This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json) Hash identifier: UkyNHfIx/OJNm2Rn3tl2Rr6aDtO33fQbhEWYoMaktRQ= Subject key identifier: 18:75:29:EB:73:07:E2:90:E7:14:74:1A:F3:A0:94:6C:B3:83:14:5B Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb Certificate serial: 019AF19AB0F513505E9094E578D429B80DFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:00:38 +0000 Manifest this update: Sat 06 Dec 2025 03:00:38 +0000 Manifest next update: Sun 07 Dec 2025 03:00:38 +0000 Files and hashes: 1: 9L54EUQDrSQbGEvAwVt0tZoi-Uw.roa (hash: o6ynacAiEqoceTEtJPDu7iMTJ+MrYoRzYB7BFREjSAA=) 2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: 4vPNmJ8K1gmUtb4BTQxQxjss2y8s/cYiyDvw83aC0HQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b0:f5:13:50:5e:90:94:e5:78:d4:29:b8:0d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb Validity Not Before: Dec 6 03:00:38 2025 GMT Not After : Dec 7 03:00:38 2025 GMT Subject: CN=187529eb7307e290e714741af3a0946cb383145b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a5:ef:b4:80:b8:08:b0:12:5a:bb:3d:a8:d0: a0:91:30:1a:7c:2a:2b:1c:99:10:91:28:d9:10:c2: 8a:19:1c:d7:39:7e:94:d6:ca:14:5b:28:23:e1:a5: be:b0:f9:8e:a3:ac:b5:2d:8f:26:b3:f7:09:b1:08: 94:d3:00:43:1e:8b:3d:4c:1e:91:52:1d:2f:f3:0a: a2:4b:d6:61:5d:b6:39:cf:10:84:06:e3:cb:7f:0e: 5f:c3:27:df:7b:3a:35:7a:2e:93:e0:de:71:5b:fc: 6c:44:ed:7a:69:26:40:a9:2c:42:61:5e:25:0d:41: 0a:ff:eb:03:85:aa:fc:a1:c1:e6:fa:4e:d0:7f:f1: e9:fd:9f:17:f3:a4:ae:92:25:6b:85:bd:c9:c5:1b: 2e:37:1b:60:b8:89:fa:26:a7:cb:db:4b:77:34:eb: 80:40:3f:f2:eb:cf:ab:29:a3:b7:cb:ad:11:06:00: 63:91:0a:32:c3:20:8b:fe:75:25:bc:57:1a:e3:85: b0:fc:08:16:9a:12:b1:b7:e4:05:7e:29:c7:5d:87: c5:ac:34:22:9e:42:1b:c4:a5:a8:c1:c3:23:20:e9: 19:a7:d5:7f:37:26:7d:d7:1f:55:5c:35:86:5f:3b: 5c:ea:31:54:5c:11:33:a0:47:94:f6:ed:44:87:0a: 1f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:75:29:EB:73:07:E2:90:E7:14:74:1A:F3:A0:94:6C:B3:83:14:5B X509v3 Authority Key Identifier: keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:99:06:c6:2e:7e:64:2a:f5:ba:da:57:44:7a:66:7a:80:6a: 1d:09:49:55:e9:8a:0d:fd:6b:dd:2e:15:18:75:36:2b:56:3f: 2f:a2:5b:04:6b:00:2f:4a:a2:a9:f4:cc:03:54:02:82:0b:c3: 9b:19:5d:45:a0:f7:95:21:74:cb:30:77:96:ac:de:c3:40:ae: 79:cf:f9:ad:82:b7:ec:03:40:70:a5:11:9a:35:c9:34:51:30: 50:46:26:e1:ae:fb:8b:c0:7b:62:ca:90:69:06:bd:c4:9c:e7: c9:7b:e0:bf:c8:6d:bc:ba:0e:37:82:f0:87:d2:92:9d:ce:28: 02:3c:a1:07:35:bb:6d:c6:f0:23:d1:64:5a:f1:28:dc:72:4b: e3:3f:59:8b:42:6a:d5:ff:64:c5:c8:9b:27:f5:52:9b:6b:a4: c8:d9:c9:f8:b5:a2:55:5a:c9:eb:8b:67:90:45:09:e4:69:da: b2:34:e6:e1:57:0f:7f:2e:90:0c:f1:a3:71:38:86:d4:42:f7: b1:70:a6:03:b6:20:b2:6f:5d:46:4a:74:e0:c5:f6:9c:bb:6d: 7c:2b:2c:be:7d:7a:34:a8:26:47:43:a1:b2:8f:07:84:07:e4: 2e:21:7c:54:39:62:0d:04:07:87:97:31:b8:e7:3e:73:4e:4d: ef:e0:96:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrD1E1BekJTleNQpuA36MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZGZmMGUxNTIzNzgwNTUwN2FmNWQwM2FiZWRlYjg4MzJi NGI4Y2IwHhcNMjUxMjA2MDMwMDM4WhcNMjUxMjA3MDMwMDM4WjAzMTEwLwYDVQQD EygxODc1MjllYjczMDdlMjkwZTcxNDc0MWFmM2EwOTQ2Y2IzODMxNDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraXvtIC4CLASWrs9qNCgkTAafCor HJkQkSjZEMKKGRzXOX6U1soUWygj4aW+sPmOo6y1LY8ms/cJsQiU0wBDHos9TB6R Uh0v8wqiS9ZhXbY5zxCEBuPLfw5fwyffezo1ei6T4N5xW/xsRO16aSZAqSxCYV4l DUEK/+sDhar8ocHm+k7Qf/Hp/Z8X86SukiVrhb3JxRsuNxtguIn6JqfL20t3NOuA QD/y68+rKaO3y60RBgBjkQoywyCL/nUlvFca44Ww/AgWmhKxt+QFfinHXYfFrDQi nkIbxKWowcMjIOkZp9V/NyZ91x9VXDWGXztc6jFUXBEzoEeU9u1EhwofDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBh1KetzB+KQ5xR0GvOglGyzgxRbMB8GA1UdIwQY MBaAFMTf8OFSN4BVB69dA6vt64gytLjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUt NzE4ODdkMGE4M2JlLzEveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUtNzE4ODdkMGE4M2Jl LzEveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpkGxi5+ ZCr1utpXRHpmeoBqHQlJVemKDf1r3S4VGHU2K1Y/L6JbBGsAL0qiqfTMA1QCggvD mxldRaD3lSF0yzB3lqzew0Cuec/5rYK37ANAcKURmjXJNFEwUEYm4a77i8B7YsqQ aQa9xJznyXvgv8htvLoON4Lwh9KSnc4oAjyhBzW7bcbwI9FkWvEo3HJL4z9Zi0Jq 1f9kxcibJ/VSm2ukyNnJ+LWiVVrJ64tnkEUJ5GnasjTm4VcPfy6QDPGjcTiG1EL3 sXCmA7Ygsm9dRkp04MX2nLttfCssvn16NKgmR0Ohso8HhAfkLiF8VDliDQQHh5cx uOc+c05N7+CWbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:28 2025 by rpki-client