This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft File: 4xnQzWVZPZaejUU4KhlKqnPA_4w.mft (raw, json) Hash identifier: nfHoekz+1P9TOgTe9tCjOS/Sb8KF6rTF4vmS4vO27TI= Subject key identifier: 02:FC:E5:EC:EB:95:3A:1C:22:33:11:B0:CD:FC:F5:6C:8F:FA:37:9F Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c Certificate serial: 019B3C7EFF18C7BA4214D01D811278E9D223 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft Manifest number: 1230 Signing time: Sat 20 Dec 2025 16:01:54 +0000 Manifest this update: Sat 20 Dec 2025 16:01:54 +0000 Manifest next update: Sun 21 Dec 2025 16:01:54 +0000 Files and hashes: 1: 2zkfZDwsL7HNU2LTyIDYxHBxU6Y.roa (hash: cCZE3JeNkWpHPZrQkRbXS7MTAFRrdoU+BJzK4LD0G4Y=) 2: 4xnQzWVZPZaejUU4KhlKqnPA_4w.crl (hash: NTCweAKOb0MRVIjgtOGftiv5NCdYUwAc8+1QnErgnQ8=) 3: FzW7JoU60fLZt2V4T6FBU_g7_7M.roa (hash: qY7+Qky1B0UxdHy7k1LwwjYXXxPZ34Le32XJ4CBXqQk=) 4: JfoIPjXYxzDMg2Fk91casbkylHE.roa (hash: LEmsudTH6L3328g4/unRQrE45kEbv6vgtSyjmeaPcrY=) 5: UEAGL23cUguO7LaV9ntB8GG3vLI.roa (hash: HW/Eripbr/hRHy1giNb2s3DucUSazcSMRbltO/ThVTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:ff:18:c7:ba:42:14:d0:1d:81:12:78:e9:d2:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c Validity Not Before: Dec 20 16:01:54 2025 GMT Not After : Dec 21 16:01:54 2025 GMT Subject: CN=02fce5eceb953a1c223311b0cdfcf56c8ffa379f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:35:38:81:fe:50:1e:5e:44:fa:a6:c4:82:e9: 61:24:1d:49:11:0a:03:3e:40:b3:19:2e:4e:c5:51: aa:b5:24:3a:13:06:07:4c:6b:a0:2d:17:13:13:e9: f9:58:35:a1:2e:cf:d6:68:88:67:71:c5:2f:30:29: 76:40:83:50:79:9c:95:cc:a0:d3:ba:08:8d:c2:dd: 8d:d0:39:58:7a:78:2a:e5:5b:04:bf:95:02:7b:59: bb:19:28:04:b3:69:f4:38:9e:c9:39:b2:97:7c:07: 80:b5:ea:20:15:4d:a9:20:61:d1:c9:60:0d:ce:2d: 07:71:de:98:92:98:a9:a5:21:c1:d9:b0:bf:6c:45: b7:8d:1f:95:53:45:1f:48:3e:40:46:25:76:91:17: bf:18:39:be:37:b2:10:75:6d:95:79:a3:12:2c:b8: 49:7d:6c:dd:a3:c9:a3:94:fa:e7:ea:46:e4:ac:3e: d6:4b:ad:fc:de:bb:21:06:d7:59:61:b9:cd:f8:89: 34:aa:83:16:ec:72:14:40:3d:8f:30:11:cb:ef:eb: a7:d3:e1:0b:2d:f6:4e:9e:23:94:4a:99:b9:f5:42: c1:8a:90:b7:75:53:aa:6f:7b:7a:2e:c3:b2:18:d6: c1:a3:a3:74:3c:7e:09:d0:46:91:cc:00:35:a9:83: b2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FC:E5:EC:EB:95:3A:1C:22:33:11:B0:CD:FC:F5:6C:8F:FA:37:9F X509v3 Authority