This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json) Hash identifier: ulea8CFfIwq9kne55SwfC6FOaL7PP2kCcOSj/asijcU= Subject key identifier: 1D:6E:08:44:CA:BA:DB:4C:0A:92:F1:28:73:D9:8F:74:4D:FA:D1:3E Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42 Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142 Certificate serial: 019B12A6BE084F42D3E430D01A4393E15F85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 13:01:15 +0000 Manifest this update: Fri 12 Dec 2025 13:01:15 +0000 Manifest next update: Sat 13 Dec 2025 13:01:15 +0000 Files and hashes: 1: MkBFGKrOUFJR_PtFzbIm_0Kt8Os.roa (hash: MWAGOdYdWLQQEq03DBK0C/7h2rvKgHmATNjHLt1oAQQ=) 2: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: UyJK9Enfo8TloHI2mvzbRJc7WG7eFg8Gq6GPQlI4NDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:a6:be:08:4f:42:d3:e4:30:d0:1a:43:93:e1:5f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142 Validity Not Before: Dec 12 13:01:15 2025 GMT Not After : Dec 13 13:01:15 2025 GMT Subject: CN=1d6e0844cabadb4c0a92f12873d98f744dfad13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:14:b9:3f:34:3a:25:44:9a:34:80:36:36:56: 02:2d:4b:6e:26:9e:bf:ff:68:dc:58:de:9a:9d:14: 06:0d:e3:53:e7:19:b7:03:ec:ea:ed:46:ab:e1:bb: 2c:cf:b4:c8:5e:aa:c3:29:9b:64:58:f6:14:32:92: 74:a2:f0:cf:15:f9:db:a5:16:37:a3:82:92:fe:03: c0:f5:98:f8:dc:2c:f2:6f:8c:2c:9c:c6:49:02:0a: 11:74:03:fe:b3:3e:b6:c0:6d:c7:70:ef:53:d8:a4: ff:22:08:fb:8c:4a:a6:ce:2d:89:64:9b:c1:67:4b: 25:91:67:58:1f:5b:85:26:d4:36:32:df:35:bb:99: db:ee:93:db:a9:05:dd:9c:a6:0e:1d:11:12:8a:a9: 8d:b6:d0:ad:7b:68:6d:74:cb:41:12:4c:a3:35:8d: 34:f5:39:0d:e8:69:14:a3:c9:56:0c:6f:09:a9:13: c8:d6:53:57:af:be:39:c5:0b:55:7a:41:a6:5a:17: ed:d8:15:86:b5:2c:49:c2:3a:ca:59:37:0e:13:03: 6a:cc:65:30:74:b1:55:d3:a5:e0:2c:4f:ce:c2:46: b3:50:ed:c4:84:bf:f9:27:a6:77:97:96:10:ea:ea: af:b3:79:e0:90:11:17:1e:e7:8d:96:52:46:cc:4d: 9f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6E:08:44:CA:BA:DB:4C:0A:92:F1:28:73:D9:8F:74:4D:FA:D1:3E X509v3 Authority Key Identifier: keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c8:45:a5:58:71:8b:06:3f:4b:a6:36:a7:f8:29:5a:95:ce: 85:b2:06:82:44:f9:ef:3c:d6:d9:43:16:94:07:c2:67:cc:c1: 7d:48:be:5d:36:d4:df:63:0e:b1:1c:64:98:07:9a:6b:a0:9a: d5:bb:76:a2:1c:cb:d4:4d:dc:42:a1:ad:92:a0:1a:6b:fe:07: 7b:56:0e:d5:d5:12:94:64:a6:32:09:6b:88:4b:95:22:df:83: 8c:7f:fb:04:18:5a:4f:10:53:fe:50:d1:67:65:fc:4e:a4:dc: e7:10:4d:37:7a:0c:2b:b5:17:07:8f:82:fc:3f:77:c5:c3:e9: 32:f0:a4:50:9c:99:d6:df:a9:46:4c:b1:52:b7:bd:29:2e:9e: 20:44:94:19:2f:75:83:1a:d1:1d:c0:2b:08:03:6a:2c:34:6d: 95:17:bf:17:37:7c:51:b3:fa:b1:b4:69:ec:5a:e5:8f:6e:40: bd:5f:51:76:fb:cc:b1:5c:65:98:e9:84:10:7d:81:ac:51:04: 7e:b8:e7:c9:0b:5e:57:66:fd:1e:f2:93:56:7a:f6:bc:df:78: db:4f:ec:5c:df:31:d6:d3:86:b3:c1:12:a1:70:5e:04:2c:58: d7:e2:52:43:e5:fa:f9:da:67:ef:49:82:2c:5a:e5:14:35:10: 93:2b:d0:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSpr4IT0LT5DDQGkOT4V+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmODNjMzk3NmNmMDBlNDJjYmVkNTM5MjRjNGE4NjU1NmJk NzAxNDIwHhcNMjUxMjEyMTMwMTE1WhcNMjUxMjEzMTMwMTE1WjAzMTEwLwYDVQQD EygxZDZlMDg0NGNhYmFkYjRjMGE5MmYxMjg3M2Q5OGY3NDRkZmFkMTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxS5PzQ6JUSaNIA2NlYCLUtuJp6/ /2jcWN6anRQGDeNT5xm3A+zq7Uar4bssz7TIXqrDKZtkWPYUMpJ0ovDPFfnbpRY3 o4KS/gPA9Zj43Czyb4wsnMZJAgoRdAP+sz62wG3HcO9T2KT/Igj7jEqmzi2JZJvB Z0slkWdYH1uFJtQ2Mt81u5nb7pPbqQXdnKYOHRESiqmNttCte2htdMtBEkyjNY00 9TkN6GkUo8lWDG8JqRPI1lNXr745xQtVekGmWhft2BWGtSxJwjrKWTcOEwNqzGUw dLFV06XgLE/OwkazUO3EhL/5J6Z3l5YQ6uqvs3ngkBEXHueNllJGzE2fVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1uCETKuttMCpLxKHPZj3RN+tE+MB8GA1UdIwQY MBaAFF+Dw5ds8A5Cy+1TkkxKhlVr1wFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iYzU5YWQtYWNjYS00MWQyLWJhYTEt OWMzZWZmYWYyYWYyLzEvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iYzU5YWQtYWNjYS00MWQyLWJhYTEtOWMzZWZmYWYyYWYy LzEvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMshFpVhx iwY/S6Y2p/gpWpXOhbIGgkT57zzW2UMWlAfCZ8zBfUi+XTbU32MOsRxkmAeaa6Ca 1bt2ohzL1E3cQqGtkqAaa/4He1YO1dUSlGSmMglriEuVIt+DjH/7BBhaTxBT/lDR Z2X8TqTc5xBNN3oMK7UXB4+C/D93xcPpMvCkUJyZ1t+pRkyxUre9KS6eIESUGS91 gxrRHcArCANqLDRtlRe/Fzd8UbP6sbRp7Frlj25AvV9RdvvMsVxlmOmEEH2BrFEE frjnyQteV2b9HvKTVnr2vN9420/sXN8x1tOGs8ESoXBeBCxY1+JSQ+X6+dpn70mC LFrlFDUQkyvQ9A== -----END CERTIFICATE-----Generated at Fri Dec 12 19:30:43 2025 by rpki-client