This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json) Hash identifier: MkHv5rRWv5qtlMyijkq7wa8ALMPsKQmMmp+pvock4xg= Subject key identifier: 0E:13:9A:6F:0F:9D:AA:BF:60:CC:EA:89:86:EF:57:E9:D8:96:0E:5F Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4 Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4 Certificate serial: 019B5A1AB87D1D0ADB528E6743BF63950FD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft Manifest number: 0B0D Signing time: Fri 26 Dec 2025 10:00:58 +0000 Manifest this update: Fri 26 Dec 2025 10:00:58 +0000 Manifest next update: Sat 27 Dec 2025 10:00:58 +0000 Files and hashes: 1: 26-qfn9ODUHJpEH89Qt0MRaUhuA.roa (hash: 2YdYGfBZn6lY/AbZT0o2XAew8LsHFvDqQ6x2hV85Y5I=) 2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: 4BF7rEYX/HaBNI0lWIdYha329/WGr/FgMqUTP6NrxMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:b8:7d:1d:0a:db:52:8e:67:43:bf:63:95:0f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4 Validity Not Before: Dec 26 10:00:58 2025 GMT Not After : Dec 27 10:00:58 2025 GMT Subject: CN=0e139a6f0f9daabf60ccea8986ef57e9d8960e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9d:28:39:a8:87:56:aa:9b:7b:0c:6a:7b:07: b4:18:4b:60:1d:1f:1a:ad:d5:cc:2c:ba:3c:80:5f: 71:54:66:a5:f0:d1:46:64:3a:2f:5a:bf:e7:cb:c6: 61:67:c5:26:62:b3:6e:66:c1:92:77:9a:ec:6b:4c: 73:e8:0f:55:41:96:d9:de:5a:de:be:2b:06:14:d6: 95:c7:86:b5:51:ce:f0:a9:b9:c1:c9:ed:50:fc:75: 30:fb:35:c2:76:00:4c:a8:b7:ef:42:8e:16:f9:e9: b5:17:b9:98:12:aa:0f:1c:70:9c:ad:5b:3c:23:8b: 1e:36:57:a1:c4:97:e7:e0:a5:d0:31:99:e2:be:b4: 22:ad:38:30:51:95:68:51:e0:ef:01:4d:bd:86:21: a9:17:67:89:24:3a:b5:ae:66:92:81:78:a7:9a:64: 45:7e:d0:c9:1d:c8:69:2c:5a:78:69:a1:c3:55:00: 10:2c:ee:8d:95:77:87:e2:2e:09:c5:fc:c6:13:b5: 3f:95:1d:3b:63:55:dd:0a:7c:a8:9e:1f:0e:36:41: 7f:34:8c:52:09:68:0b:f3:05:7d:65:aa:ec:7e:54: dd:cb:c0:b8:60:90:d0:6e:02:98:69:01:e5:a5:fa: d5:a9:b3:94:64:10:7f:10:06:6e:33:5d:6b:2a:ed: 0b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:13:9A:6F:0F:9D:AA:BF:60:CC:EA:89:86:EF:57:E9:D8:96:0E:5F X509v3 Authority Key Identifier: keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:51:63:e7:4d:df:90:dc:4d:e6:5a:1c:57:03:fe:13:7a:35: ef:a7:59:dd:84:c4:2a:06:73:60:9b:0b:f5:1d:dd:1e:f3:9d: be:6c:13:f0:8a:ff:03:39:e7:e3:14:b4:b1:94:20:54:bc:55: 41:a8:45:88:a9:ff:96:80:fa:4d:c6:af:81:db:1d:18:4e:7a: 89:ce:3d:86:5a:43:3b:54:6e:f3:3a:0e:c2:3b:f4:6f:b4:25: f0:2a:ff:94:a2:29:fe:6a:5f:24:27:22:3b:e7:06:bb:22:de: 7a:17:64:cc:33:a2:10:e7:9f:9d:43:0a:17:7a:53:a5:b9:88: c9:27:3c:8a:ec:d3:ea:d7:fc:f6:e0:d0:ae:3a:af:a0:de:13: 71:ba:5d:41:bb:0a:d1:85:c4:4b:69:f6:5e:04:b9:7b:96:7a: a5:e7:24:0c:ad:db:2d:81:08:9a:58:0e:b2:b0:f5:dc:63:02: 7b:39:4f:3c:73:23:26:20:62:6d:40:60:e1:29:02:cd:10:40: c3:42:3c:dd:b7:1d:1a:8d:59:c7:87:6a:e7:f8:b3:70:fc:e3: f9:03:96:ba:fe:eb:2d:c9:a9:e4:d9:97:8c:ce:75:b0:1a:c5: b2:1c:10:f1:41:32:4b:12:8c:79:62:cb:51:22:df:e3:7e:c1: 88:5d:76:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGrh9HQrbUo5nQ79jlQ/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTZjMDNjZmFmZmUxMzRjN2JlZGE0ODg2YWI4YjA5Y2Y0 NWZiYzQwHhcNMjUxMjI2MTAwMDU4WhcNMjUxMjI3MTAwMDU4WjAzMTEwLwYDVQQD EygwZTEzOWE2ZjBmOWRhYWJmNjBjY2VhODk4NmVmNTdlOWQ4OTYwZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Z0oOaiHVqqbewxqewe0GEtgHR8a rdXMLLo8gF9xVGal8NFGZDovWr/ny8ZhZ8UmYrNuZsGSd5rsa0xz6A9VQZbZ3lre visGFNaVx4a1Uc7wqbnBye1Q/HUw+zXCdgBMqLfvQo4W+em1F7mYEqoPHHCcrVs8 I4seNlehxJfn4KXQMZnivrQirTgwUZVoUeDvAU29hiGpF2eJJDq1rmaSgXinmmRF ftDJHchpLFp4aaHDVQAQLO6NlXeH4i4JxfzGE7U/lR07Y1XdCnyonh8ONkF/NIxS CWgL8wV9ZarsflTdy8C4YJDQbgKYaQHlpfrVqbOUZBB/EAZuM11rKu0LmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4Tmm8Pnaq/YMzqiYbvV+nYlg5fMB8GA1UdIwQY MBaAFOMWwDz6/+E0x77aSIariwnPRfvEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhiQVBQcl80VFRIdnRwSWhxdUxDYzlGLThRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85MTQwMmUtZWQyOC00YTIxLTg0ZTIt ZTRkNjRkY2E2N2FjLzEvNHhiQVBQcl80VFRIdnRwSWhxdUxDYzlGLThRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85MTQwMmUtZWQyOC00YTIxLTg0ZTItZTRkNjRkY2E2N2Fj LzEvNHhiQVBQcl80VFRIdnRwSWhxdUxDYzlGLThRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1Fj503f kNxN5locVwP+E3o176dZ3YTEKgZzYJsL9R3dHvOdvmwT8Ir/Aznn4xS0sZQgVLxV QahFiKn/loD6TcavgdsdGE56ic49hlpDO1Ru8zoOwjv0b7Ql8Cr/lKIp/mpfJCci O+cGuyLeehdkzDOiEOefnUMKF3pTpbmIySc8iuzT6tf89uDQrjqvoN4TcbpdQbsK 0YXES2n2XgS5e5Z6peckDK3bLYEImlgOsrD13GMCezlPPHMjJiBibUBg4SkCzRBA w0I83bcdGo1Zx4dq5/izcPzj+QOWuv7rLcmp5NmXjM51sBrFshwQ8UEySxKMeWLL USLf437BiF12gg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:26 2025 by rpki-client