This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft File: 4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft (raw, json) Hash identifier: q1JWFwmobX04tKSoymBMkZ0bUwgdDECfHyaoV5/2LrE= Subject key identifier: 7A:CB:09:7F:34:8F:E0:D6:7C:44:19:8B:D8:C3:E1:C8:4E:48:0B:7C Authority key identifier: E3:10:6A:C3:EA:76:0B:2D:02:42:A9:EF:BA:2C:21:16:B6:26:F8:24 Certificate issuer: /CN=e3106ac3ea760b2d0242a9efba2c2116b626f824 Certificate serial: 019AF1D1DD79E81F8DC407E9B565FED0B520 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft Manifest number: 91 Signing time: Sat 06 Dec 2025 04:00:53 +0000 Manifest this update: Sat 06 Dec 2025 04:00:53 +0000 Manifest next update: Sun 07 Dec 2025 04:00:53 +0000 Files and hashes: 1: 4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl (hash: XnHPWBnkSa6GEkS3/KrKxA8WQFRDiqj0GpwoGnQVQUk=) 2: _lv3GBi8LKFcQPHSvi-CY83DuvA.roa (hash: Ybt1jz8S/um/9yK+4emoNqPM7DSuIFDBFlACLmzDSVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:dd:79:e8:1f:8d:c4:07:e9:b5:65:fe:d0:b5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3106ac3ea760b2d0242a9efba2c2116b626f824 Validity Not Before: Dec 6 04:00:53 2025 GMT Not After : Dec 7 04:00:53 2025 GMT Subject: CN=7acb097f348fe0d67c44198bd8c3e1c84e480b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:21:24:ec:83:60:11:c4:53:55:0b:38:3c:f3: b4:c1:34:eb:08:9b:32:cb:c0:44:13:28:99:5a:da: 1a:d7:86:82:58:44:2b:8d:e7:95:4d:76:10:4f:d0: 7b:77:90:b2:d5:59:29:5c:a2:13:5f:f1:8c:63:56: d3:63:32:3d:5c:54:b8:b0:40:fb:65:6f:e3:07:59: ba:56:31:a9:e0:4c:ad:0a:09:98:11:ba:40:ff:7b: 5b:69:35:a4:87:2b:6c:8a:b5:ad:3f:1a:2c:08:8a: 65:cf:6f:9f:4a:8a:ce:24:98:87:75:02:5c:18:13: fe:92:6b:4c:e7:65:05:75:7d:07:fd:ba:b3:74:0c: 8e:73:2e:31:a5:eb:9f:a2:23:30:c4:0a:00:08:83: 6d:6d:43:2d:fc:7d:4a:81:bf:62:48:af:52:56:e3: 4a:ab:cd:85:b1:66:6a:ca:7f:ca:08:78:86:64:47: d9:bb:de:40:64:a6:e1:4d:8c:37:71:63:14:cf:51: 14:f5:90:7f:8c:ad:fb:b4:de:2e:d3:77:ac:6c:66: 0c:22:f9:43:86:b0:e7:a8:b4:5e:f8:9a:c3:35:2a: 80:27:28:0f:2e:01:d7:b3:0f:64:61:3f:46:4d:aa: f4:dd:3b:4e:55:9b:46:cd:cf:d8:fb:d7:52:06:60: 6f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CB:09:7F:34:8F:E0:D6:7C:44:19:8B:D8:C3:E1:C8:4E:48:0B:7C X509v3 Authority Key Identifier: keyid:E3:10:6A:C3:EA:76:0B:2D:02:42:A9:EF:BA:2C:21:16:B6:26:F8:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5d:79:53:7c:ee:64:c0:75:7c:7e:49:a6:03:05:cb:7e:fa: