This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft File: x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft (raw, json) Hash identifier: AxWJZ914X7ndvJO031WFNxVZItT5g67qh8REqRQEMJ0= Subject key identifier: C6:0D:55:B8:F5:67:5A:BB:A0:E2:23:06:39:EB:B8:95:29:75:6F:04 Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31 Certificate issuer: /CN=c782735aa98d4645d041093a7662a12379503a31 Certificate serial: 019AF50BA3024448E413C400C64AB58FE147 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft Manifest number: 0F2E Signing time: Sat 06 Dec 2025 19:02:51 +0000 Manifest this update: Sat 06 Dec 2025 19:02:51 +0000 Manifest next update: Sun 07 Dec 2025 19:02:51 +0000 Files and hashes: 1: tjSYgzQ0bYjCtyMesUCoqcYRKAI.roa (hash: V0DKhUKbNvI4aOcWkxFt+dLkw7F0CNEt1KU67bvkMmI=) 2: x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl (hash: cw6fVhJMhz5zUPKshhjQB2lfQef0feJTe+vbinCRZmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:a3:02:44:48:e4:13:c4:00:c6:4a:b5:8f:e1:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c782735aa98d4645d041093a7662a12379503a31 Validity Not Before: Dec 6 19:02:51 2025 GMT Not After : Dec 7 19:02:51 2025 GMT Subject: CN=c60d55b8f5675abba0e2230639ebb89529756f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:67:2f:2a:99:2f:85:58:4e:3c:9c:bf:4a:42: e0:18:85:0b:48:74:d2:4f:7e:d8:59:47:ca:a5:ab: 44:e4:13:b1:fb:5e:ab:ff:ea:f8:33:4b:ce:04:f5: 7c:25:0a:06:d3:86:bc:7c:83:35:ad:dc:95:ee:05: 96:8a:72:ce:dd:26:a8:67:43:1b:03:85:32:42:23: 96:65:54:bb:2c:92:b6:86:76:7c:39:f8:11:b9:dd: 57:9d:67:70:10:a4:d2:2c:92:1e:1b:2c:1b:de:e1: 4c:9c:d1:c3:41:b3:6a:a9:aa:59:64:44:c3:00:7f: d6:6b:4e:53:63:65:22:da:5e:66:97:f7:9e:d0:f1: bc:8e:79:b7:e5:a9:34:44:33:e6:4c:24:19:33:79: e8:2a:c7:e5:aa:c8:78:c5:b5:4a:18:52:f9:f9:cc: 5f:8d:e9:c9:b3:c9:9f:3a:14:80:8d:42:02:b7:2a: c4:cc:90:b6:fc:03:1b:15:59:2c:6e:66:1e:48:c7: 0e:4d:d8:10:2b:01:4d:2c:ca:ea:74:f9:c3:c6:f9: 1f:c0:d8:a6:a4:40:e0:cf:b1:1a:55:63:e2:89:1e: 97:90:1e:b6:15:87:9c:df:d9:3a:42:cf:8c:74:8f: b7:fa:22:4d:73:78:a1:a8:88:5b:0d:50:86:9b:6d: 4a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0D:55:B8:F5:67:5A:BB:A0:E2:23:06:39:EB:B8:95:29:75:6F:04 X509v3 Authority Key Identifier: keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:df:a2:1e:4b:3c:58:ff:36:18:37:2f:f9:1f:8a:73:7a:13: 6a:32:4b:1e:a8:93:e4:c3:bd:6c:01:12:58:6a:5d:fc:c2:fb: 