This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft File: x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft (raw, json) Hash identifier: VNlbnc86oBzMa4av4gG5laur0w492fXYVx0LbktRFCo= Subject key identifier: 80:96:86:18:89:9C:B6:1C:CA:A8:CD:3A:19:5A:DE:47:C9:19:D1:73 Authority key identifier: C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC Certificate issuer: /CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc Certificate serial: 019B6D3333FE3C5C9FE8A0B4DC3C363D7FE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft Manifest number: 147F Signing time: Tue 30 Dec 2025 03:00:30 +0000 Manifest this update: Tue 30 Dec 2025 03:00:30 +0000 Manifest next update: Wed 31 Dec 2025 03:00:30 +0000 Files and hashes: 1: MnEhxi_woQM3cXv5W6rDC8mvyKY.roa (hash: kYcuDCyVLUhxBSbVQtzSrwd5iX/KUoxvsuaVTI7bR60=) 2: x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl (hash: AcEC/DhBOlxNik4cbWxq0R8CIx7+DqCJnz+5oaf3/IE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:33:fe:3c:5c:9f:e8:a0:b4:dc:3c:36:3d:7f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc Validity Not Before: Dec 30 03:00:30 2025 GMT Not After : Dec 31 03:00:30 2025 GMT Subject: CN=80968618899cb61ccaa8cd3a195ade47c919d173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:a9:4a:86:e4:ec:57:92:03:ca:95:a3:a2: 0b:f1:f5:d4:51:5a:d0:97:c7:c9:34:e6:98:dd:9c: 66:21:36:7a:87:37:33:27:5b:42:f9:95:3e:27:b0: 9e:dc:93:cf:e1:3c:c9:5d:15:d1:32:71:1e:3d:8c: bc:2f:79:1e:34:39:6e:b6:7d:54:e9:9e:18:62:58: 49:a6:9d:ff:43:3a:53:1c:26:2b:7c:2e:09:db:f9: 25:c8:3a:44:9a:1d:e0:6e:af:3a:12:30:9d:68:eb: 48:b8:64:cc:49:67:08:87:63:51:a3:6d:a6:a8:55: 33:16:09:0b:18:b3:79:cd:77:e4:54:92:03:e1:0d: 55:71:e8:0f:7d:74:23:eb:f5:6a:88:6c:e1:78:25: 29:61:31:7a:20:70:80:ab:54:7e:c3:bd:98:00:07: ce:12:d9:43:c4:43:0c:72:9c:fc:60:81:23:ee:38: 01:ce:37:84:af:29:a6:f4:ba:fc:38:b7:a5:74:7d: 98:51:49:46:af:95:fd:77:7b:ab:69:5e:34:a7:44: 40:a5:25:67:db:0c:70:98:c9:79:4f:ad:08:cb:a6: 6f:ff:ae:31:26:1b:b6:3a:0a:fd:4f:b9:98:81:de: 0b:89:94:d5:7f:0a:f0:bf:9f:e0:90:0b:e2:75:e5: 52:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:96:86:18:89:9C:B6:1C:CA:A8:CD:3A:19:5A:DE:47:C9:19:D1:73 X509v3 Authority Key Identifier: keyid:C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:6f:65:e2:94:e4:73:d9:23:19:4e:c9:4f:aa:ed:00:b1:af: a2:3e:3a:13:31:63:15:89:ee:8c:1b:6c:2d:10:32:b0:bb:ad: 