This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft File: rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft (raw, json) Hash identifier: lS97vUjVYhYlMQrR6xDq0wHcyRbULzNSRkxa02dMAOk= Subject key identifier: D8:88:3F:5B:F1:B3:A0:0C:1D:5B:E9:85:76:CE:6A:EB:26:54:50:03 Authority key identifier: AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34 Certificate issuer: /CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434 Certificate serial: 019AF208F8F5251E1BEA89F1171E4A490E60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:05 +0000 Manifest this update: Sat 06 Dec 2025 05:01:05 +0000 Manifest next update: Sun 07 Dec 2025 05:01:05 +0000 Files and hashes: 1: AwXuQoOBDpLkL6JkvNNI78Almh8.roa (hash: rgsGgbJMkxlD2Xt53P3qCIDlwFDG3I1YNJZMV8rGCso=) 2: rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl (hash: fsHxsf9eldvAvqnNwVgA+HQOBsGRbltFi+9HobvING0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f8:f5:25:1e:1b:ea:89:f1:17:1e:4a:49:0e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434 Validity Not Before: Dec 6 05:01:05 2025 GMT Not After : Dec 7 05:01:05 2025 GMT Subject: CN=d8883f5bf1b3a00c1d5be98576ce6aeb26545003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:df:eb:77:fa:6f:62:35:06:d3:ee:0b:15:7d: 10:58:52:a5:d7:aa:f7:78:3c:71:cd:d1:e5:87:dd: 26:99:22:74:36:23:05:26:78:2b:2b:fa:60:25:0d: 3f:d9:1e:44:f0:6c:fa:8f:69:f1:73:94:e8:57:57: de:4e:88:92:1f:17:fd:08:30:5e:7e:ec:d2:50:a2: 74:1f:c3:7a:23:21:4f:44:0b:84:09:02:7b:fb:6a: e0:12:97:cf:40:17:9b:8d:75:2e:5f:58:17:32:02: 20:f8:dc:ac:ea:20:bd:a5:9f:fb:0b:c0:3c:2d:16: b0:dd:64:4a:06:22:f4:f2:3f:80:42:22:9e:2a:5f: 0c:6f:40:fd:31:f5:78:29:3b:da:3b:31:e7:9d:ab: 5c:97:eb:b4:e5:8a:61:c9:a7:5b:44:30:4a:d8:a6: ca:d3:52:0c:6e:bb:fb:c5:60:19:03:f9:78:6f:c2: 95:06:e7:a0:83:97:d7:c1:df:4b:b1:17:f6:a5:12: 2c:46:21:6e:f0:b4:d6:20:61:7b:ba:51:2e:b0:cc: d4:df:07:8a:17:35:0e:f2:d7:aa:92:10:cc:bc:7c: 26:eb:c8:52:04:0c:93:f4:30:61:9e:f2:12:55:a8: 63:f2:67:b9:58:51:e8:b8:31:3a:d2:7b:b1:b9:69: 34:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:88:3F:5B:F1:B3:A0:0C:1D:5B:E9:85:76:CE:6A:EB:26:54:50:03 X509v3 Authority Key Identifier: keyid:AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c5:70:dc:0c:c3:02:a7:fe:38:8b:87:80:24:09:ab:6e:48: cd:af:29:68:59:13:f7:d5:f5:23:99:4e:f4:64:23:ac:05:55: b8:03:a6:ec:85:a4:f8:6c:e6:6d:b1:8a:1e:50:b7:82:f7:26: 37:18:db:8a:57:f7:34:21:0e:74:e1:06:c0:1a:4d:eb:f1:fa: ee:12:69:e2:a1:c7:1b:ee:ce:a1:94:9a:aa:d4:5c:26:b4:86: b9:36:ab:e1:85:70:6d:0b:5f:ef:d1:2f:fc:70:8c:7b:12:42: ef:02:b9:ad:9e:05:90:bc:c6:ac:43:e4:ce:92:d2:6d:a0:ff: 8c:c2:f3:70:5c:28:0e:15:a1:a3:03:4f:89:f1:36:e6:e5:17: e2:e1:b9:33:d5:9f:5b:d2:ac:ad:75:70:4b:87:36:ab:c9:d2: 38:23:c1:8b:b2:59:14:4e:69:d3:13:28:6a:1c:5d:03:90:1d: 9b:c5:02:69:08:56:e2:83:34:7f:14:f9:20:9f:57:57:47:e2: dd:f1:ed:a5:3c:a8:5c:0f:da:e9:dd:f0:04:1a:0d:19:4e:6f: 78:c0:53:c9:89:5d:25:fd:40:1d:43:94:af:e5:c5:87:33:69: e4:77:77:f2:38:31:7f:f7:7b:a3:7f:cb:b6:ec:73:02:be:ff: 43:22:5b:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPj1JR4b6onxFx5KSQ5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNmUzZTEzMTExNDM5MTQ3ZjY1ZDMzN2Q1ZjBiMWJjMmVk Nzk0MzQwHhcNMjUxMjA2MDUwMTA1WhcNMjUxMjA3MDUwMTA1WjAzMTEwLwYDVQQD EyhkODg4M2Y1YmYxYjNhMDBjMWQ1YmU5ODU3NmNlNmFlYjI2NTQ1MDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd/rd/pvYjUG0+4LFX0QWFKl16r3 eDxxzdHlh90mmSJ0NiMFJngrK/pgJQ0/2R5E8Gz6j2nxc5ToV1feToiSHxf9CDBe fuzSUKJ0H8N6IyFPRAuECQJ7+2rgEpfPQBebjXUuX1gXMgIg+Nys6iC9pZ/7C8A8 LRaw3WRKBiL08j+AQiKeKl8Mb0D9MfV4KTvaOzHnnatcl+u05YphyadbRDBK2KbK 01IMbrv7xWAZA/l4b8KVBuegg5fXwd9LsRf2pRIsRiFu8LTWIGF7ulEusMzU3weK FzUO8teqkhDMvHwm68hSBAyT9DBhnvISVahj8me5WFHouDE60nuxuWk0wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiIP1vxs6AMHVvphXbOausmVFADMB8GA1UdIwQY MBaAFKxuPhMRFDkUf2XTN9Xwsbwu15Q0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckc0LUV4RVVPUlJfWmRNMzFmQ3h2QzdYbERRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xMmJhMmEtMGNjYS00MzdhLTk4NWQt ZmVmZTg1N2ZlYTgwLzEvckc0LUV4RVVPUlJfWmRNMzFmQ3h2QzdYbERRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xMmJhMmEtMGNjYS00MzdhLTk4NWQtZmVmZTg1N2ZlYTgw LzEvckc0LUV4RVVPUlJfWmRNMzFmQ3h2QzdYbERRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcVw3AzD Aqf+OIuHgCQJq25Iza8paFkT99X1I5lO9GQjrAVVuAOm7IWk+GzmbbGKHlC3gvcm Nxjbilf3NCEOdOEGwBpN6/H67hJp4qHHG+7OoZSaqtRcJrSGuTar4YVwbQtf79Ev /HCMexJC7wK5rZ4FkLzGrEPkzpLSbaD/jMLzcFwoDhWhowNPifE25uUX4uG5M9Wf W9KsrXVwS4c2q8nSOCPBi7JZFE5p0xMoahxdA5Adm8UCaQhW4oM0fxT5IJ9XV0fi 3fHtpTyoXA/a6d3wBBoNGU5veMBTyYldJf1AHUOUr+XFhzNp5Hd38jgxf/d7o3/L tuxzAr7/QyJbLg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:37 2025 by rpki-client