This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft File: 04m0GNo0qjk07N4rcx3x1O1-yA4.mft (raw, json) Hash identifier: mgzzb8CCk0iZYpLblSWnOW97igxq9K30SqVw/y0NAx0= Subject key identifier: 17:F6:07:B8:E7:B5:80:EF:D2:F6:99:D0:A7:2B:D7:5B:F4:C4:A2:73 Authority key identifier: D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E Certificate issuer: /CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e Certificate serial: 019AF2098285D1CD3D21839D2670AEA77529 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft Manifest number: 1473 Signing time: Sat 06 Dec 2025 05:01:40 +0000 Manifest this update: Sat 06 Dec 2025 05:01:40 +0000 Manifest next update: Sun 07 Dec 2025 05:01:40 +0000 Files and hashes: 1: 04m0GNo0qjk07N4rcx3x1O1-yA4.crl (hash: CVrxtd5v+5iUJ+E8NdGXRfnwKbeaSYnWmglSTpUfSok=) 2: cWwT1szK5NdnVm06LjbXvG6eYg4.roa (hash: W4zwG2oQXcpZIEG+6MYSyZ5G6TI/ulbfB+7HQbWQK/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:82:85:d1:cd:3d:21:83:9d:26:70:ae:a7:75:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e Validity Not Before: Dec 6 05:01:40 2025 GMT Not After : Dec 7 05:01:40 2025 GMT Subject: CN=17f607b8e7b580efd2f699d0a72bd75bf4c4a273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8f:c5:3f:d1:73:d7:11:42:74:68:a2:96:1e: 0e:8f:98:d2:22:0e:20:4e:b3:91:87:f0:9b:f0:d7: ee:dd:23:e2:88:4b:b8:a3:a4:e0:a2:82:a2:42:8d: 80:fe:a0:96:4b:35:0e:44:26:f2:43:71:69:b7:84: 5c:e7:9a:4f:e1:5f:df:ef:51:61:45:38:b6:15:cb: d6:ab:f1:15:94:3d:06:09:72:68:14:76:4e:18:e2: 3b:33:bc:43:05:43:87:d0:2c:ae:e1:f7:39:2a:0f: 69:80:da:d7:ff:0d:2c:9e:0a:4d:e4:f1:bc:84:31: 3a:39:e8:b7:85:2f:ac:89:c8:80:7f:25:6c:e0:a2: fa:4a:61:2a:75:b6:d3:c2:4b:32:e9:a8:a0:a8:25: 6c:65:da:d2:01:45:3a:7d:78:a4:40:50:3c:da:21: 87:d9:b6:a8:ba:a5:18:28:1b:17:3a:3b:f0:42:dd: f9:2d:a6:85:b8:c0:cf:bd:6c:1a:0a:ce:8c:3b:5f: c1:5a:d7:ae:f0:bd:d4:0d:5e:7f:2c:ec:ba:f4:ca: 60:79:28:3e:2b:df:6f:e0:99:b2:48:14:fb:d5:cb: 18:b2:ba:bc:88:54:8d:57:71:c3:78:5e:7e:86:70: a9:bc:70:0a:ed:e3:84:9c:4d:36:b9:a3:94:8d:53: 99:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F6:07:B8:E7:B5:80:EF:D2:F6:99:D0:A7:2B:D7:5B:F4:C4:A2:73 X509v3 Authority Key Identifier: keyid:D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c0:cd:a3:ec:d7:aa:6b:84:bd:d4:f8:c1:f6:52:5f:d5:39: 5b:0c:e0:d6:f8:4b:e0:ed:0b:0f:b7:a2:9d:6a:b6:ac:e8:96: 