This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft File: 4xnQzWVZPZaejUU4KhlKqnPA_4w.mft (raw, json) Hash identifier: kq6eosnQ617fltjdpfIyXHoywwxvNLdzX0ez4PUNnoU= Subject key identifier: D0:BA:2F:8A:F8:58:5A:77:25:52:5C:C7:1D:33:C3:79:65:8E:BC:E7 Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c Certificate serial: 019B2362EB63C729A7B41D01F6FEB2FFE004 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft Manifest number: 1223 Signing time: Mon 15 Dec 2025 19:00:43 +0000 Manifest this update: Mon 15 Dec 2025 19:00:43 +0000 Manifest next update: Tue 16 Dec 2025 19:00:43 +0000 Files and hashes: 1: 2zkfZDwsL7HNU2LTyIDYxHBxU6Y.roa (hash: cCZE3JeNkWpHPZrQkRbXS7MTAFRrdoU+BJzK4LD0G4Y=) 2: 4xnQzWVZPZaejUU4KhlKqnPA_4w.crl (hash: FbjM5QPhN0QIvUFBf89k6Y5MFJasxAK7zTQwU/Id5Wc=) 3: FzW7JoU60fLZt2V4T6FBU_g7_7M.roa (hash: qY7+Qky1B0UxdHy7k1LwwjYXXxPZ34Le32XJ4CBXqQk=) 4: JfoIPjXYxzDMg2Fk91casbkylHE.roa (hash: LEmsudTH6L3328g4/unRQrE45kEbv6vgtSyjmeaPcrY=) 5: UEAGL23cUguO7LaV9ntB8GG3vLI.roa (hash: HW/Eripbr/hRHy1giNb2s3DucUSazcSMRbltO/ThVTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:62:eb:63:c7:29:a7:b4:1d:01:f6:fe:b2:ff:e0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c Validity Not Before: Dec 15 19:00:43 2025 GMT Not After : Dec 16 19:00:43 2025 GMT Subject: CN=d0ba2f8af8585a7725525cc71d33c379658ebce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:f5:9b:83:b9:f9:95:a2:a2:f9:0e:46:44: ef:37:61:6a:ae:87:10:64:1d:3d:dd:e7:a7:0e:fd: c8:91:a2:36:b3:75:96:c7:06:ab:ef:9c:3d:13:de: a9:68:45:80:72:35:e0:0e:d7:c1:cf:25:a9:88:1c: 9f:e8:62:1a:cf:5c:fe:ac:8d:81:88:b0:13:6d:cc: c6:ba:46:f6:a7:0b:14:a2:c1:04:26:41:be:10:d7: 2b:35:84:5a:03:75:e0:08:c6:5d:13:38:b8:fc:07: 03:df:a5:2f:5c:1d:35:11:44:1b:c5:0a:e6:be:a4: 8d:8e:25:19:02:d4:f5:5e:c0:f0:b9:33:be:5b:2b: ae:40:bd:23:0b:ab:07:9c:1e:30:66:51:b2:be:f0: 49:22:bc:dd:6f:d6:5b:f4:70:aa:22:0f:31:69:74: 88:f4:58:14:38:d8:ae:4b:cb:88:1b:e1:4b:2c:4d: f7:6b:23:33:05:20:7d:92:66:41:0e:13:10:4a:12: 87:11:4f:33:e0:a7:1c:3d:f0:e5:eb:74:05:a5:9b: 06:3d:f8:0a:cc:14:86:6d:19:6d:01:34:58:2e:40: 5b:68:f4:69:b4:d9:44:8e:86:c8:a1:19:19:72:d0: a6:69:bb:98:cc:75:f7:7e:c4:cf:c3:bc:d3:f0:d1: 32:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BA:2F:8A:F8:58:5A:77:25:52:5C:C7:1D:33:C3:79:65:8E:BC:E7 X509v3 Authority