This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json) Hash identifier: m9haRHVe+cPV8TJt5EWRwYowGeo16yUmy+LerM/d9TM= Subject key identifier: 77:A1:17:9A:4D:56:1E:89:C3:8D:4F:C3:A8:4B:C4:C7:FF:00:E9:51 Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8 Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8 Certificate serial: 019AF31B3A2FE5FA60CABE324CCF08AB2C33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft Manifest number: 0EC7 Signing time: Sat 06 Dec 2025 10:00:39 +0000 Manifest this update: Sat 06 Dec 2025 10:00:39 +0000 Manifest next update: Sun 07 Dec 2025 10:00:39 +0000 Files and hashes: 1: N9xO1-NLybIuf2QGNV0iV1i1rRA.roa (hash: EUQ0hueLkMsL20to636qmUcLllL0XtQ2Nr9B2Qpz0Yw=) 2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: 8nufu4p/NZSb4DDy5uwQ/x7LJPkmIssWJq7M5GbjZ/E=) 3: jaAQVqLk3N6vXmbGkwSHtHbashQ.roa (hash: 57hExgt+ivC5tWr9wIi1WBpxn1Wv7MUmq0/RKAWH5Xo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:3a:2f:e5:fa:60:ca:be:32:4c:cf:08:ab:2c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8 Validity Not Before: Dec 6 10:00:39 2025 GMT Not After : Dec 7 10:00:39 2025 GMT Subject: CN=77a1179a4d561e89c38d4fc3a84bc4c7ff00e951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:62:00:56:20:4b:1f:7c:4e:30:f4:13:91:a1: 0e:27:08:df:e2:42:87:5a:c3:9b:8f:38:1d:b8:f5: b7:fb:9b:81:d1:48:48:1e:7a:24:06:06:b0:70:8f: 01:7e:53:1e:8a:c3:61:7f:47:e0:ca:b4:8c:e6:4b: a8:e6:22:0b:19:e0:a4:97:3a:ed:fe:46:6e:49:6c: 5b:09:58:5e:05:a1:fb:10:0b:16:15:4a:8a:b9:66: 47:ce:43:be:0b:cb:e7:d1:85:52:33:4e:0f:40:09: bc:0f:c9:6a:db:69:88:75:25:9a:27:f9:e6:a2:2d: 0d:89:2b:e0:9e:38:1f:49:5c:85:dc:c0:e4:95:2f: 68:72:49:3a:9a:40:8f:f0:7d:bf:fd:0c:60:b1:63: 50:b3:0c:de:93:24:bc:e2:08:31:e2:86:9a:22:33: cc:a7:16:7a:c7:12:47:d5:ac:dc:74:b4:cb:b4:90: a0:5b:79:d4:49:9c:f7:1d:ea:59:3d:f0:0a:1f:af: c9:d3:d0:df:77:33:c3:99:1f:37:64:36:07:c2:0c: fc:df:58:c6:6f:0f:1d:15:54:81:a9:76:ca:a8:26: 88:37:c7:cb:d6:cc:31:d8:77:c6:ff:3c:f6:df:2d: d8:94:1e:fc:a3:4a:6a:c1:bc:04:0c:89:66:d3:ec: a7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A1:17:9A:4D:56:1E:89:C3:8D:4F:C3:A8:4B:C4:C7:FF:00:E9:51 X509v3 Authority Key Identifier: keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:bf:c3:bf:8f:ac:2e:a0:ee:9c:0d:63:27:0c:f3:cf:20:ed: 7f:40:85:53:fa:23:08:b0:9e:6c:f6:12:7a:ea:40:7e:11:61: 2d:28:0a:d1:24:a3:e8:cd:f7:93:42:ae:37:63:f1:77:81:99: 50:a9:c6:80:64:0c:e7:0f:3c:ac:4e:26:7c:78:f3:63:4c:ae: 21:72:dd:ee:e8:9c:56:e9:a6:35:7d:24:28:58:49:63:0d:d1: 45:da:2f:62:a2:31:6e:8f:ba:00:fc:95:3a:57:61:ca:36:52: 72:1b:dc:0b:c6:dc:eb:46:eb:c6:ae:ea:27:75:c5:ad:95:c3: 62:95:26:29:1b:c9:b8:65:03:c4:a9:5a:12:fc:dd:ae:7f:51: 0b:d5:25:dc:7c:76:f7:d7:e2:9f:39:d4:83:15:c4:76:3f:7c: dc:bf:56:f5:0c:6b:74:ca:c6:5d:2e:8e:4a:b4:17:74:95:06: 31:34:eb:d3:5f:57:d7:7f:ff:98:46:2f:29:3b:16:65:8e:cd: 55:6b:d8:88:91:64:04:83:fb:b8:76:02:84:f1:da:07:4d:da: 7e:a7:b6:b8:80:6d:5a:5b:c9:4a:5e:f1:7b:d8:43:e9:55:33: f7:8e:39:4c:56:0b:8f:30:7d:d5:1d:50:a8:13:28:b6:e3:0c: 7d:59:06:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzov5fpgyr4yTM8IqywzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmODJhZTlhMzA0YWMwODJjMThhMjg5MTY2NmY2NGNlZTgx ZDVjYTgwHhcNMjUxMjA2MTAwMDM5WhcNMjUxMjA3MTAwMDM5WjAzMTEwLwYDVQQD Eyg3N2ExMTc5YTRkNTYxZTg5YzM4ZDRmYzNhODRiYzRjN2ZmMDBlOTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mIAViBLH3xOMPQTkaEOJwjf4kKH WsObjzgduPW3+5uB0UhIHnokBgawcI8BflMeisNhf0fgyrSM5kuo5iILGeCklzrt /kZuSWxbCVheBaH7EAsWFUqKuWZHzkO+C8vn0YVSM04PQAm8D8lq22mIdSWaJ/nm oi0NiSvgnjgfSVyF3MDklS9ockk6mkCP8H2//QxgsWNQswzekyS84ggx4oaaIjPM pxZ6xxJH1azcdLTLtJCgW3nUSZz3HepZPfAKH6/J09DfdzPDmR83ZDYHwgz831jG bw8dFVSBqXbKqCaIN8fL1swx2HfG/zz23y3YlB78o0pqwbwEDIlm0+ynBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHehF5pNVh6Jw41Pw6hLxMf/AOlRMB8GA1UdIwQY MBaAFF+CrpowSsCCwYookWZvZM7oHVyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTct M2VjNDQ3MzEwZGZiLzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTctM2VjNDQ3MzEwZGZi LzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATL/Dv4+s LqDunA1jJwzzzyDtf0CFU/ojCLCebPYSeupAfhFhLSgK0SSj6M33k0KuN2Pxd4GZ UKnGgGQM5w88rE4mfHjzY0yuIXLd7uicVummNX0kKFhJYw3RRdovYqIxbo+6APyV OldhyjZSchvcC8bc60brxq7qJ3XFrZXDYpUmKRvJuGUDxKlaEvzdrn9RC9Ul3Hx2 99finznUgxXEdj983L9W9QxrdMrGXS6OSrQXdJUGMTTr019X13//mEYvKTsWZY7N VWvYiJFkBIP7uHYChPHaB03afqe2uIBtWlvJSl7xe9hD6VUz9445TFYLjzB91R1Q qBMotuMMfVkGnw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:06 2025 by rpki-client