This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft File: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft (raw, json) Hash identifier: GOkx0n5aShhe/AQW2BmxSa3dLKliUm272sgLVFgc4jE= Subject key identifier: 38:55:74:6F:DD:0F:EC:B1:9E:FC:FB:27:7B:F5:42:56:02:14:4D:25 Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96 Certificate issuer: /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96 Certificate serial: 019B6C578C7024D34B4B4DB657A45E73F7A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft Manifest number: 0DAB Signing time: Mon 29 Dec 2025 23:00:35 +0000 Manifest this update: Mon 29 Dec 2025 23:00:35 +0000 Manifest next update: Tue 30 Dec 2025 23:00:35 +0000 Files and hashes: 1: Gia5qJnxkTQXZv942Pyg_qz0Ijw.roa (hash: Ohs/5SqLV2Md0cGZVcdev41UIaMnOgv11AyrRygjew0=) 2: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl (hash: HYbEXMczl4e0N07JLm31YNzatvDta7HbcUiLRkRFkHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:57:8c:70:24:d3:4b:4b:4d:b6:57:a4:5e:73:f7:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96 Validity Not Before: Dec 29 23:00:35 2025 GMT Not After : Dec 30 23:00:35 2025 GMT Subject: CN=3855746fdd0fecb19efcfb277bf5425602144d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:88:fe:77:76:f0:70:b3:2c:9e:35:71:fb:88: 2b:01:b0:fb:08:5b:12:e1:e1:cb:f5:2a:7d:5f:83: b0:0e:a8:f1:d2:44:7c:87:2e:ca:0f:fd:e5:9e:ad: 88:f5:5e:71:f8:43:ee:35:4e:2c:9b:bc:76:66:ff: e3:59:e5:a1:34:bb:39:4d:dd:32:f0:f0:65:a7:9f: 63:86:7a:aa:93:18:43:3a:56:15:e9:a3:56:90:64: 39:8c:08:9e:e0:f5:38:06:dc:da:32:69:d6:d3:3f: 7a:fb:2e:79:09:86:9e:7c:d6:23:3a:84:76:d5:0b: 32:ab:dd:41:bb:35:92:94:c3:29:a4:6b:84:25:3c: ea:94:f0:82:46:1a:73:e9:6d:fa:d4:36:57:8b:64: 32:5f:ff:68:39:34:0d:f0:95:86:f2:b4:e0:a8:eb: 5c:d4:57:d0:a5:2c:3e:10:76:43:77:62:05:fc:84: 64:df:e7:f6:e9:09:02:d3:78:22:53:be:9b:5c:b8: c2:e9:e2:eb:55:a3:75:93:23:73:57:52:d8:58:58: c6:a5:63:8e:8a:38:93:a5:86:f1:96:82:41:f2:da: 1a:37:d2:d8:7a:a9:cf:81:d8:56:2b:e7:00:cd:8b: 1b:33:3a:75:a5:01:39:70:5a:a0:51:de:3d:7e:c4: 02:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:55:74:6F:DD:0F:EC:B1:9E:FC:FB:27:7B:F5:42:56:02:14:4D:25 X509v3 Authority Key Identifier: keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:7f:8e:3c:ea:bd:85:1b:0b:cd:8c:9e:cd:42:c7:b2:83:c8: 6b:e9:f0:e2:72:60:9c:7c:17:a6:04:11:c5:c5:bd:cb:b4:ea: 5b:ee:d2:1b:29:8c:b2:37:7c:9f:39:1e:f2:77:ac:50:21:dc: 7e:78:a6:f5:5c:f7:fb:2d:fc:12:e7:e1:3b:f9:2a:ee:72:57: 4b:a3:0f:b8:32:3f:cc:cc:6d:59:f4:f0:ca:c6:41:c6:18:5c: e7:b9:63:78:81:01:3b:1d:dd:b7:ed:28:c3:9e:77:df:a3:2e: 54:eb:ab:73:69:9a:a7:65:54:ff:eb:07:31:ef:78:cd:ab:b3: 52:d7:83:47:26:22:e9:e1:50:6d:a3:b7:42:89:df:21:0b:b1: fe:a4:24:7f:ea:c3:6a:1a:a9:35:79:55:03:5f:1e:96:6c:ca: 2e:1c:cf:d2:82:fa:e6:43:09:97:11:11:c3:dc:56:e0:91:b9: 0a:97:84:04:bf:27:59:13:19:a3:a2:b7:25:b9:1b:96:32:2d: dd:bd:d1:13:1c:87:f8:95:39:14:68:c6:a0:49:9d:45:93:00: ac:bb:a5:43:1b:2e:c5:e5:2f:84:c1:9d:84:d1:c2:1c:62:e3: 47:a7:e8:aa:7b:cf:2b:55:21:2f:03:7e:8d:75:bb:97:6c:a9: 0d:57:37:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsV4xwJNNLS022V6Rec/eiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MGUwODAxODIzZjE5ZDUxYjk2MmFiNmQ0ZWJiYmMyN2Rk NGVkOTYwHhcNMjUxMjI5MjMwMDM1WhcNMjUxMjMwMjMwMDM1WjAzMTEwLwYDVQQD EygzODU1NzQ2ZmRkMGZlY2IxOWVmY2ZiMjc3YmY1NDI1NjAyMTQ0ZDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIj+d3bwcLMsnjVx+4grAbD7CFsS 4eHL9Sp9X4OwDqjx0kR8hy7KD/3lnq2I9V5x+EPuNU4sm7x2Zv/jWeWhNLs5Td0y 8PBlp59jhnqqkxhDOlYV6aNWkGQ5jAie4PU4BtzaMmnW0z96+y55CYaefNYjOoR2 1Qsyq91BuzWSlMMppGuEJTzqlPCCRhpz6W361DZXi2QyX/9oOTQN8JWG8rTgqOtc 1FfQpSw+EHZDd2IF/IRk3+f26QkC03giU76bXLjC6eLrVaN1kyNzV1LYWFjGpWOO ijiTpYbxloJB8toaN9LYeqnPgdhWK+cAzYsbMzp1pQE5cFqgUd49fsQCnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhVdG/dD+yxnvz7J3v1QlYCFE0lMB8GA1UdIwQY MBaAFMUOCAGCPxnVG5YqttTru8J91O2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80NzRmNjUtZmUyOS00ODIyLWJhMTQt Y2U4MjE0Y2VmNmI1LzEveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi80NzRmNjUtZmUyOS00ODIyLWJhMTQtY2U4MjE0Y2VmNmI1 LzEveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASH+OPOq9 hRsLzYyezULHsoPIa+nw4nJgnHwXpgQRxcW9y7TqW+7SGymMsjd8nzke8nesUCHc fnim9Vz3+y38EufhO/kq7nJXS6MPuDI/zMxtWfTwysZBxhhc57ljeIEBOx3dt+0o w55336MuVOurc2map2VU/+sHMe94zauzUteDRyYi6eFQbaO3QonfIQux/qQkf+rD ahqpNXlVA18elmzKLhzP0oL65kMJlxERw9xW4JG5CpeEBL8nWRMZo6K3JbkbljIt 3b3RExyH+JU5FGjGoEmdRZMArLulQxsuxeUvhMGdhNHCHGLjR6foqnvPK1UhLwN+ jXW7l2ypDVc3dQ== -----END CERTIFICATE-----Generated at Tue Dec 30 01:19:38 2025 by rpki-client