This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft File: xn4qRuNPSRQzyLYvMZuQK9396DE.mft (raw, json) Hash identifier: NjqmMw8d+LlnIgG+3zKEeYIlGsGr71LsVj1FPyrUpcw= Subject key identifier: EC:83:3D:23:62:A8:E8:95:EA:4B:DD:23:CA:57:3F:3E:5A:9F:3D:F0 Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31 Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831 Certificate serial: 019B3E6C44C53C3152C37763148ABA58918E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft Manifest number: 14C3 Signing time: Sun 21 Dec 2025 01:00:41 +0000 Manifest this update: Sun 21 Dec 2025 01:00:41 +0000 Manifest next update: Mon 22 Dec 2025 01:00:41 +0000 Files and hashes: 1: BKGB0xu8toNLRNE3TtbV03PJFx0.roa (hash: FdiXQgpM3MPZ1o0fk4HNEhE38JmZapk1+2ih8Lu8DEA=) 2: _v0ZmDwGVXQnxYXB1nXQzsRBcbY.roa (hash: iHppVj2BjRk7dRpgDIJuQgoqhMV/BmqJSp1BycbHcEU=) 3: xn4qRuNPSRQzyLYvMZuQK9396DE.crl (hash: v4BeDaFg23G47kukdlFKc8ugHpMmHAeuwvJkPxl37Mo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:44:c5:3c:31:52:c3:77:63:14:8a:ba:58:91:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831 Validity Not Before: Dec 21 01:00:41 2025 GMT Not After : Dec 22 01:00:41 2025 GMT Subject: CN=ec833d2362a8e895ea4bdd23ca573f3e5a9f3df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f1:c1:cb:a7:07:2d:7e:57:40:34:af:9c:dd: 52:3a:27:67:43:34:b9:8f:96:ab:0b:96:d7:ec:17: 59:1c:6f:ae:db:bd:86:58:c5:c9:b8:62:60:47:56: de:c2:97:1e:c5:52:0b:21:ca:69:13:7b:32:a0:86: 24:41:49:e7:cf:f9:e1:81:d9:b0:8e:dc:ba:ef:9a: 9c:21:0d:e9:36:d7:63:62:58:0c:10:b5:ad:68:da: c9:88:b7:2d:82:2a:ee:e6:8a:23:d1:d6:45:a4:5f: 94:fc:f8:bb:65:e3:52:43:46:b0:71:f8:a0:c4:66: 5d:14:14:0d:fa:4d:de:fa:85:36:e7:c7:84:7f:78: b8:ad:9f:44:69:8f:d3:82:ec:61:7c:2a:a6:93:3f: 1d:10:d3:5b:b4:1d:18:e9:85:28:a6:81:ec:c0:85: 7a:e3:ab:82:b6:5c:aa:dd:fb:c5:86:01:00:fd:3f: 55:2e:4b:fc:92:98:74:03:42:5a:b7:dd:85:eb:b2: 47:d5:54:6c:e0:a8:72:8e:5c:e6:32:23:55:e6:c3: 41:7e:ab:a6:dc:38:ad:97:75:a0:52:5d:17:20:8b: 96:85:ac:f7:aa:f9:b2:19:a7:b5:85:dd:b4:5a:e2: d4:ea:43:8a:bb:03:59:be:80:7f:d0:6b:3a:8d:6a: cd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:83:3D:23:62:A8:E8:95:EA:4B:DD:23:CA:57:3F:3E:5A:9F:3D:F0 X509v3 Authority Key Identifier: keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:97:05:dc:e1:4c:98:8a:89:60:62:d9:82:6c:e6:ec:05:4e: 