This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json) Hash identifier: 49yFGCtZ2qmwcfwsBp42emPRbBqxRIXMwrS86Zbf8GE= Subject key identifier: 7D:63:92:7B:99:B8:BD:A4:1B:62:1C:31:53:71:90:F4:03:55:CB:92 Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb Certificate serial: 019B619D49986E57B805849C6A5524079EBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft Manifest number: 179B Signing time: Sat 27 Dec 2025 21:00:56 +0000 Manifest this update: Sat 27 Dec 2025 21:00:56 +0000 Manifest next update: Sun 28 Dec 2025 21:00:56 +0000 Files and hashes: 1: 9L54EUQDrSQbGEvAwVt0tZoi-Uw.roa (hash: o6ynacAiEqoceTEtJPDu7iMTJ+MrYoRzYB7BFREjSAA=) 2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: XIv5hKkIxE7bc56nHzaavdds3lx13SQb+G/+qDdMgDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 21:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:9d:49:98:6e:57:b8:05:84:9c:6a:55:24:07:9e:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb Validity Not Before: Dec 27 21:00:56 2025 GMT Not After : Dec 28 21:00:56 2025 GMT Subject: CN=7d63927b99b8bda41b621c31537190f40355cb92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:45:ff:13:30:35:0e:ce:4f:e2:73:ea:57:e4: 3c:26:b7:21:86:90:c9:c6:c5:65:fc:75:45:e7:59: a1:91:e8:56:ba:5c:b8:31:9b:73:3a:f6:c2:6b:d1: be:88:fa:5d:b8:65:93:04:fa:30:b3:7a:4a:a4:fa: 99:28:39:c1:e0:da:1e:f5:f1:d3:20:56:26:f2:e2: f2:ca:0c:c8:62:8a:61:3a:50:a6:ea:55:a4:71:20: 7e:e6:37:d3:52:5d:22:0d:86:1c:52:97:3b:3d:6e: db:c3:b2:30:1c:4a:f5:47:5e:4c:a0:29:7e:10:3a: 24:41:9f:30:9d:c0:17:78:9b:62:2a:e4:9d:39:22: 47:cd:43:c0:90:42:ac:7d:f6:94:5d:22:34:55:79: b7:97:ff:c6:d8:89:1e:bd:51:f7:f6:48:fc:f5:1d: 2a:b5:f6:22:d4:d2:49:58:84:60:7d:1b:2c:30:13: 99:3b:4e:e5:ec:0f:2b:8f:d1:64:09:06:8f:07:6b: 89:e5:81:2d:5f:48:a6:f5:82:10:f7:72:92:ba:91: 66:ac:66:69:41:51:e9:c0:d4:16:b8:c8:57:cd:4c: c3:f9:46:a3:f8:35:b3:ac:c5:94:bc:6e:a0:d3:94: 8c:7b:69:0e:b7:e3:4b:67:0b:66:3b:61:bb:de:b7: 0b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:63:92:7B:99:B8:BD:A4:1B:62:1C:31:53:71:90:F4:03:55:CB:92 X509v3 Authority Key Identifier: keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ec:52:eb:ed:aa:5e:fc:e4:d2:46:bd:09:a5:94:89:46:74: 77:be:61:39:5e:6c:48:57:97:5e:e5:e4:bd:6c:06:d2:95:84: 6b:45:a7:78:59:a7:96:6f:7c:7d:d2:47:3d:8e:b5:28:79:97: 9d:fb:ec:07:c2:07:54:73:dc:21:1a:c0:76:d7:37:cd:40:fe: 97:0a:ba:03:86:8a:83:59:ed:05:c2:04:6e:d6:02:2b:36:ca: 7e:72:b4:19:64:3e:92:fb:68:13:24:61:3e:98:f1:fd:50:fa: 57:3e:e1:c0:c5:50:a4:d7:e7:84:24:d2:75:db:55:36:b6:65: 7b:c9:ea:fe:1a:e3:fa:0d:76:49:8e:56:fa:d0:86:83:98:0c: 3d:3e:c5:9f:f6:db:5b:fd:59:59:4b:89:2f:c7:c6:89:ba:42: 16:54:80:ef:74:8d:1b:d7:b9:69:79:4f:de:4e:7a:97:d7:0f: 68:1d:b7:56:61:04:1d:96:a5:ce:e1:21:c6:94:e8:f0:80:4f: f2:ec:e2:39:1c:cd:95:4b:7c:18:cc:38:4e:20:c1:3a:7f:9a: d3:5a:47:33:44:e5:59:aa:05:59:a8:5e:a7:a1:c5:ce:de:c8: 62:af:5e:44:2b:0b:b9:80:8c:cd:13:92:1d:91:88:53:a4:3a: 3c:a1:40:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthnUmYble4BYScalUkB567MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZGZmMGUxNTIzNzgwNTUwN2FmNWQwM2FiZWRlYjg4MzJi NGI4Y2IwHhcNMjUxMjI3MjEwMDU2WhcNMjUxMjI4MjEwMDU2WjAzMTEwLwYDVQQD Eyg3ZDYzOTI3Yjk5YjhiZGE0MWI2MjFjMzE1MzcxOTBmNDAzNTVjYjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkX/EzA1Ds5P4nPqV+Q8JrchhpDJ xsVl/HVF51mhkehWuly4MZtzOvbCa9G+iPpduGWTBPows3pKpPqZKDnB4Noe9fHT IFYm8uLyygzIYophOlCm6lWkcSB+5jfTUl0iDYYcUpc7PW7bw7IwHEr1R15MoCl+ EDokQZ8wncAXeJtiKuSdOSJHzUPAkEKsffaUXSI0VXm3l//G2IkevVH39kj89R0q tfYi1NJJWIRgfRssMBOZO07l7A8rj9FkCQaPB2uJ5YEtX0im9YIQ93KSupFmrGZp QVHpwNQWuMhXzUzD+Uaj+DWzrMWUvG6g05SMe2kOt+NLZwtmO2G73rcLMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1jknuZuL2kG2IcMVNxkPQDVcuSMB8GA1UdIwQY MBaAFMTf8OFSN4BVB69dA6vt64gytLjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUt NzE4ODdkMGE4M2JlLzEveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUtNzE4ODdkMGE4M2Jl LzEveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+xS6+2q Xvzk0ka9CaWUiUZ0d75hOV5sSFeXXuXkvWwG0pWEa0WneFmnlm98fdJHPY61KHmX nfvsB8IHVHPcIRrAdtc3zUD+lwq6A4aKg1ntBcIEbtYCKzbKfnK0GWQ+kvtoEyRh Ppjx/VD6Vz7hwMVQpNfnhCTSddtVNrZle8nq/hrj+g12SY5W+tCGg5gMPT7Fn/bb W/1ZWUuJL8fGibpCFlSA73SNG9e5aXlP3k56l9cPaB23VmEEHZalzuEhxpTo8IBP 8uziORzNlUt8GMw4TiDBOn+a01pHM0TlWaoFWahep6HFzt7IYq9eRCsLuYCMzROS HZGIU6Q6PKFALA== -----END CERTIFICATE-----Generated at Sun Dec 28 06:40:55 2025 by rpki-client