This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft File: x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json) Hash identifier: zRXUYAKHpqoeG58f1Q/gnSoaLGXpw6S0nYc5F35bV60= Subject key identifier: 33:DD:42:AA:06:A7:2E:5E:89:3C:4B:C7:61:98:10:79:74:B4:F8:09 Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70 Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270 Certificate serial: 019B28C02FB6BC0EB1AB91095B1FD1140BAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft Manifest number: 1782 Signing time: Tue 16 Dec 2025 20:00:42 +0000 Manifest this update: Tue 16 Dec 2025 20:00:42 +0000 Manifest next update: Wed 17 Dec 2025 20:00:42 +0000 Files and hashes: 1: 1k_-7iaL3-MiuBsEwzsqEjXw8Aw.roa (hash: MvGzqoey/hCfcwmRhO21Z8RbLw85JPgQ7VzzDBc6ROg=) 2: B5D9MGD5HNxMn2ytn4E-XXNfFUU.roa (hash: ZF/ZQXZ6OV0r+xXPNKcSMNFa0v6w/gQVQYon3rz/hOA=) 3: V3axZivK3WrjDfjp92dOnzYIRGs.roa (hash: Nvb4IvNDmUJ1oDhZXKGSuAJ/dOxxdh42DYgaZcrkkzQ=) 4: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: WSV2bRpzmHZKm8mHvA9j4kXpxcq/2Q0plnBBomqvb30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:2f:b6:bc:0e:b1:ab:91:09:5b:1f:d1:14:0b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270 Validity Not Before: Dec 16 20:00:42 2025 GMT Not After : Dec 17 20:00:42 2025 GMT Subject: CN=33dd42aa06a72e5e893c4bc76198107974b4f809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b9:91:26:9b:77:eb:32:07:13:5a:ed:f7:e2: e1:b1:57:5a:2c:83:a9:5e:6c:7d:7f:b0:65:9a:32: 2c:3b:2f:c9:bc:f5:93:06:bd:81:a4:fa:00:74:8d: 06:43:7f:b5:89:83:f3:df:c5:51:5e:0e:3e:82:ed: 6e:a7:f5:5d:60:71:98:86:fb:1f:ef:e8:f7:79:d7: 9d:13:1d:22:0d:20:51:09:9b:e6:13:ca:b6:27:78: d9:36:e4:4c:c9:7b:b9:48:eb:0d:76:95:33:b4:2a: 46:16:92:45:35:52:98:a0:02:52:6b:32:21:f2:a0: 59:ca:72:5e:4e:1e:ca:43:e1:b0:ca:83:ed:89:ab: 83:0b:0d:de:d7:08:c5:4d:20:59:e2:2e:71:70:0e: 21:3f:ed:0a:ae:e5:78:f8:d5:12:1c:d5:94:24:74: ef:3b:b7:c2:64:90:eb:c6:b2:5b:99:9b:7a:50:7d: ec:b9:a9:01:77:ed:62:eb:7b:f8:b2:bc:6f:de:bc: aa:37:ef:a0:b5:3d:c3:eb:66:75:bb:3e:6f:a7:17: b0:7a:b0:fb:3a:1b:4e:bf:93:c6:69:ca:9a:f1:3a: 33:63:39:70:83:51:bd:58:58:81:29:7c:c8:eb:e1: 58:71:61:50:32:bb:f8:50:d5:6a:ae:04:45:50:fb: 08:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DD:42:AA:06:A7:2E:5E:89:3C:4B:C7:61:98:10:79:74:B4:F8:09 X509v3 Authority