Key Identifier: keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f5:9f:d1:71:5a:e3:0e:dd:eb:13:0b:2a:39:60:c7:5b:be: 22:23:4b:4c:ad:3e:b0:cb:0c:d7:a9:e1:25:c4:7a:14:cb:f9: 19:5d:00:ed:cc:80:6b:10:ce:59:92:f7:37:e7:d2:2a:84:ba: 9b:cd:10:3b:84:76:be:61:bd:b9:c3:f2:c4:98:c0:cd:e3:16: 1d:57:d4:9f:b7:eb:fd:60:f2:e1:0d:1a:6d:9c:67:f5:17:55: f9:32:bc:c5:07:13:30:bc:80:34:37:2b:9f:45:76:b4:be:8a: 1f:f4:6a:70:c1:d1:49:84:cf:23:4a:a8:10:28:0f:55:32:7c: cc:01:58:37:f5:e7:9e:ab:2a:c0:fd:47:e4:5b:ef:e5:12:b5: 37:dc:54:20:ec:1e:21:ce:b4:29:4f:46:15:8b:bc:3a:bf:f8: 31:f6:a2:cf:78:01:72:bd:06:56:5d:10:d3:cc:d9:b7:4f:e9: 91:32:04:1f:c0:e6:19:46:95:7f:99:c8:dd:2d:48:72:42:9e: 61:46:03:65:8a:c6:82:43:e0:a5:cf:4b:0b:78:ca:c6:2f:a9: ab:a0:4c:fb:cc:6e:a6:d2:ce:74:82:f0:c8:cb:db:2c:9f:92: 4f:67:a9:6b:31:1c:45:4e:f3:04:63:75:82:88:44:53:31:90: 88:5b:46:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fv8Yx7pCFNAdgRJ46dIjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTlkMGNkNjU1OTNkOTY5ZThkNDUzODJhMTk0YWFhNzNj MGZmOGMwHhcNMjUxMjIwMTYwMTU0WhcNMjUxMjIxMTYwMTU0WjAzMTEwLwYDVQQD EygwMmZjZTVlY2ViOTUzYTFjMjIzMzExYjBjZGZjZjU2YzhmZmEzNzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozU4gf5QHl5E+qbEgulhJB1JEQoD PkCzGS5OxVGqtSQ6EwYHTGugLRcTE+n5WDWhLs/WaIhnccUvMCl2QINQeZyVzKDT ugiNwt2N0DlYengq5VsEv5UCe1m7GSgEs2n0OJ7JObKXfAeAteogFU2pIGHRyWAN zi0Hcd6YkpippSHB2bC/bEW3jR+VU0UfSD5ARiV2kRe/GDm+N7IQdW2VeaMSLLhJ fWzdo8mjlPrn6kbkrD7WS6383rshBtdZYbnN+Ik0qoMW7HIUQD2PMBHL7+un0+EL LfZOniOUSpm59ULBipC3dVOqb3t6LsOyGNbBo6N0PH4J0EaRzAA1qYOyqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAL85ezrlTocIjMRsM389WyP+jefMB8GA1UdIwQY MBaAFOMZ0M1lWT2Wno1FOCoZSqpzwP+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjkt MjE3Y2Y5Mzg0NWJjLzEvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjktMjE3Y2Y5Mzg0NWJj LzEvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvWf0XFa 4w7d6xMLKjlgx1u+IiNLTK0+sMsM16nhJcR6FMv5GV0A7cyAaxDOWZL3N+fSKoS6 m80QO4R2vmG9ucPyxJjAzeMWHVfUn7fr/WDy4Q0abZxn9RdV+TK8xQcTMLyANDcr n0V2tL6KH/RqcMHRSYTPI0qoECgPVTJ8zAFYN/XnnqsqwP1H5Fvv5RK1N9xUIOwe Ic60KU9GFYu8Or/4Mfaiz3gBcr0GVl0Q08zZt0/pkTIEH8DmGUaVf5nI3S1IckKe YUYDZYrGgkPgpc9LC3jKxi+pq6BM+8xuptLOdILwyMvbLJ+ST2epazEcRU7zBGN1 gohEUzGQiFtGeQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:59:47 2025 by rpki-client