This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft File: xNN466ZI9D5TpKQeE0uQExypPNg.mft (raw, json) Hash identifier: 02pzytPNrqQ3tspRkkP8g4tIjsrdabVXhbBX4jlPLXI= Subject key identifier: 8D:28:7A:15:51:61:B4:79:6A:96:4F:10:94:52:8F:30:11:5D:92:71 Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8 Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8 Certificate serial: 019AF19B5F65D9F48E3B30BD0D78E260F202 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft Manifest number: 0CA2 Signing time: Sat 06 Dec 2025 03:01:22 +0000 Manifest this update: Sat 06 Dec 2025 03:01:22 +0000 Manifest next update: Sun 07 Dec 2025 03:01:22 +0000 Files and hashes: 1: gsd0lN6ZnIrIQD5lIwOejLd2Dv0.roa (hash: n34ueBlgPlEEtyoifu0C2ju9FVvPJQshh3AnTXlwP14=) 2: xNN466ZI9D5TpKQeE0uQExypPNg.crl (hash: JufsTHq62Dx4HMhr4n37v4d1nJ2tsxzhqMqC9I5B95s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:5f:65:d9:f4:8e:3b:30:bd:0d:78:e2:60:f2:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8 Validity Not Before: Dec 6 03:01:22 2025 GMT Not After : Dec 7 03:01:22 2025 GMT Subject: CN=8d287a155161b4796a964f1094528f30115d9271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4e:c6:a3:29:38:d3:19:b3:c0:9c:14:12:e1: 38:d5:58:94:2e:fa:ff:1e:a1:1c:2d:89:6d:ee:bb: 3a:42:28:c4:3e:95:e3:5f:57:d4:b0:a3:a2:9e:7c: b4:2b:75:83:24:9d:a5:8d:fe:59:63:2f:dc:d2:59: 07:95:ca:d7:e5:b0:d2:2e:64:a6:cb:1a:23:14:f9: 9d:16:d0:a3:3b:ca:62:e2:59:48:92:e4:f0:4d:1d: 2d:6a:3b:e1:ca:55:6f:3f:7e:66:04:d3:51:de:0e: b8:25:09:3e:41:94:14:f9:d2:10:8d:db:ce:e8:a3: c0:54:6d:31:39:9a:f1:38:f0:6c:f9:3b:db:8c:5a: 76:2c:76:0b:96:94:0c:22:0c:41:15:eb:f1:93:94: ea:08:17:89:7d:38:a7:61:cd:31:c0:3d:7f:93:f6: f5:f2:17:6e:78:d0:dc:39:3b:2b:5f:5c:ca:0e:c2: 7e:35:1e:8f:71:9c:f5:4e:a5:f4:70:47:91:ad:6c: 08:f2:9e:d0:b5:65:ad:8c:b4:53:ca:4c:44:56:1c: 85:3e:c9:2e:56:d0:a6:22:12:0a:95:09:c5:68:04: 95:e0:40:e7:79:d1:5a:8d:51:b4:8a:74:31:80:08: b0:93:92:d4:e1:20:b3:24:ed:b2:63:5d:2e:bc:06: f5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:28:7A:15:51:61:B4:79:6A:96:4F:10:94:52:8F:30:11:5D:92:71 X509v3 Authority Key Identifier: keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:03:dd:a6:a8:03:d1:b0:9d:2c:75:b3:46:59:d0:bf:cb:f5: 83:4f:39:0b:16:af:6c:5e:ee:5a:1a:3d:13:38:65:4a:46:35: 19:ae:6d:08:49:d4:94:0c:d6:49:38:4e:ae:03:10:2f:36:8d: 00:62:ac:68:2b:e3:1c:17:a3:9b:a6:0d:27:0b:5d:d6:e9:8e: d9:77:45:ab:81:78:c6:9c:6e:a6:81:05:85:dc:34:26:e6:17: b2:2f:31:89:3f:4b:7c:64:67:b1:03:ef:a8:d4:92:7e:65:74: ec:c8:96:89:e4:3d:ed:f7:51:92:6c:f8:9e:f7:79:00:7a:d0: 44:94:1e:79:68:92:dd:8b:92:80:4e:08:ef:1b:6b:37:ea:4c: b1:5c:50:23:16:ba:93:9e:8f:d9:10:7f:33:e3:28:e1:f9:cf: 17:77:a3:7e:40:44:f9:c3:1c:16:ab:cc:eb:17:94:04:f8:86: a8:6e:7e:21:e4:be:96:a3:9b:9d:d7:e5:9a:a3:0e:f7:1f:6a: 54:03:64:9c:4d:06:b3:ef:4d:39:12:01:4b:6a:1c:fa:70:44: 20:ae:3c:72:c3:85:ba:38:c0:c1:61:77:95:40:60:e0:a3:d8: 2a:c5:54:fd:57:90:d0:3f:c4:bf:d6:bd:58:ea:cf:3a:56:85: 17:2c:1a:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm19l2fSOOzC9DXjiYPICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZDM3OGViYTY0OGY0M2U1M2E0YTQxZTEzNGI5MDEzMWNh OTNjZDgwHhcNMjUxMjA2MDMwMTIyWhcNMjUxMjA3MDMwMTIyWjAzMTEwLwYDVQQD Eyg4ZDI4N2ExNTUxNjFiNDc5NmE5NjRmMTA5NDUyOGYzMDExNWQ5MjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU7Goyk40xmzwJwUEuE41ViULvr/ HqEcLYlt7rs6QijEPpXjX1fUsKOinny0K3WDJJ2ljf5ZYy/c0lkHlcrX5bDSLmSm yxojFPmdFtCjO8pi4llIkuTwTR0tajvhylVvP35mBNNR3g64JQk+QZQU+dIQjdvO 6KPAVG0xOZrxOPBs+TvbjFp2LHYLlpQMIgxBFevxk5TqCBeJfTinYc0xwD1/k/b1 8hdueNDcOTsrX1zKDsJ+NR6PcZz1TqX0cEeRrWwI8p7QtWWtjLRTykxEVhyFPsku VtCmIhIKlQnFaASV4EDnedFajVG0inQxgAiwk5LU4SCzJO2yY10uvAb1pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0oehVRYbR5apZPEJRSjzARXZJxMB8GA1UdIwQY MBaAFMTTeOumSPQ+U6SkHhNLkBMcqTzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81MTY0YWQtOTE1OC00OGYyLWE0ZTMt ZGQ1NWE4MDU2MzAzLzEveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy81MTY0YWQtOTE1OC00OGYyLWE0ZTMtZGQ1NWE4MDU2MzAz LzEveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAPdpqgD 0bCdLHWzRlnQv8v1g085CxavbF7uWho9EzhlSkY1Ga5tCEnUlAzWSThOrgMQLzaN AGKsaCvjHBejm6YNJwtd1umO2XdFq4F4xpxupoEFhdw0JuYXsi8xiT9LfGRnsQPv qNSSfmV07MiWieQ97fdRkmz4nvd5AHrQRJQeeWiS3YuSgE4I7xtrN+pMsVxQIxa6 k56P2RB/M+Mo4fnPF3ejfkBE+cMcFqvM6xeUBPiGqG5+IeS+lqObndflmqMO9x9q VANknE0Gs+9NORIBS2oc+nBEIK48csOFujjAwWF3lUBg4KPYKsVU/VeQ0D/Ev9a9 WOrPOlaFFywazA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:18 2025 by rpki-client