Key Identifier: keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:68:f0:32:05:4c:14:58:ca:c2:e3:18:32:0f:24:05:7b:59: c6:21:a9:6d:e6:02:d8:62:56:be:82:c4:26:cf:55:cb:b0:22: 63:d2:6e:ef:92:03:4d:2d:2c:6d:ee:06:80:e1:f0:26:d3:52: 4c:15:fe:a8:d7:69:d3:d2:4b:1c:72:9c:53:e1:68:3a:f9:e8: 3e:25:62:71:a4:d3:df:32:7f:ab:10:4f:3a:96:96:30:85:f7: 63:80:3d:b5:01:15:b6:79:00:69:fc:c3:42:dc:9b:01:79:08: 0e:4e:e0:70:37:99:26:b1:18:c5:7b:2a:36:56:36:9d:53:a8: c6:ad:f3:8d:66:2f:42:7c:87:33:0b:af:4e:88:a0:0b:10:77: 15:c7:e2:72:43:a3:87:44:4b:e9:95:a9:a5:c2:e8:f3:c9:4e: 66:a5:ad:b6:78:42:06:70:49:5a:f7:9d:10:91:33:a0:c9:dc: 95:bc:87:54:e5:1e:94:2a:46:50:cc:9a:c4:e6:bd:75:e5:e6: e7:ee:f4:79:96:3d:54:bc:bf:ae:64:9b:ac:41:79:ed:f4:23: 61:8c:c5:a8:29:4f:70:31:34:6b:ed:57:ce:df:72:8d:42:b6: a5:38:23:e2:eb:87:53:14:50:bc:9b:4b:ce:4f:80:4d:e2:0e: 33:ad:d5:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsowC+2vA6xq5EJWx/RFAuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ODQxMjg1MDVmN2Y5OWM3NTcwNDQyOTgwYWRlYjhhZjkw Y2MyNzAwHhcNMjUxMjE2MjAwMDQyWhcNMjUxMjE3MjAwMDQyWjAzMTEwLwYDVQQD EygzM2RkNDJhYTA2YTcyZTVlODkzYzRiYzc2MTk4MTA3OTc0YjRmODA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bmRJpt36zIHE1rt9+LhsVdaLIOp Xmx9f7BlmjIsOy/JvPWTBr2BpPoAdI0GQ3+1iYPz38VRXg4+gu1up/VdYHGYhvsf 7+j3ededEx0iDSBRCZvmE8q2J3jZNuRMyXu5SOsNdpUztCpGFpJFNVKYoAJSazIh 8qBZynJeTh7KQ+GwyoPtiauDCw3e1wjFTSBZ4i5xcA4hP+0KruV4+NUSHNWUJHTv O7fCZJDrxrJbmZt6UH3suakBd+1i63v4srxv3ryqN++gtT3D62Z1uz5vpxewerD7 OhtOv5PGacqa8TozYzlwg1G9WFiBKXzI6+FYcWFQMrv4UNVqrgRFUPsIKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPdQqoGpy5eiTxLx2GYEHl0tPgJMB8GA1UdIwQY MBaAFMeEEoUF9/mcdXBEKYCt64r5DMJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQt NmMxYjQ0NzFmN2VlLzEveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQtNmMxYjQ0NzFmN2Vl LzEveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGjwMgVM FFjKwuMYMg8kBXtZxiGpbeYC2GJWvoLEJs9Vy7AiY9Ju75IDTS0sbe4GgOHwJtNS TBX+qNdp09JLHHKcU+FoOvnoPiVicaTT3zJ/qxBPOpaWMIX3Y4A9tQEVtnkAafzD QtybAXkIDk7gcDeZJrEYxXsqNlY2nVOoxq3zjWYvQnyHMwuvToigCxB3FcfickOj h0RL6ZWppcLo88lOZqWttnhCBnBJWvedEJEzoMnclbyHVOUelCpGUMyaxOa9deXm 5+70eZY9VLy/rmSbrEF57fQjYYzFqClPcDE0a+1Xzt9yjUK2pTgj4uuHUxRQvJtL zk+ATeIOM63VMw== -----END CERTIFICATE-----Generated at Wed Dec 17 05:05:54 2025 by rpki-client