This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft File: 4xw9EfQ8dCp9AIVC3079O7ANLXc.mft (raw, json) Hash identifier: b+tekmPAmsMJXhKFTfSah0DOIqHqQroG12b5gS1PR10= Subject key identifier: 15:20:EE:83:21:87:30:8A:BE:EE:D5:E4:25:45:2A:3A:D5:C4:9B:BD Authority key identifier: E3:1C:3D:11:F4:3C:74:2A:7D:00:85:42:DF:4E:FD:3B:B0:0D:2D:77 Certificate issuer: /CN=e31c3d11f43c742a7d008542df4efd3bb00d2d77 Certificate serial: 019B59E42B846A0CDE0406BF7557AF1BFE3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xw9EfQ8dCp9AIVC3079O7ANLXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft Manifest number: 87 Signing time: Fri 26 Dec 2025 09:01:24 +0000 Manifest this update: Fri 26 Dec 2025 09:01:24 +0000 Manifest next update: Sat 27 Dec 2025 09:01:24 +0000 Files and hashes: 1: 4xw9EfQ8dCp9AIVC3079O7ANLXc.crl (hash: nFUXZxMtNbkgH8oJ7whmtj/Fv5NSIK4E24HWuVdIoxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft rsync://rpki.ripe.net/repository/DEFAULT/4xw9EfQ8dCp9AIVC3079O7ANLXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:2b:84:6a:0c:de:04:06:bf:75:57:af:1b:fe:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e31c3d11f43c742a7d008542df4efd3bb00d2d77 Validity Not Before: Dec 26 09:01:24 2025 GMT Not After : Dec 27 09:01:24 2025 GMT Subject: CN=1520ee832187308abeeed5e425452a3ad5c49bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:32:08:0a:e2:c2:b1:cd:a6:82:52:19:ec:d2: 79:d6:d8:51:9b:c0:5c:70:d3:aa:94:60:d5:b2:ff: fc:fe:ce:a9:91:a3:46:a3:3a:81:11:15:6e:dd:14: a1:bb:43:98:6f:2a:04:73:2b:0b:cd:c6:e2:1c:4e: f8:08:ae:08:ab:71:6e:b4:cb:c2:63:6c:35:69:4f: 02:a0:b1:c8:78:cb:20:ca:83:6c:7a:8e:7b:d8:55: 5c:9a:e8:73:ae:ec:2d:f8:b2:fa:0d:9d:fb:6f:f2: f6:7e:d3:1d:4e:80:17:64:29:30:06:63:5e:06:f8: 25:61:54:83:90:df:83:fa:d4:9a:4e:b5:17:a6:b2: 6e:ae:7b:3e:ec:dc:89:12:22:0c:f4:f7:dc:4c:21: 15:4c:78:34:e7:ab:93:ea:48:b0:54:b2:75:6a:49: bd:ea:35:70:86:e6:7e:6d:8c:46:9d:2e:f5:af:56: 4c:40:f3:45:44:b3:ac:c1:bb:11:5c:38:28:b9:93: 5e:d2:70:ba:ec:9f:80:02:99:d5:7c:5a:42:70:98: fb:28:e8:aa:42:e5:1c:a0:df:59:44:3e:42:54:1c: 83:c9:34:54:6a:f6:99:ba:6d:0c:f6:ff:7b:1e:4f: 62:bc:72:2c:72:22:80:5e:f9:71:97:44:c3:c5:02: 1f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:20:EE:83:21:87:30:8A:BE:EE:D5:E4:25:45:2A:3A:D5:C4:9B:BD X509v3 Authority Key Identifier: keyid:E3:1C:3D:11:F4:3C:74:2A:7D:00:85:42:DF:4E:FD:3B:B0:0D:2D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xw9EfQ8dCp9AIVC3079O7ANLXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8c:14:eb:35:49:be:ab:b4:78:b8:24:00:ac:9d:2d:96:76: 