99:7f:9f:cb:ff:37:d2:8b:65:68:d9:3a:7f:6d:9f:06:3e:7d: 24:b7:ed:ae:9f:60:6a:8a:ad:20:87:e6:2d:e2:8b:8d:d8:17: d8:4d:6e:1e:af:51:52:81:9d:6b:a8:1c:cb:96:95:eb:64:d0: 66:ad:f8:23:f3:be:5f:60:b4:69:76:f5:a1:6a:4f:58:eb:fa: ab:62:a4:e9:22:87:74:98:62:c3:f3:60:10:75:9f:26:73:52: d1:cb:6b:26:b9:bf:2e:59:cd:68:d5:26:bd:a6:0e:aa:cd:fc: 84:64:4f:59:1b:8f:be:92:cc:b0:f9:b2:a4:c6:77:11:11:40: d3:59:c7:41:19:9b:09:6d:2f:5e:0f:ef:03:59:c1:94:6b:04: 86:4c:d9:65:5f:84:ab:cb:72:dc:3f:9c:06:a5:03:c3:67:e4: b2:4b:7f:46:36:45:dd:b8:5b:28:f2:17:24:43:20:71:8b:2b: d1:ec:be:a4:5b:bc:e7:45:a4:d6:b7:45:18:fd:a8:42:39:48: e6:64:72:8b:3a:61:e4:a7:d6:b1:65:02:3b:87:e7:d2:25:71: 65:9c:e8:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYKF0c09IYOdJnCup3UpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzODliNDE4ZGEzNGFhMzkzNGVjZGUyYjczMWRmMWQ0ZWQ3 ZWM4MGUwHhcNMjUxMjA2MDUwMTQwWhcNMjUxMjA3MDUwMTQwWjAzMTEwLwYDVQQD EygxN2Y2MDdiOGU3YjU4MGVmZDJmNjk5ZDBhNzJiZDc1YmY0YzRhMjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI/FP9Fz1xFCdGiilh4Oj5jSIg4g TrORh/Cb8Nfu3SPiiEu4o6TgooKiQo2A/qCWSzUORCbyQ3Fpt4Rc55pP4V/f71Fh RTi2FcvWq/EVlD0GCXJoFHZOGOI7M7xDBUOH0Cyu4fc5Kg9pgNrX/w0sngpN5PG8 hDE6Oei3hS+siciAfyVs4KL6SmEqdbbTwksy6aigqCVsZdrSAUU6fXikQFA82iGH 2baouqUYKBsXOjvwQt35LaaFuMDPvWwaCs6MO1/BWteu8L3UDV5/LOy69MpgeSg+ K99v4JmySBT71csYsrq8iFSNV3HDeF5+hnCpvHAK7eOEnE02uaOUjVOZEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBf2B7jntYDv0vaZ0Kcr11v0xKJzMB8GA1UdIwQY MBaAFNOJtBjaNKo5NOzeK3Md8dTtfsgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDRtMEdObzBxamswN040cmN4M3gxTzEteUE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kNDcxNjMtODBlYS00NDRhLWE3OWYt MDNhYTI5YjZhNzZhLzEvMDRtMEdObzBxamswN040cmN4M3gxTzEteUE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kNDcxNjMtODBlYS00NDRhLWE3OWYtMDNhYTI5YjZhNzZh LzEvMDRtMEdObzBxamswN040cmN4M3gxTzEteUE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsDNo+zX qmuEvdT4wfZSX9U5Wwzg1vhL4O0LD7einWq2rOiWmX+fy/830otlaNk6f22fBj59 JLftrp9gaoqtIIfmLeKLjdgX2E1uHq9RUoGda6gcy5aV62TQZq34I/O+X2C0aXb1 oWpPWOv6q2Kk6SKHdJhiw/NgEHWfJnNS0ctrJrm/LlnNaNUmvaYOqs38hGRPWRuP vpLMsPmypMZ3ERFA01nHQRmbCW0vXg/vA1nBlGsEhkzZZV+Eq8ty3D+cBqUDw2fk skt/RjZF3bhbKPIXJEMgcYsr0ey+pFu850Wk1rdFGP2oQjlI5mRyizph5KfWsWUC O4fn0iVxZZzodw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:11 2025 by rpki-client