This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft File: X4rRNUEr-QQb5f0I50okEg2z7sc.mft (raw, json) Hash identifier: csWNhhCbaHB1PK/AxIpQIM10HUUaKxzVSB7FayNuhVo= Subject key identifier: BE:CE:A6:C7:10:DE:AF:57:69:2E:A1:FA:01:63:83:05:83:03:9C:E0 Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7 Certificate issuer: /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7 Certificate serial: 019AF2766FD3461D37931FB02868819AEB86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft Manifest number: 0BB4 Signing time: Sat 06 Dec 2025 07:00:39 +0000 Manifest this update: Sat 06 Dec 2025 07:00:39 +0000 Manifest next update: Sun 07 Dec 2025 07:00:39 +0000 Files and hashes: 1: OaP0ViKbeY2ivI-4rv6OeNEGIqA.roa (hash: e7Vy7pCIoWDvqhKmOHXfSd0NE1hCUf1lKUMb+Ggiqf0=) 2: X4rRNUEr-QQb5f0I50okEg2z7sc.crl (hash: 5Em3LQrgq5z78B7K0gtT7fldlRZnbMh4Wum0dh2qytU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6f:d3:46:1d:37:93:1f:b0:28:68:81:9a:eb:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7 Validity Not Before: Dec 6 07:00:39 2025 GMT Not After : Dec 7 07:00:39 2025 GMT Subject: CN=becea6c710deaf57692ea1fa0163830583039ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ec:48:28:ed:e6:c7:c6:60:42:8a:75:02:7a: a2:f0:b4:cd:a2:60:76:1f:a7:b2:43:8f:29:82:bc: f5:bf:1a:cc:3b:04:89:5d:80:08:7b:8a:11:b6:40: 0c:1d:fd:04:94:70:6c:19:f9:61:d6:31:3c:ac:d8: 39:ad:ce:a6:fe:e7:50:21:90:02:51:79:68:e2:1e: 5e:b2:64:c0:6d:09:08:e6:c3:d2:79:9b:e3:fd:b4: cd:97:87:70:3e:32:78:26:d6:df:ee:69:09:ac:cf: cc:fa:7c:fd:14:a6:57:ce:c6:2c:1b:55:ea:c8:83: 78:6a:61:cb:cf:06:0e:49:fb:3c:c9:4e:76:4d:80: 7a:8c:62:37:40:c7:ef:c5:60:a8:33:ae:b4:ad:be: c8:03:39:c1:2a:b3:cb:fc:bd:14:85:1c:fe:e1:0e: 7e:99:dc:57:33:c7:4b:dc:f7:50:e8:02:79:53:04: 0a:b5:81:b8:48:d2:79:bf:c0:5f:66:38:da:0f:db: 50:a0:30:d4:17:e2:19:af:16:54:c0:c5:e3:fb:61: d2:56:99:fd:c0:08:c5:78:74:35:1e:45:0b:40:cd: 1f:d2:78:46:d7:f4:33:c2:95:15:ed:79:53:50:40: 8a:18:2d:14:9e:d3:9e:fc:37:e5:77:ab:48:10:a8: 24:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CE:A6:C7:10:DE:AF:57:69:2E:A1:FA:01:63:83:05:83:03:9C:E0 X509v3 Authority Key Identifier: keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:1f:cd:e1:62:ee:55:63:8d:53:d7:e6:1e:ab:60:a1:d0:6f: f8:36:38:b5:cd:7f:e6:57:61:a9:85:98:f2:88:ca:5d:0e:b0: 28:88:31:cb:fb:5b:7a:ae:44:fa:c6:af:c3:65:f1:cf:57:cf: 2f:24:88:13:1a:d3:a4:ef:5b:fb:36:10:0a:b2:15:f3:55:a4: af:35:79:2f:7e:66:eb:95:59:fd:ff:b3:33:4a:92:5e:64:67: e4:3c:d7:7e:6d:16:e1:ea:22:69:b2:5a:00:7d:55:56:c8:4c: 5e:a6:a3:11:7c:5c:e9:52:00:9e:d2:26:63:18:b4:d7:81:09: 78:57:fe:48:36:d6:19:a7:25:9c:e7:89:d9:4e:e4:33:cc:00: 57:37:6f:6f:4b:f5:4f:3b:7a:9a:56:3a:29:ec:19:1b:8d:6a: 34:f7:49:49:bf:66:8a:c5:1b:bf:87:1c:91:3b:e5:43:58:43: a1:08:ea:77:87:19:ac:a7:aa:08:d5:a6:04:0f:e8:13:7a:b4: a1:0e:af:22:5c:fb:5b:b9:f7:e1:16:a8:b7:7d:a1:38:04:62: 7f:d0:c0:e4:51:a4:bc:84:a4:a0:95:85:be:9e:8b:4c:eb:55: 01:49:10:5b:ac:c2:70:c0:20:cf:2d:84:32:a3:85:57:a9:02: a3:2c:73:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydm/TRh03kx+wKGiBmuuGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmOGFkMTM1NDEyYmY5MDQxYmU1ZmQwOGU3NGEyNDEyMGRi M2VlYzcwHhcNMjUxMjA2MDcwMDM5WhcNMjUxMjA3MDcwMDM5WjAzMTEwLwYDVQQD EyhiZWNlYTZjNzEwZGVhZjU3NjkyZWExZmEwMTYzODMwNTgzMDM5Y2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0exIKO3mx8ZgQop1Anqi8LTNomB2 H6eyQ48pgrz1vxrMOwSJXYAIe4oRtkAMHf0ElHBsGflh1jE8rNg5rc6m/udQIZAC UXlo4h5esmTAbQkI5sPSeZvj/bTNl4dwPjJ4Jtbf7mkJrM/M+nz9FKZXzsYsG1Xq yIN4amHLzwYOSfs8yU52TYB6jGI3QMfvxWCoM660rb7IAznBKrPL/L0UhRz+4Q5+ mdxXM8dL3PdQ6AJ5UwQKtYG4SNJ5v8BfZjjaD9tQoDDUF+IZrxZUwMXj+2HSVpn9 wAjFeHQ1HkULQM0f0nhG1/QzwpUV7XlTUECKGC0UntOe/Dfld6tIEKgkkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7OpscQ3q9XaS6h+gFjgwWDA5zgMB8GA1UdIwQY MBaAFF+K0TVBK/kEG+X9COdKJBINs+7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAt Mzc5NzMzYWIzOGNkLzEvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAtMzc5NzMzYWIzOGNk LzEvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmB/N4WLu VWONU9fmHqtgodBv+DY4tc1/5ldhqYWY8ojKXQ6wKIgxy/tbeq5E+savw2Xxz1fP LySIExrTpO9b+zYQCrIV81WkrzV5L35m65VZ/f+zM0qSXmRn5DzXfm0W4eoiabJa AH1VVshMXqajEXxc6VIAntImYxi014EJeFf+SDbWGaclnOeJ2U7kM8wAVzdvb0v1 Tzt6mlY6KewZG41qNPdJSb9misUbv4cckTvlQ1hDoQjqd4cZrKeqCNWmBA/oE3q0 oQ6vIlz7W7n34Raot32hOARif9DA5FGkvISkoJWFvp6LTOtVAUkQW6zCcMAgzy2E MqOFV6kCoyxzpg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:29 2025 by rpki-client