88:a4:e4:f5:9e:86:86:4a:8b:8f:e0:67:c7:53:69:75:d6:85: 3c:69:23:88:80:3f:74:8b:56:13:c4:93:c7:87:ec:eb:f4:02: 32:12:5f:f0:14:1a:25:a1:c8:6e:be:fd:20:fe:c9:67:eb:52: 49:e2:bd:c5:e3:26:95:71:62:0e:f7:53:6c:22:5f:34:8d:1c: cc:6a:2f:18:f9:26:20:bb:be:ff:0a:7a:1f:06:76:9b:52:d6: 98:c6:7c:0a:ac:ac:ed:14:15:a5:9e:0d:e7:95:21:33:b7:bd: 6f:00:28:54:e0:a6:e5:ac:0a:4f:ab:2f:6c:f5:cf:a5:6a:fa: 7f:21:f4:69:d8:d5:14:47:29:15:98:08:b5:57:65:a9:00:8c: f2:8d:d7:f7:3b:44:b9:13:db:ff:7b:c1:bb:3e:b6:3d:8a:85: 9f:87:86:d0:1c:87:4a:9d:53:45:f8:49:47:a8:2f:b1:bd:84: ff:13:13:d5:10:7f:b7:99:4f:cb:f0:0f:05:87:93:ee:88:5a: 7f:d4:eb:0c:dc:c0:1e:cc:34:a2:85:db:c1:31:02:12:65:b4: 79:56:de:3c:df:23:26:96:c3:41:e9:75:54:cf:44:15:15:7a: 63:b2:d7:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bETFPDFSw3djFIq6WJGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2N2UyYTQ2ZTM0ZjQ5MTQzM2M4YjYyZjMxOWI5MDJiZGRm ZGU4MzEwHhcNMjUxMjIxMDEwMDQxWhcNMjUxMjIyMDEwMDQxWjAzMTEwLwYDVQQD EyhlYzgzM2QyMzYyYThlODk1ZWE0YmRkMjNjYTU3M2YzZTVhOWYzZGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvHBy6cHLX5XQDSvnN1SOidnQzS5 j5arC5bX7BdZHG+u272GWMXJuGJgR1bewpcexVILIcppE3syoIYkQUnnz/nhgdmw jty675qcIQ3pNtdjYlgMELWtaNrJiLctgiru5ooj0dZFpF+U/Pi7ZeNSQ0awcfig xGZdFBQN+k3e+oU258eEf3i4rZ9EaY/TguxhfCqmkz8dENNbtB0Y6YUopoHswIV6 46uCtlyq3fvFhgEA/T9VLkv8kph0A0Jat92F67JH1VRs4KhyjlzmMiNV5sNBfqum 3Ditl3WgUl0XIIuWhaz3qvmyGae1hd20WuLU6kOKuwNZvoB/0Gs6jWrNxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyDPSNiqOiV6kvdI8pXPz5anz3wMB8GA1UdIwQY MBaAFMZ+KkbjT0kUM8i2LzGbkCvd/egxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84MGM1NjgtYmQxNS00ZjMyLThkZDQt MDY2ODY2ZjJkZWQwLzEveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy84MGM1NjgtYmQxNS00ZjMyLThkZDQtMDY2ODY2ZjJkZWQw LzEveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJcF3OFM mIqJYGLZgmzm7AVOiKTk9Z6GhkqLj+Bnx1NpddaFPGkjiIA/dItWE8STx4fs6/QC MhJf8BQaJaHIbr79IP7JZ+tSSeK9xeMmlXFiDvdTbCJfNI0czGovGPkmILu+/wp6 HwZ2m1LWmMZ8Cqys7RQVpZ4N55UhM7e9bwAoVOCm5awKT6svbPXPpWr6fyH0adjV FEcpFZgItVdlqQCM8o3X9ztEuRPb/3vBuz62PYqFn4eG0ByHSp1TRfhJR6gvsb2E /xMT1RB/t5lPy/APBYeT7ohaf9TrDNzAHsw0ooXbwTECEmW0eVbePN8jJpbDQel1 VM9EFRV6Y7LX/Q== -----END CERTIFICATE-----Generated at Sun Dec 21 08:58:04 2025 by rpki-client