This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft File: x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json) Hash identifier: pPQ9IxEv8YqguzvQdWtfrAvQCJFeirpJ2YISac4kPwM= Subject key identifier: 27:4B:55:37:BE:74:21:BD:D1:59:EB:4C:05:62:AD:8E:D3:51:64:4B Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70 Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270 Certificate serial: 019B383346F6D79FEDA4546BB4796AC5EDFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft Manifest number: 178A Signing time: Fri 19 Dec 2025 20:00:43 +0000 Manifest this update: Fri 19 Dec 2025 20:00:43 +0000 Manifest next update: Sat 20 Dec 2025 20:00:43 +0000 Files and hashes: 1: 1k_-7iaL3-MiuBsEwzsqEjXw8Aw.roa (hash: MvGzqoey/hCfcwmRhO21Z8RbLw85JPgQ7VzzDBc6ROg=) 2: B5D9MGD5HNxMn2ytn4E-XXNfFUU.roa (hash: ZF/ZQXZ6OV0r+xXPNKcSMNFa0v6w/gQVQYon3rz/hOA=) 3: V3axZivK3WrjDfjp92dOnzYIRGs.roa (hash: Nvb4IvNDmUJ1oDhZXKGSuAJ/dOxxdh42DYgaZcrkkzQ=) 4: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: LJi0rcxXOImV8CoFI6phvWNS7fA3+MT1eVvt0E3EnU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:46:f6:d7:9f:ed:a4:54:6b:b4:79:6a:c5:ed:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270 Validity Not Before: Dec 19 20:00:43 2025 GMT Not After : Dec 20 20:00:43 2025 GMT Subject: CN=274b5537be7421bdd159eb4c0562ad8ed351644b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:19:81:09:7c:1e:b4:9f:50:d1:0d:f3:53:54: 7d:1c:7b:ab:5e:4d:6f:4b:ab:6a:e3:37:1d:3d:1a: 2b:1f:97:8f:86:67:1b:18:6d:c6:98:a4:d4:e2:b5: 8c:49:6a:da:3f:46:26:77:84:ec:48:13:b4:88:fb: 86:77:ef:b9:d2:fe:de:cc:aa:dc:bb:39:f0:46:0c: 3d:4f:41:15:26:80:40:e7:75:cd:9f:08:7f:7b:e1: 69:72:a5:1a:44:e1:a2:bd:22:ab:2c:0c:97:64:da: e3:61:f3:c6:5c:db:8f:be:77:2e:9b:f3:2a:87:d3: e9:db:31:e7:4d:e9:63:21:a3:bb:e6:4b:57:fd:09: 4c:69:88:8e:23:a8:1d:e5:57:d6:bc:53:7b:e8:97: 3d:45:d4:65:88:37:1f:f3:5e:f6:67:20:e1:25:b9: c3:9b:2a:22:71:f2:7e:e3:f2:13:e3:fe:14:b9:fb: 56:82:28:41:c9:bb:ed:16:d1:a9:ba:45:41:e4:82: 73:84:dc:71:2c:61:1b:52:28:20:94:f4:62:51:06: 95:0e:bb:f4:49:c4:47:d0:76:a5:cd:65:fe:b2:2a: 7f:f1:c0:dd:a1:d0:aa:8b:dc:77:24:bc:e7:b9:ef: 08:1f:87:98:db:d8:f0:99:69:38:2b:0b:0d:45:16: 16:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4B:55:37:BE:74:21:BD:D1:59:EB:4C:05:62:AD:8E:D3:51:64:4B X509v3 Authority Key Identifier: keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:1b:47:3b:9a:c1:83:fe:ad:6f:4e:7f:d4:c8:84:5d:5d:91: 0b:9c:7d:5f:af:54:45:2f:60:99:9c:49:8a:59:83:9b:b2:fb: 3b:6c:a9:6e:34:52:0d:a0:9c:2d:68:99:7f:21:5a:3e:1c:32: b2:29:dd:ba:34:06:23:21:9e:29:d4:84:59:9f:d1:f8:1d:8d: 1e:2b:32:7c:ab:d6:a4:bc:55:45:a7:ea:9f:95:b9:1e:80:56: cc:28:2e:a2:ad:8f:91:19:dc:c5:54:59:b3:8e:3b:63:8a:0a: df:a7:84:41:32:5e:de:5d:85:f7:8e:33:69:d3:84:52:ad:7f: 5c:1e:6d:b1:c3:9d:65:d3:68:a6:09:5b:01:db:ec:73:25:21: d8:d2:a8:c7:36:a2:bd:94:04:d7:4d:50:76:6d:6a:2d:37:04: dc:71:be:d7:f2:41:1d:9c:a0:0e:98:25:e0:14:0c:b0:e0:08: 75:3a:0e:58:cd:86:ab:c4:7f:29:a7:ee:33:eb:9a:dc:30:16: a4:e1:bb:68:25:4a:3e:2d:48:db:69:32:7f:47:ee:f4:b6:70: e5:81:6d:b2:a1:a9:d2:be:06:25:16:ea:20:31:1c:5b:5a:d1: d5:e9:40:f6:9a:6d:bc:b7:fd:16:5d:d4:79:e2:fd:b6:53:85: de:7c:12:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M0b215/tpFRrtHlqxe3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ODQxMjg1MDVmN2Y5OWM3NTcwNDQyOTgwYWRlYjhhZjkw Y2MyNzAwHhcNMjUxMjE5MjAwMDQzWhcNMjUxMjIwMjAwMDQzWjAzMTEwLwYDVQQD EygyNzRiNTUzN2JlNzQyMWJkZDE1OWViNGMwNTYyYWQ4ZWQzNTE2NDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBmBCXwetJ9Q0Q3zU1R9HHurXk1v S6tq4zcdPRorH5ePhmcbGG3GmKTU4rWMSWraP0Ymd4TsSBO0iPuGd++50v7ezKrc uznwRgw9T0EVJoBA53XNnwh/e+FpcqUaROGivSKrLAyXZNrjYfPGXNuPvncum/Mq h9Pp2zHnTeljIaO75ktX/QlMaYiOI6gd5VfWvFN76Jc9RdRliDcf8172ZyDhJbnD myoicfJ+4/IT4/4UuftWgihBybvtFtGpukVB5IJzhNxxLGEbUigglPRiUQaVDrv0 ScRH0HalzWX+sip/8cDdodCqi9x3JLznue8IH4eY29jwmWk4KwsNRRYWxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdLVTe+dCG90VnrTAVirY7TUWRLMB8GA1UdIwQY MBaAFMeEEoUF9/mcdXBEKYCt64r5DMJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQt NmMxYjQ0NzFmN2VlLzEveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQtNmMxYjQ0NzFmN2Vl LzEveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghtHO5rB g/6tb05/1MiEXV2RC5x9X69URS9gmZxJilmDm7L7O2ypbjRSDaCcLWiZfyFaPhwy sindujQGIyGeKdSEWZ/R+B2NHisyfKvWpLxVRafqn5W5HoBWzCguoq2PkRncxVRZ s447Y4oK36eEQTJe3l2F944zadOEUq1/XB5tscOdZdNopglbAdvscyUh2NKoxzai vZQE101Qdm1qLTcE3HG+1/JBHZygDpgl4BQMsOAIdToOWM2Gq8R/KafuM+ua3DAW pOG7aCVKPi1I22kyf0fu9LZw5YFtsqGp0r4GJRbqIDEcW1rR1elA9pptvLf9Fl3U eeL9tlOF3nwSLQ== -----END CERTIFICATE-----Generated at Sat Dec 20 04:58:22 2025 by rpki-client