This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft File: X4rRNUEr-QQb5f0I50okEg2z7sc.mft (raw, json) Hash identifier: +QIands44LE+FCt6+1PHdMfl4fNh6iaCOPAk+Rwwv3M= Subject key identifier: A2:6F:37:67:DC:77:13:86:8F:C6:EE:95:C5:D1:11:29:F4:DD:41:2B Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7 Certificate issuer: /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7 Certificate serial: 019B51173F3CD073F89CDE47C3011B140310 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft Manifest number: 0BE5 Signing time: Wed 24 Dec 2025 16:00:36 +0000 Manifest this update: Wed 24 Dec 2025 16:00:36 +0000 Manifest next update: Thu 25 Dec 2025 16:00:36 +0000 Files and hashes: 1: OaP0ViKbeY2ivI-4rv6OeNEGIqA.roa (hash: e7Vy7pCIoWDvqhKmOHXfSd0NE1hCUf1lKUMb+Ggiqf0=) 2: X4rRNUEr-QQb5f0I50okEg2z7sc.crl (hash: Kl8UTitv7hXxkuvn113xkJ3Md1WR6quSJILcgyt9IvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 16:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:3f:3c:d0:73:f8:9c:de:47:c3:01:1b:14:03:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7 Validity Not Before: Dec 24 16:00:36 2025 GMT Not After : Dec 25 16:00:36 2025 GMT Subject: CN=a26f3767dc7713868fc6ee95c5d11129f4dd412b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0e:9b:5d:bb:6e:00:86:5f:20:14:15:d2:39: 78:a2:ea:29:0c:ee:e3:3d:bb:05:d8:1c:50:f2:7c: e3:14:40:cd:e7:be:5e:df:02:f2:0c:90:33:fb:7d: 93:b7:a7:e0:09:ea:b3:ab:ab:87:de:fd:97:ad:04: 70:08:2c:a3:8d:92:db:48:ae:c6:4a:a4:92:85:01: ca:f7:ca:1c:27:b7:ec:e5:e5:0a:3f:9e:2e:77:a2: e2:7f:40:f8:74:e7:e2:c8:a0:53:2d:8a:b5:cf:97: 09:9d:b5:f8:f9:c8:4c:ec:ed:bb:36:c6:c5:30:53: 62:46:4a:2f:eb:ec:5f:b3:e6:a3:d5:2a:11:83:2d: e7:e2:8e:96:eb:d5:24:c2:b9:80:7b:16:af:66:e1: f4:82:7b:9f:81:81:81:95:1a:32:2b:da:84:66:05: f7:7d:9c:02:37:94:e1:7b:cd:f9:88:b5:87:5c:ac: d2:94:33:c7:20:2b:a1:b7:41:94:74:0f:03:2d:aa: 86:db:ec:f6:0e:e2:30:77:41:8e:05:87:9e:f8:3f: 40:fb:d4:52:b6:82:e7:81:74:98:f0:c5:fc:e3:67: 33:1f:08:84:7e:26:25:a2:89:af:a3:48:89:34:2d: d8:18:c9:40:7d:fd:1d:70:9c:48:2a:e6:6e:0e:13: 95:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6F:37:67:DC:77:13:86:8F:C6:EE:95:C5:D1:11:29:F4:DD:41:2B X509v3 Authority Key Identifier: keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:52:a5:76:79:92:43:2c:e0:77:94:54:0e:e5:20:0d:d1:09: 00:b1:46:ce:f5:19:08:59:56:53:9c:3b:c2:cf:5f:42:8a:63: be:48:ed:c2:be:6c:a6:28:ac:a1:7d:31:cf:e7:a7:c2:bc:a2: ac:b2:65:aa:87:36:eb:53:56:52:ab:26:73:36:84:19:3b:0f: 44:08:fc:8a:64:ee:ab:97:03:e4:02:14:37:33:e5:2c:4c:60: b5:4f:fd:13:f5:95:f6:09:a6:a2:6f:bd:82:f5:b5:3f:e7:96: a5:82:6c:87:47:2f:35:b5:4b:87:17:f7:b3:07:d8:fe:ac:6c: c0:47:56:22:48:33:b1:9e:e2:33:13:0b:10:ea:e7:91:9c:c9: b5:34:06:80:73:42:d3:ee:6a:b8:3b:92:5f:f9:72:31:4a:01: a3:f1:35:5e:79:d4:13:80:50:ff:12:4b:14:3b:6a:1d:41:43: 79:86:13:47:04:9c:04:8d:ba:eb:3c:b5:09:f6:68:3d:ac:54: 2e:ad:dd:8d:6b:48:3d:99:95:0d:4f:e8:8d:da:c6:84:90:4a: fe:2f:58:e4:82:9b:b7:89:ce:47:f4:b4:4d:67:ee:a8:96:f6: b8:c4:7d:ba:cc:34:f7:9c:97:6f:40:dd:10:6e:34:cc:2d:15: 3d:e2:20:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRFz880HP4nN5HwwEbFAMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmOGFkMTM1NDEyYmY5MDQxYmU1ZmQwOGU3NGEyNDEyMGRi M2VlYzcwHhcNMjUxMjI0MTYwMDM2WhcNMjUxMjI1MTYwMDM2WjAzMTEwLwYDVQQD EyhhMjZmMzc2N2RjNzcxMzg2OGZjNmVlOTVjNWQxMTEyOWY0ZGQ0MTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g6bXbtuAIZfIBQV0jl4ouopDO7j PbsF2BxQ8nzjFEDN575e3wLyDJAz+32Tt6fgCeqzq6uH3v2XrQRwCCyjjZLbSK7G SqSShQHK98ocJ7fs5eUKP54ud6Lif0D4dOfiyKBTLYq1z5cJnbX4+chM7O27NsbF MFNiRkov6+xfs+aj1SoRgy3n4o6W69UkwrmAexavZuH0gnufgYGBlRoyK9qEZgX3 fZwCN5The835iLWHXKzSlDPHICuht0GUdA8DLaqG2+z2DuIwd0GOBYee+D9A+9RS toLngXSY8MX842czHwiEfiYloomvo0iJNC3YGMlAff0dcJxIKuZuDhOV2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJvN2fcdxOGj8bulcXRESn03UErMB8GA1UdIwQY MBaAFF+K0TVBK/kEG+X9COdKJBINs+7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAt Mzc5NzMzYWIzOGNkLzEvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAtMzc5NzMzYWIzOGNk LzEvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1KldnmS Qyzgd5RUDuUgDdEJALFGzvUZCFlWU5w7ws9fQopjvkjtwr5spiisoX0xz+enwryi rLJlqoc261NWUqsmczaEGTsPRAj8imTuq5cD5AIUNzPlLExgtU/9E/WV9gmmom+9 gvW1P+eWpYJsh0cvNbVLhxf3swfY/qxswEdWIkgzsZ7iMxMLEOrnkZzJtTQGgHNC 0+5quDuSX/lyMUoBo/E1XnnUE4BQ/xJLFDtqHUFDeYYTRwScBI266zy1CfZoPaxU Lq3djWtIPZmVDU/ojdrGhJBK/i9Y5IKbt4nOR/S0TWfuqJb2uMR9usw095yXb0Dd EG40zC0VPeIgtQ== -----END CERTIFICATE-----Generated at Thu Dec 25 01:23:27 2025 by rpki-client