This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft File: 4GmrbwlXKvtG6fjpoGOdgguWlCI.mft (raw, json) Hash identifier: VKltgEZbRx/chBNPYjx5HsUQzuN5bd+zjnjGRkVcPxs= Subject key identifier: 75:3C:76:60:AA:26:57:98:D8:93:D7:93:96:DE:53:9B:1C:0A:8C:E8 Authority key identifier: E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22 Certificate issuer: /CN=e069ab6f09572afb46e9f8e9a0639d820b969422 Certificate serial: 019AF5AE8E3E5083AC66B156479E5355DFDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft Manifest number: 16F9 Signing time: Sat 06 Dec 2025 22:00:48 +0000 Manifest this update: Sat 06 Dec 2025 22:00:48 +0000 Manifest next update: Sun 07 Dec 2025 22:00:48 +0000 Files and hashes: 1: 3JZ_5w4aMWvRVbzCod8mUk7eyJM.roa (hash: vnbCaew1m+lh3Dj5sXD9W+bmDkZl62H3PlaW/PwhcMY=) 2: 4GmrbwlXKvtG6fjpoGOdgguWlCI.crl (hash: WfeyIQ2qA8uyed9/HI+uxHR+ryjWrVOvSANxKldu3JA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:8e:3e:50:83:ac:66:b1:56:47:9e:53:55:df:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e069ab6f09572afb46e9f8e9a0639d820b969422 Validity Not Before: Dec 6 22:00:48 2025 GMT Not After : Dec 7 22:00:48 2025 GMT Subject: CN=753c7660aa265798d893d79396de539b1c0a8ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:0c:02:60:37:8b:a8:6e:67:53:dd:1a:d9:89: 08:b0:30:13:35:67:93:66:41:1b:15:1f:b7:c6:70: 55:39:d9:18:32:75:42:5f:b9:39:eb:51:76:d2:c2: 80:ef:27:f3:95:c1:7d:18:1b:ba:4c:c2:e2:53:64: 14:ab:22:84:7a:1c:65:d2:d6:11:fa:18:9c:3d:e0: 3c:08:bc:a3:b7:ea:23:98:36:56:51:67:65:e5:6c: a9:60:8c:89:95:70:9f:03:fe:51:8a:c4:19:e4:36: ed:f4:d2:96:3f:a9:86:e8:c0:d0:43:78:cb:a3:32: 8f:9c:6d:b3:9c:4d:21:bc:14:e6:10:b6:3f:dc:88: 81:4b:bb:2e:8f:ae:c1:45:6c:3c:ee:14:42:b5:a6: 0b:72:8c:99:46:23:0a:01:44:bd:3e:83:26:ee:66: 0f:d1:4d:4c:73:96:fc:23:1e:6d:c3:b1:07:09:66: 20:ea:16:59:b9:d8:b9:6a:fc:f0:29:f7:20:25:34: 72:58:ab:74:43:58:e8:2d:28:cd:cb:59:df:ae:3a: 21:b5:1b:cc:80:91:f5:19:00:2c:b6:a2:75:09:89: ba:2a:26:51:d4:12:2e:21:ec:19:fb:4f:a5:5d:22: 7e:cc:d7:b7:20:07:a4:ad:aa:de:26:ff:1e:ff:c8: ff:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3C:76:60:AA:26:57:98:D8:93:D7:93:96:DE:53:9B:1C:0A:8C:E8 X509v3 Authority Key Identifier: keyid:E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:2b:40:f4:75:94:ef:ac:b4:e7:ca:e6:79:07:5c:7d:b3:70: 72:6e:12:12:9a:95:c3:29:15:12:cc:62:12:57:f5:f0:f6:7b: 