18:00:ad:ff:df:58:e3:81:23:b9:e3:a4:cf:e0:66:db:08:77: bf:c3:0b:04:d1:36:0e:33:d6:e8:d5:70:28:ca:56:e9:c8:f0: ed:86:14:98:00:a5:7e:47:89:87:31:51:84:16:71:60:03:14: 8d:7a:75:98:28:75:a0:e8:15:84:7e:36:53:24:39:11:06:7b: b1:f4:92:67:42:e8:a9:f9:81:c2:3a:44:5e:19:a8:91:17:34: 4a:d2:de:66:79:bd:46:5b:2d:38:82:26:ab:1c:1b:89:84:df: 23:fa:c2:3b:9d:d2:51:6c:ca:b7:9f:a7:ae:5a:f4:b9:63:1c: 08:0c:20:dd:68:11:23:9a:9a:1c:76:eb:79:af:fd:08:d7:75: d3:9e:50:dd:61:aa:64:28:d8:8a:cd:3e:ce:36:ca:8d:89:71: 86:04:bb:ae:c9:7e:90:e5:10:21:16:65:2c:ae:7d:a5:89:2e: ca:76:5a:b9:2c:c7:f2:55:de:96:cb:3c:25:80:29:7a:38:f6: f1:f3:a7:d0:28:a7:32:ac:59:34:d4:d0:98:ba:62:48:02:12: 57:61:bc:da:17:e6:83:43:77:0a:2f:4c:18:8c:e0:48:9e:fd: 37:18:c8:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5CuEagzeBAa/dVevG/4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMWMzZDExZjQzYzc0MmE3ZDAwODU0MmRmNGVmZDNiYjAw ZDJkNzcwHhcNMjUxMjI2MDkwMTI0WhcNMjUxMjI3MDkwMTI0WjAzMTEwLwYDVQQD EygxNTIwZWU4MzIxODczMDhhYmVlZWQ1ZTQyNTQ1MmEzYWQ1YzQ5YmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TIICuLCsc2mglIZ7NJ51thRm8Bc cNOqlGDVsv/8/s6pkaNGozqBERVu3RShu0OYbyoEcysLzcbiHE74CK4Iq3FutMvC Y2w1aU8CoLHIeMsgyoNseo572FVcmuhzruwt+LL6DZ37b/L2ftMdToAXZCkwBmNe BvglYVSDkN+D+tSaTrUXprJurns+7NyJEiIM9PfcTCEVTHg056uT6kiwVLJ1akm9 6jVwhuZ+bYxGnS71r1ZMQPNFRLOswbsRXDgouZNe0nC67J+AApnVfFpCcJj7KOiq QuUcoN9ZRD5CVByDyTRUavaZum0M9v97Hk9ivHIsciKAXvlxl0TDxQIfQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUg7oMhhzCKvu7V5CVFKjrVxJu9MB8GA1UdIwQY MBaAFOMcPRH0PHQqfQCFQt9O/TuwDS13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHh3OUVmUThkQ3A5QUlWQzMwNzlPN0FOTFhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82NDkyYjItNWFjYy00YTkwLWI1MzMt NmUwZjZkMzlmZmZkLzEvNHh3OUVmUThkQ3A5QUlWQzMwNzlPN0FOTFhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82NDkyYjItNWFjYy00YTkwLWI1MzMtNmUwZjZkMzlmZmZk LzEvNHh3OUVmUThkQ3A5QUlWQzMwNzlPN0FOTFhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPowU6zVJ vqu0eLgkAKydLZZ2GACt/99Y44EjueOkz+Bm2wh3v8MLBNE2DjPW6NVwKMpW6cjw 7YYUmAClfkeJhzFRhBZxYAMUjXp1mCh1oOgVhH42UyQ5EQZ7sfSSZ0LoqfmBwjpE XhmokRc0StLeZnm9RlstOIImqxwbiYTfI/rCO53SUWzKt5+nrlr0uWMcCAwg3WgR I5qaHHbrea/9CNd1055Q3WGqZCjYis0+zjbKjYlxhgS7rsl+kOUQIRZlLK59pYku ynZauSzH8lXelss8JYApejj28fOn0CinMqxZNNTQmLpiSAISV2G82hfmg0N3Ci9M GIzgSJ79NxjI9A== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:24 2025 by rpki-client