This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json) Hash identifier: Ufm+D2GcpRibVbDBpjUt1K1C0RYLMep6dNwOlVm3GLo= Subject key identifier: EB:D1:65:7D:1E:DC:F3:40:99:8F:C2:88:95:14:E0:0E:68:C2:35:05 Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb Certificate serial: 019B8EE4824B7444ADED8CF40232D23CFADD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft Manifest number: 17B3 Signing time: Mon 05 Jan 2026 16:01:38 +0000 Manifest this update: Mon 05 Jan 2026 16:01:38 +0000 Manifest next update: Tue 06 Jan 2026 16:01:38 +0000 Files and hashes: 1: 1ZYXmJOrMeMc_d7Mkc1TagHI2yQ.roa (hash: qeka0m7QmqNt2z/3WOdknE3KXx1vrYZ3br+BR0VNMV8=) 2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: FCuXoYZBNshZXS4+De1qiFz4dtn2F9TvgWN71SJQSEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:e4:82:4b:74:44:ad:ed:8c:f4:02:32:d2:3c:fa:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb Validity Not Before: Jan 5 16:01:38 2026 GMT Not After : Jan 6 16:01:38 2026 GMT Subject: CN=ebd1657d1edcf340998fc2889514e00e68c23505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:16:f5:8a:75:45:4c:26:ff:1c:81:78:ad:21: 47:a8:2d:46:a5:c8:1a:fb:15:0f:db:8d:c8:21:35: fc:75:cf:7d:c8:ba:ac:62:a2:1b:f3:2a:3e:b6:9d: 21:8d:b5:44:9f:35:e6:f5:18:bc:f4:c7:89:6b:5f: c2:45:db:c8:19:49:21:08:db:6b:09:60:a7:6f:05: a4:1d:86:20:e4:66:b2:4b:45:b9:f4:b4:d4:14:13: 0a:a1:83:af:3b:5f:40:6d:5d:72:ff:2b:7d:0d:30: 49:af:9a:3a:d4:65:67:29:b7:3b:f2:36:b0:ae:74: a0:0a:f9:92:47:0b:aa:a2:26:d7:13:a1:ff:78:0d: d1:fd:19:e0:98:ff:80:a1:64:ed:82:d0:7a:f8:e5: 9f:3d:4c:71:5f:37:99:93:0b:a7:7d:29:a5:ff:d5: ec:0f:e6:13:98:d9:23:44:f0:0d:ba:5b:c9:c1:1b: 8b:30:87:8d:4b:c0:82:3a:26:00:be:b4:f7:56:11: 63:59:84:a4:a4:35:7b:54:4d:f4:ce:1e:e5:1f:da: a9:89:d5:df:7a:20:12:2d:9c:b8:84:5b:e9:d2:36: 1d:45:eb:73:ea:8e:d8:d0:a3:af:25:f6:ec:76:d3: 2b:22:2f:0f:e7:2d:6f:56:4c:df:e4:d7:83:a1:36: 68:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D1:65:7D:1E:DC:F3:40:99:8F:C2:88:95:14:E0:0E:68:C2:35:05 X509v3 Authority Key Identifier: keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:de:65:44:66:d3:ec:28:b8:4b:03:06:65:ba:4b:3a:d0:23: 80:c7:c4:4c:b7:d1:c5:85:ce:42:4b:41:39:71:24:51:bd:8f: a2:5f:95:13:9c:59:7d:58:f2:d6:47:81:8b:ad:ae:81:4c:62: 88:a0:4a:02:32:9d:16:1d:99:fa:af:25:7e:8e:8a:af:29:d0: ff:6c:28:d2:7a:b0:42:9e:c9:d2:22:af:2d:56:3a:64:1b:8c: 2a:ec:ec:26:5e:08:39:e4:09:43:e2:57:61:39:6a:6e:bd:97: 3b:5a:b6:d6:17:d2:8b:c3:d1:04:27:4f:61:96:81:f8:b9:63: 96:c7:e2:93:74:dc:51:bd:29:e5:0d:27:cb:e0:f0:71:66:a4: fc:ae:48:f0:6b:91:5f:bf:d4:76:90:6e:6a:0e:23:98:b6:11: eb:a7:ee:03:8d:5d:5e:a6:17:62:c3:c5:36:1d:e2:7d:ff:8f: d6:09:89:de:68:0d:c7:a5:6f:af:f7:bd:79:5e:b7:76:0a:b6: 3d:32:fa:e0:04:67:ed:f2:66:b3:8d:e0:e3:35:5b:dc:c4:da: 38:1f:1b:72:a4:22:4c:2e:cd:61:3b:07:43:9e:78:d8:64:df: 5f:23:d2:41:4e:81:d1:dc:25:63:c6:75:9c:a0:5e:9f:9f:bb: f0:9f:88:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuO5IJLdESt7Yz0AjLSPPrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZGZmMGUxNTIzNzgwNTUwN2FmNWQwM2FiZWRlYjg4MzJi NGI4Y2IwHhcNMjYwMTA1MTYwMTM4WhcNMjYwMTA2MTYwMTM4WjAzMTEwLwYDVQQD EyhlYmQxNjU3ZDFlZGNmMzQwOTk4ZmMyODg5NTE0ZTAwZTY4YzIzNTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Bb1inVFTCb/HIF4rSFHqC1Gpcga +xUP243IITX8dc99yLqsYqIb8yo+tp0hjbVEnzXm9Ri89MeJa1/CRdvIGUkhCNtr CWCnbwWkHYYg5GayS0W59LTUFBMKoYOvO19AbV1y/yt9DTBJr5o61GVnKbc78jaw rnSgCvmSRwuqoibXE6H/eA3R/RngmP+AoWTtgtB6+OWfPUxxXzeZkwunfSml/9Xs D+YTmNkjRPANulvJwRuLMIeNS8CCOiYAvrT3VhFjWYSkpDV7VE30zh7lH9qpidXf eiASLZy4hFvp0jYdRetz6o7Y0KOvJfbsdtMrIi8P5y1vVkzf5NeDoTZorQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvRZX0e3PNAmY/CiJUU4A5owjUFMB8GA1UdIwQY MBaAFMTf8OFSN4BVB69dA6vt64gytLjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUt NzE4ODdkMGE4M2JlLzEveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUtNzE4ODdkMGE4M2Jl LzEveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAId5lRGbT 7Ci4SwMGZbpLOtAjgMfETLfRxYXOQktBOXEkUb2Pol+VE5xZfVjy1keBi62ugUxi iKBKAjKdFh2Z+q8lfo6KrynQ/2wo0nqwQp7J0iKvLVY6ZBuMKuzsJl4IOeQJQ+JX YTlqbr2XO1q21hfSi8PRBCdPYZaB+Lljlsfik3TcUb0p5Q0ny+DwcWak/K5I8GuR X7/UdpBuag4jmLYR66fuA41dXqYXYsPFNh3iff+P1gmJ3mgNx6Vvr/e9eV63dgq2 PTL64ARn7fJms43g4zVb3MTaOB8bcqQiTC7NYTsHQ5542GTfXyPSQU6B0dwlY8Z1 nKBen5+78J+IxA== -----END CERTIFICATE-----Generated at Mon Jan 5 19:15:05 2026 by rpki-client