This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft File: x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json) Hash identifier: emzIlp2piJRmQ3fWmyBzOgnMZEaTaZhG4oZsSXc9FdM= Subject key identifier: CE:5E:AE:23:BC:C2:3E:15:0B:4C:EA:A4:26:C6:CC:E6:D3:1E:62:B9 Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70 Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270 Certificate serial: 019AF0BF8D1730397435A4C1729F9F5CC310 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft Manifest number: 1765 Signing time: Fri 05 Dec 2025 23:01:16 +0000 Manifest this update: Fri 05 Dec 2025 23:01:16 +0000 Manifest next update: Sat 06 Dec 2025 23:01:16 +0000 Files and hashes: 1: 1k_-7iaL3-MiuBsEwzsqEjXw8Aw.roa (hash: MvGzqoey/hCfcwmRhO21Z8RbLw85JPgQ7VzzDBc6ROg=) 2: B5D9MGD5HNxMn2ytn4E-XXNfFUU.roa (hash: ZF/ZQXZ6OV0r+xXPNKcSMNFa0v6w/gQVQYon3rz/hOA=) 3: V3axZivK3WrjDfjp92dOnzYIRGs.roa (hash: Nvb4IvNDmUJ1oDhZXKGSuAJ/dOxxdh42DYgaZcrkkzQ=) 4: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: VaRCdasfwWSPB+C9wseqxd3oD2R0Cm7QBNZyhdUbLkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:8d:17:30:39:74:35:a4:c1:72:9f:9f:5c:c3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270 Validity Not Before: Dec 5 23:01:16 2025 GMT Not After : Dec 6 23:01:16 2025 GMT Subject: CN=ce5eae23bcc23e150b4ceaa426c6cce6d31e62b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:fd:02:b1:58:cc:b5:49:c2:0e:3c:00:07:ad: 53:ae:f0:b8:4c:3f:4f:8b:b8:2d:12:e5:b8:be:3d: 84:ae:df:a8:be:f8:e1:55:2b:5d:9c:b3:20:05:90: 31:15:0d:ed:56:0f:68:5e:12:95:fe:30:6b:65:9f: 73:48:f2:a0:b6:97:db:db:2b:37:90:7a:b7:29:24: 8c:39:f5:ed:ce:37:5b:37:a9:94:77:16:3c:ef:4c: 62:ef:9e:3f:ee:87:f1:f2:f9:bb:7b:4a:33:bd:67: 17:44:e2:49:22:5d:63:f6:88:72:94:d3:9f:4f:e1: bf:48:85:91:74:07:43:ad:f9:7b:32:82:be:8e:9d: e6:4d:38:e7:48:c4:6f:2a:14:ff:e4:78:c8:ea:ca: f2:fa:ae:a8:5b:93:f8:b6:25:ec:39:de:8b:24:8b: fd:39:c9:9b:eb:ab:ed:a0:7c:33:26:41:52:47:4e: 46:05:a2:bb:d6:28:74:64:9f:79:3e:e1:85:28:2f: 24:b5:83:c4:fc:82:bc:80:81:06:12:37:1f:cc:aa: f9:25:d8:0e:61:67:9d:c6:33:d7:89:48:6b:1f:80: 33:7d:7e:c5:fb:ac:a6:7a:a4:fe:d0:f2:c1:49:58: 5c:62:5a:1a:4c:b6:c4:a4:55:a6:17:af:63:56:08: 89:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5E:AE:23:BC:C2:3E:15:0B:4C:EA:A4:26:C6:CC:E6:D3:1E:62:B9 X509v3 Authority Key Identifier: keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:81:0f:aa:2c:b2:5b:77:57:f8:44:52:fe:79:10:de:3a:e0: ad:68:83:08:6e:24:a3:0d:4d:25:64:fc:ef:eb:05:ce:bf:93: ee:32:c4:b3:2d:48:9d:cf:03:47:be:88:3e:bb:18:8b:16:99: 89:a3:34:d9:3a:64:4c:53:7a:b1:8c:b3:b3:73:b3:e4:41:c8: 36:28:be:c4:60:1e:00:59:f8:8b:54:b7:99:72:5d:2c:7c:af: 1c:4d:03:44:b6:cd:aa:76:b6:44:d7:f1:d4:96:d7:a5:19:31: 2f:9b:1f:ba:67:62:8c:6a:7c:d5:f7:fb:57:7a:b4:94:bb:76: c9:80:e0:29:65:53:bd:d3:d3:58:79:2e:36:62:ea:bf:38:69: 7e:b0:0c:ff:28:73:ff:24:5d:d5:81:07:1c:6d:22:c3:43:e5: 91:d8:dc:8c:ec:5f:8a:bf:76:68:2f:87:16:97:3e:41:61:38: c6:98:a3:3c:e4:62:3f:57:a5:90:c8:47:d2:02:f0:45:35:0b: c8:a2:7c:2f:38:14:cc:13:28:c2:7f:c3:59:1f:2d:f0:80:90: 81:78:21:03:88:ef:9d:85:a3:64:c6:eb:22:98:54:99:41:38: a5:b1:0d:ad:21:83:2e:96:3f:fa:fd:f5:e5:4c:9e:9d:f9:41: 58:46:ee:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv40XMDl0NaTBcp+fXMMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ODQxMjg1MDVmN2Y5OWM3NTcwNDQyOTgwYWRlYjhhZjkw Y2MyNzAwHhcNMjUxMjA1MjMwMTE2WhcNMjUxMjA2MjMwMTE2WjAzMTEwLwYDVQQD EyhjZTVlYWUyM2JjYzIzZTE1MGI0Y2VhYTQyNmM2Y2NlNmQzMWU2MmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/f0CsVjMtUnCDjwAB61TrvC4TD9P i7gtEuW4vj2Ert+ovvjhVStdnLMgBZAxFQ3tVg9oXhKV/jBrZZ9zSPKgtpfb2ys3 kHq3KSSMOfXtzjdbN6mUdxY870xi754/7ofx8vm7e0ozvWcXROJJIl1j9ohylNOf T+G/SIWRdAdDrfl7MoK+jp3mTTjnSMRvKhT/5HjI6sry+q6oW5P4tiXsOd6LJIv9 Ocmb66vtoHwzJkFSR05GBaK71ih0ZJ95PuGFKC8ktYPE/IK8gIEGEjcfzKr5JdgO YWedxjPXiUhrH4AzfX7F+6ymeqT+0PLBSVhcYloaTLbEpFWmF69jVgiJOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5eriO8wj4VC0zqpCbGzObTHmK5MB8GA1UdIwQY MBaAFMeEEoUF9/mcdXBEKYCt64r5DMJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQt NmMxYjQ0NzFmN2VlLzEveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQtNmMxYjQ0NzFmN2Vl LzEveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoEPqiyy W3dX+ERS/nkQ3jrgrWiDCG4kow1NJWT87+sFzr+T7jLEsy1Inc8DR76IPrsYixaZ iaM02TpkTFN6sYyzs3Oz5EHINii+xGAeAFn4i1S3mXJdLHyvHE0DRLbNqna2RNfx 1JbXpRkxL5sfumdijGp81ff7V3q0lLt2yYDgKWVTvdPTWHkuNmLqvzhpfrAM/yhz /yRd1YEHHG0iw0PlkdjcjOxfir92aC+HFpc+QWE4xpijPORiP1elkMhH0gLwRTUL yKJ8LzgUzBMown/DWR8t8ICQgXghA4jvnYWjZMbrIphUmUE4pbENrSGDLpY/+v31 5UyenflBWEbueg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:09:57 2025 by rpki-client