This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft File: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft (raw, json) Hash identifier: l98k6KB4DqE/Wje9ai+9VY2R2hqD9O6JyJNyeBMdNW8= Subject key identifier: 7E:05:64:C8:A0:75:D1:2A:78:7F:66:74:9D:64:06:E5:45:05:33:42 Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC Certificate issuer: /CN=e31aba3c2f56283ce5c74bce405844c1591babfc Certificate serial: 019B47A6621FF294AA254BA18E6E28B14554 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 20:00:44 +0000 Manifest this update: Mon 22 Dec 2025 20:00:44 +0000 Manifest next update: Tue 23 Dec 2025 20:00:44 +0000 Files and hashes: 1: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl (hash: d6uhW1AJcRd8wJN1aYpFqONa0aZqcW+Pb6QyQ/oFf8A=) 2: PmKzLROtlSNpGVP9Gabn59_vPcQ.roa (hash: 4+SnbeNGMFNkaQG14haNRuuikDneIrgDVYY+Z1QI1eI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:62:1f:f2:94:aa:25:4b:a1:8e:6e:28:b1:45:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc Validity Not Before: Dec 22 20:00:44 2025 GMT Not After : Dec 23 20:00:44 2025 GMT Subject: CN=7e0564c8a075d12a787f66749d6406e545053342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f0:59:e7:e2:09:cd:60:2b:9a:b4:c4:a5:0b: be:e4:54:95:37:b6:f4:cd:84:ef:f7:63:98:05:7b: cf:83:93:8a:60:88:f2:ae:b5:99:fc:54:54:90:7f: c1:65:9a:1c:76:b9:f3:9f:37:ef:6d:b0:cc:99:92: c7:8c:52:6a:89:36:0f:61:4d:31:17:e6:e1:f3:d3: 48:83:3b:22:d6:f6:60:7f:32:ad:ee:08:bf:23:c5: 18:f6:ec:84:80:35:0e:78:4d:c8:fb:75:eb:c7:1c: ac:e6:e6:b4:a3:99:bc:1d:e1:3f:80:07:d3:da:a0: cc:af:b9:b4:b3:05:81:d9:ae:fd:6f:87:f7:68:ed: 16:fd:28:c3:09:68:d6:63:71:8e:ea:cd:10:d4:80: 99:f9:c2:94:22:de:48:f8:81:94:08:91:ea:eb:f5: 2d:51:11:ec:78:f4:01:a7:38:14:f9:73:f1:c3:4a: 75:b3:9d:c1:fd:7f:d5:04:6c:69:9c:8e:4f:0a:ca: b1:d1:41:0d:71:ac:c6:58:f8:d9:eb:4c:82:4f:50: 07:5e:6c:87:de:2b:6c:16:ee:e0:19:5e:de:e1:cd: 83:0b:28:cb:f4:60:53:22:12:ff:11:b6:dd:bd:5f: dc:4d:22:f3:73:c9:5a:85:eb:51:52:65:ef:10:b8: 5f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:05:64:C8:A0:75:D1:2A:78:7F:66:74:9D:64:06:E5:45:05:33:42 X509v3 Authority Key Identifier: keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:af:87:23:62:7d:49:4e:a2:72:ef:3b:44:71:1b:9f:26:22: 9f:e3:fc:a7:17:27:3b:97:41:da:22:de:14:5e:74:96:d0:17: 6a:bb:75:7f:0d:ae:f9:c7:95:bc:4f:46:db:0b:ae:58:29:b8: e6:9b:8f:1d:58:00:f3:52:0d:87:b4:d3:dc:04:bc:26:26:47: db:8e:3d:f0:72:aa:31:1c:29:43:96:a8:34:82:ec:43:c2:9e: b4:22:54:b8:96:ee:ee:7e:ad:cc:bf:12:4b:8c:9c:ae:5b:a0: 0a:ec:ad:ec:d1:71:8b:1d:67:34:71:04:82:f1:a8:1b:36:ec: 4a:23:db:fc:a6:1e:72:e3:dd:c8:38:8f:4a:da:be:10:2c:ba: ba:0a:42:25:fc:07:19:83:85:32:87:56:ae:ed:3d:e4:33:35: b1:77:28:b8:4f:ae:3d:0a:16:bd:2f:c8:c3:55:60:82:ac:b7: 28:63:bf:39:59:13:de:99:80:80:5f:6e:0b:9e:33:48:1c:a0: 92:c0:30:f6:73:37:8a:be:d1:d9:fe:78:60:8c:f1:d8:6e:32: c5:6d:c2:a4:cd:c2:44:bd:21:76:d1:71:67:a5:f2:04:ed:95: be:4b:26:40:5f:36:60:ee:aa:1c:d0:c2:b0:ee:e0:14:9d:0b: 96:6e:65:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpmIf8pSqJUuhjm4osUVUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMWFiYTNjMmY1NjI4M2NlNWM3NGJjZTQwNTg0NGMxNTkx YmFiZmMwHhcNMjUxMjIyMjAwMDQ0WhcNMjUxMjIzMjAwMDQ0WjAzMTEwLwYDVQQD Eyg3ZTA1NjRjOGEwNzVkMTJhNzg3ZjY2NzQ5ZDY0MDZlNTQ1MDUzMzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfBZ5+IJzWArmrTEpQu+5FSVN7b0 zYTv92OYBXvPg5OKYIjyrrWZ/FRUkH/BZZocdrnznzfvbbDMmZLHjFJqiTYPYU0x F+bh89NIgzsi1vZgfzKt7gi/I8UY9uyEgDUOeE3I+3Xrxxys5ua0o5m8HeE/gAfT 2qDMr7m0swWB2a79b4f3aO0W/SjDCWjWY3GO6s0Q1ICZ+cKUIt5I+IGUCJHq6/Ut URHsePQBpzgU+XPxw0p1s53B/X/VBGxpnI5PCsqx0UENcazGWPjZ60yCT1AHXmyH 3itsFu7gGV7e4c2DCyjL9GBTIhL/EbbdvV/cTSLzc8lahetRUmXvELhf8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4FZMigddEqeH9mdJ1kBuVFBTNCMB8GA1UdIwQY MBaAFOMaujwvVig85cdLzkBYRMFZG6v8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mODMwNzMtOWU4MC00MmYyLWIwYTgt NWYyODEzN2E3NjU4LzEvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9mODMwNzMtOWU4MC00MmYyLWIwYTgtNWYyODEzN2E3NjU4 LzEvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkq+HI2J9 SU6icu87RHEbnyYin+P8pxcnO5dB2iLeFF50ltAXart1fw2u+ceVvE9G2wuuWCm4 5puPHVgA81INh7TT3AS8JiZH24498HKqMRwpQ5aoNILsQ8KetCJUuJbu7n6tzL8S S4ycrlugCuyt7NFxix1nNHEEgvGoGzbsSiPb/KYecuPdyDiPStq+ECy6ugpCJfwH GYOFModWru095DM1sXcouE+uPQoWvS/Iw1Vggqy3KGO/OVkT3pmAgF9uC54zSByg ksAw9nM3ir7R2f54YIzx2G4yxW3CpM3CRL0hdtFxZ6XyBO2VvksmQF82YO6qHNDC sO7gFJ0Llm5l0w== -----END CERTIFICATE-----Generated at Tue Dec 23 03:47:38 2025 by rpki-client