This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft File: x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft (raw, json) Hash identifier: /+z4VrPYRO9eFMiwdbVHK6M2Mh5/D29BhQq9YxSUnlM= Subject key identifier: 44:9F:96:69:42:A3:37:38:B4:F2:70:65:DD:6E:1B:D0:86:A1:79:42 Authority key identifier: C7:87:2D:A0:32:25:1B:AE:0D:E5:10:AC:5E:A6:15:7E:4E:4E:86:8A Certificate issuer: /CN=c7872da032251bae0de510ac5ea6157e4e4e868a Certificate serial: 019AF1D18147B4BD449870B5BC261B7D8F35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft Manifest number: C9 Signing time: Sat 06 Dec 2025 04:00:30 +0000 Manifest this update: Sat 06 Dec 2025 04:00:30 +0000 Manifest next update: Sun 07 Dec 2025 04:00:30 +0000 Files and hashes: 1: f0fN8BxAGys1wxUtC0u2VgJRTl0.roa (hash: 07e26/1ojthsdFcmpuogqBJZxqHxhDaHvUP9ikqQQeg=) 2: x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl (hash: Ik4c0ZAobvmNHouOVlBJUSDUexMeK38jLmZjpK+YaZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:81:47:b4:bd:44:98:70:b5:bc:26:1b:7d:8f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7872da032251bae0de510ac5ea6157e4e4e868a Validity Not Before: Dec 6 04:00:30 2025 GMT Not After : Dec 7 04:00:30 2025 GMT Subject: CN=449f966942a33738b4f27065dd6e1bd086a17942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:fd:2a:b2:c7:33:0b:34:a5:1f:d3:24:1e: af:49:07:67:3a:7f:15:f8:c3:69:89:e4:54:d6:01: 27:cf:a3:64:3b:37:ef:90:a0:4f:c2:d2:98:91:2b: 6d:9e:07:9d:09:f0:fc:13:c7:7c:49:fb:be:fd:f8: 10:d3:06:f0:cb:f3:1d:13:58:bc:6d:4a:02:6b:f1: cb:09:88:c2:12:f3:cc:4c:a5:61:fb:de:1b:b9:c3: 69:b5:b4:46:b4:ba:92:34:5f:be:e4:a3:ed:f7:ed: 22:bf:30:8e:97:8f:f0:a8:4d:df:62:33:90:d1:81: 6f:cf:41:67:d7:dd:49:03:03:da:89:da:79:6a:cc: a2:29:74:f7:d4:f5:15:56:81:ed:7e:04:6c:56:8c: 37:61:07:f4:d4:f7:2e:71:f7:f2:5e:44:04:29:08: 49:97:32:e8:88:b8:ba:22:ae:70:a7:3c:0d:65:0e: f7:a6:95:86:14:b8:2f:73:fe:03:23:64:15:35:0c: 16:3b:f3:83:5e:1d:bb:3e:bc:36:d9:a0:6d:e4:76: 25:57:ad:52:b1:c5:ea:b5:f3:d7:08:cf:ec:77:24: 81:99:bd:a9:01:c5:1d:20:85:2e:d9:ce:3d:4f:ee: 42:b7:e6:8f:b0:e0:d7:e5:13:7c:75:c8:13:84:5c: 9a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9F:96:69:42:A3:37:38:B4:F2:70:65:DD:6E:1B:D0:86:A1:79:42 X509v3 Authority Key Identifier: keyid:C7:87:2D:A0:32:25:1B:AE:0D:E5:10:AC:5E:A6:15:7E:4E:4E:86:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:09:ee:3e:cb:83:8d:67:59:28:b1:1f:a9:3f:28:56:38:8f: 