This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json) Hash identifier: nRGL2rWsV8IA+1dXLhaeTsIn/vNmnr1pxAATddhQY+4= Subject key identifier: C1:79:9A:F6:C5:9D:B7:11:84:60:2E:6A:A4:F3:55:81:CA:BF:31:71 Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24 Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24 Certificate serial: 019B3AFE14F2EE5D575A9A940BD34DB4CC78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft Manifest number: 15DC Signing time: Sat 20 Dec 2025 09:01:28 +0000 Manifest this update: Sat 20 Dec 2025 09:01:28 +0000 Manifest next update: Sun 21 Dec 2025 09:01:28 +0000 Files and hashes: 1: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: 9qyNUc7i7qJHN5nE7pTsmKuWxRd3ahHpNr1SZPGkIs4=) 2: zUVgbIXYeTGVKXvGEymmIIswak0.roa (hash: byi69vgfiULR5t5etKbYt0ap14VdTPxIUc5JBAXpbBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:14:f2:ee:5d:57:5a:9a:94:0b:d3:4d:b4:cc:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24 Validity Not Before: Dec 20 09:01:28 2025 GMT Not After : Dec 21 09:01:28 2025 GMT Subject: CN=c1799af6c59db71184602e6aa4f35581cabf3171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:31:cd:83:e3:7b:3a:f3:71:e6:bb:19:6f:db: f5:78:fa:24:56:97:0d:7f:c7:69:e9:23:4e:88:61: 6a:66:17:9c:a8:05:36:55:37:33:27:6a:1b:c5:03: 18:8c:bb:3b:93:34:76:0a:ea:e3:4b:1b:d6:c5:3c: f8:d9:ee:3e:98:19:82:f5:a1:49:c0:06:4c:11:99: 8b:77:81:8f:6c:c5:9f:82:a1:ef:a2:db:b1:82:62: 8c:5e:5f:6c:6d:22:28:23:a7:6e:c0:7d:4d:c3:dd: 37:76:66:d8:29:14:36:09:04:dd:f1:f2:14:19:f8: 67:e6:8a:5e:38:f1:25:4f:b5:80:70:6b:5c:0e:94: 43:c6:a2:30:fa:15:34:de:2d:b9:2b:fa:e4:27:3f: b5:5f:75:7c:fb:1c:71:91:8a:ed:21:f3:59:c6:83: e6:7d:87:7e:4f:09:a6:b9:f3:71:74:3b:ac:dd:b4: c4:b5:e9:6c:53:af:8d:02:a6:96:8f:76:49:17:1b: e0:98:0c:a2:89:e0:3b:d2:a2:12:64:bf:f9:87:41: 26:67:ad:25:41:dc:01:3a:d2:4e:5d:a4:c9:13:ca: 3c:e9:07:64:54:12:18:ef:aa:b4:e6:65:e3:8b:32: 7f:45:b1:67:2b:07:b2:9f:6b:a8:37:cc:a4:4d:c9: 80:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:79:9A:F6:C5:9D:B7:11:84:60:2E:6A:A4:F3:55:81:CA:BF:31:71 X509v3 Authority Key Identifier: keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:4e:6f:06:0d:8d:aa:97:5e:54:43:b9:57:7a:1e:7c:03:fb: b2:de:f3:e2:f7:3b:5f:0c:a5:8d:24:1c:29:3f:15:b1:43:23: 18:ef:64:a4:87:fc:2e:f5:4c:a6:3a:39:b6:bf:69:af:54:3f: 42:ec:55:07:6d:be:3d:0a:e5:0c:88:99:1e:81:d2:9f:8c:d2: 26:83:77:6b:2b:e9:81:c2:72:30:61:98:d6:c6:23:2a:fd:13: bd:e6:81:11:1f:da:76:b1:c1:e0:c6:0a:ed:b3:de:19:7f:e9: a9:00:81:15:1c:63:3b:d8:9c:64:c3:da:20:13:d0:44:c7:54: 27:90:9f:07:4f:b1:5e:d3:98:a8:35:61:df:9b:6d:2a:be:be: 69:1e:da:7f:ff:d9:5d:84:d7:d3:2b:37:a1:c2:55:e6:89:0b: bf:81:da:3d:c1:6c:8c:60:27:cb:1f:43:b5:e7:e5:0d:22:5f: 26:1f:69:c2:6a:f4:bf:76:13:c7:30:5d:2e:a2:22:f0:06:b6: 27:28:06:95:e0:e0:7f:75:1b:79:76:61:6e:06:f3:9a:f0:ef: 93:7f:2b:ae:22:36:66:cf:2f:63:40:a4:e3:27:fe:cd:c7:19: f4:f6:b6:8d:40:2c:17:8a:4e:6d:c5:c1:72:7f:de:53:86:23: be:3f:45:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/hTy7l1XWpqUC9NNtMx4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MTljYWQ5OTIyMTE1YmNmYTc0NTJiYTBhNmU0M2E2YWY0 ZTRjMjQwHhcNMjUxMjIwMDkwMTI4WhcNMjUxMjIxMDkwMTI4WjAzMTEwLwYDVQQD EyhjMTc5OWFmNmM1OWRiNzExODQ2MDJlNmFhNGYzNTU4MWNhYmYzMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DHNg+N7OvNx5rsZb9v1ePokVpcN f8dp6SNOiGFqZhecqAU2VTczJ2obxQMYjLs7kzR2CurjSxvWxTz42e4+mBmC9aFJ wAZMEZmLd4GPbMWfgqHvotuxgmKMXl9sbSIoI6duwH1Nw903dmbYKRQ2CQTd8fIU Gfhn5opeOPElT7WAcGtcDpRDxqIw+hU03i25K/rkJz+1X3V8+xxxkYrtIfNZxoPm fYd+TwmmufNxdDus3bTEtelsU6+NAqaWj3ZJFxvgmAyiieA70qISZL/5h0EmZ60l QdwBOtJOXaTJE8o86QdkVBIY76q05mXjizJ/RbFnKweyn2uoN8ykTcmAPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMF5mvbFnbcRhGAuaqTzVYHKvzFxMB8GA1UdIwQY MBaAFMcZytmSIRW8+nRSugpuQ6avTkwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHhuSzJaSWhGYno2ZEZLNkNtNURwcTlPVENRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xNDkzMzItNjk2OS00YzRiLWI1OTEt N2MyYzA4YjVlZTQ5LzEveHhuSzJaSWhGYno2ZEZLNkNtNURwcTlPVENRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8xNDkzMzItNjk2OS00YzRiLWI1OTEtN2MyYzA4YjVlZTQ5 LzEveHhuSzJaSWhGYno2ZEZLNkNtNURwcTlPVENRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGU5vBg2N qpdeVEO5V3oefAP7st7z4vc7XwyljSQcKT8VsUMjGO9kpIf8LvVMpjo5tr9pr1Q/ QuxVB22+PQrlDIiZHoHSn4zSJoN3ayvpgcJyMGGY1sYjKv0TveaBER/adrHB4MYK 7bPeGX/pqQCBFRxjO9icZMPaIBPQRMdUJ5CfB0+xXtOYqDVh35ttKr6+aR7af//Z XYTX0ys3ocJV5okLv4HaPcFsjGAnyx9DteflDSJfJh9pwmr0v3YTxzBdLqIi8Aa2 JygGleDgf3UbeXZhbgbzmvDvk38rriI2Zs8vY0Ck4yf+zccZ9Pa2jUAsF4pObcXB cn/eU4Yjvj9Fpg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:19:41 2025 by rpki-client