This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft File: g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft (raw, json) Hash identifier: oZLIFlE8eXXqBlOx+bRBT3Avyu9OMTBxSdQMCV//t+w= Subject key identifier: 38:7F:3C:63:90:03:D0:60:9B:D6:03:A9:67:A7:37:2B:C0:A9:11:52 Authority key identifier: 83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9 Certificate issuer: /CN=838c4f810d7a20a783a4fab1c034467b825051b9 Certificate serial: 019AF20942E64B4F9609D450998FAB4B9733 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:24 +0000 Manifest this update: Sat 06 Dec 2025 05:01:24 +0000 Manifest next update: Sun 07 Dec 2025 05:01:24 +0000 Files and hashes: 1: JRNBLXBQWgTuBg1-jZxrM7iYCuQ.roa (hash: A/80zWYF3RYk10mzwst52/4Qz1yzT35DfBM28lDeN+s=) 2: g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl (hash: nlJpcyAsEQAohnbaw/KGjgg1Sq5pq5gMWa6B6Ns2PKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:42:e6:4b:4f:96:09:d4:50:99:8f:ab:4b:97:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=838c4f810d7a20a783a4fab1c034467b825051b9 Validity Not Before: Dec 6 05:01:24 2025 GMT Not After : Dec 7 05:01:24 2025 GMT Subject: CN=387f3c639003d0609bd603a967a7372bc0a91152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e8:26:5c:9f:1b:02:1e:e2:95:69:f9:7f:57: b3:73:38:00:c6:d3:32:0e:ba:94:35:a9:36:2f:12: b6:f4:67:88:80:22:03:1e:c1:c0:dd:0f:06:c3:d2: a4:f3:38:8e:5c:ba:4d:07:75:54:ae:63:41:67:e3: e5:77:da:d0:71:00:3e:0e:0c:0a:e3:57:3d:05:7f: 19:df:41:07:c7:7e:95:6e:8a:8f:cf:a9:aa:a1:e2: 2b:28:ba:2d:d9:8a:3d:97:a9:d3:7c:62:6d:ee:a1: 32:b8:51:42:81:46:85:a1:ad:67:44:7c:b6:de:d7: 0c:12:66:a9:71:cb:32:d4:18:b4:6b:07:8e:db:b7: e0:e7:67:04:f7:b1:ed:97:87:31:e4:74:24:ec:51: ea:cf:24:cc:ad:31:b2:b5:9e:76:12:42:e1:dd:e0: fa:2b:37:59:3d:94:da:6b:5a:3b:a3:3a:5c:e8:04: b8:1e:da:5a:64:08:99:11:04:8d:1b:79:d4:15:3d: 8b:22:2b:0b:74:1d:7a:3f:3f:db:f3:06:e1:da:29: 9d:bb:41:5d:d2:bf:f9:0f:45:ea:ae:b7:36:76:a0: 45:8f:a7:d7:15:c7:4f:08:2b:9b:7d:fc:eb:26:32: 7a:53:34:27:83:4c:bc:c0:9c:2a:77:74:6c:06:7e: fc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7F:3C:63:90:03:D0:60:9B:D6:03:A9:67:A7:37:2B:C0:A9:11:52 X509v3 Authority Key Identifier: keyid:83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:98:63:a5:7c:fd:b0:02:97:66:4a:1b:d9:44:16:86:29:74: f9:1f:1b:4c:3b:5e:28:80:3f:94:13:e0:24:5f:60:21:d4:08: