This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft File: xn4qRuNPSRQzyLYvMZuQK9396DE.mft (raw, json) Hash identifier: ZUovIfedVGGCwtludd43XAcPMbkfSPbQjKV8Xfn800M= Subject key identifier: 37:68:19:C7:41:1B:DE:9F:6D:91:0C:F1:4B:05:46:97:A9:05:57:69 Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31 Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831 Certificate serial: 019AF12CB3B5E389118C5950182F47A09D57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft Manifest number: 149B Signing time: Sat 06 Dec 2025 01:00:29 +0000 Manifest this update: Sat 06 Dec 2025 01:00:29 +0000 Manifest next update: Sun 07 Dec 2025 01:00:29 +0000 Files and hashes: 1: BKGB0xu8toNLRNE3TtbV03PJFx0.roa (hash: FdiXQgpM3MPZ1o0fk4HNEhE38JmZapk1+2ih8Lu8DEA=) 2: _v0ZmDwGVXQnxYXB1nXQzsRBcbY.roa (hash: iHppVj2BjRk7dRpgDIJuQgoqhMV/BmqJSp1BycbHcEU=) 3: xn4qRuNPSRQzyLYvMZuQK9396DE.crl (hash: i15REElnsTscT+RzEM07ljRb00po4I66t6tK3Jybbj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:b3:b5:e3:89:11:8c:59:50:18:2f:47:a0:9d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831 Validity Not Before: Dec 6 01:00:29 2025 GMT Not After : Dec 7 01:00:29 2025 GMT Subject: CN=376819c7411bde9f6d910cf14b054697a9055769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:45:34:45:55:01:9a:8d:6c:b3:53:54:67:d1: 25:51:d3:92:07:f6:eb:67:bb:a9:a2:87:e9:9d:eb: 9f:15:9d:06:6e:0e:2d:6b:50:4e:25:02:d7:91:c8: 09:e0:32:c9:52:80:ab:63:ad:21:aa:be:4d:56:39: 5c:3c:68:a0:de:a8:50:62:e6:2d:9d:e4:5b:b5:f5: 50:ba:40:27:07:38:ee:98:b9:e9:01:79:a5:08:ff: 85:46:98:c9:7c:93:6b:2b:0a:ca:6f:e8:20:a3:e0: 10:d8:db:c3:19:18:69:09:2a:86:38:fe:af:c5:ed: 4a:d0:82:81:09:da:1e:45:59:1e:c2:93:a6:89:ea: 3c:fa:63:21:87:d1:c7:71:46:5d:d2:75:58:06:6b: 6f:92:bb:fe:74:2a:c9:9f:fc:08:40:ff:bf:b7:7e: 56:7c:1c:53:87:d2:a6:e9:25:f9:12:5f:68:b3:6e: 3e:df:f9:ea:b2:16:94:b8:b8:8e:d2:17:83:63:70: a5:96:66:06:b3:89:e4:55:61:f9:59:18:30:92:49: 26:e7:20:be:a2:fd:ec:30:6a:f8:5d:a4:08:3c:4a: 35:f7:6b:af:81:34:f9:6e:0e:33:c6:8d:77:85:e9: a5:52:9c:f9:03:7a:30:16:dd:ec:0b:70:5f:0d:b5: 1f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:68:19:C7:41:1B:DE:9F:6D:91:0C:F1:4B:05:46:97:A9:05:57:69 X509v3 Authority Key Identifier: keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:75:1f:4e:92:15:58:e8:1f:fe:83:40:b8:af:a7:79:14:22: c8:a1:dd:97:c1:36:2b:1f:77:56:d1:0b:20:a4:5b:94:31:2c: 65:43:3f:f1:a4:f0:f5:aa:68:0a:06:5a:47:4c:64:b5:39:68: bc:35:12:d7:07:8b:4f:03:11:59:c4:5d:6c:6d:ff:12:9b:d5: a8:f2:3b:df:00:86:43:1f:95:cd:5f:70:3e:07:c4:79:97:1d: c2:d1:8c:87:31:5f:b1:9c:3e:dc:64:a1:63:87:42:08:f2:21: f9:53:d3:9a:2b:c1:af:00:3c:35:7f:48:71:66:b6:06:b5:20: d8:f8:2c:e6:43:6b:f5:ea:66:6c:c3:a9:e0:bf:a3:4e:6e:c3: 38:9a:85:d8:8a:7b:9f:d1:e6:4b:7c:3f:e5:79:58:94:fe:a6: 85:fa:c0:90:11:17:61:88:d5:e0:0b:b8:50:76:d5:19:96:11: e3:06:a8:3f:88:3e:ac:83:66:60:d5:98:83:5e:ea:5d:96:02: d2:71:08:44:bb:d2:5f:c4:77:4b:86:42:4f:06:93:a9:f3:e2: e5:d7:2e:d7:26:55:3b:5a:e6:44:38:e6:b5:ca:b9:42:57:b5: 55:b8:e8:5d:1b:c3:55:59:32:01:ed:66:e9:d3:de:ca:81:07: 60:0f:43:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLO144kRjFlQGC9HoJ1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2N2UyYTQ2ZTM0ZjQ5MTQzM2M4YjYyZjMxOWI5MDJiZGRm ZGU4MzEwHhcNMjUxMjA2MDEwMDI5WhcNMjUxMjA3MDEwMDI5WjAzMTEwLwYDVQQD EygzNzY4MTljNzQxMWJkZTlmNmQ5MTBjZjE0YjA1NDY5N2E5MDU1NzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEU0RVUBmo1ss1NUZ9ElUdOSB/br Z7upoofpneufFZ0Gbg4ta1BOJQLXkcgJ4DLJUoCrY60hqr5NVjlcPGig3qhQYuYt neRbtfVQukAnBzjumLnpAXmlCP+FRpjJfJNrKwrKb+ggo+AQ2NvDGRhpCSqGOP6v xe1K0IKBCdoeRVkewpOmieo8+mMhh9HHcUZd0nVYBmtvkrv+dCrJn/wIQP+/t35W fBxTh9Km6SX5El9os24+3/nqshaUuLiO0heDY3CllmYGs4nkVWH5WRgwkkkm5yC+ ov3sMGr4XaQIPEo192uvgTT5bg4zxo13hemlUpz5A3owFt3sC3BfDbUf3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdoGcdBG96fbZEM8UsFRpepBVdpMB8GA1UdIwQY MBaAFMZ+KkbjT0kUM8i2LzGbkCvd/egxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84MGM1NjgtYmQxNS00ZjMyLThkZDQt MDY2ODY2ZjJkZWQwLzEveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy84MGM1NjgtYmQxNS00ZjMyLThkZDQtMDY2ODY2ZjJkZWQw LzEveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXUfTpIV WOgf/oNAuK+neRQiyKHdl8E2Kx93VtELIKRblDEsZUM/8aTw9apoCgZaR0xktTlo vDUS1weLTwMRWcRdbG3/EpvVqPI73wCGQx+VzV9wPgfEeZcdwtGMhzFfsZw+3GSh Y4dCCPIh+VPTmivBrwA8NX9IcWa2BrUg2Pgs5kNr9epmbMOp4L+jTm7DOJqF2Ip7 n9HmS3w/5XlYlP6mhfrAkBEXYYjV4Au4UHbVGZYR4waoP4g+rINmYNWYg17qXZYC 0nEIRLvSX8R3S4ZCTwaTqfPi5dcu1yZVO1rmRDjmtcq5Qle1VbjoXRvDVVkyAe1m 6dPeyoEHYA9DOw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:29 2025 by rpki-client