This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft File: x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft (raw, json) Hash identifier: 8IMQQAaEyHqImXKJZeorv4tP4oC6ARYsuQRopbxMk0Q= Subject key identifier: D0:83:87:52:CE:DA:97:00:A3:3F:60:A8:E7:70:90:85:5D:0A:E3:3F Authority key identifier: C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC Certificate issuer: /CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc Certificate serial: 019AF19AC2153762B1A695A0A8C94948B347 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft Manifest number: 143F Signing time: Sat 06 Dec 2025 03:00:42 +0000 Manifest this update: Sat 06 Dec 2025 03:00:42 +0000 Manifest next update: Sun 07 Dec 2025 03:00:42 +0000 Files and hashes: 1: MnEhxi_woQM3cXv5W6rDC8mvyKY.roa (hash: kYcuDCyVLUhxBSbVQtzSrwd5iX/KUoxvsuaVTI7bR60=) 2: x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl (hash: 5mMVMpBzgpKdfgI8ayanUZ+c5S4A5c5FPEGxnOTfD0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c2:15:37:62:b1:a6:95:a0:a8:c9:49:48:b3:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc Validity Not Before: Dec 6 03:00:42 2025 GMT Not After : Dec 7 03:00:42 2025 GMT Subject: CN=d0838752ceda9700a33f60a8e77090855d0ae33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:7d:44:73:3d:6d:12:3c:3a:43:9e:eb:05: dc:23:f5:40:bf:e8:07:b9:1d:2a:fd:35:b3:b2:2d: 78:21:80:a6:17:a5:c7:80:86:2d:1b:45:67:25:0e: b9:af:bf:5c:70:18:a6:8f:74:72:ea:96:a2:bf:61: 5d:6a:fe:fc:84:87:57:33:d9:11:b2:4f:13:80:b8: bd:98:85:78:3e:91:62:43:9c:a9:07:ef:d0:ce:1c: 8a:95:94:7f:cf:07:78:62:41:2e:bc:50:58:db:d2: 1f:62:10:44:af:21:b8:ac:1b:c6:8b:c1:35:51:c5: 82:01:19:0e:84:ca:cf:e2:d7:62:a8:2f:1b:1f:ed: d0:b9:1f:d5:8a:89:e7:94:90:0b:0c:da:f3:b1:58: 71:69:90:03:6c:7d:eb:cd:a6:4d:da:16:3f:ea:ed: 55:b7:e2:d4:47:86:76:cf:e7:35:a6:b8:e0:16:6d: ae:52:52:d6:63:24:67:c7:37:ab:3a:46:7c:f7:15: b6:9c:09:1c:99:18:92:09:b6:68:30:9e:39:89:0e: ae:c0:ac:de:f8:b5:82:7a:95:c0:11:67:10:fd:d7: 6b:b5:20:41:c6:94:1f:71:0c:a4:34:56:ba:e5:e6: ac:6f:34:be:df:cd:b9:e4:d9:07:88:a7:c5:5e:f2: 5d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:83:87:52:CE:DA:97:00:A3:3F:60:A8:E7:70:90:85:5D:0A:E3:3F X509v3 Authority Key Identifier: keyid:C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:4a:ed:4f:c0:c8:f2:74:a7:99:9a:92:80:4f:8b:56:05:0e: 19:fa:14:85:c6:36:1b:ed:0a:0d:16:4a:ff:62:46:84:43:61: 6f:8f:a0:ad:80:2b:21:a2:de:ad:81:b7:55:ce:0d:6e:d5:a0: 0e:14:68:f1:49:7e:bb:f4:a1:8a:fb:86:48:a4:0d:3f:4d:62: 84:e5:a4:7b:43:1e:b0:bb:e2:ee:b5:60:93:0e:62:d2:3d:23: 1f:f5:fa:6c:5f:0e:76:df:df:78:1e:1b:f2:43:76:e2:50:62: ce:d6:97:37:0b:53:66:c5:68:d4:1e:fb:cc:28:8b:27:18:54: 34:6a:90:d2:65:f6:d3:a9:cc:21:fc:e2:ae:bd:97:19:a0:6c: c8:fc:bc:63:55:e3:3e:b3:74:75:47:3a:ca:3d:91:e9:f7:f7: 59:01:76:f5:71:d4:fa:c2:b5:4d:35:56:3e:1f:aa:48:d8:44: 06:cd:58:23:46:97:bd:03:34:5d:85:b7:a9:43:2b:89:e0:ea: 33:71:9a:1a:c0:63:41:cb:42:75:ec:d4:0b:5c:82:26:a4:b1: 92:d7:55:11:72:f1:fe:a1:16:63:33:ea:79:21:7d:9b:67:9b: 7d:40:95:b9:86:00:ac:14:0b:61:ec:19:f0:b9:1d:97:dc:e1: 46:59:8c:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsIVN2KxppWgqMlJSLNHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3OGI1MmRkZmQwYmU1NjFkNDEwY2E4ODQ2ZmM3OTdlMjI5 OGIzY2MwHhcNMjUxMjA2MDMwMDQyWhcNMjUxMjA3MDMwMDQyWjAzMTEwLwYDVQQD EyhkMDgzODc1MmNlZGE5NzAwYTMzZjYwYThlNzcwOTA4NTVkMGFlMzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd59RHM9bRI8OkOe6wXcI/VAv+gH uR0q/TWzsi14IYCmF6XHgIYtG0VnJQ65r79ccBimj3Ry6paiv2Fdav78hIdXM9kR sk8TgLi9mIV4PpFiQ5ypB+/QzhyKlZR/zwd4YkEuvFBY29IfYhBEryG4rBvGi8E1 UcWCARkOhMrP4tdiqC8bH+3QuR/VionnlJALDNrzsVhxaZADbH3rzaZN2hY/6u1V t+LUR4Z2z+c1prjgFm2uUlLWYyRnxzerOkZ89xW2nAkcmRiSCbZoMJ45iQ6uwKze +LWCepXAEWcQ/ddrtSBBxpQfcQykNFa65easbzS+38255NkHiKfFXvJdeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCDh1LO2pcAoz9gqOdwkIVdCuM/MB8GA1UdIwQY MBaAFMeLUt39C+Vh1BDKiEb8eX4imLPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDR0UzNmMEw1V0hVRU1xSVJ2eDVmaUtZczh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81MjU3MDctMWExMi00MTM4LWFlNDYt OWY3ZThhNjEyMmEzLzEveDR0UzNmMEw1V0hVRU1xSVJ2eDVmaUtZczh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy81MjU3MDctMWExMi00MTM4LWFlNDYtOWY3ZThhNjEyMmEz LzEveDR0UzNmMEw1V0hVRU1xSVJ2eDVmaUtZczh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUrtT8DI 8nSnmZqSgE+LVgUOGfoUhcY2G+0KDRZK/2JGhENhb4+grYArIaLerYG3Vc4NbtWg DhRo8Ul+u/ShivuGSKQNP01ihOWke0MesLvi7rVgkw5i0j0jH/X6bF8Odt/feB4b 8kN24lBiztaXNwtTZsVo1B77zCiLJxhUNGqQ0mX206nMIfzirr2XGaBsyPy8Y1Xj PrN0dUc6yj2R6ff3WQF29XHU+sK1TTVWPh+qSNhEBs1YI0aXvQM0XYW3qUMrieDq M3GaGsBjQctCdezUC1yCJqSxktdVEXLx/qEWYzPqeSF9m2ebfUCVuYYArBQLYewZ 8Lkdl9zhRlmMqw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:16 2025 by rpki-client