ca:df:a4:03:53:3d:bf:b9:52:dd:fd:d6:25:4e:43:b3:c7:35: c1:11:02:bf:ec:51:d8:71:7c:f6:9d:02:41:11:bc:d6:18:ac: df:98:64:7a:ec:43:47:45:0d:94:15:74:3b:57:a1:35:80:4d: c1:71:13:e1:af:67:25:47:d2:59:aa:10:21:25:29:f5:26:bf: 44:0f:d3:e2:ee:f0:8f:44:ad:11:d8:8b:35:b6:76:fa:25:7a: 80:0e:d2:2d:ea:d9:3e:79:d4:ff:5a:f4:2c:57:e5:0e:d8:8d: e3:08:e6:f3:10:25:c5:77:fd:8a:aa:0d:8f:ee:ef:7f:65:fe: 6f:98:bc:0a:e0:54:08:be:06:e8:c6:e0:f5:b8:5d:a2:26:eb: 16:f2:46:bb:6f:4b:55:2a:59:ce:32:37:4e:fb:94:62:23:7e: b6:06:f0:60:dd:a6:42:05:b2:0c:e1:b4:07:b3:28:ae:24:90: ca:42:d6:2f:59:27:24:f7:ae:a5:d4:49:cd:c6:8e:42:12:88: c9:1d:75:50:d4:35:00:21:f1:05:4a:c2:40:94:06:7e:60:fc: 28:40:00:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCULmS0+WCdRQmY+rS5czMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOGM0ZjgxMGQ3YTIwYTc4M2E0ZmFiMWMwMzQ0NjdiODI1 MDUxYjkwHhcNMjUxMjA2MDUwMTI0WhcNMjUxMjA3MDUwMTI0WjAzMTEwLwYDVQQD EygzODdmM2M2MzkwMDNkMDYwOWJkNjAzYTk2N2E3MzcyYmMwYTkxMTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+gmXJ8bAh7ilWn5f1ezczgAxtMy DrqUNak2LxK29GeIgCIDHsHA3Q8Gw9Kk8ziOXLpNB3VUrmNBZ+Pld9rQcQA+DgwK 41c9BX8Z30EHx36VboqPz6mqoeIrKLot2Yo9l6nTfGJt7qEyuFFCgUaFoa1nRHy2 3tcMEmapccsy1Bi0aweO27fg52cE97Htl4cx5HQk7FHqzyTMrTGytZ52EkLh3eD6 KzdZPZTaa1o7ozpc6AS4HtpaZAiZEQSNG3nUFT2LIisLdB16Pz/b8wbh2imdu0Fd 0r/5D0Xqrrc2dqBFj6fXFcdPCCubffzrJjJ6UzQng0y8wJwqd3RsBn78lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDh/PGOQA9Bgm9YDqWenNyvAqRFSMB8GA1UdIwQY MBaAFIOMT4ENeiCng6T6scA0RnuCUFG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzR4UGdRMTZJS2VEcFBxeHdEUkdlNEpRVWJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yNTA0MjMtZmE5MS00YTIyLWI4M2Et ODNlNDc1ODBiM2VjLzEvZzR4UGdRMTZJS2VEcFBxeHdEUkdlNEpRVWJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8yNTA0MjMtZmE5MS00YTIyLWI4M2EtODNlNDc1ODBiM2Vj LzEvZzR4UGdRMTZJS2VEcFBxeHdEUkdlNEpRVWJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfphjpXz9 sAKXZkob2UQWhil0+R8bTDteKIA/lBPgJF9gIdQIyt+kA1M9v7lS3f3WJU5Ds8c1 wRECv+xR2HF89p0CQRG81his35hkeuxDR0UNlBV0O1ehNYBNwXET4a9nJUfSWaoQ ISUp9Sa/RA/T4u7wj0StEdiLNbZ2+iV6gA7SLerZPnnU/1r0LFflDtiN4wjm8xAl xXf9iqoNj+7vf2X+b5i8CuBUCL4G6Mbg9bhdoibrFvJGu29LVSpZzjI3TvuUYiN+ tgbwYN2mQgWyDOG0B7MoriSQykLWL1knJPeupdRJzcaOQhKIyR11UNQ1ACHxBUrC QJQGfmD8KEAAsg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:31 2025 by rpki-client