This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft File: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft (raw, json) Hash identifier: X9p1kK5cZD0ZlnSNcHEx6y1+GR3CuYak6ZT3/YAZ9GU= Subject key identifier: 1E:AF:16:07:97:AC:6F:11:39:60:0A:0B:8C:C3:04:1B:78:21:F0:C6 Authority key identifier: E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D Certificate issuer: /CN=e31c010e95015c2123641d33120a7e9c9008002d Certificate serial: 019B405C15EAF83A3026148A59831B3EF6DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft Manifest number: B5 Signing time: Sun 21 Dec 2025 10:02:15 +0000 Manifest this update: Sun 21 Dec 2025 10:02:15 +0000 Manifest next update: Mon 22 Dec 2025 10:02:15 +0000 Files and hashes: 1: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl (hash: eT+S1ZVe5fmlcB+2gDKkpV+h/LJ7/2nk26dYFDwdZS4=) 2: NxyC245LfoIGu7NVTJi-_dDCgvs.roa (hash: Suj+SVX/zjejO/imh+c1lgrmaGy+Ijth/7DtIkk94wQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:15:ea:f8:3a:30:26:14:8a:59:83:1b:3e:f6:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e31c010e95015c2123641d33120a7e9c9008002d Validity Not Before: Dec 21 10:02:15 2025 GMT Not After : Dec 22 10:02:15 2025 GMT Subject: CN=1eaf160797ac6f1139600a0b8cc3041b7821f0c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3f:7e:1e:ce:c8:5e:7f:d2:88:6c:3b:cd:04: b5:f5:3d:91:53:8c:4c:fc:17:ad:ea:dc:c2:4d:22: 18:cd:88:03:cf:30:71:ff:44:6c:2a:eb:67:84:01: 3e:48:7f:39:d8:c8:db:5c:00:13:d4:74:e3:e7:6c: 09:85:00:54:65:a7:40:86:16:36:ee:4d:5e:43:37: 88:73:42:9e:a7:d2:02:70:8d:3e:38:45:49:39:7b: fc:a3:0a:5f:e6:92:c8:a4:62:c1:a2:4b:ed:1f:02: 7c:a1:a0:c0:45:cf:c6:07:ed:ee:83:cb:dd:c3:4e: 58:12:30:7b:d8:df:49:13:1e:29:48:03:a0:95:0d: 27:1f:3c:23:98:93:3c:d8:84:a9:dd:16:87:1b:a5: eb:c2:49:98:91:c2:4e:fc:ab:3e:d8:77:a7:c9:eb: 4a:c6:03:d7:52:b0:93:79:0b:d4:4a:00:3a:68:29: c9:7a:38:cd:f9:56:d5:70:b6:b7:7a:87:c2:d0:40: 74:fc:5f:aa:25:14:5b:68:8f:34:99:88:2f:16:cc: 05:07:3e:ca:dc:a0:bb:12:ea:76:07:22:07:bf:f2: 9a:3d:8e:dd:ab:87:a9:ee:f3:28:fa:49:f6:cb:b8: 2f:a3:81:76:f7:15:5d:68:17:03:ba:84:57:da:0c: 18:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AF:16:07:97:AC:6F:11:39:60:0A:0B:8C:C3:04:1B:78:21:F0:C6 X509v3 Authority Key Identifier: keyid:E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:c1:61:a4:98:c6:2c:1c:80:bc:4c:e3:32:7e:28:0b:21:58: 