Key Identifier: keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:ad:8c:2e:e8:3b:51:92:54:1e:42:40:a6:0d:43:02:05:ca: d0:81:51:8a:63:1e:9f:b2:2f:c2:b6:20:6d:94:98:95:6d:50: d2:05:ff:55:5e:d4:29:db:c0:2f:88:ef:ee:0e:f2:b6:52:fc: e6:ff:35:88:c8:c9:9c:2e:ec:97:85:71:4b:50:d5:0c:55:44: 1a:5b:3f:9c:d0:e4:95:76:dc:03:a7:f1:8e:42:97:ec:66:e3: 71:c2:af:8b:e2:4c:4c:4b:ea:b0:ac:47:5d:37:91:58:0f:96: 68:72:d4:7a:71:f5:16:4b:d9:7f:7e:9e:c7:55:c6:42:c8:e0: 68:59:cf:ea:d0:a8:56:38:e4:bf:af:47:cc:b4:bf:3c:81:01: aa:d3:47:41:d4:c1:ab:4e:25:d7:28:0d:80:40:37:03:c6:52: b7:cc:1e:1e:79:6c:db:7b:f1:f5:fd:20:3b:52:a0:c7:b4:b3: 64:dc:2f:e2:9d:06:03:42:22:52:43:8d:79:75:61:7f:ae:8d: b5:9a:46:44:e7:2f:d2:9f:ed:b8:ef:18:d3:26:89:5e:77:a6: 1c:a1:ea:ff:dc:34:29:2b:ea:3a:f9:7a:ea:06:66:1e:94:0b: c4:3a:75:41:e2:36:90:84:37:1f:db:e9:28:18:7e:41:5e:66: 07:d7:c6:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjYutjxymntB0B9v6y/+AEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTlkMGNkNjU1OTNkOTY5ZThkNDUzODJhMTk0YWFhNzNj MGZmOGMwHhcNMjUxMjE1MTkwMDQzWhcNMjUxMjE2MTkwMDQzWjAzMTEwLwYDVQQD EyhkMGJhMmY4YWY4NTg1YTc3MjU1MjVjYzcxZDMzYzM3OTY1OGViY2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHr1m4O5+ZWiovkORkTvN2FqrocQ ZB093eenDv3IkaI2s3WWxwar75w9E96paEWAcjXgDtfBzyWpiByf6GIaz1z+rI2B iLATbczGukb2pwsUosEEJkG+ENcrNYRaA3XgCMZdEzi4/AcD36UvXB01EUQbxQrm vqSNjiUZAtT1XsDwuTO+WyuuQL0jC6sHnB4wZlGyvvBJIrzdb9Zb9HCqIg8xaXSI 9FgUONiuS8uIG+FLLE33ayMzBSB9kmZBDhMQShKHEU8z4KccPfDl63QFpZsGPfgK zBSGbRltATRYLkBbaPRptNlEjobIoRkZctCmabuYzHX3fsTPw7zT8NEyuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNC6L4r4WFp3JVJcxx0zw3lljrznMB8GA1UdIwQY MBaAFOMZ0M1lWT2Wno1FOCoZSqpzwP+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjkt MjE3Y2Y5Mzg0NWJjLzEvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjktMjE3Y2Y5Mzg0NWJj LzEvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUK2MLug7 UZJUHkJApg1DAgXK0IFRimMen7IvwrYgbZSYlW1Q0gX/VV7UKdvAL4jv7g7ytlL8 5v81iMjJnC7sl4VxS1DVDFVEGls/nNDklXbcA6fxjkKX7GbjccKvi+JMTEvqsKxH XTeRWA+WaHLUenH1FkvZf36ex1XGQsjgaFnP6tCoVjjkv69HzLS/PIEBqtNHQdTB q04l1ygNgEA3A8ZSt8weHnls23vx9f0gO1Kgx7SzZNwv4p0GA0IiUkONeXVhf66N tZpGROcv0p/tuO8Y0yaJXnemHKHq/9w0KSvqOvl66gZmHpQLxDp1QeI2kIQ3H9vp KBh+QV5mB9fGbA== -----END CERTIFICATE-----Generated at Tue Dec 16 00:31:50 2025 by rpki-client