This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json) Hash identifier: o3zk600k/RgKMS39aTRfCWWO5/n7cJaufBN+gUO34+E= Subject key identifier: 8D:59:40:06:90:D4:DF:01:C3:21:50:3C:A1:E2:03:74:68:57:19:99 Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4 Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4 Certificate serial: 019B2F9E77B4EC8F39C2DF184DE312DFB4E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft Manifest number: 0AF7 Signing time: Thu 18 Dec 2025 04:01:12 +0000 Manifest this update: Thu 18 Dec 2025 04:01:12 +0000 Manifest next update: Fri 19 Dec 2025 04:01:12 +0000 Files and hashes: 1: 26-qfn9ODUHJpEH89Qt0MRaUhuA.roa (hash: 2YdYGfBZn6lY/AbZT0o2XAew8LsHFvDqQ6x2hV85Y5I=) 2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: c6ZH4RpZxfimMRBE6WUmNj4RyM5coG4rbldKUP7sn1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:77:b4:ec:8f:39:c2:df:18:4d:e3:12:df:b4:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4 Validity Not Before: Dec 18 04:01:12 2025 GMT Not After : Dec 19 04:01:12 2025 GMT Subject: CN=8d59400690d4df01c321503ca1e2037468571999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5e:60:72:cc:9e:36:d1:0a:25:e9:b3:2d:b3: 61:33:5b:f6:3f:4a:94:ae:d1:25:02:c5:db:2d:23: cf:70:91:57:32:f6:2b:34:2d:68:0d:9b:66:47:cc: 11:1c:ad:60:34:2f:a1:17:a6:3f:f7:88:8f:54:d0: cf:7e:1c:74:87:15:4d:ba:65:54:f7:66:47:3d:90: 95:16:ae:78:54:a7:81:88:81:92:b5:73:34:3c:fd: 5b:9e:33:1f:c9:d8:68:f9:be:6b:81:15:d0:74:f3: 67:e2:14:c4:47:e0:38:3c:11:79:5a:2e:50:2a:98: 45:0f:45:9d:ad:be:40:29:99:2d:68:80:c1:ef:f3: e8:af:00:11:e5:eb:77:c9:e1:1f:31:09:13:ea:4a: 47:06:30:5b:9c:9b:5a:98:bc:77:f9:d8:f7:7d:11: b0:a1:82:e0:11:38:9f:6a:3a:7d:a0:db:e6:10:81: ba:4b:33:48:55:45:57:24:83:ab:6d:da:79:1e:1d: fe:b4:b1:bd:54:6b:0e:0e:de:cb:5f:8a:8a:9e:eb: 00:80:5b:81:03:c2:81:09:43:1b:c8:7a:2e:74:ba: ca:11:84:0b:23:15:6f:7c:38:1c:19:98:61:b7:bc: 81:85:00:19:e6:d3:ef:c9:a1:82:6a:f2:b2:50:26: ff:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:59:40:06:90:D4:DF:01:C3:21:50:3C:A1:E2:03:74:68:57:19:99 X509v3 Authority Key Identifier: keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:48:c1:c0:73:26:a4:6c:95:68:82:13:cc:40:69:f7:66:61: 5f:01:9c:62:3d:46:8d:4a:d8:d6:b3:aa:49:32:f7:fd:1f:7d: 02:ea:34:97:14:1e:5b:d8:c2:6c:1f:a9:4a:80:17:a8:9e:1b: 5a:70:96:b5:85:54:62:2f:f3:80:0d:30:13:b2:5d:24:fa:2d: 04:82:98:d7:c5:9c:62:13:0f:86:c7:72:6b:93:24:94:77:cf: b2:a2:dd:b8:d1:62:8b:fe:e8:64:a9:01:8f:6f:3a:ae:0a:ef: 9f:50:63:5e:4f:46:e0:0d:9f:aa:4c:35:72:34:63:8f:ef:dc: 66:b8:a0:bd:1c:12:97:d4:94:07:a9:e2:07:c4:4c:5f:55:0f: 6c:3a:36:7a:69:15:c4:d2:13:d8:f0:97:3d:41:c1:02:cc:3e: 4f:19:79:6c:2d:43:f0:da:93:7b:ea:1c:7b:d7:87:95:44:be: 13:84:de:c7:d5:c8:e9:55:50:39:d4:d1:37:b9:38:4a:d9:5f: 7a:11:82:04:5b:11:b6:0a:bd:be:b5:1c:37:2c:da:18:a8:85: 6a:f4:8d:af:ec:c3:4f:47:a5:a8:6f:48:cd:16:f4:e2:b9:af: 71:2f:e9:7d:f2:32:2e:d1:00:0e:68:8d:a5:33:c6:51:32:f6: 26:22:fe:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnne07I85wt8YTeMS37TpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTZjMDNjZmFmZmUxMzRjN2JlZGE0ODg2YWI4YjA5Y2Y0 NWZiYzQwHhcNMjUxMjE4MDQwMTEyWhcNMjUxMjE5MDQwMTEyWjAzMTEwLwYDVQQD Eyg4ZDU5NDAwNjkwZDRkZjAxYzMyMTUwM2NhMWUyMDM3NDY4NTcxOTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl5gcsyeNtEKJemzLbNhM1v2P0qU rtElAsXbLSPPcJFXMvYrNC1oDZtmR8wRHK1gNC+hF6Y/94iPVNDPfhx0hxVNumVU 92ZHPZCVFq54VKeBiIGStXM0PP1bnjMfydho+b5rgRXQdPNn4hTER+A4PBF5Wi5Q KphFD0Wdrb5AKZktaIDB7/PorwAR5et3yeEfMQkT6kpHBjBbnJtamLx3+dj3fRGw oYLgETifajp9oNvmEIG6SzNIVUVXJIOrbdp5Hh3+tLG9VGsODt7LX4qKnusAgFuB A8KBCUMbyHoudLrKEYQLIxVvfDgcGZhht7yBhQAZ5tPvyaGCavKyUCb/fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1ZQAaQ1N8BwyFQPKHiA3RoVxmZMB8GA1UdIwQY MBaAFOMWwDz6/+E0x77aSIariwnPRfvEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhiQVBQcl80VFRIdnRwSWhxdUxDYzlGLThRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85MTQwMmUtZWQyOC00YTIxLTg0ZTIt ZTRkNjRkY2E2N2FjLzEvNHhiQVBQcl80VFRIdnRwSWhxdUxDYzlGLThRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85MTQwMmUtZWQyOC00YTIxLTg0ZTItZTRkNjRkY2E2N2Fj LzEvNHhiQVBQcl80VFRIdnRwSWhxdUxDYzlGLThRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkjBwHMm pGyVaIITzEBp92ZhXwGcYj1GjUrY1rOqSTL3/R99Auo0lxQeW9jCbB+pSoAXqJ4b WnCWtYVUYi/zgA0wE7JdJPotBIKY18WcYhMPhsdya5MklHfPsqLduNFii/7oZKkB j286rgrvn1BjXk9G4A2fqkw1cjRjj+/cZrigvRwSl9SUB6niB8RMX1UPbDo2emkV xNIT2PCXPUHBAsw+Txl5bC1D8NqTe+oce9eHlUS+E4Tex9XI6VVQOdTRN7k4Stlf ehGCBFsRtgq9vrUcNyzaGKiFavSNr+zDT0elqG9IzRb04rmvcS/pffIyLtEADmiN pTPGUTL2JiL+Dw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:27:26 2025 by rpki-client