This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json) Hash identifier: EbujjzXYNeBeCsYHuoDAk7YUtdm8sWvs1gDGaGO7GSA= Subject key identifier: B4:41:19:66:C7:23:49:B3:55:88:21:D1:72:C9:2C:7B:06:CE:B8:25 Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb Certificate serial: 019B94AF1BC3D53DAF20241D5DA0E2FF92EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft Manifest number: 17B6 Signing time: Tue 06 Jan 2026 19:01:02 +0000 Manifest this update: Tue 06 Jan 2026 19:01:02 +0000 Manifest next update: Wed 07 Jan 2026 19:01:02 +0000 Files and hashes: 1: 1ZYXmJOrMeMc_d7Mkc1TagHI2yQ.roa (hash: qeka0m7QmqNt2z/3WOdknE3KXx1vrYZ3br+BR0VNMV8=) 2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: EPJRrmsDqsIRKs+TFDcymPL2RJVz+aupVF9LF48IHQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 19:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:af:1b:c3:d5:3d:af:20:24:1d:5d:a0:e2:ff:92:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb Validity Not Before: Jan 6 19:01:02 2026 GMT Not After : Jan 7 19:01:02 2026 GMT Subject: CN=b4411966c72349b3558821d172c92c7b06ceb825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:58:54:f0:22:0b:44:75:9d:03:67:e8:b3:79: b5:7c:0f:17:2f:87:f7:d3:76:45:1f:58:ce:fa:f9: e9:34:e9:e3:33:c1:b7:e0:ca:f5:56:c5:6e:a7:ff: 7c:65:30:67:ee:5c:07:39:6a:7e:ba:cf:d3:f8:bf: 07:bf:89:e4:45:56:d0:56:74:a6:a4:5a:a2:0a:09: 78:c2:1e:a6:cf:9f:82:e1:69:e0:8d:22:a2:e7:02: 97:46:82:a2:88:8d:0d:ec:70:98:83:94:99:39:c0: 3a:7e:eb:b3:a8:d6:0a:f9:2a:55:4b:48:4f:3a:c1: 76:5f:39:47:f6:f5:92:1f:65:10:ab:a6:88:62:f1: 08:f2:22:44:78:d1:65:ff:ac:ba:ca:bb:b9:3c:ef: 81:15:7a:b4:44:2e:b9:64:b1:8e:bb:0c:3c:7d:43: 9c:49:e6:15:62:9d:3f:b7:f5:56:98:f1:6b:a9:12: 45:d0:54:e8:91:0a:36:42:c3:57:5b:94:ab:b9:f3: 2e:83:78:59:b3:a4:15:ae:81:87:1f:99:e8:25:7f: 0d:25:cb:14:0a:8a:75:6f:0a:1b:75:a7:5c:b7:13: 5d:ab:6d:f1:5a:e1:31:40:9d:0f:44:1f:5a:d3:67: 80:f4:f6:be:09:01:af:53:ec:7e:3f:dd:85:1d:24: 38:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:41:19:66:C7:23:49:B3:55:88:21:D1:72:C9:2C:7B:06:CE:B8:25 X509v3 Authority Key Identifier: keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b5:30:af:b6:c6:63:4d:c8:d2:dd:7e:b7:9e:b1:a4:8d:42: ec:6f:bf:31:9c:e4:02:d4:4c:56:6d:d7:6f:de:35:f5:84:5c: 63:18:49:02:7c:cf:10:fe:0d:81:98:f2:01:45:10:20:f0:40: 81:f2:c1:10:b5:b7:cc:52:70:d5:fb:b8:30:84:db:36:0f:44: 2e:cb:b3:1f:92:7a:20:f0:d2:d1:dc:60:65:88:00:9c:b7:d7: 45:76:ce:31:fd:2d:e8:13:b4:81:7f:86:f4:71:06:65:52:1a: bd:7b:af:09:0a:0d:a0:66:eb:3c:da:20:df:f0:91:ef:a6:84: 09:61:db:5f:b4:c1:df:11:40:68:8e:83:3f:a9:02:25:a5:39: 31:fe:96:24:35:29:2b:bf:50:67:22:76:75:68:03:12:fc:4f: 59:c5:3f:e3:49:60:2f:9a:8a:10:5a:6a:55:8e:81:7f:3e:c4: 64:e1:f0:00:cf:f1:f1:dd:91:a7:1a:65:38:cb:36:3e:3b:c8: cf:4e:fe:c1:36:db:b6:4c:d1:dc:f3:d2:57:d1:df:f4:93:f8: 92:bc:77:9c:ad:fc:de:5d:f0:35:d6:98:aa:28:d0:49:5f:12: d5:cf:38:7b:62:6f:b4:2a:8b:23:ac:66:47:fb:86:a3:e9:ba: 57:4b:09:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuUrxvD1T2vICQdXaDi/5LrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZGZmMGUxNTIzNzgwNTUwN2FmNWQwM2FiZWRlYjg4MzJi NGI4Y2IwHhcNMjYwMTA2MTkwMTAyWhcNMjYwMTA3MTkwMTAyWjAzMTEwLwYDVQQD EyhiNDQxMTk2NmM3MjM0OWIzNTU4ODIxZDE3MmM5MmM3YjA2Y2ViODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31hU8CILRHWdA2fos3m1fA8XL4f3 03ZFH1jO+vnpNOnjM8G34Mr1VsVup/98ZTBn7lwHOWp+us/T+L8Hv4nkRVbQVnSm pFqiCgl4wh6mz5+C4WngjSKi5wKXRoKiiI0N7HCYg5SZOcA6fuuzqNYK+SpVS0hP OsF2XzlH9vWSH2UQq6aIYvEI8iJEeNFl/6y6yru5PO+BFXq0RC65ZLGOuww8fUOc SeYVYp0/t/VWmPFrqRJF0FTokQo2QsNXW5SrufMug3hZs6QVroGHH5noJX8NJcsU Cop1bwobdadctxNdq23xWuExQJ0PRB9a02eA9Pa+CQGvU+x+P92FHSQ4UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRBGWbHI0mzVYgh0XLJLHsGzrglMB8GA1UdIwQY MBaAFMTf8OFSN4BVB69dA6vt64gytLjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUt NzE4ODdkMGE4M2JlLzEveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUtNzE4ODdkMGE4M2Jl LzEveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbUwr7bG Y03I0t1+t56xpI1C7G+/MZzkAtRMVm3Xb9419YRcYxhJAnzPEP4NgZjyAUUQIPBA gfLBELW3zFJw1fu4MITbNg9ELsuzH5J6IPDS0dxgZYgAnLfXRXbOMf0t6BO0gX+G 9HEGZVIavXuvCQoNoGbrPNog3/CR76aECWHbX7TB3xFAaI6DP6kCJaU5Mf6WJDUp K79QZyJ2dWgDEvxPWcU/40lgL5qKEFpqVY6Bfz7EZOHwAM/x8d2RpxplOMs2PjvI z07+wTbbtkzR3PPSV9Hf9JP4krx3nK383l3wNdaYqijQSV8S1c84e2JvtCqLI6xm R/uGo+m6V0sJuQ== -----END CERTIFICATE-----Generated at Wed Jan 7 02:38:56 2026 by rpki-client