71:ab:8e: bc:99:d0:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQMzpHIXscfqgxXwDH3PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMDhlY2I5ZjM0YzFmYmMzZjM1ODk3MTBhYjNlMzQ5ZmM2 Mjk1Y2MwHhcNMjUxMjA2MDUwMTA4WhcNMjUxMjA3MDUwMTA4WjAzMTEwLwYDVQQD EygyMTYxNWZlOGEyNjAxMTEwNzU2OGU2ZTQzOTljMDlkMWUwN2IyNzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmaa0NtI5diHuXzUSob6DpvT/XKN e+JNiiJbNhImlo1pL24rthNAyIK+8lWDUgqWLE2EaTLecSSsrdWbdGCx64VXythK p+4VhlgkwDuMsKwzWiii0rFzcfyZ5uL5hEGMHrMd9AXM2nN8TfApR0VJ8eHiOIb7 ZeugbgaiNJpvz99h0anP35ob6r+wznxAptL00aZ5Yb1nfZbj+2wSgzJMO1W4pXXI SrUTIVVWp7GXOyn8Z39YUTGBFAcdvc4rDPtTPra8nvamM6McoCh1GC7TrubOCRaw LTqvMMDzkXLxv+q2PLW/f5jnlcTkA8hqFPJ70PAf+hyfSUpIpS2mM5qejwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFhX+iiYBEQdWjm5DmcCdHgeydVMB8GA1UdIwQY MBaAFOII7LnzTB+8PzWJcQqz40n8YpXMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGdqc3VmTk1IN3dfTllseENyUGpTZnhpbGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85ZDk2MGYtYTU5YS00MzVjLWFlOTIt MWNhNzM5YmIwMGNjLzEvNGdqc3VmTk1IN3dfTllseENyUGpTZnhpbGN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC85ZDk2MGYtYTU5YS00MzVjLWFlOTItMWNhNzM5YmIwMGNj LzEvNGdqc3VmTk1IN3dfTllseENyUGpTZnhpbGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTQi2zHo tc2VaUVgFVSN6akWj4clWbuc9L2ZZ/iPO3iOPz31KU1d3GRIxlnbfs7reIynfI5E mb+/q3t8cAQdWFilHji+OHE123Roa18hDf+mmwU973Xq6yO8oFXwYvOoB9583Qh4 awN8ZPX68ZTB9KiqiwnHfTyMBK0sRyamdzR7Ytp8RjnWR5FNaw8dZjbA/GfBUl8n aOqs2Rg9H8AYChdLwfW47k7HCZr3DjhXkUyDV2h7L4BtxEzxL3UdkO2r2Z8lxKtg 5RmwCFIjug+H7zIGGaKnTqG81foWw4Nl+Ix/FIy4x79Z/Us18AHhWRapwpiHrvHh KvDAcauOvJnQOg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:49 2025 by rpki-client