This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json) Hash identifier: VLxmsvoIHqlD/3bEgBoXOD7NUtmY94Es5oVYLFAAUFo= Subject key identifier: 24:09:5A:DF:C9:2F:68:6D:D9:6A:62:91:BE:9B:8E:EF:9E:36:6E:F3 Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24 Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24 Certificate serial: 019AF19BB49163E42E4D7ACFA6AB1C022D97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft Manifest number: 15B6 Signing time: Sat 06 Dec 2025 03:01:44 +0000 Manifest this update: Sat 06 Dec 2025 03:01:44 +0000 Manifest next update: Sun 07 Dec 2025 03:01:44 +0000 Files and hashes: 1: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: AZ+yEJS6GHfyF06KcsJddolfKJbKsFXSk2/7vAmu34U=) 2: zUVgbIXYeTGVKXvGEymmIIswak0.roa (hash: byi69vgfiULR5t5etKbYt0ap14VdTPxIUc5JBAXpbBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b4:91:63:e4:2e:4d:7a:cf:a6:ab:1c:02:2d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24 Validity Not Before: Dec 6 03:01:44 2025 GMT Not After : Dec 7 03:01:44 2025 GMT Subject: CN=24095adfc92f686dd96a6291be9b8eef9e366ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0c:7d:2b:dd:08:64:0a:f9:46:25:aa:c5:40: 23:c2:29:36:69:3d:2f:cc:4e:ce:35:e5:93:79:9b: 54:e1:1c:56:3d:0c:27:50:53:f5:ad:7c:72:6e:f4: 6c:a9:ce:b2:4c:d5:eb:f2:d8:65:2a:a1:64:0b:64: e7:a7:e3:9d:c4:dd:a5:cf:8a:98:ec:01:52:30:9a: 1a:ca:3e:35:89:f3:be:ec:25:0e:f9:bd:80:d5:ad: 69:3a:7a:22:d3:e8:3d:74:8e:9f:7f:9e:69:52:7a: a2:7d:ac:8c:bb:dc:c7:74:46:eb:3d:5c:b4:b4:2b: 32:f7:ef:e0:06:11:01:90:eb:b6:ff:fb:8f:bb:90: 86:4f:90:d7:72:34:8c:bb:55:36:6d:1c:18:1f:34: 29:89:4b:0c:2d:68:e2:77:d1:56:0c:fb:d9:07:66: b5:46:00:dd:ee:d0:73:44:31:7f:48:71:4c:70:77: fb:66:f6:c5:3c:e6:6e:f3:b6:1d:a0:05:a1:8b:e5: 5f:96:99:52:d3:92:9e:4e:85:33:d4:cd:c3:dd:23: d5:42:af:3e:ed:94:a2:6a:62:23:1a:c4:a0:76:29: 7f:20:61:ce:14:0a:46:97:6d:ee:86:a5:4a:1c:bb: 64:5f:5d:c9:f1:cd:c7:f8:f7:bc:7c:c2:c9:3a:d8: 0b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:09:5A:DF:C9:2F:68:6D:D9:6A:62:91:BE:9B:8E:EF:9E:36:6E:F3 X509v3 Authority Key Identifier: keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:f0:bb:8d:a7:14:05:a7:9d:18:db:95:38:75:49:c8:75:d7: 7f:16:a8:d3:90:8c:81:fe:52:b0:c0:09:fd:3b:84:2e:b2:3d: 2f:08:cb:89:64:94:c7:fa:3a:80:e6:61:01:cd:08:3a:19:d3: 27:05:ab:3d:9d:d6:4c:11:8d:a5:f7:94:01:eb:5a:58:52:37: 9b:f3:18:ef:50:1f:d9:20:3b:0a:19:fa:6a:df:24:77:62:da: f7:54:84:c8:89:b2:69:6c:36:c0:d7:ab:b4:c3:d6:86:f0:99: 1e:c5:b2:6b:cc:1f:0e:f9:30:c0:1a:25:d5:bb:e6:f6:7a:4f: 1d:b9:e7:49:31:f4:2c:0d:2b:a3:7c:4c:78:67:00:99:2c:74: 12:24:50:43:d2:31:b5:f9:6a:b5:b7:99:e4:4f:23:c8:8d:34: 97:06:9c:ff:a1:ab:6a:95:c7:88:bc:60:bb:b6:46:2c:37:a3: af:66:19:da:35:48:9f:20:8b:0d:18:f2:a7:ab:39:bc:72:9e: 9b:45:78:04:64:c0:52:9e:2a:14:28:8e:ef:3d:30:c8:36:a8: 3a:ad:fe:25:5f:8a:29:a5:4a:fb:64:cb:d0:71:9e:ce:b5:a7: db:ea:dd:dd:69:a0:66:fe:b0:aa:5e:17:fe:bf:9b:92:c1:e7: cb:19:83:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7SRY+QuTXrPpqscAi2XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MTljYWQ5OTIyMTE1YmNmYTc0NTJiYTBhNmU0M2E2YWY0 ZTRjMjQwHhcNMjUxMjA2MDMwMTQ0WhcNMjUxMjA3MDMwMTQ0WjAzMTEwLwYDVQQD EygyNDA5NWFkZmM5MmY2ODZkZDk2YTYyOTFiZTliOGVlZjllMzY2ZWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAx9K90IZAr5RiWqxUAjwik2aT0v zE7ONeWTeZtU4RxWPQwnUFP1rXxybvRsqc6yTNXr8thlKqFkC2Tnp+OdxN2lz4qY 7AFSMJoayj41ifO+7CUO+b2A1a1pOnoi0+g9dI6ff55pUnqifayMu9zHdEbrPVy0 tCsy9+/gBhEBkOu2//uPu5CGT5DXcjSMu1U2bRwYHzQpiUsMLWjid9FWDPvZB2a1 RgDd7tBzRDF/SHFMcHf7ZvbFPOZu87YdoAWhi+VflplS05KeToUz1M3D3SPVQq8+ 7ZSiamIjGsSgdil/IGHOFApGl23uhqVKHLtkX13J8c3H+Pe8fMLJOtgLUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQJWt/JL2ht2Wpikb6bju+eNm7zMB8GA1UdIwQY MBaAFMcZytmSIRW8+nRSugpuQ6avTkwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHhuSzJaSWhGYno2ZEZLNkNtNURwcTlPVENRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xNDkzMzItNjk2OS00YzRiLWI1OTEt N2MyYzA4YjVlZTQ5LzEveHhuSzJaSWhGYno2ZEZLNkNtNURwcTlPVENRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8xNDkzMzItNjk2OS00YzRiLWI1OTEtN2MyYzA4YjVlZTQ5 LzEveHhuSzJaSWhGYno2ZEZLNkNtNURwcTlPVENRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz/C7jacU BaedGNuVOHVJyHXXfxao05CMgf5SsMAJ/TuELrI9LwjLiWSUx/o6gOZhAc0IOhnT JwWrPZ3WTBGNpfeUAetaWFI3m/MY71Af2SA7Chn6at8kd2La91SEyImyaWw2wNer tMPWhvCZHsWya8wfDvkwwBol1bvm9npPHbnnSTH0LA0ro3xMeGcAmSx0EiRQQ9Ix tflqtbeZ5E8jyI00lwac/6GrapXHiLxgu7ZGLDejr2YZ2jVInyCLDRjyp6s5vHKe m0V4BGTAUp4qFCiO7z0wyDaoOq3+JV+KKaVK+2TL0HGezrWn2+rd3WmgZv6wql4X /r+bksHnyxmD3w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:06 2025 by rpki-client