This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json) Hash identifier: RAaLvLf8ZUkLZViQldeLvmhxqOS144McnXVDeHpOT4A= Subject key identifier: EF:F1:EE:F6:32:78:37:FE:3E:21:11:B9:13:4B:6E:AB:A1:A8:E2:84 Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa Certificate serial: 019AF12DBBA28959C67F0F225437E25C1656 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft Manifest number: 147A Signing time: Sat 06 Dec 2025 01:01:37 +0000 Manifest this update: Sat 06 Dec 2025 01:01:37 +0000 Manifest next update: Sun 07 Dec 2025 01:01:37 +0000 Files and hashes: 1: 39NfMlHhrMH0zRyfZciiqR6mIWs.roa (hash: y/nnfdi8YIAf5ZNy+0/8yGvD2yVcPkZoC4V02tMUx4U=) 2: Kj_GYCscFmlVFFmndDSFfAkuFwY.roa (hash: 6AgFYxmuaSYjaFZUd8eJPcRWj8cD+HYqY6zQ9lI9XGM=) 3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: n/H4oXrTeWvhOrNDHLQKgie4Xthzk0P7bYazGK7wkmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:bb:a2:89:59:c6:7f:0f:22:54:37:e2:5c:16:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c679522eb892589d7364af579a724040e929f0aa Validity Not Before: Dec 6 01:01:37 2025 GMT Not After : Dec 7 01:01:37 2025 GMT Subject: CN=eff1eef6327837fe3e2111b9134b6eaba1a8e284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:33:10:cd:79:43:1c:40:53:02:58:db:fa: c0:0f:db:78:79:66:9a:67:fa:49:dd:06:a1:33:14: cb:0e:c4:4a:19:b7:32:45:6d:b5:38:45:d0:7b:c4: a1:82:48:b3:78:58:ba:2c:22:65:94:cb:ae:ee:d9: aa:f5:ec:53:64:77:7f:5c:99:3d:51:c3:65:34:36: 0d:e3:cf:75:f8:3d:33:63:8e:b4:4d:71:65:1b:47: 92:fa:b5:9e:71:d8:9c:ef:45:f6:67:f4:4c:2f:10: ea:b2:62:9e:ee:86:fe:c5:ae:c6:bd:38:f8:8d:67: 91:9a:4b:d3:71:cd:c7:7f:54:b7:51:6a:37:e3:b6: cf:ec:8f:f2:65:d4:34:63:6b:b5:b0:20:ba:62:6d: 1b:07:ec:c7:18:ff:b3:c4:b8:6f:7c:c0:a6:99:a3: 7b:49:8d:89:c6:4f:29:68:12:4e:91:0d:2f:dd:25: 58:07:c8:f1:cd:3e:aa:c6:ef:9b:c8:6e:c2:e4:7f: 1f:56:61:c0:2f:61:df:d5:08:bc:dd:52:80:8b:3a: 5c:ff:70:a9:07:69:96:4c:82:0e:0b:6d:74:65:b0: bb:85:84:5f:b3:28:20:20:51:9a:6f:53:b1:f1:97: 35:19:68:ec:33:9b:2d:52:37:ab:8c:e9:35:3d:a4: 71:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F1:EE:F6:32:78:37:FE:3E:21:11:B9:13:4B:6E:AB:A1:A8:E2:84 X509v3 Authority Key Identifier: keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:3c:93:66:27:df:58:de:66:d5:3c:40:f5:43:3f:27:cb:a2: 88:1b:fb:84:6b:2e:53:80:25:f9:7f:9b:2e:df:86:ed:7e:06: 1c:67:6f:e4:e6:87:47:ff:e6:2a:62:1f:4b:a0:52:a0:f6:ad: b9:01:2a:88:ec:ca:b8:8f:3f:c0:f1:cc:55:ff:6c:b4:08:70: 63:64:27:a8:6c:f1:3b:2e:f8:2f:8d:4d:67:a1:28:db:e1:7f: 8a:05:fa:31:5f:fc:1c:f9:62:de:aa:0a:e6:04:2e:2e:9e:27: 38:f3:58:17:0a:92:6f:ba:75:c5:cc:63:25:c6:9d:7e:96:b9: e6:a3:43:c7:46:45:2f:cc:ba:0c:11:5f:74:3d:f0:36:d0:3f: 85:c4:0c:96:6e:bb:08:0c:5a:9e:27:d9:ea:60:91:71:3f:91: 89:ae:b3:e0:39:86:aa:f8:5d:66:5d:d3:59:10:92:75:f1:9a: 5d:f8:59:6d:16:62:bc:16:0e:18:b3:74:2f:cd:1b:23:96:4d: 1a:b8:a1:59:eb:d2:a4:e1:36:02:b2:c7:14:9f:97:07:dc:f0: 4e:cb:95:8d:23:01:dd:9c:1b:13:a9:f1:9c:a9:8a:91:dc:9b: e8:96:91:0e:36:21:36:36:f5:c5:2d:05:d9:2d:bc:c9:d1:ac: c5:79:36:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbuiiVnGfw8iVDfiXBZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Nzk1MjJlYjg5MjU4OWQ3MzY0YWY1NzlhNzI0MDQwZTky OWYwYWEwHhcNMjUxMjA2MDEwMTM3WhcNMjUxMjA3MDEwMTM3WjAzMTEwLwYDVQQD EyhlZmYxZWVmNjMyNzgzN2ZlM2UyMTExYjkxMzRiNmVhYmExYThlMjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuwzEM15QxxAUwJY2/rAD9t4eWaa Z/pJ3QahMxTLDsRKGbcyRW21OEXQe8ShgkizeFi6LCJllMuu7tmq9exTZHd/XJk9 UcNlNDYN4891+D0zY460TXFlG0eS+rWecdic70X2Z/RMLxDqsmKe7ob+xa7GvTj4 jWeRmkvTcc3Hf1S3UWo347bP7I/yZdQ0Y2u1sCC6Ym0bB+zHGP+zxLhvfMCmmaN7 SY2Jxk8paBJOkQ0v3SVYB8jxzT6qxu+byG7C5H8fVmHAL2Hf1Qi83VKAizpc/3Cp B2mWTIIOC210ZbC7hYRfsyggIFGab1Ox8Zc1GWjsM5stUjerjOk1PaRx+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/x7vYyeDf+PiERuRNLbquhqOKEMB8GA1UdIwQY MBaAFMZ5Ui64klidc2SvV5pyQEDpKfCqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80NWM5ODEtMTc4MC00YzY2LTlmOTgt ZGMxMGQ1ZDNiZDgwLzEveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80NWM5ODEtMTc4MC00YzY2LTlmOTgtZGMxMGQ1ZDNiZDgw LzEveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDyTZiff WN5m1TxA9UM/J8uiiBv7hGsuU4Al+X+bLt+G7X4GHGdv5OaHR//mKmIfS6BSoPat uQEqiOzKuI8/wPHMVf9stAhwY2QnqGzxOy74L41NZ6Eo2+F/igX6MV/8HPli3qoK 5gQuLp4nOPNYFwqSb7p1xcxjJcadfpa55qNDx0ZFL8y6DBFfdD3wNtA/hcQMlm67 CAxanifZ6mCRcT+Ria6z4DmGqvhdZl3TWRCSdfGaXfhZbRZivBYOGLN0L80bI5ZN GrihWevSpOE2ArLHFJ+XB9zwTsuVjSMB3ZwbE6nxnKmKkdyb6JaRDjYhNjb1xS0F 2S28ydGsxXk2Zw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:54 2025 by rpki-client