This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json) Hash identifier: 3tlV6kXo1b7LkB1OGtUJgqr3Bdsu0Z5kOrn6lSM9FS8= Subject key identifier: 7C:DE:24:BC:18:AF:FA:AB:1B:41:FF:8D:E6:F9:0E:C4:2C:85:CB:97 Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8 Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8 Certificate serial: 019B3E6C6A5F9DACB3CBBE1F784D9CDA5C6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft Manifest number: 0EEE Signing time: Sun 21 Dec 2025 01:00:50 +0000 Manifest this update: Sun 21 Dec 2025 01:00:50 +0000 Manifest next update: Mon 22 Dec 2025 01:00:50 +0000 Files and hashes: 1: N9xO1-NLybIuf2QGNV0iV1i1rRA.roa (hash: EUQ0hueLkMsL20to636qmUcLllL0XtQ2Nr9B2Qpz0Yw=) 2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: AJIX9aWX3QuSRBjA4Zhc8NO5jodv+FMj7hvblrPazUU=) 3: jaAQVqLk3N6vXmbGkwSHtHbashQ.roa (hash: 57hExgt+ivC5tWr9wIi1WBpxn1Wv7MUmq0/RKAWH5Xo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:6a:5f:9d:ac:b3:cb:be:1f:78:4d:9c:da:5c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8 Validity Not Before: Dec 21 01:00:50 2025 GMT Not After : Dec 22 01:00:50 2025 GMT Subject: CN=7cde24bc18affaab1b41ff8de6f90ec42c85cb97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7b:b2:b1:e8:cc:8e:51:82:46:90:76:b2:fe: 51:e4:47:6f:15:aa:9e:6a:1d:cc:67:b9:23:4a:24: 52:42:0f:a0:f9:a9:d7:9b:01:b3:44:55:1e:db:6e: a8:49:73:f0:77:09:48:96:fb:ec:2b:ff:da:b4:0c: 39:48:cf:00:a9:30:c2:09:73:0d:8f:64:96:1b:17: 4b:64:71:3c:a0:0b:c1:a7:c3:23:76:2f:ed:69:7b: 8b:77:08:1a:f8:11:ed:41:ec:7d:61:10:32:ea:6e: 37:4c:92:d2:86:27:68:14:0e:2f:7f:fd:cc:e6:ab: 47:b1:12:24:f0:99:ee:28:87:4c:b5:70:7c:41:4a: 6f:b1:a9:e3:8c:83:c3:9c:38:7c:56:81:45:78:e2: 8e:53:e8:6b:59:33:65:dd:41:63:23:07:0f:86:86: a0:8e:06:0d:af:8f:bc:f4:37:73:db:41:bc:5d:c7: 4c:59:e5:a0:18:4e:d5:95:ae:d9:04:12:e8:84:68: 6d:08:f7:f4:53:f2:ef:95:55:81:23:f4:e9:03:73: bb:75:ac:f4:b8:35:75:91:cb:0a:f1:92:da:4d:1b: 5b:e4:74:f8:36:f2:61:21:44:7a:c5:09:11:c4:d1: 00:89:c3:11:15:50:db:5b:3a:83:94:ba:78:01:16: 7c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DE:24:BC:18:AF:FA:AB:1B:41:FF:8D:E6:F9:0E:C4:2C:85:CB:97 X509v3 Authority Key Identifier: keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:24:84:7a:fb:ea:51:ea:64:d4:ae:7a:47:bf:4e:17:40:03: f7:4b:f2:ff:da:15:c6:f4:99:fc:45:29:95:fc:4e:8b:e8:94: 3c:e3:e0:d6:57:92:8c:fe:ac:cd:a6:ad:eb:5d:bd:63:3c:b7: 09:90:36:cf:8a:3b:7d:06:1e:85:45:2c:41:55:07:1e:b4:00: bd:8b:29:83:f0:6f:be:fa:87:6a:68:94:75:f8:ad:b2:f1:8d: 01:f3:ff:75:dd:ef:2d:13:fd:81:a0:f2:20:5f:11:9b:1e:e6: 72:e9:0a:62:49:b6:2b:1e:0f:cd:2a:40:1f:1b:5f:1a:a5:10: 34:12:1e:ea:1c:13:9a:f9:b2:bb:a0:8e:64:fa:93:48:c7:e6: 73:a0:c4:0a:31:92:9f:3f:c3:fc:42:e5:cb:c6:c2:3f:f1:97: 96:7a:61:43:ae:4e:a5:43:4c:8c:56:66:0a:d3:88:73:b3:2c: c7:5a:8e:41:fd:ed:72:47:69:fc:25:a6:63:02:54:5a:8c:67: ab:b1:27:62:a9:0d:1b:ff:b5:c1:f1:cf:4f:0f:bc:75:33:b0: ee:e1:9f:7f:a4:f3:45:86:52:d6:72:a9:1a:ac:ce:5d:76:bc: 6e:ce:1a:b8:d9:54:d7:4d:eb:83:e5:0b:82:22:d6:61:23:39: be:dc:e0:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bGpfnayzy74feE2c2lxrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmODJhZTlhMzA0YWMwODJjMThhMjg5MTY2NmY2NGNlZTgx ZDVjYTgwHhcNMjUxMjIxMDEwMDUwWhcNMjUxMjIyMDEwMDUwWjAzMTEwLwYDVQQD Eyg3Y2RlMjRiYzE4YWZmYWFiMWI0MWZmOGRlNmY5MGVjNDJjODVjYjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnuysejMjlGCRpB2sv5R5EdvFaqe ah3MZ7kjSiRSQg+g+anXmwGzRFUe226oSXPwdwlIlvvsK//atAw5SM8AqTDCCXMN j2SWGxdLZHE8oAvBp8Mjdi/taXuLdwga+BHtQex9YRAy6m43TJLShidoFA4vf/3M 5qtHsRIk8JnuKIdMtXB8QUpvsanjjIPDnDh8VoFFeOKOU+hrWTNl3UFjIwcPhoag jgYNr4+89Ddz20G8XcdMWeWgGE7Vla7ZBBLohGhtCPf0U/LvlVWBI/TpA3O7daz0 uDV1kcsK8ZLaTRtb5HT4NvJhIUR6xQkRxNEAicMRFVDbWzqDlLp4ARZ8PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzeJLwYr/qrG0H/jeb5DsQshcuXMB8GA1UdIwQY MBaAFF+CrpowSsCCwYookWZvZM7oHVyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTct M2VjNDQ3MzEwZGZiLzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTctM2VjNDQ3MzEwZGZi LzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiSEevvq Uepk1K56R79OF0AD90vy/9oVxvSZ/EUplfxOi+iUPOPg1leSjP6szaat6129Yzy3 CZA2z4o7fQYehUUsQVUHHrQAvYspg/BvvvqHamiUdfitsvGNAfP/dd3vLRP9gaDy IF8Rmx7mcukKYkm2Kx4PzSpAHxtfGqUQNBIe6hwTmvmyu6COZPqTSMfmc6DECjGS nz/D/ELly8bCP/GXlnphQ65OpUNMjFZmCtOIc7Msx1qOQf3tckdp/CWmYwJUWoxn q7EnYqkNG/+1wfHPTw+8dTOw7uGff6TzRYZS1nKpGqzOXXa8bs4auNlU103rg+UL giLWYSM5vtzgHQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:45:09 2025 by rpki-client