This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft File: g4dr-7WujP4Ra7X18oZKEWITqk8.mft (raw, json) Hash identifier: 3Y9Gkmut3/UBHjMVzRDuIn2rINPNTC4M9XM5pwx5RVY= Subject key identifier: 45:9D:48:19:76:65:49:5C:BE:FB:0D:BA:A1:40:A6:B8:D0:92:2F:67 Authority key identifier: 83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F Certificate issuer: /CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f Certificate serial: 019AF23F79D0A3E454CA045CE05923A952B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:00:37 +0000 Manifest this update: Sat 06 Dec 2025 06:00:37 +0000 Manifest next update: Sun 07 Dec 2025 06:00:37 +0000 Files and hashes: 1: g4dr-7WujP4Ra7X18oZKEWITqk8.crl (hash: OusNIZa7qwrIbuMA0dS0oLdQ140SghjuYx3frj3lrTk=) 2: on6c4T5uruUZ19cPvyYxdOa3Uo4.roa (hash: DzOTGbti7Ycex9SFmllizCyD+Zg7ddBWN0hhpKZi1gA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:79:d0:a3:e4:54:ca:04:5c:e0:59:23:a9:52:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f Validity Not Before: Dec 6 06:00:37 2025 GMT Not After : Dec 7 06:00:37 2025 GMT Subject: CN=459d48197665495cbefb0dbaa140a6b8d0922f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:49:a4:d6:2a:ed:11:05:a4:b9:bc:f1:ac:66: 53:cf:bc:0c:ef:8e:c2:6f:d9:9b:b6:cc:8e:a0:9d: 7e:f8:03:14:e5:08:46:2b:40:98:1b:a1:69:be:00: b7:ae:9a:3b:f7:72:97:64:fa:db:39:d9:91:3c:5c: 6c:ad:1d:10:9b:dc:59:27:30:07:6a:01:a3:25:81: 3d:9c:89:d0:eb:a7:62:a9:38:ba:a7:b3:f4:54:5b: 84:5b:27:75:4c:e3:1f:60:04:d1:9d:c1:da:19:2b: e5:66:4e:27:d8:2e:b7:7b:89:3f:66:21:21:40:e9: 14:58:74:37:5f:a0:84:26:5e:18:25:08:ab:d8:68: 03:0b:81:6f:7c:69:07:7a:5f:d4:c9:61:e7:eb:cc: f4:6c:99:6d:86:72:81:03:ba:93:bf:00:ba:0b:fe: 92:12:96:f9:7a:bf:e4:74:45:db:86:8c:36:8b:a4: b4:0e:34:37:ff:21:b7:b6:6a:89:b5:e5:04:c5:81: 24:06:8c:7a:33:18:ce:75:42:57:ec:0b:6f:3c:67: 9b:85:f2:f3:4f:8b:fb:bb:50:fa:12:e1:63:ed:27: 30:5f:94:b3:1b:14:c1:e1:49:3d:2a:9b:93:24:cc: 38:97:4f:8c:d6:1e:f9:a7:23:b9:0b:6d:9a:bb:75: f4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9D:48:19:76:65:49:5C:BE:FB:0D:BA:A1:40:A6:B8:D0:92:2F:67 X509v3 Authority Key Identifier: keyid:83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6c:c3:a1:03:dd:e8:81:01:9e:8b:db:d2:78:b2:87:6a:c3: b5:4d:f3:c1:5d:f2:8b:87:22:1d:6c:a4:33:c0:a5:98:77:73: d7:a6:8e:58:d5:6b:54:c1:3a:a2:63:7f:a0:1b:e5:7d:e7:7f: 9a:86:00:89:d8:56:1f:7b:a8:a4:82:0d:df:6d:2e:1f:75:af: e7:3c:3c:2b:83:b7:02:6d:d1:c9:7e:4c:e8:1f:fa:28:6d:a5: 27:e0:45:6b:e0:a9:1a:85:14:4f:16:42:2b:dc:fc:93:bf:90: 00:68:3c:90:54:6b:52:80:84:94:48:29:c2:13:53:f4:d2:f1: 32:4c:14:05:1e:28:75:44:28:cd:52:fd:21:8b:a9:3a:49:92: 25:62:ee:66:79:86:ec:a7:2e:bc:fd:44:d1:6a:76:30:94:43: eb:e4:14:cb:d3:9d:f3:b5:c3:31:8e:1b:48:2b:34:77:a3:d5: 7d:02:cc:cc:6e:45:b7:63:0d:fa:df:0f:e2:65:a7:d8:4c:47: 8f:d4:fc:d1:82:fb:c2:f2:96:7f:17:3f:4c:67:8a:96:44:82: cb:47:0e:16:87:72:20:cf:ef:43:f7:1f:78:57:f5:30:c8:3b: df:94:7b:12:b5:3f:a4:03:eb:92:3d:64:3c:16:57:97:dd:24: ff:33:30:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3nQo+RUygRc4FkjqVK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzODc2YmZiYjVhZThjZmUxMTZiYjVmNWYyODY0YTExNjIx M2FhNGYwHhcNMjUxMjA2MDYwMDM3WhcNMjUxMjA3MDYwMDM3WjAzMTEwLwYDVQQD Eyg0NTlkNDgxOTc2NjU0OTVjYmVmYjBkYmFhMTQwYTZiOGQwOTIyZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkmk1irtEQWkubzxrGZTz7wM747C b9mbtsyOoJ1++AMU5QhGK0CYG6FpvgC3rpo793KXZPrbOdmRPFxsrR0Qm9xZJzAH agGjJYE9nInQ66diqTi6p7P0VFuEWyd1TOMfYATRncHaGSvlZk4n2C63e4k/ZiEh QOkUWHQ3X6CEJl4YJQir2GgDC4FvfGkHel/UyWHn68z0bJlthnKBA7qTvwC6C/6S Epb5er/kdEXbhow2i6S0DjQ3/yG3tmqJteUExYEkBox6MxjOdUJX7AtvPGebhfLz T4v7u1D6EuFj7ScwX5SzGxTB4Uk9KpuTJMw4l0+M1h75pyO5C22au3X03QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWdSBl2ZUlcvvsNuqFAprjQki9nMB8GA1UdIwQY MBaAFIOHa/u1roz+EWu19fKGShFiE6pPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzRkci03V3VqUDRSYTdYMThvWktFV0lUcWs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80MmJkNWQtNGMzZS00M2Y0LWE4NTct N2U3MDlhZjA1N2Q1LzEvZzRkci03V3VqUDRSYTdYMThvWktFV0lUcWs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80MmJkNWQtNGMzZS00M2Y0LWE4NTctN2U3MDlhZjA1N2Q1 LzEvZzRkci03V3VqUDRSYTdYMThvWktFV0lUcWs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2zDoQPd 6IEBnovb0niyh2rDtU3zwV3yi4ciHWykM8ClmHdz16aOWNVrVME6omN/oBvlfed/ moYAidhWH3uopIIN320uH3Wv5zw8K4O3Am3RyX5M6B/6KG2lJ+BFa+CpGoUUTxZC K9z8k7+QAGg8kFRrUoCElEgpwhNT9NLxMkwUBR4odUQozVL9IYupOkmSJWLuZnmG 7KcuvP1E0Wp2MJRD6+QUy9Od87XDMY4bSCs0d6PVfQLMzG5Ft2MN+t8P4mWn2ExH j9T80YL7wvKWfxc/TGeKlkSCy0cOFodyIM/vQ/cfeFf1MMg735R7ErU/pAPrkj1k PBZXl90k/zMw4w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:31 2025 by rpki-client