This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json) Hash identifier: +vFye+FsFO5dno/nkNxY4i3jIvIZG7gu5681iAomM1I= Subject key identifier: B1:ED:A7:4D:54:05:C9:4E:62:26:D1:9D:49:D1:8D:41:67:80:F4:A4 Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4 Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4 Certificate serial: 019B3E6D354928675FFBD1EDC37DDEBA71C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft Manifest number: 0934 Signing time: Sun 21 Dec 2025 01:01:42 +0000 Manifest this update: Sun 21 Dec 2025 01:01:42 +0000 Manifest next update: Mon 22 Dec 2025 01:01:42 +0000 Files and hashes: 1: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: ko4x+mPvoULQwUv3IUuUMEcpGSTQYOOSZF4CGbDebWg=) 2: bgKhGgsXnxYOt5etHFWwqDnUeNs.roa (hash: uM75kFMM5Lx2SB0GVKIXvYn71xMx4/TssgSDMD0euaE=) 3: eJaPcqVrFJ9nAn0ii5m8-wTNE2M.roa (hash: LKpNzbSMRXo8Ez4GuvTIIep3ThOtGE1xLAuyWwSMRJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:35:49:28:67:5f:fb:d1:ed:c3:7d:de:ba:71:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4 Validity Not Before: Dec 21 01:01:42 2025 GMT Not After : Dec 22 01:01:42 2025 GMT Subject: CN=b1eda74d5405c94e6226d19d49d18d416780f4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:80:2c:74:fb:e0:3d:74:06:61:f8:5d:e1:f3: 20:b1:39:18:82:80:81:b5:05:89:7b:0c:f1:5f:24: d2:92:9e:86:58:23:ff:e0:32:12:2f:73:29:95:27: 57:fc:c9:b8:ea:0a:a6:dc:57:60:4d:22:96:d6:32: 54:20:5e:66:74:1a:f0:8a:de:9d:1d:6f:e8:08:0b: 68:3c:aa:67:4a:76:65:e1:70:98:36:d7:5d:77:94: 9b:04:b0:a8:2a:f8:61:49:eb:9f:76:1d:86:e8:1d: 0d:aa:5f:8d:c7:1d:de:ba:30:d2:85:31:1f:8a:fa: 6b:b5:5e:4a:37:75:8c:60:5a:e5:62:b8:1d:7b:d7: 7f:0f:52:73:1d:60:ed:8f:63:97:a7:0a:a8:6a:05: ed:2c:4e:6d:4b:8d:9b:d9:58:08:3f:9b:5e:0b:98: ad:eb:70:62:2e:b1:72:ee:91:ef:d4:45:15:80:99: d6:7b:68:0d:b2:e2:fb:92:9d:69:c7:29:0d:02:1d: e3:67:28:f4:98:f5:32:2a:d9:d0:a4:73:23:bd:5a: 56:2d:f5:42:13:2d:e4:d1:61:41:30:f0:79:67:36: f4:36:11:80:0e:39:7c:30:11:dd:c4:45:dd:d9:5b: 92:22:78:31:a6:61:d1:a9:58:58:e9:97:0d:4d:1f: ac:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:ED:A7:4D:54:05:C9:4E:62:26:D1:9D:49:D1:8D:41:67:80:F4:A4 X509v3 Authority Key Identifier: keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:09:1e:50:2b:9a:52:1e:e8:6e:aa:32:f0:e8:3c:22:45:09: 56:34:0d:4a:09:89:c4:82:4c:d6:55:42:52:fd:c1:d8:97:c6: aa:74:0e:d9:2a:25:3f:f2:5a:11:45:c8:ff:d8:bb:fd:e7:5a: fd:71:b2:f7:fc:62:69:63:58:c3:b1:5e:f4:0d:47:f0:ff:9f: a0:d9:88:7a:fd:40:84:73:f2:7a:39:5f:54:19:14:bb:80:26: 9b:6b:4c:00:45:6e:d9:17:65:8c:f4:44:10:97:b4:fc:50:4f: 13:11:9c:6f:5f:d5:e9:3f:b8:b0:c7:e8:e8:4d:e0:e7:04:a3: a7:15:49:cc:f0:81:c6:40:8c:b7:5d:e2:5f:68:b7:4c:8f:1f: 13:23:04:c1:ce:5f:7c:21:68:b6:26:f9:a5:da:cc:17:d2:a5: d2:29:31:b8:2f:2c:3d:6f:b7:f1:cb:4d:5f:9b:e8:7c:14:2b: f4:39:a5:5d:ff:8f:b3:2b:d5:50:55:d1:ca:29:b5:ca:59:98: 82:99:71:9c:22:e5:b8:2c:45:aa:47:b2:71:7d:26:ba:2f:62: 3b:b9:18:33:cd:e8:4e:92:c1:c3:37:e3:4f:b9:6d:f1:86:9d: 08:46:76:e0:17:cc:9e:33:cd:b9:31:05:bc:33:b8:6c:33:75: f9:19:e4:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bTVJKGdf+9Htw33eunHDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3OGM3ZmM2YjIxMWUyNzFmNzQ4M2Y3MjFkNDVmMjM4ZGQ3 ZGU1YzQwHhcNMjUxMjIxMDEwMTQyWhcNMjUxMjIyMDEwMTQyWjAzMTEwLwYDVQQD EyhiMWVkYTc0ZDU0MDVjOTRlNjIyNmQxOWQ0OWQxOGQ0MTY3ODBmNGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIAsdPvgPXQGYfhd4fMgsTkYgoCB tQWJewzxXyTSkp6GWCP/4DISL3MplSdX/Mm46gqm3FdgTSKW1jJUIF5mdBrwit6d HW/oCAtoPKpnSnZl4XCYNtddd5SbBLCoKvhhSeufdh2G6B0Nql+Nxx3eujDShTEf ivprtV5KN3WMYFrlYrgde9d/D1JzHWDtj2OXpwqoagXtLE5tS42b2VgIP5teC5it 63BiLrFy7pHv1EUVgJnWe2gNsuL7kp1pxykNAh3jZyj0mPUyKtnQpHMjvVpWLfVC Ey3k0WFBMPB5Zzb0NhGADjl8MBHdxEXd2VuSIngxpmHRqVhY6ZcNTR+sawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHtp01UBclOYibRnUnRjUFngPSkMB8GA1UdIwQY MBaAFEeMf8ayEeJx90g/ch1F8jjdfeXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMt NjJiMWRhMjYxMzI5LzEvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMtNjJiMWRhMjYxMzI5 LzEvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgkeUCua Uh7obqoy8Og8IkUJVjQNSgmJxIJM1lVCUv3B2JfGqnQO2SolP/JaEUXI/9i7/eda /XGy9/xiaWNYw7Fe9A1H8P+foNmIev1AhHPyejlfVBkUu4Amm2tMAEVu2RdljPRE EJe0/FBPExGcb1/V6T+4sMfo6E3g5wSjpxVJzPCBxkCMt13iX2i3TI8fEyMEwc5f fCFotib5pdrMF9Kl0ikxuC8sPW+38ctNX5vofBQr9DmlXf+PsyvVUFXRyim1ylmY gplxnCLluCxFqkeycX0mui9iO7kYM83oTpLBwzfjT7lt8YadCEZ24BfMnjPNuTEF vDO4bDN1+RnkLg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:34:00 2025 by rpki-client