This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft File: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft (raw, json) Hash identifier: v+lxiLLH3riFVFL+AmgrUpR+ozJgayJsECn364e6sxo= Subject key identifier: DC:DB:51:EB:75:D1:9F:35:66:80:E5:06:68:DF:C0:CA:FC:CD:41:F8 Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96 Certificate issuer: /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96 Certificate serial: 019B41DB41BE9692B3D7256D5093664CB60A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft Manifest number: 0D95 Signing time: Sun 21 Dec 2025 17:00:46 +0000 Manifest this update: Sun 21 Dec 2025 17:00:46 +0000 Manifest next update: Mon 22 Dec 2025 17:00:46 +0000 Files and hashes: 1: Gia5qJnxkTQXZv942Pyg_qz0Ijw.roa (hash: Ohs/5SqLV2Md0cGZVcdev41UIaMnOgv11AyrRygjew0=) 2: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl (hash: WHwGSq4W/L2RdhWYnIPYz5yq0lQ1+NpgX8d0kYtVctY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:41:be:96:92:b3:d7:25:6d:50:93:66:4c:b6:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96 Validity Not Before: Dec 21 17:00:46 2025 GMT Not After : Dec 22 17:00:46 2025 GMT Subject: CN=dcdb51eb75d19f356680e50668dfc0cafccd41f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ed:82:b5:2a:79:1e:4b:0d:af:6a:0c:a3:de: 21:5b:f2:29:83:33:8f:2e:28:8d:a4:e2:86:8d:43: 16:b3:71:e5:73:f5:ff:50:0f:d6:ab:f3:3b:db:a5: 71:91:a7:92:f1:d0:9f:6a:0f:17:4c:8e:72:ed:71: 43:21:ee:56:0c:06:52:ca:78:08:59:21:ac:d6:df: f0:22:77:f4:5a:81:2a:d4:3e:70:97:05:ac:2e:5a: 00:73:12:f1:65:1e:60:fa:4c:83:3b:19:24:39:03: 42:93:99:3e:3c:f4:88:c6:be:df:77:76:75:4d:a3: 0d:b1:6e:4c:c0:2a:ed:ff:1f:d3:c9:79:b6:23:2a: 22:1c:f0:55:df:15:60:ab:d1:e5:fd:cb:8d:d5:d7: 26:3f:88:22:dd:07:ce:b7:4b:03:ff:00:65:a4:76: a5:57:f9:ea:3e:dd:82:df:c8:25:cb:e0:b6:59:ca: 19:ef:c6:90:49:e1:7c:8f:22:40:39:1e:b8:0f:6a: 89:c6:e0:65:7f:55:ff:a4:89:79:57:df:87:15:84: bd:b1:e1:13:e8:6a:d7:d8:ad:28:c4:eb:a2:00:8d: 67:c5:f4:90:50:d8:2e:d7:20:8e:f3:7c:44:8a:0a: 8b:19:ee:05:48:57:73:05:5a:b3:81:76:92:ea:81: a5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DB:51:EB:75:D1:9F:35:66:80:E5:06:68:DF:C0:CA:FC:CD:41:F8 X509v3 Authority Key Identifier: keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:c9:28:ec:3a:fd:52:a0:38:b6:58:b5:73:09:65:5c:b3:03: bf:c0:76:6c:f0:1d:1c:60:57:df:80:3a:ef:5a:94:7d:dd:d5: 61:b3:e2:17:a9:2b:6d:0c:49:e5:79:7e:a6:33:24:03:70:3f: 3d:c8:3c:5e:08:98:c6:66:5e:cf:8d:7e:fe:29:23:b9:a2:91: 1b:18:ca:77:86:53:de:88:8c:8b:1b:0a:fa:06:50:f5:db:3d: 9f:03:e0:21:a7:08:d9:32:8b:da:ba:a2:8f:a8:b0:24:43:4d: 82:c9:b9:3f:36:68:5b:10:07:f2:e2:d3:3f:6e:d7:fb:a5:da: fd:84:ae:2f:9a:aa:f5:4f:d8:18:91:ed:94:14:11:73:87:d4: d7:7a:b8:34:4b:5c:9f:78:be:0a:2a:1e:af:10:1e:26:4e:a4: 9d:c6:19:bf:fa:12:5c:cc:5e:88:a9:00:a3:a0:82:f2:ca:15: c9:ef:e7:b0:b4:b0:42:e7:86:c4:48:39:4a:45:89:18:9d:e7: 42:df:99:14:3d:fe:da:c8:85:72:58:63:93:63:11:c0:6e:65: 45:8b:9a:aa:65:c7:a3:94:75:f6:83:8d:8a:3a:20:9d:1c:43: 33:6b:52:98:05:79:dc:4a:18:8f:a1:d7:57:a3:75:22:37:b1: 54:e0:79:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB20G+lpKz1yVtUJNmTLYKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MGUwODAxODIzZjE5ZDUxYjk2MmFiNmQ0ZWJiYmMyN2Rk NGVkOTYwHhcNMjUxMjIxMTcwMDQ2WhcNMjUxMjIyMTcwMDQ2WjAzMTEwLwYDVQQD EyhkY2RiNTFlYjc1ZDE5ZjM1NjY4MGU1MDY2OGRmYzBjYWZjY2Q0MWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5e2CtSp5HksNr2oMo94hW/IpgzOP LiiNpOKGjUMWs3Hlc/X/UA/Wq/M726VxkaeS8dCfag8XTI5y7XFDIe5WDAZSyngI WSGs1t/wInf0WoEq1D5wlwWsLloAcxLxZR5g+kyDOxkkOQNCk5k+PPSIxr7fd3Z1 TaMNsW5MwCrt/x/TyXm2IyoiHPBV3xVgq9Hl/cuN1dcmP4gi3QfOt0sD/wBlpHal V/nqPt2C38gly+C2WcoZ78aQSeF8jyJAOR64D2qJxuBlf1X/pIl5V9+HFYS9seET 6GrX2K0oxOuiAI1nxfSQUNgu1yCO83xEigqLGe4FSFdzBVqzgXaS6oGlRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzbUet10Z81ZoDlBmjfwMr8zUH4MB8GA1UdIwQY MBaAFMUOCAGCPxnVG5YqttTru8J91O2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80NzRmNjUtZmUyOS00ODIyLWJhMTQt Y2U4MjE0Y2VmNmI1LzEveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi80NzRmNjUtZmUyOS00ODIyLWJhMTQtY2U4MjE0Y2VmNmI1 LzEveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv8ko7Dr9 UqA4tli1cwllXLMDv8B2bPAdHGBX34A671qUfd3VYbPiF6krbQxJ5Xl+pjMkA3A/ Pcg8XgiYxmZez41+/ikjuaKRGxjKd4ZT3oiMixsK+gZQ9ds9nwPgIacI2TKL2rqi j6iwJENNgsm5PzZoWxAH8uLTP27X+6Xa/YSuL5qq9U/YGJHtlBQRc4fU13q4NEtc n3i+CioerxAeJk6kncYZv/oSXMxeiKkAo6CC8soVye/nsLSwQueGxEg5SkWJGJ3n Qt+ZFD3+2siFclhjk2MRwG5lRYuaqmXHo5R19oONijognRxDM2tSmAV53EoYj6HX V6N1IjexVOB5nQ== -----END CERTIFICATE-----Generated at Mon Dec 22 01:05:05 2025 by rpki-client