0b:9b:fe:e9:52:d0:4a:50:71:ee:b3:a9:ee:4d:12:59:7b:44: fb:f5:6a:bd:ae:7b:22:b7:35:3d:0e:ae:a5:4f:6b:5f:14:22: ed:bd:0d:7b:f1:e7:ef:f6:84:d3:97:c0:d1:31:31:ec:42:90: 14:86:6c:20:1b:81:60:7e:52:b7:1d:33:e7:11:df:c0:54:1c: b9:fa:3b:8f:24:5b:b9:7e:46:5a:bc:b9:6b:d5:08:e0:5b:f8: 7d:47:0a:94:d7:e3:9f:7a:5a:b1:ee:b2:71:14:50:a1:23:80: af:04:1a:78:7a:4d:c2:6a:ca:fa:95:3c:bc:7c:35:8c:66:f9: 72:12:63:86:ea:4e:12:d7:9d:8e:e4:2a:e2:f4:8f:d7:7b:2a: 67:7b:64:3d:f5:79:09:fb:56:02:59:0c:4e:13:87:a6:8e:63: 11:79:db:34:4b:22:db:e4:4b:53:f0:8b:04:1f:98:1f:8c:50: 00:b1:c2:28:a8:45:0a:e7:f4:8b:cb:59:d4:b7:64:32:d8:99: 4e:31:f4:32:51:7b:a4:53:e2:49:fe:a0:97:d5:a8:f6:5e:e0: 20:98:33:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C6MCREjkE8QAxkq1j+FHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ODI3MzVhYTk4ZDQ2NDVkMDQxMDkzYTc2NjJhMTIzNzk1 MDNhMzEwHhcNMjUxMjA2MTkwMjUxWhcNMjUxMjA3MTkwMjUxWjAzMTEwLwYDVQQD EyhjNjBkNTViOGY1Njc1YWJiYTBlMjIzMDYzOWViYjg5NTI5NzU2ZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42cvKpkvhVhOPJy/SkLgGIULSHTS T37YWUfKpatE5BOx+16r/+r4M0vOBPV8JQoG04a8fIM1rdyV7gWWinLO3SaoZ0Mb A4UyQiOWZVS7LJK2hnZ8OfgRud1XnWdwEKTSLJIeGywb3uFMnNHDQbNqqapZZETD AH/Wa05TY2Ui2l5ml/ee0PG8jnm35ak0RDPmTCQZM3noKsflqsh4xbVKGFL5+cxf jenJs8mfOhSAjUICtyrEzJC2/AMbFVksbmYeSMcOTdgQKwFNLMrqdPnDxvkfwNim pEDgz7EaVWPiiR6XkB62FYec39k6Qs+MdI+3+iJNc3ihqIhbDVCGm21KsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYNVbj1Z1q7oOIjBjnruJUpdW8EMB8GA1UdIwQY MBaAFMeCc1qpjUZF0EEJOnZioSN5UDoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDRKeldxbU5Sa1hRUVFrNmRtS2hJM2xRT2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wNTgyZmYtNzE4OS00YzNjLWE0NWYt YjQ5M2E5ZGY0ZjhmLzEveDRKeldxbU5Sa1hRUVFrNmRtS2hJM2xRT2pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wNTgyZmYtNzE4OS00YzNjLWE0NWYtYjQ5M2E5ZGY0Zjhm LzEveDRKeldxbU5Sa1hRUVFrNmRtS2hJM2xRT2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVN+iHks8 WP82GDcv+R+Kc3oTajJLHqiT5MO9bAESWGpd/ML7C5v+6VLQSlBx7rOp7k0SWXtE +/Vqva57Irc1PQ6upU9rXxQi7b0Ne/Hn7/aE05fA0TEx7EKQFIZsIBuBYH5Stx0z 5xHfwFQcufo7jyRbuX5GWry5a9UI4Fv4fUcKlNfjn3pase6ycRRQoSOArwQaeHpN wmrK+pU8vHw1jGb5chJjhupOEtedjuQq4vSP13sqZ3tkPfV5CftWAlkMThOHpo5j EXnbNEsi2+RLU/CLBB+YH4xQALHCKKhFCuf0i8tZ1LdkMtiZTjH0MlF7pFPiSf6g l9Wo9l7gIJgzPg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:36 2025 by rpki-client