6c:a0:3c:8f:2b:ed:fc:30:2d:26:fb:6f:ea:7f:72:57:d5:40: 91:d5:cd:77:9e:02:67:6a:3a:19:d1:81:5f:0d:b0:2d:21:35: 21:de:22:d6:4b:a8:8f:68:c7:78:7f:05:4b:b2:9e:b0:bf:2b: ba:32:f9:c0:94:b3:6c:21:be:68:dd:85:6c:90:24:d1:83:ff: 7e:aa:31:a3:a2:e7:64:3e:1a:b3:aa:48:c4:69:eb:60:17:63: 51:7d:f6:cb:23:86:6c:c4:c3:1f:1c:d3:4d:1d:35:05:75:60: 97:1f:06:6a:db:7c:1b:36:9e:68:65:8b:d6:ad:7f:8b:b8:50: e3:1f:b0:12:c5:a6:51:af:a4:e5:59:6c:8f:b6:9c:37:67:bd: e7:d7:7a:7a:5a:ae:c5:21:1b:90:07:5f:39:f5:73:be:79:aa: 97:b1:9b:3b:f5:83:73:0a:27:f6:f6:bf:2c:e3:ba:f6:ee:5e: 09:0d:22:33:be:42:1d:9b:22:eb:37:48:82:f3:8d:57:ae:39: b8:1c:cc:79:b7:55:82:17:b5:10:26:76:ce:6f:5a:9f:83:04: da:04:4a:2b:b8:60:78:69:b3:60:90:fd:f5:88:9e:c2:d7:a9: 3a:3f:4e:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXBXq+DowJhSKWYMbPvbcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMWMwMTBlOTUwMTVjMjEyMzY0MWQzMzEyMGE3ZTljOTAw ODAwMmQwHhcNMjUxMjIxMTAwMjE1WhcNMjUxMjIyMTAwMjE1WjAzMTEwLwYDVQQD EygxZWFmMTYwNzk3YWM2ZjExMzk2MDBhMGI4Y2MzMDQxYjc4MjFmMGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz9+Hs7IXn/SiGw7zQS19T2RU4xM /Bet6tzCTSIYzYgDzzBx/0RsKutnhAE+SH852MjbXAAT1HTj52wJhQBUZadAhhY2 7k1eQzeIc0Kep9ICcI0+OEVJOXv8owpf5pLIpGLBokvtHwJ8oaDARc/GB+3ug8vd w05YEjB72N9JEx4pSAOglQ0nHzwjmJM82ISp3RaHG6XrwkmYkcJO/Ks+2HenyetK xgPXUrCTeQvUSgA6aCnJejjN+VbVcLa3eofC0EB0/F+qJRRbaI80mYgvFswFBz7K 3KC7Eup2ByIHv/KaPY7dq4ep7vMo+kn2y7gvo4F29xVdaBcDuoRX2gwYFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6vFgeXrG8ROWAKC4zDBBt4IfDGMB8GA1UdIwQY MBaAFOMcAQ6VAVwhI2QdMxIKfpyQCAAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHh3QkRwVUJYQ0VqWkIwekVncC1uSkFJQUMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80ODM4MDYtMDQ1ZC00ODU2LWI1Mjkt YjQ3ZTc0ZWQ0ZTdlLzEvNHh3QkRwVUJYQ0VqWkIwekVncC1uSkFJQUMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80ODM4MDYtMDQ1ZC00ODU2LWI1MjktYjQ3ZTc0ZWQ0ZTdl LzEvNHh3QkRwVUJYQ0VqWkIwekVncC1uSkFJQUMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8FhpJjG LByAvEzjMn4oCyFYbKA8jyvt/DAtJvtv6n9yV9VAkdXNd54CZ2o6GdGBXw2wLSE1 Id4i1kuoj2jHeH8FS7KesL8rujL5wJSzbCG+aN2FbJAk0YP/fqoxo6LnZD4as6pI xGnrYBdjUX32yyOGbMTDHxzTTR01BXVglx8Gatt8GzaeaGWL1q1/i7hQ4x+wEsWm Ua+k5Vlsj7acN2e959d6elquxSEbkAdfOfVzvnmql7GbO/WDcwon9va/LOO69u5e CQ0iM75CHZsi6zdIgvONV645uBzMebdVghe1ECZ2zm9an4ME2gRKK7hgeGmzYJD9 9YiewtepOj9Opg== -----END CERTIFICATE-----Generated at Sun Dec 21 14:39:09 2025 by rpki-client