This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft File: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft (raw, json) Hash identifier: SaLeGN/Hjwx3vFrBwzewL4BwVzGrG+I6aTrAWHp/AKw= Subject key identifier: 39:B4:61:2A:FB:38:17:C0:17:41:B6:39:A2:1E:83:FE:89:48:0B:57 Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC Certificate issuer: /CN=e31aba3c2f56283ce5c74bce405844c1591babfc Certificate serial: 019B3268CF10B4814D4FB1485A5963604B43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 17:01:28 +0000 Manifest this update: Thu 18 Dec 2025 17:01:28 +0000 Manifest next update: Fri 19 Dec 2025 17:01:28 +0000 Files and hashes: 1: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl (hash: 1+chyOPh93Msv+iQ7HPU5al/oeucQlMZQuvKUzGouho=) 2: PmKzLROtlSNpGVP9Gabn59_vPcQ.roa (hash: 4+SnbeNGMFNkaQG14haNRuuikDneIrgDVYY+Z1QI1eI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:cf:10:b4:81:4d:4f:b1:48:5a:59:63:60:4b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc Validity Not Before: Dec 18 17:01:28 2025 GMT Not After : Dec 19 17:01:28 2025 GMT Subject: CN=39b4612afb3817c01741b639a21e83fe89480b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:75:e7:59:0c:39:40:7e:98:28:e0:06:0e: e0:97:dc:c5:01:e5:83:4e:a1:f6:2f:87:f5:af:3a: 5c:c2:6f:50:83:3c:18:15:f5:38:7f:84:11:cc:dd: 90:18:f9:ca:47:16:a1:3b:1c:31:9b:2a:3d:e0:68: e0:08:41:f7:48:d8:df:ce:74:e8:bd:b2:01:ff:25: e3:16:11:7a:4f:2d:a1:da:7e:ce:92:6e:61:7d:35: 1a:21:cf:dd:2f:88:98:d0:0c:db:8b:0f:a6:96:86: a0:ff:4d:8a:4d:9f:ca:25:8f:ab:e1:f6:9c:9a:7f: d4:cc:68:f1:5e:b8:dc:9d:f0:ee:34:2f:ca:cc:95: 80:93:8a:f4:97:11:9f:11:6c:ba:e8:1f:14:d7:c1: c2:1e:11:43:39:f7:79:e7:ff:31:75:dc:58:26:57: 28:70:95:a6:e0:8c:b2:5d:df:6f:e7:e3:7a:bd:53: b1:f2:9a:21:d4:73:cb:5c:10:60:c9:bf:75:c2:4b: e0:7a:2d:4b:e8:7f:43:4b:cf:28:2c:2c:7f:d2:4b: 48:32:b1:ed:e2:d9:cd:d8:61:f5:02:e5:81:ba:27: dd:7e:a8:8a:47:74:1f:d5:22:66:4a:67:bd:f4:3b: 23:83:a7:2a:02:e7:cd:14:d4:99:79:23:6a:7d:cc: 9f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B4:61:2A:FB:38:17:C0:17:41:B6:39:A2:1E:83:FE:89:48:0B:57 X509v3 Authority Key Identifier: keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:df:26:59:e4:54:09:11:df:a2:43:71:ec:a3:d8:b8:2c:b8: 13:88:11:81:8f:42:cc:aa:b5:4c:03:b1:4e:d2:d9:fc:1e:27: 1c:fc:68:3e:eb:8d:09:b0:87:98:53:38:b0:a7:c4:70:bd:a4: c1:49:7b:a5:e1:a1:1d:d2:de:8e:a5:2e:29:87:d7:97:b4:9d: 01:47:a6:52:17:17:ec:1b:9c:ec:c4:f4:26:a8:1d:21:bf:32: a7:7e:1c:aa:a3:9f:a4:ce:e4:d4:03:65:17:1f:ad:5f:00:e5: 0a:8e:11:d3:db:68:b1:9d:12:e3:00:c3:51:0f:ab:dc:01:0f: 9c:9f:31:81:88:c2:2d:e0:4a:21:c7:49:52:b5:b3:34:97:05: b0:c3:18:5a:d8:2d:d6:08:9d:c9:65:5f:7c:9e:7c:d4:9b:59: 96:cb:11:dd:0e:8b:c3:ce:b3:20:d4:cb:64:91:22:86:91:e2: 4b:a0:2c:92:99:60:6d:eb:3e:fa:b8:a8:74:75:09:31:fa:02: 8d:eb:b7:d1:1e:ad:ff:98:22:03:36:2e:97:4c:38:e0:9f:73: 48:51:6b:6a:61:91:15:a6:ae:d9:a6:0f:b6:2a:21:4c:58:b8: 1f:b7:e9:ab:71:d2:fd:2d:06:b5:ad:5f:43:9b:7a:b0:33:4e: d9:fe:aa:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaM8QtIFNT7FIWlljYEtDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMWFiYTNjMmY1NjI4M2NlNWM3NGJjZTQwNTg0NGMxNTkx YmFiZmMwHhcNMjUxMjE4MTcwMTI4WhcNMjUxMjE5MTcwMTI4WjAzMTEwLwYDVQQD EygzOWI0NjEyYWZiMzgxN2MwMTc0MWI2MzlhMjFlODNmZTg5NDgwYjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVN151kMOUB+mCjgBg7gl9zFAeWD TqH2L4f1rzpcwm9QgzwYFfU4f4QRzN2QGPnKRxahOxwxmyo94GjgCEH3SNjfznTo vbIB/yXjFhF6Ty2h2n7Okm5hfTUaIc/dL4iY0Azbiw+mloag/02KTZ/KJY+r4fac mn/UzGjxXrjcnfDuNC/KzJWAk4r0lxGfEWy66B8U18HCHhFDOfd55/8xddxYJlco cJWm4IyyXd9v5+N6vVOx8poh1HPLXBBgyb91wkvgei1L6H9DS88oLCx/0ktIMrHt 4tnN2GH1AuWBuifdfqiKR3Qf1SJmSme99Dsjg6cqAufNFNSZeSNqfcyfywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDm0YSr7OBfAF0G2OaIeg/6JSAtXMB8GA1UdIwQY MBaAFOMaujwvVig85cdLzkBYRMFZG6v8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mODMwNzMtOWU4MC00MmYyLWIwYTgt NWYyODEzN2E3NjU4LzEvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9mODMwNzMtOWU4MC00MmYyLWIwYTgtNWYyODEzN2E3NjU4 LzEvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABN8mWeRU CRHfokNx7KPYuCy4E4gRgY9CzKq1TAOxTtLZ/B4nHPxoPuuNCbCHmFM4sKfEcL2k wUl7peGhHdLejqUuKYfXl7SdAUemUhcX7Buc7MT0JqgdIb8yp34cqqOfpM7k1ANl Fx+tXwDlCo4R09tosZ0S4wDDUQ+r3AEPnJ8xgYjCLeBKIcdJUrWzNJcFsMMYWtgt 1gidyWVffJ581JtZlssR3Q6Lw86zINTLZJEihpHiS6Askplgbes++riodHUJMfoC jeu30R6t/5giAzYul0w44J9zSFFramGRFaau2aYPtiohTFi4H7fpq3HS/S0Gta1f Q5t6sDNO2f6qRA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:44:03 2025 by rpki-client