50:93:32:16:7c:59:f3:2d:8e:5d:ee:c1:65:49:5f:cc:e7:de: 18:89:0f:c6:24:b5:76:bf:f2:7d:87:a6:a9:2c:80:ba:6c:06: 72:a3:3b:0c:f9:07:98:5e:e3:cd:32:b6:cd:ed:3c:7c:5c:a8: 86:e0:3d:31:ca:86:4d:ca:f7:ae:31:29:5b:08:8b:de:f8:56: 29:be:4a:b2:21:a6:f2:2b:3b:ad:3a:d1:cf:1b:71:ee:bc:85: 32:1b:22:c2:84:6c:0c:85:37:07:a4:70:42:ce:53:7f:72:89: 81:7c:5a:bb:08:ff:2c:df:4e:25:cd:15:30:e7:3f:b6:c0:dc: 8d:92:e5:11:6c:c2:e9:4c:23:23:fd:a1:a3:8c:04:61:5c:97: b7:4b:05:2f:a0:69:97:8c:de:c5:38:c4:89:bc:24:60:cd:38: 77:f6:9e:45:88:d0:b1:00:e8:60:19:ba:c1:ac:5e:4e:5c:6a: 1a:62:50:a6:22:5f:69:4c:45:9e:a9:98:7c:10:22:5b:da:a2: 0d:9c:28:53:a9:84:5c:c4:a2:fe:d0:bc:a0:53:66:fc:e3:a9: 26:a3:7f:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ro4+UIOsZrFWR55TVd/fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNjlhYjZmMDk1NzJhZmI0NmU5ZjhlOWEwNjM5ZDgyMGI5 Njk0MjIwHhcNMjUxMjA2MjIwMDQ4WhcNMjUxMjA3MjIwMDQ4WjAzMTEwLwYDVQQD Eyg3NTNjNzY2MGFhMjY1Nzk4ZDg5M2Q3OTM5NmRlNTM5YjFjMGE4Y2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+AwCYDeLqG5nU90a2YkIsDATNWeT ZkEbFR+3xnBVOdkYMnVCX7k561F20sKA7yfzlcF9GBu6TMLiU2QUqyKEehxl0tYR +hicPeA8CLyjt+ojmDZWUWdl5WypYIyJlXCfA/5RisQZ5Dbt9NKWP6mG6MDQQ3jL ozKPnG2znE0hvBTmELY/3IiBS7suj67BRWw87hRCtaYLcoyZRiMKAUS9PoMm7mYP 0U1Mc5b8Ix5tw7EHCWYg6hZZudi5avzwKfcgJTRyWKt0Q1joLSjNy1nfrjohtRvM gJH1GQAstqJ1CYm6KiZR1BIuIewZ+0+lXSJ+zNe3IAekrareJv8e/8j/PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHU8dmCqJleY2JPXk5beU5scCozoMB8GA1UdIwQY MBaAFOBpq28JVyr7Run46aBjnYILlpQiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEdtcmJ3bFhLdnRHNmZqcG9HT2RnZ3VXbENJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9hYTVjYzAtYmI1Ni00YjQ3LWI3YzEt NDRmNDFkOWUxMjc3LzEvNEdtcmJ3bFhLdnRHNmZqcG9HT2RnZ3VXbENJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9hYTVjYzAtYmI1Ni00YjQ3LWI3YzEtNDRmNDFkOWUxMjc3 LzEvNEdtcmJ3bFhLdnRHNmZqcG9HT2RnZ3VXbENJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGytA9HWU 76y058rmeQdcfbNwcm4SEpqVwykVEsxiElf18PZ7UJMyFnxZ8y2OXe7BZUlfzOfe GIkPxiS1dr/yfYemqSyAumwGcqM7DPkHmF7jzTK2ze08fFyohuA9McqGTcr3rjEp WwiL3vhWKb5KsiGm8is7rTrRzxtx7ryFMhsiwoRsDIU3B6RwQs5Tf3KJgXxauwj/ LN9OJc0VMOc/tsDcjZLlEWzC6UwjI/2ho4wEYVyXt0sFL6Bpl4zexTjEibwkYM04 d/aeRYjQsQDoYBm6waxeTlxqGmJQpiJfaUxFnqmYfBAiW9qiDZwoU6mEXMSi/tC8 oFNm/OOpJqN/SA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:26:50 2025 by rpki-client