This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft File: xNinONTBPEpnevUSdbqEyLNtyc4.mft (raw, json) Hash identifier: LIYox2fdccdyQMNhtGdFfCRbmOw8HA0m12Em1Fj+hrY= Subject key identifier: 3B:84:52:2A:02:22:6C:FC:56:BA:9E:9B:B9:D5:7F:6B:03:DD:FB:21 Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE Certificate issuer: /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce Certificate serial: 019AF276DF4FE11CCC5958BE4F3C9CCF1621 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 07:01:07 +0000 Manifest this update: Sat 06 Dec 2025 07:01:07 +0000 Manifest next update: Sun 07 Dec 2025 07:01:07 +0000 Files and hashes: 1: AOrWMlaoWwr9BiH2KC52e33LvU8.roa (hash: C5KmnNcC1frqJFB0GlvW18JGpvtpy3xiJI4dTDmXhFM=) 2: xNinONTBPEpnevUSdbqEyLNtyc4.crl (hash: npWTVJQgPfxhvrN7FEQ/cHzO8cWsY2j8vlb/CHJ5NEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:df:4f:e1:1c:cc:59:58:be:4f:3c:9c:cf:16:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce Validity Not Before: Dec 6 07:01:07 2025 GMT Not After : Dec 7 07:01:07 2025 GMT Subject: CN=3b84522a02226cfc56ba9e9bb9d57f6b03ddfb21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:53:f7:42:a4:bc:22:e5:fa:9f:40:16:cc: 03:e8:fa:35:92:ac:6f:05:8b:d9:42:f7:13:fd:81: 2e:25:03:e9:34:72:13:f0:80:c5:78:55:dd:ae:27: cd:29:d6:b8:61:be:6b:c8:64:75:29:c5:16:62:ee: 29:d2:bf:88:a4:d4:b6:a4:e2:bb:d2:d4:ee:75:28: ed:d7:a2:2c:0b:28:82:df:e2:e3:1a:b2:28:6a:5a: 20:75:4b:73:44:62:59:2e:b8:9e:4c:97:92:86:5e: a9:a1:ae:ae:73:4a:2a:58:de:90:d1:09:be:f1:09: c7:28:56:30:61:52:cc:c2:6a:4e:2f:4f:55:d1:60: 5b:47:45:8c:d5:f1:c4:5d:8c:9d:f8:7e:51:b7:ea: e9:20:a6:2d:5a:27:54:57:d8:05:d7:e3:01:3f:ec: 4f:92:d0:2a:af:94:14:58:80:10:9b:49:27:a8:6c: e4:58:dd:22:d1:a7:10:01:29:d9:a6:15:a6:d2:4a: f3:63:d8:eb:f3:22:26:f1:f4:c1:fc:13:37:ef:95: 88:4c:90:4e:ae:45:67:f3:85:f8:c9:c9:5a:cd:fd: 1c:0b:89:6c:8f:35:fe:2c:ff:b6:8b:25:b3:cd:4f: 63:23:10:00:27:43:1f:8a:a8:55:a4:ca:8b:e6:28: 03:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:84:52:2A:02:22:6C:FC:56:BA:9E:9B:B9:D5:7F:6B:03:DD:FB:21 X509v3 Authority Key Identifier: keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:35:f0:0c:3f:35:d0:ec:10:04:11:46:c8:22:c5:8e:df:56: 7a:67:83:81:81:de:2b:e2:cb:8c:28:26:fc:6f:4b:bf:54:c5: 41:ac:0a:28:9c:24:0c:9f:9e:6a:7d:88:b3:af:3a:4a:93:c9: 9d:62:95:e1:9c:1b:bf:df:28:a8:e8:6e:9f:e6:9e:8e:2f:bc: c4:0c:03:ca:fc:09:85:51:f1:b7:a0:fc:84:97:38:d5:63:66: 35:95:3b:a9:a0:62:a1:38:02:49:e2:e6:91:d1:c2:c4:19:6a: 23:06:37:2b:34:20:7b:51:49:01:05:31:78:74:ea:14:b0:e9: e6:45:70:76:76:3a:49:2e:81:b7:24:ed:cd:7b:4b:4e:45:2a: 5c:8a:6c:0d:1d:8c:c2:70:b6:64:9d:0f:e1:89:e1:e2:da:e3: 42:bf:ab:66:77:ca:fa:19:a5:a7:93:6c:68:b9:33:80:eb:44: 41:e9:1f:2c:16:20:e3:a4:ce:d4:59:94:5c:7b:7c:f1:4e:96: 1a:aa:54:cd:fe:b8:04:38:02:19:46:b4:8e:88:57:37:be:cb: 08:cb:6d:01:d9:6f:aa:6d:2e:14:32:21:d9:4e:72:6e:a4:10: 40:4a:4a:56:27:18:f2:ea:f5:34:cf:83:27:3f:e8:aa:c2:9a: 07:56:25:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydt9P4RzMWVi+TzyczxYhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZDhhNzM4ZDRjMTNjNGE2NzdhZjUxMjc1YmE4NGM4YjM2 ZGM5Y2UwHhcNMjUxMjA2MDcwMTA3WhcNMjUxMjA3MDcwMTA3WjAzMTEwLwYDVQQD EygzYjg0NTIyYTAyMjI2Y2ZjNTZiYTllOWJiOWQ1N2Y2YjAzZGRmYjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8dT90KkvCLl+p9AFswD6Po1kqxv BYvZQvcT/YEuJQPpNHIT8IDFeFXdrifNKda4Yb5ryGR1KcUWYu4p0r+IpNS2pOK7 0tTudSjt16IsCyiC3+LjGrIoalogdUtzRGJZLrieTJeShl6poa6uc0oqWN6Q0Qm+ 8QnHKFYwYVLMwmpOL09V0WBbR0WM1fHEXYyd+H5Rt+rpIKYtWidUV9gF1+MBP+xP ktAqr5QUWIAQm0knqGzkWN0i0acQASnZphWm0krzY9jr8yIm8fTB/BM375WITJBO rkVn84X4yclazf0cC4lsjzX+LP+2iyWzzU9jIxAAJ0MfiqhVpMqL5igD8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuEUioCImz8Vrqem7nVf2sD3fshMB8GA1UdIwQY MBaAFMTYpzjUwTxKZ3r1EnW6hMizbcnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE5pbk9OVEJQRXBuZXZVU2RicUV5TE50eWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MTVhZGUtOWRhZS00MTUxLTgxOWYt YWY2MmM4NDY1ZGFiLzEveE5pbk9OVEJQRXBuZXZVU2RicUV5TE50eWM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS83MTVhZGUtOWRhZS00MTUxLTgxOWYtYWY2MmM4NDY1ZGFi LzEveE5pbk9OVEJQRXBuZXZVU2RicUV5TE50eWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDXwDD81 0OwQBBFGyCLFjt9WemeDgYHeK+LLjCgm/G9Lv1TFQawKKJwkDJ+ean2Is686SpPJ nWKV4Zwbv98oqOhun+aeji+8xAwDyvwJhVHxt6D8hJc41WNmNZU7qaBioTgCSeLm kdHCxBlqIwY3KzQge1FJAQUxeHTqFLDp5kVwdnY6SS6BtyTtzXtLTkUqXIpsDR2M wnC2ZJ0P4Ynh4trjQr+rZnfK+hmlp5NsaLkzgOtEQekfLBYg46TO1FmUXHt88U6W GqpUzf64BDgCGUa0johXN77LCMttAdlvqm0uFDIh2U5ybqQQQEpKVicY8ur1NM+D Jz/oqsKaB1YlCA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:29 2025 by rpki-client