This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft File: xX4MBpirwZpWiv7OaxkM7QM6coU.mft (raw, json) Hash identifier: 2d7OTGbZriNVkxWqtN26LOT9OfCbxif5lJahwtLCJZQ= Subject key identifier: 0F:21:71:A9:26:5A:A7:21:76:65:CB:7A:BD:04:B9:68:D2:2C:60:B3 Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85 Certificate issuer: /CN=c57e0c0698abc19a568afece6b190ced033a7285 Certificate serial: 019B5A51974D3C91E68A48F1D18DBF76218E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft Manifest number: 1695 Signing time: Fri 26 Dec 2025 11:00:55 +0000 Manifest this update: Fri 26 Dec 2025 11:00:55 +0000 Manifest next update: Sat 27 Dec 2025 11:00:55 +0000 Files and hashes: 1: 7mkqMSDi-HCLbWFxZVVqp4oDZV4.roa (hash: AgQ4cj261uo6E9KSd61RuHIpkNasVN9RKxcJv5djL7w=) 2: xX4MBpirwZpWiv7OaxkM7QM6coU.crl (hash: hP+rtqb25hevfBH+gCi9mESF8AzeIJwYeKwh7lxcckQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:97:4d:3c:91:e6:8a:48:f1:d1:8d:bf:76:21:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285 Validity Not Before: Dec 26 11:00:55 2025 GMT Not After : Dec 27 11:00:55 2025 GMT Subject: CN=0f2171a9265aa7217665cb7abd04b968d22c60b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8e:82:a2:09:a7:ea:b0:b3:6b:72:d7:e7:63: ab:41:14:67:0b:24:4f:a1:99:24:97:0f:f4:1b:12: c7:62:f9:33:03:78:b4:33:f0:d3:9b:61:ff:61:b9: fe:b7:92:ff:6c:b9:03:1e:70:0d:ff:f4:bb:5c:ba: c1:ea:23:f9:63:80:e2:5c:ff:85:f4:52:3d:98:b0: 14:8e:06:0c:d8:bb:d2:36:ff:c1:55:ea:9c:0b:0d: 4e:89:e1:c3:07:22:85:f6:10:6d:5d:32:2a:4e:b3: fc:f3:48:2e:41:2f:6e:5c:bd:b6:88:5c:4b:22:43: 92:58:58:30:21:80:9b:0c:34:84:e9:15:e8:f9:07: de:62:ec:bc:22:37:2d:15:e5:58:0b:cd:49:de:b8: 39:ae:0d:cb:51:36:a2:e2:15:10:24:8d:b7:4b:dd: ec:c2:d5:78:50:56:f7:23:df:d0:42:8c:48:bc:d3: 67:59:f8:98:58:03:09:db:d2:a1:ef:d6:c9:34:95: c5:da:57:0b:f5:f9:bc:fc:8f:40:29:6d:da:e4:43: 2a:a0:5a:ce:93:d6:63:9f:35:2c:c5:70:5b:4d:59: a9:28:18:1c:13:03:2e:ec:b0:c6:b6:9f:c4:fe:cb: 5b:86:b5:4c:1b:3c:a1:8e:44:45:f7:d2:9c:4a:d5: a4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:21:71:A9:26:5A:A7:21:76:65:CB:7A:BD:04:B9:68:D2:2C:60:B3 X509v3 Authority Key Identifier: keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b3:54:57:d2:d5:81:35:08:f7:31:b6:f4:bc:e4:7d:68:25: 14:6b:b8:e8:2a:71:52:e1:5b:54:73:6b:e0:ab:27:27:59:94: