This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft File: xX4MBpirwZpWiv7OaxkM7QM6coU.mft (raw, json) Hash identifier: SRr8pLV1x6d1ynH0cvqDzJphLbqcRyj0FDuiiTXO1iE= Subject key identifier: D1:19:11:59:27:15:8A:F6:11:CD:47:59:EA:E6:71:CA:37:47:31:12 Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85 Certificate issuer: /CN=c57e0c0698abc19a568afece6b190ced033a7285 Certificate serial: 019B413696A0E29D51B68FC867BEFCD58910 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft Manifest number: 1688 Signing time: Sun 21 Dec 2025 14:00:55 +0000 Manifest this update: Sun 21 Dec 2025 14:00:55 +0000 Manifest next update: Mon 22 Dec 2025 14:00:55 +0000 Files and hashes: 1: 7mkqMSDi-HCLbWFxZVVqp4oDZV4.roa (hash: AgQ4cj261uo6E9KSd61RuHIpkNasVN9RKxcJv5djL7w=) 2: xX4MBpirwZpWiv7OaxkM7QM6coU.crl (hash: AtBeU2n8d6jx8QOIK4K7WwxlaTYGM3+u09T6yArShrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:96:a0:e2:9d:51:b6:8f:c8:67:be:fc:d5:89:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285 Validity Not Before: Dec 21 14:00:55 2025 GMT Not After : Dec 22 14:00:55 2025 GMT Subject: CN=d119115927158af611cd4759eae671ca37473112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:aa:b8:1b:6d:a3:36:25:99:80:47:85:06: 70:35:f7:8a:a5:d8:42:6c:f5:9f:04:14:62:c2:a4: 03:58:69:0e:de:19:57:4f:81:a3:9b:8c:ab:5d:30: 8a:1d:c9:53:cb:36:64:23:4e:5e:6a:ad:d0:00:eb: 99:23:a9:ee:84:68:60:3f:b0:dd:a1:17:13:e7:5c: eb:7c:15:7b:03:6b:cd:1b:8a:83:cc:ae:2c:9e:dc: d9:b1:9c:ca:5a:98:83:c3:99:82:fd:7f:7b:1c:48: 9e:ee:f6:fc:0b:fa:d4:f9:b2:e2:2a:11:82:6a:84: 69:89:5d:cb:da:75:fd:0a:b1:78:8f:95:36:e3:61: 9a:e4:a3:8f:94:3e:14:f3:ed:75:eb:86:ac:c2:12: ac:77:d4:6b:72:47:17:ef:81:1f:88:87:8f:c1:40: 03:f1:6b:28:b1:f6:a6:5e:65:02:50:f7:be:7c:11: 85:00:47:f8:5a:95:e8:84:96:21:b1:15:e6:2e:f4: 9f:02:42:42:8b:18:60:a9:82:94:a5:92:b2:7f:80: 4c:82:13:dd:1c:3e:aa:92:12:13:c7:2a:66:29:73: 89:c3:09:f3:f5:8d:f7:72:63:60:b8:f4:14:8f:96: e4:66:21:61:c4:a6:42:68:15:ce:92:50:06:87:bf: 79:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:19:11:59:27:15:8A:F6:11:CD:47:59:EA:E6:71:CA:37:47:31:12 X509v3 Authority Key Identifier: keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:94:15:3a:12:d8:61:3d:d1:c6:eb:2c:b1:55:be:84:41:18: 45:7b:1e:54:80:4e:be:4a:ac:e1:a8:af:df:59:38:ec:65:eb: b7:92:d1:95:5e:df:b5:05:55:92:6d:cb:59:69:34:f0:86:e6: fa:e8:74:0e:2e:92:99:bc:ec:d7:c3:e1:7a:56:87:87:24:ec: 36:9c:7a:1c:cd:bf:bb:15:48:0f:cd:56:84:46:3d:73:d3:02: 2a:f3:65:98:fd:d8:ab:78:8a:af:40:44:a7:b1:85:e7:f7:1b: c9:c4:60:e9:34:28:41:e4:d5:c5:6b:99:fa:c7:74:e5:24:3c: 42:97:bf:2a:67:df:40:19:b7:41:23:1b:fa:93:b3:62:fe:1b: 80:e2:5e:00:66:49:99:ac:34:11:f9:35:de:f6:62:ae:3a:d9: e7:5f:e8:6d:3f:db:68:3e:05:dd:bd:bf:43:8b:4f:8d:de:da: 97:2c:21:ca:f1:4d:b3:06:d0:01:80:4c:a3:0e:12:aa:dd:c3: 6b:45:9e:3c:0b:4d:0a:7e:4b:6a:09:d1:15:aa:7d:f0:88:58: 89:1d:22:36:f0:15:d6:43:80:11:de:1f:8c:80:7b:c2:d9:36: 3d:1d:9d:83:df:94:97:22:17:79:af:17:11:9d:87:6b:69:c7: 6a:89:81:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNpag4p1Rto/IZ7781YkQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1N2UwYzA2OThhYmMxOWE1NjhhZmVjZTZiMTkwY2VkMDMz YTcyODUwHhcNMjUxMjIxMTQwMDU1WhcNMjUxMjIyMTQwMDU1WjAzMTEwLwYDVQQD EyhkMTE5MTE1OTI3MTU4YWY2MTFjZDQ3NTllYWU2NzFjYTM3NDczMTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwaquBttozYlmYBHhQZwNfeKpdhC bPWfBBRiwqQDWGkO3hlXT4Gjm4yrXTCKHclTyzZkI05eaq3QAOuZI6nuhGhgP7Dd oRcT51zrfBV7A2vNG4qDzK4sntzZsZzKWpiDw5mC/X97HEie7vb8C/rU+bLiKhGC aoRpiV3L2nX9CrF4j5U242Ga5KOPlD4U8+1164aswhKsd9RrckcX74EfiIePwUAD 8WsosfamXmUCUPe+fBGFAEf4WpXohJYhsRXmLvSfAkJCixhgqYKUpZKyf4BMghPd HD6qkhITxypmKXOJwwnz9Y33cmNguPQUj5bkZiFhxKZCaBXOklAGh795VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEZEVknFYr2Ec1HWermcco3RzESMB8GA1UdIwQY MBaAFMV+DAaYq8GaVor+zmsZDO0DOnKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFg0TUJwaXJ3WnBXaXY3T2F4a003UU02Y29VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80YThkMmEtNjY0Yi00NDY0LWE0ZTkt MTcwOWY3YzdkNWU4LzEveFg0TUJwaXJ3WnBXaXY3T2F4a003UU02Y29VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS80YThkMmEtNjY0Yi00NDY0LWE0ZTktMTcwOWY3YzdkNWU4 LzEveFg0TUJwaXJ3WnBXaXY3T2F4a003UU02Y29VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZQVOhLY YT3RxusssVW+hEEYRXseVIBOvkqs4aiv31k47GXrt5LRlV7ftQVVkm3LWWk08Ibm +uh0Di6Smbzs18PhelaHhyTsNpx6HM2/uxVID81WhEY9c9MCKvNlmP3Yq3iKr0BE p7GF5/cbycRg6TQoQeTVxWuZ+sd05SQ8Qpe/KmffQBm3QSMb+pOzYv4bgOJeAGZJ maw0Efk13vZirjrZ51/obT/baD4F3b2/Q4tPjd7alywhyvFNswbQAYBMow4Sqt3D a0WePAtNCn5LagnRFap98IhYiR0iNvAV1kOAEd4fjIB7wtk2PR2dg9+UlyIXea8X EZ2Ha2nHaomBGg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:48:32 2025 by rpki-client