7b:e1:80:c5:86:b9:52:3d:28:a6:9d:e7:7b:48:21:34:8a:54: 95:f3:98:f2:d6:30:bf:4d:2c:bf:6a:83:59:62:27:31:c1:3d: 26:f8:0c:b1:04:dc:ca:58:60:eb:55:79:cc:31:7d:bc:a0:f0: 83:27:0a:b1:de:85:38:8f:54:86:79:42:8b:72:71:d1:e3:06: 73:13:d3:64:b8:98:f8:f2:be:1e:8e:e9:1e:f1:ec:86:21:a1: 67:90:0b:e4:7e:5f:42:0b:8a:19:19:53:0d:34:fe:ec:85:b5: dd:dd:33:fd:dd:f3:6d:7f:8c:d8:5c:85:85:b6:08:67:40:a3: c1:5c:65:f5:f4:b7:49:ac:24:4f:07:e9:f5:87:6d:fb:f7:ae: 1d:a7:e4:fc:e6:65:65:a3:7c:73:a8:0d:7e:ba:a1:fe:3b:5a: ac:7a:d7:da:be:4c:0c:50:7d:c7:6c:b9:89:0e:61:0e:dd:9c: f4:21:dd:53:c9:76:38:51:69:2c:e7:3f:f5:8e:3f:b2:85:ed: d0:c2:4f:20:87:74:9b:05:b8:52:96:13:55:53:b5:a4:50:0c: 6c:d1:9a:9b:dd:a7:18:20:04:40:51:2b:64:c4:d1:90:86:1c: f9:a4:14:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YFHtL1EmHC1vCYbfY81MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ODcyZGEwMzIyNTFiYWUwZGU1MTBhYzVlYTYxNTdlNGU0 ZTg2OGEwHhcNMjUxMjA2MDQwMDMwWhcNMjUxMjA3MDQwMDMwWjAzMTEwLwYDVQQD Eyg0NDlmOTY2OTQyYTMzNzM4YjRmMjcwNjVkZDZlMWJkMDg2YTE3OTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptT9KrLHMws0pR/TJB6vSQdnOn8V +MNpieRU1gEnz6NkOzfvkKBPwtKYkSttngedCfD8E8d8Sfu+/fgQ0wbwy/MdE1i8 bUoCa/HLCYjCEvPMTKVh+94bucNptbRGtLqSNF++5KPt9+0ivzCOl4/wqE3fYjOQ 0YFvz0Fn191JAwPaidp5asyiKXT31PUVVoHtfgRsVow3YQf01PcucffyXkQEKQhJ lzLoiLi6Iq5wpzwNZQ73ppWGFLgvc/4DI2QVNQwWO/ODXh27Prw22aBt5HYlV61S scXqtfPXCM/sdySBmb2pAcUdIIUu2c49T+5Ct+aPsODX5RN8dcgThFyacwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESflmlCozc4tPJwZd1uG9CGoXlCMB8GA1UdIwQY MBaAFMeHLaAyJRuuDeUQrF6mFX5OToaKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDRjdG9ESWxHNjRONVJDc1hxWVZmazVPaG9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85ZTNlMTYtNjkxNi00Y2E0LWI2Y2Qt YTllNGE3ZGRmZTU5LzEveDRjdG9ESWxHNjRONVJDc1hxWVZmazVPaG9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS85ZTNlMTYtNjkxNi00Y2E0LWI2Y2QtYTllNGE3ZGRmZTU5 LzEveDRjdG9ESWxHNjRONVJDc1hxWVZmazVPaG9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgnuPsuD jWdZKLEfqT8oVjiPe+GAxYa5Uj0opp3ne0ghNIpUlfOY8tYwv00sv2qDWWInMcE9 JvgMsQTcylhg61V5zDF9vKDwgycKsd6FOI9UhnlCi3Jx0eMGcxPTZLiY+PK+Ho7p HvHshiGhZ5AL5H5fQguKGRlTDTT+7IW13d0z/d3zbX+M2FyFhbYIZ0CjwVxl9fS3 SawkTwfp9Ydt+/euHafk/OZlZaN8c6gNfrqh/jtarHrX2r5MDFB9x2y5iQ5hDt2c 9CHdU8l2OFFpLOc/9Y4/soXt0MJPIId0mwW4UpYTVVO1pFAMbNGam92nGCAEQFEr ZMTRkIYc+aQUiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:43:18 2025 by rpki-client