68:32:89:9d:06:f8:0b:6d:ea:5e:4f:1a:ab:21:ae:78:f1:2b: 01:92:f1:39:6c:f5:74:30:cd:9f:58:42:5e:1a:d4:6e:3c:33: c6:cc:1a:00:c3:04:6a:6e:34:d7:25:b0:70:9d:60:3b:fb:f3: 83:72:93:bc:0d:f2:66:0b:f3:89:de:9b:7b:40:26:61:9d:53: 17:83:5f:b3:23:da:2c:cd:73:29:df:86:76:2a:1e:1c:46:fd: c9:67:35:59:93:94:24:b9:a0:23:ec:38:c4:80:c2:a5:6c:18: 9a:4e:91:df:a7:d9:c7:1c:4d:f7:6c:db:53:3b:0c:b1:84:43: cf:bb:75:b6:1a:c1:60:23:56:52:20:0f:d1:f6:99:dd:39:a5: d8:37:5f:ab:58:85:6e:24:ca:c8:fd:1b:b5:95:a4:a7:ae:88: f1:ae:57:ce:ac:e8:2c:d0:4d:f1:52:ca:4b:51:92:bc:44:15: 2a:1f:59:78:0f:d4:3f:52:09:05:02:29:05:52:eb:a5:48:d5: 5c:fe:22:d4:87:82:ec:6d:2f:81:78:67:5d:0b:2c:af:4a:46: 30:d7:94:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttMzP+PFyf6KC03Dw2PX/gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3OGI1MmRkZmQwYmU1NjFkNDEwY2E4ODQ2ZmM3OTdlMjI5 OGIzY2MwHhcNMjUxMjMwMDMwMDMwWhcNMjUxMjMxMDMwMDMwWjAzMTEwLwYDVQQD Eyg4MDk2ODYxODg5OWNiNjFjY2FhOGNkM2ExOTVhZGU0N2M5MTlkMTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt6pSobk7FeSA8qVo6IL8fXUUVrQ l8fJNOaY3ZxmITZ6hzczJ1tC+ZU+J7Ce3JPP4TzJXRXRMnEePYy8L3keNDlutn1U 6Z4YYlhJpp3/QzpTHCYrfC4J2/klyDpEmh3gbq86EjCdaOtIuGTMSWcIh2NRo22m qFUzFgkLGLN5zXfkVJID4Q1VcegPfXQj6/VqiGzheCUpYTF6IHCAq1R+w72YAAfO EtlDxEMMcpz8YIEj7jgBzjeErymm9Lr8OLeldH2YUUlGr5X9d3uraV40p0RApSVn 2wxwmMl5T60Iy6Zv/64xJhu2Ogr9T7mYgd4LiZTVfwrwv5/gkAvideVS1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICWhhiJnLYcyqjNOhla3kfJGdFzMB8GA1UdIwQY MBaAFMeLUt39C+Vh1BDKiEb8eX4imLPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDR0UzNmMEw1V0hVRU1xSVJ2eDVmaUtZczh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81MjU3MDctMWExMi00MTM4LWFlNDYt OWY3ZThhNjEyMmEzLzEveDR0UzNmMEw1V0hVRU1xSVJ2eDVmaUtZczh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy81MjU3MDctMWExMi00MTM4LWFlNDYtOWY3ZThhNjEyMmEz LzEveDR0UzNmMEw1V0hVRU1xSVJ2eDVmaUtZczh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeG9l4pTk c9kjGU7JT6rtALGvoj46EzFjFYnujBtsLRAysLutaDKJnQb4C23qXk8aqyGuePEr AZLxOWz1dDDNn1hCXhrUbjwzxswaAMMEam401yWwcJ1gO/vzg3KTvA3yZgvzid6b e0AmYZ1TF4NfsyPaLM1zKd+GdioeHEb9yWc1WZOUJLmgI+w4xIDCpWwYmk6R36fZ xxxN92zbUzsMsYRDz7t1thrBYCNWUiAP0faZ3Tml2Ddfq1iFbiTKyP0btZWkp66I 8a5XzqzoLNBN8VLKS1GSvEQVKh9ZeA/UP1IJBQIpBVLrpUjVXP4i1IeC7G0vgXhn XQssr0pGMNeUmQ== -----END CERTIFICATE-----Generated at Tue Dec 30 04:38:09 2025 by rpki-client