This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft File: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft (raw, json) Hash identifier: /5OglNSqHNJub7Xx+gWwGsvjoRn5ohtr8EJB5cBjj3o= Subject key identifier: 30:48:9A:11:25:1C:7F:CB:BE:1C:E7:3C:4E:BB:DA:A7:BC:4D:39:78 Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96 Certificate issuer: /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96 Certificate serial: 019B4994DF64A5A20DE0B22C1F58F1BC2DC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft Manifest number: 0D99 Signing time: Tue 23 Dec 2025 05:00:51 +0000 Manifest this update: Tue 23 Dec 2025 05:00:51 +0000 Manifest next update: Wed 24 Dec 2025 05:00:51 +0000 Files and hashes: 1: Gia5qJnxkTQXZv942Pyg_qz0Ijw.roa (hash: Ohs/5SqLV2Md0cGZVcdev41UIaMnOgv11AyrRygjew0=) 2: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl (hash: +M4Qk+k0vDGHVhPqySZ5OFiM3KfTyWUFJgcA6bQZM3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:94:df:64:a5:a2:0d:e0:b2:2c:1f:58:f1:bc:2d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96 Validity Not Before: Dec 23 05:00:51 2025 GMT Not After : Dec 24 05:00:51 2025 GMT Subject: CN=30489a11251c7fcbbe1ce73c4ebbdaa7bc4d3978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:28:67:07:49:74:94:b4:2e:9a:cf:2d:87:08: 36:05:2f:e9:5e:d9:37:d4:d7:27:c4:dc:c3:67:e7: 93:b7:b0:7c:fc:86:4c:a0:cb:7a:07:5f:40:da:f5: 13:58:f8:e8:72:db:3e:5e:24:59:ee:90:53:c4:5d: c7:25:d0:ca:cc:44:c3:95:0f:eb:08:2b:45:0f:93: 4e:b7:74:d2:33:86:2b:b8:8d:aa:ad:b0:e4:b7:e9: 3a:1d:a3:27:ad:1f:e0:02:95:27:39:6f:60:8f:41: b9:b8:6a:5c:b7:52:3a:ca:98:de:98:16:72:db:51: e9:d8:6d:e6:d2:04:78:c6:79:67:e1:35:b5:18:1f: 74:ca:1a:aa:c4:42:1f:35:48:88:58:0d:dd:b7:94: a3:45:d4:9c:23:8f:fa:e8:44:26:5d:2d:05:71:c9: e7:10:4a:ac:23:0c:f9:b6:4d:76:bb:45:ea:cc:1e: b6:a7:c2:a0:88:bd:e6:ac:4e:02:95:6a:d1:8f:b5: ab:87:10:24:2f:69:30:8e:a1:c8:f5:63:ab:ea:2b: 52:00:59:de:df:8e:3a:5e:c0:2f:42:51:bb:37:d3: 4d:f9:5f:d7:88:55:3e:2d:08:8c:3c:36:10:d7:fb: db:5d:51:f5:d0:46:9b:6e:2c:02:75:9b:14:fa:59: d2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:48:9A:11:25:1C:7F:CB:BE:1C:E7:3C:4E:BB:DA:A7:BC:4D:39:78 X509v3 Authority Key Identifier: keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:fd:c6:4d:cd:cb:8f:23:e4:96:01:8b:0e:87:12:1c:38:5d: 62:d5:a7:99:83:4d:2a:a3:80:e1:cc:c6:3c:82:bf:74:08:8b: e1:ed:a0:fb:99:73:d8:bc:aa:3c:37:fb:6e:68:37:aa:d4:a1: f5:fd:d3:64:5e:d6:58:75:e1:1e:1f:2e:19:bd:cd:df:a7:e7: cb:5d:9c:e1:8e:a9:41:3f:d1:35:38:68:bc:bb:82:19:e9:7a: 30:48:8f:e0:5c:e5:1d:cc:be:37:45:a7:22:06:83:8e:e1:a1: c7:7b:18:68:7b:df:44:f1:5a:f8:cc:d6:39:29:90:4c:d0:e4: fd:f0:17:31:87:5f:1a:20:96:a7:27:78:4b:7c:0c:97:64:bd: f2:f8:34:61:fb:53:ef:17:b7:07:79:c6:8b:71:69:1f:ed:cb: 38:28:8d:33:c7:2a:08:45:7b:23:6c:f2:63:2f:71:ed:ed:bf: 03:a5:7c:e0:cb:28:28:ac:47:ca:19:52:5f:8a:fd:d0:76:7a: ed:47:f7:70:91:5d:65:25:b1:1c:91:6a:23:81:fe:a0:57:27: e8:61:41:7f:f7:ec:72:20:2b:60:0b:3d:0c:88:66:9c:a1:ba: e2:b5:01:ed:b4:15:09:f2:7d:c2:aa:c9:1a:b9:2e:53:b6:19: dc:ff:b2:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlN9kpaIN4LIsH1jxvC3HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MGUwODAxODIzZjE5ZDUxYjk2MmFiNmQ0ZWJiYmMyN2Rk NGVkOTYwHhcNMjUxMjIzMDUwMDUxWhcNMjUxMjI0MDUwMDUxWjAzMTEwLwYDVQQD EygzMDQ4OWExMTI1MWM3ZmNiYmUxY2U3M2M0ZWJiZGFhN2JjNGQzOTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyhnB0l0lLQums8thwg2BS/pXtk3 1NcnxNzDZ+eTt7B8/IZMoMt6B19A2vUTWPjocts+XiRZ7pBTxF3HJdDKzETDlQ/r CCtFD5NOt3TSM4YruI2qrbDkt+k6HaMnrR/gApUnOW9gj0G5uGpct1I6ypjemBZy 21Hp2G3m0gR4xnln4TW1GB90yhqqxEIfNUiIWA3dt5SjRdScI4/66EQmXS0Fccnn EEqsIwz5tk12u0XqzB62p8KgiL3mrE4ClWrRj7WrhxAkL2kwjqHI9WOr6itSAFne 3446XsAvQlG7N9NN+V/XiFU+LQiMPDYQ1/vbXVH10EabbiwCdZsU+lnS4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBImhElHH/LvhznPE672qe8TTl4MB8GA1UdIwQY MBaAFMUOCAGCPxnVG5YqttTru8J91O2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80NzRmNjUtZmUyOS00ODIyLWJhMTQt Y2U4MjE0Y2VmNmI1LzEveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi80NzRmNjUtZmUyOS00ODIyLWJhMTQtY2U4MjE0Y2VmNmI1 LzEveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxf3GTc3L jyPklgGLDocSHDhdYtWnmYNNKqOA4czGPIK/dAiL4e2g+5lz2LyqPDf7bmg3qtSh 9f3TZF7WWHXhHh8uGb3N36fny12c4Y6pQT/RNThovLuCGel6MEiP4FzlHcy+N0Wn IgaDjuGhx3sYaHvfRPFa+MzWOSmQTNDk/fAXMYdfGiCWpyd4S3wMl2S98vg0YftT 7xe3B3nGi3FpH+3LOCiNM8cqCEV7I2zyYy9x7e2/A6V84MsoKKxHyhlSX4r90HZ6 7Uf3cJFdZSWxHJFqI4H+oFcn6GFBf/fsciArYAs9DIhmnKG64rUB7bQVCfJ9wqrJ GrkuU7YZ3P+ydA== -----END CERTIFICATE-----Generated at Tue Dec 23 07:59:24 2025 by rpki-client