b6:f9:b4:b9:86:79:df:cb:a6:c0:bc:4d:64:ad:45:4a:eb:e7: f1:40:a0:10:59:d7:8c:de:84:8a:3d:c7:9c:5b:ac:24:4a:f8: 54:3a:df:2e:73:a1:69:57:59:8a:5f:55:a7:0e:3c:f6:b3:e2: 98:59:97:d2:21:77:9a:a5:44:9e:63:0a:ab:ed:4b:0d:cb:8f: b9:17:13:b7:bc:23:bd:3c:7c:98:4b:7b:67:f0:69:f5:fd:02: 4d:aa:1b:9c:ca:9d:57:0d:e0:3f:fb:a7:23:e9:64:16:3f:90: 98:e9:e4:59:d9:62:32:b6:57:d0:3d:bd:4d:6c:8f:ee:c4:9a: 55:7c:19:ff:a4:a4:65:72:bb:b2:38:15:93:33:6d:48:af:5c: 84:c6:a8:97:2b:df:a2:2a:f1:00:cc:65:7f:ab:bc:07:53:87: 06:fd:75:ec:24:bd:39:2c:1e:02:3a:11:0d:6f:1c:92:16:a4: db:02:32:32:60:28:e0:ab:6e:d5:4a:3e:7c:b4:36:8b:8c:09: bb:88:45:eb:ba:fc:f4:ab:2f:a6:75:76:53:1b:56:85:f6:94: 54:30:e9:a5:bc:8f:45:50:3d:33:fb:60:51:0b:5a:05:6e:02: 89:16:0d:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0d156B+NxAfptWX+0LUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTA2YWMzZWE3NjBiMmQwMjQyYTllZmJhMmMyMTE2YjYy NmY4MjQwHhcNMjUxMjA2MDQwMDUzWhcNMjUxMjA3MDQwMDUzWjAzMTEwLwYDVQQD Eyg3YWNiMDk3ZjM0OGZlMGQ2N2M0NDE5OGJkOGMzZTFjODRlNDgwYjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iEk7INgEcRTVQs4PPO0wTTrCJsy y8BEEyiZWtoa14aCWEQrjeeVTXYQT9B7d5Cy1VkpXKITX/GMY1bTYzI9XFS4sED7 ZW/jB1m6VjGp4EytCgmYEbpA/3tbaTWkhytsirWtPxosCIplz2+fSorOJJiHdQJc GBP+kmtM52UFdX0H/bqzdAyOcy4xpeufoiMwxAoACINtbUMt/H1Kgb9iSK9SVuNK q82FsWZqyn/KCHiGZEfZu95AZKbhTYw3cWMUz1EU9ZB/jK37tN4u03esbGYMIvlD hrDnqLRe+JrDNSqAJygPLgHXsw9kYT9GTar03TtOVZtGzc/Y+9dSBmBvsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrLCX80j+DWfEQZi9jD4chOSAt8MB8GA1UdIwQY MBaAFOMQasPqdgstAkKp77osIRa2JvgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhCcXctcDJDeTBDUXFudnVpd2hGclltLUNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mOTFhODUtZTkzYy00YTQ5LTgyMTUt ODQ5NzcxN2E0ZjYxLzEvNHhCcXctcDJDeTBDUXFudnVpd2hGclltLUNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9mOTFhODUtZTkzYy00YTQ5LTgyMTUtODQ5NzcxN2E0ZjYx LzEvNHhCcXctcDJDeTBDUXFudnVpd2hGclltLUNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb115U3zu ZMB1fH5JpgMFy376tvm0uYZ538umwLxNZK1FSuvn8UCgEFnXjN6Eij3HnFusJEr4 VDrfLnOhaVdZil9Vpw489rPimFmX0iF3mqVEnmMKq+1LDcuPuRcTt7wjvTx8mEt7 Z/Bp9f0CTaobnMqdVw3gP/unI+lkFj+QmOnkWdliMrZX0D29TWyP7sSaVXwZ/6Sk ZXK7sjgVkzNtSK9chMaolyvfoirxAMxlf6u8B1OHBv117CS9OSweAjoRDW8ckhak 2wIyMmAo4Ktu1Uo+fLQ2i4wJu4hF67r89KsvpnV2UxtWhfaUVDDppbyPRVA9M/tg UQtaBW4CiRYNIw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:52 2025 by rpki-client