d7:68:8e:28:35:94:27:6c:34:02:4e:49:27:90:42:aa:50:d7: 1f:2d:0c:42:4b:f2:b8:9c:26:5b:5e:ea:33:77:ad:7f:04:4f: 40:e8:8f:c7:bf:05:83:bf:bc:61:d7:a2:92:80:4a:54:a6:72: 02:57:58:ad:85:49:2a:a4:a7:41:b6:c6:e3:72:ea:e8:13:07: 35:04:7d:f5:85:5d:b6:fd:de:31:94:c5:49:49:8c:6a:bd:c4: 77:da:8e:86:41:c7:ad:e6:45:0b:a3:be:25:08:a6:91:d7:93: f8:a2:73:c6:3b:12:f4:60:9d:83:1a:2a:0d:4a:f4:b0:b2:e7: 4e:56:36:d5:b5:57:23:86:76:85:a3:72:2b:9c:cf:28:6d:b4: ab:3b:89:75:ae:64:d4:b1:ed:cf:3d:08:3b:c9:62:86:f6:ae: ff:05:a9:74:55:d2:20:b1:05:51:17:7c:79:17:c2:16:b1:6d: f3:0c:40:2f:a3:79:82:3f:da:cb:bb:94:28:a9:d3:1b:b8:28: ff:3e:b5:5b:d7:0a:25:9f:ac:6e:07:1a:91:2d:7d:6d:a8:da: ec:b6:13:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUZdNPJHmikjx0Y2/diGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1N2UwYzA2OThhYmMxOWE1NjhhZmVjZTZiMTkwY2VkMDMz YTcyODUwHhcNMjUxMjI2MTEwMDU1WhcNMjUxMjI3MTEwMDU1WjAzMTEwLwYDVQQD EygwZjIxNzFhOTI2NWFhNzIxNzY2NWNiN2FiZDA0Yjk2OGQyMmM2MGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY6Cogmn6rCza3LX52OrQRRnCyRP oZkklw/0GxLHYvkzA3i0M/DTm2H/Ybn+t5L/bLkDHnAN//S7XLrB6iP5Y4DiXP+F 9FI9mLAUjgYM2LvSNv/BVeqcCw1OieHDByKF9hBtXTIqTrP880guQS9uXL22iFxL IkOSWFgwIYCbDDSE6RXo+QfeYuy8IjctFeVYC81J3rg5rg3LUTai4hUQJI23S93s wtV4UFb3I9/QQoxIvNNnWfiYWAMJ29Kh79bJNJXF2lcL9fm8/I9AKW3a5EMqoFrO k9ZjnzUsxXBbTVmpKBgcEwMu7LDGtp/E/stbhrVMGzyhjkRF99KcStWk+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8hcakmWqchdmXLer0EuWjSLGCzMB8GA1UdIwQY MBaAFMV+DAaYq8GaVor+zmsZDO0DOnKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFg0TUJwaXJ3WnBXaXY3T2F4a003UU02Y29VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80YThkMmEtNjY0Yi00NDY0LWE0ZTkt MTcwOWY3YzdkNWU4LzEveFg0TUJwaXJ3WnBXaXY3T2F4a003UU02Y29VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS80YThkMmEtNjY0Yi00NDY0LWE0ZTktMTcwOWY3YzdkNWU4 LzEveFg0TUJwaXJ3WnBXaXY3T2F4a003UU02Y29VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrNUV9LV gTUI9zG29LzkfWglFGu46CpxUuFbVHNr4KsnJ1mU12iOKDWUJ2w0Ak5JJ5BCqlDX Hy0MQkvyuJwmW17qM3etfwRPQOiPx78Fg7+8YdeikoBKVKZyAldYrYVJKqSnQbbG 43Lq6BMHNQR99YVdtv3eMZTFSUmMar3Ed9qOhkHHreZFC6O+JQimkdeT+KJzxjsS 9GCdgxoqDUr0sLLnTlY21bVXI4Z2haNyK5zPKG20qzuJda5k1LHtzz0IO8lihvau /wWpdFXSILEFURd8eRfCFrFt8wxAL6N5gj/ay7uUKKnTG7go/z61W9cKJZ+sbgca kS19baja7LYTWQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:20 2025 by rpki-client