This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft File: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft (raw, json) Hash identifier: 52WKrnJG6x5RhTCeHEzJ7K9OMNu4YiYAnpLqElVK3II= Subject key identifier: 6E:23:5A:65:ED:92:A2:CA:47:49:60:55:FF:70:9E:8A:EF:61:3D:F4 Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC Certificate issuer: /CN=e31aba3c2f56283ce5c74bce405844c1591babfc Certificate serial: 019B45B8B27402E956560F6E4800D8624257 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 11:01:30 +0000 Manifest this update: Mon 22 Dec 2025 11:01:30 +0000 Manifest next update: Tue 23 Dec 2025 11:01:30 +0000 Files and hashes: 1: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl (hash: QHp6KCxIc+HXIIVuEpDGnFwuSq8zP+c6X5j5DLhntUc=) 2: PmKzLROtlSNpGVP9Gabn59_vPcQ.roa (hash: 4+SnbeNGMFNkaQG14haNRuuikDneIrgDVYY+Z1QI1eI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:b2:74:02:e9:56:56:0f:6e:48:00:d8:62:42:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc Validity Not Before: Dec 22 11:01:30 2025 GMT Not After : Dec 23 11:01:30 2025 GMT Subject: CN=6e235a65ed92a2ca47496055ff709e8aef613df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:57:4a:c8:47:f5:1a:97:bc:a3:d3:49:13:5c: 27:6e:d7:55:36:78:1c:a9:34:cd:7d:40:73:05:ed: 14:56:43:ad:46:e0:7e:15:fb:5d:62:39:a4:da:5e: a4:42:3c:a8:2d:47:87:e8:ef:3a:0b:34:a1:58:73: 98:30:fb:c5:cb:45:41:a2:8d:52:0f:f0:83:9f:d7: 83:09:4e:85:3e:d3:26:a7:55:74:80:d3:d5:0b:9a: c5:54:c7:1f:29:40:d7:f6:d1:72:f3:d8:2f:3a:c4: 55:b8:51:ff:63:dc:d7:32:dc:59:1f:4c:6e:4b:17: e0:e2:28:56:89:46:bc:d1:90:4b:f5:d0:f1:15:98: 18:c1:d4:3f:68:5b:e2:59:39:46:ea:5e:d9:4f:52: 8b:4e:d2:f2:08:37:fc:4f:7f:09:2d:14:bd:d6:cb: 68:24:52:01:39:67:c4:a0:2a:bc:d1:3c:bc:7e:23: db:81:19:82:de:e3:55:86:3a:12:06:fc:57:f9:49: f1:53:da:9f:a6:79:74:9c:b4:b0:19:ea:ae:b2:e6: 58:b3:89:3d:40:2d:fb:61:81:17:0f:19:bb:81:b2: 69:21:11:ea:9d:4e:d6:66:e1:a6:fb:f0:14:4f:0a: d5:04:fc:1c:13:3b:6a:ee:80:aa:01:4c:30:a4:2a: 53:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:23:5A:65:ED:92:A2:CA:47:49:60:55:FF:70:9E:8A:EF:61:3D:F4 X509v3 Authority Key Identifier: keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:70:2d:2c:3a:aa:30:d5:6d:7d:22:4c:de:f6:f8:2c:8b:0c: b2:21:ce:6d:2f:33:a5:78:99:79:ba:58:58:ce:a1:9a:38:13: 44:ef:24:a6:f3:23:35:f5:d1:79:46:dc:6d:bb:39:3f:54:2d: d1:fb:ca:a7:6b:19:4f:54:ae:68:0e:65:7b:80:e8:91:99:17: 17:f3:ce:22:6b:78:5e:70:3e:88:43:d9:6b:0c:1f:64:87:46: 01:b4:4f:27:ce:70:1b:46:bd:ad:e1:39:0e:21:7b:7d:42:b5: c9:76:1a:11:59:da:b1:9f:93:34:89:e8:48:2b:50:aa:47:15: ae:62:a1:53:b4:0d:bb:f7:b0:c7:4e:7c:d2:a2:7e:ca:97:c9: 68:03:7f:ec:be:1e:c0:a3:1c:dd:8d:5d:09:fa:19:b3:1c:cb: 54:2e:76:26:48:c9:45:e4:4a:b7:e1:43:dc:8e:1a:ca:b3:07: b1:fd:6b:6c:d7:cf:8c:52:4e:c3:bb:f4:5d:74:3b:87:64:33: 9f:4e:af:d6:16:77:ec:b6:47:62:cd:c6:3f:66:3f:50:1b:7e: 72:65:0a:af:82:51:15:3d:76:e0:3a:f8:c2:78:6c:dc:8b:94: b6:64:b4:74:cb:1d:6d:26:40:56:b1:85:f4:99:00:af:92:a9: b1:c2:a5:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuLJ0AulWVg9uSADYYkJXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMWFiYTNjMmY1NjI4M2NlNWM3NGJjZTQwNTg0NGMxNTkx YmFiZmMwHhcNMjUxMjIyMTEwMTMwWhcNMjUxMjIzMTEwMTMwWjAzMTEwLwYDVQQD Eyg2ZTIzNWE2NWVkOTJhMmNhNDc0OTYwNTVmZjcwOWU4YWVmNjEzZGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsldKyEf1Gpe8o9NJE1wnbtdVNngc qTTNfUBzBe0UVkOtRuB+FftdYjmk2l6kQjyoLUeH6O86CzShWHOYMPvFy0VBoo1S D/CDn9eDCU6FPtMmp1V0gNPVC5rFVMcfKUDX9tFy89gvOsRVuFH/Y9zXMtxZH0xu Sxfg4ihWiUa80ZBL9dDxFZgYwdQ/aFviWTlG6l7ZT1KLTtLyCDf8T38JLRS91sto JFIBOWfEoCq80Ty8fiPbgRmC3uNVhjoSBvxX+UnxU9qfpnl0nLSwGequsuZYs4k9 QC37YYEXDxm7gbJpIRHqnU7WZuGm+/AUTwrVBPwcEztq7oCqAUwwpCpTFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4jWmXtkqLKR0lgVf9wnorvYT30MB8GA1UdIwQY MBaAFOMaujwvVig85cdLzkBYRMFZG6v8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mODMwNzMtOWU4MC00MmYyLWIwYTgt NWYyODEzN2E3NjU4LzEvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9mODMwNzMtOWU4MC00MmYyLWIwYTgtNWYyODEzN2E3NjU4 LzEvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArXAtLDqq MNVtfSJM3vb4LIsMsiHObS8zpXiZebpYWM6hmjgTRO8kpvMjNfXReUbcbbs5P1Qt 0fvKp2sZT1SuaA5le4DokZkXF/POImt4XnA+iEPZawwfZIdGAbRPJ85wG0a9reE5 DiF7fUK1yXYaEVnasZ+TNInoSCtQqkcVrmKhU7QNu/ewx0580qJ+ypfJaAN/7L4e wKMc3Y1dCfoZsxzLVC52JkjJReRKt+FD3I4ayrMHsf1rbNfPjFJOw7v0XXQ7h2Qz n06v1hZ37LZHYs3GP2Y/UBt+cmUKr4JRFT124Dr4wnhs3IuUtmS0dMsdbSZAVrGF 9JkAr5KpscKlSg== -----END CERTIFICATE-----Generated at Mon Dec 22 12:58:34 2025 by rpki-client