This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft File: xNinONTBPEpnevUSdbqEyLNtyc4.mft (raw, json) Hash identifier: XA2s+WO250sc19mYo1/IWAH6fZGzECE3h7aU4O0i+n8= Subject key identifier: 77:24:29:EC:82:8E:7A:86:5F:FE:EC:B0:7D:C6:E8:99:E4:75:AD:FB Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE Certificate issuer: /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce Certificate serial: 019B4581D9A5DB5C8D8B24C2C604C91D4A87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft Manifest number: 171D Signing time: Mon 22 Dec 2025 10:01:36 +0000 Manifest this update: Mon 22 Dec 2025 10:01:36 +0000 Manifest next update: Tue 23 Dec 2025 10:01:36 +0000 Files and hashes: 1: AOrWMlaoWwr9BiH2KC52e33LvU8.roa (hash: C5KmnNcC1frqJFB0GlvW18JGpvtpy3xiJI4dTDmXhFM=) 2: xNinONTBPEpnevUSdbqEyLNtyc4.crl (hash: AqXFKcUoeLrURBye3Ub1dJkE3pZLm5sVAPTgK5Z2FLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:d9:a5:db:5c:8d:8b:24:c2:c6:04:c9:1d:4a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce Validity Not Before: Dec 22 10:01:36 2025 GMT Not After : Dec 23 10:01:36 2025 GMT Subject: CN=772429ec828e7a865ffeecb07dc6e899e475adfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e5:65:25:8a:b8:92:c8:01:43:f8:6f:aa:36: 4c:28:68:ab:80:26:ac:d1:e5:02:e8:2c:7e:cd:07: c9:6c:22:26:eb:2b:4c:60:93:a7:3d:c5:09:5d:07: 22:4b:c8:58:9b:a5:07:52:e4:70:de:e9:6c:a8:e5: 8a:8a:46:10:2e:1e:3e:31:9f:75:e7:10:7a:3e:35: 48:fa:41:8e:93:dd:50:d6:b4:dd:d0:30:a2:7d:58: f8:a4:d4:a9:c7:3b:bb:16:52:4b:a4:a0:38:89:51: 2d:a3:c2:ef:c1:ba:f2:9b:03:c6:85:c4:cc:71:1c: 9e:67:0b:f4:64:be:7c:79:29:e9:35:60:81:b7:79: 68:a8:4f:69:33:b1:4b:d9:53:0a:66:c7:eb:0c:1b: 14:0d:5b:4d:a3:80:15:30:6d:93:d3:2b:18:c3:2a: 50:31:85:f1:48:41:43:46:50:75:4f:28:ac:9d:f0: d4:c1:97:c7:ce:dd:13:99:49:b4:f7:9e:ed:3f:71: 21:ec:09:7f:40:36:87:a0:91:8d:9a:6c:8e:43:1c: 00:a3:04:d2:d9:00:b5:98:f5:a3:22:71:20:36:4f: 87:62:40:ad:77:dd:08:f1:83:cc:e6:cb:5f:cf:88: 0c:27:fe:b7:5c:e5:9b:f4:35:32:40:c2:c2:a1:79: 3d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:24:29:EC:82:8E:7A:86:5F:FE:EC:B0:7D:C6:E8:99:E4:75:AD:FB X509v3 Authority Key Identifier: keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ba:bb:40:b8:77:9a:4a:66:3f:db:df:e2:39:f9:7c:36:24: 3d:93:57:eb:bb:db:1e:52:d8:23:c9:86:2c:76:97:66:96:f6: 41:58:15:b3:81:ed:e1:a6:70:1a:c2:f3:2c:36:bb:84:03:e0: 6d:e6:92:e5:ea:61:66:54:b7:81:64:18:a5:df:d0:8d:84:d7: a6:ae:26:72:96:95:eb:c2:be:a9:92:c7:81:d6:46:78:de:f0: 0e:21:0a:60:75:3a:10:65:d4:6d:c7:52:9c:2e:ee:5c:4e:e6: 2a:02:57:61:1c:a1:f3:dd:f0:21:1c:44:50:2a:3d:9e:83:8a: f1:1d:23:b3:a9:b7:20:66:e3:9b:c3:b2:ed:9d:fa:41:b1:c9: 99:15:6e:f1:14:21:e3:1f:45:32:73:e0:f2:30:bc:c7:3f:fc: 25:23:28:de:11:aa:fc:34:4a:86:3f:be:93:de:57:f9:53:44: 4b:ca:14:cc:97:bf:c9:01:53:b9:4b:db:17:a8:bb:38:c8:a5: 65:33:c0:b0:34:6a:7e:94:ec:7d:8d:cf:13:84:f5:d4:28:c0: c0:f2:dd:b7:24:d5:c9:32:ed:d5:59:e9:15:3a:44:8c:39:1e: 1d:2d:74:7f:0a:92:67:5a:16:c7:d6:e5:bd:ec:50:44:ab:95: 4f:3b:07:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgdml21yNiyTCxgTJHUqHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZDhhNzM4ZDRjMTNjNGE2NzdhZjUxMjc1YmE4NGM4YjM2 ZGM5Y2UwHhcNMjUxMjIyMTAwMTM2WhcNMjUxMjIzMTAwMTM2WjAzMTEwLwYDVQQD Eyg3NzI0MjllYzgyOGU3YTg2NWZmZWVjYjA3ZGM2ZTg5OWU0NzVhZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluVlJYq4ksgBQ/hvqjZMKGirgCas 0eUC6Cx+zQfJbCIm6ytMYJOnPcUJXQciS8hYm6UHUuRw3ulsqOWKikYQLh4+MZ91 5xB6PjVI+kGOk91Q1rTd0DCifVj4pNSpxzu7FlJLpKA4iVEto8LvwbrymwPGhcTM cRyeZwv0ZL58eSnpNWCBt3loqE9pM7FL2VMKZsfrDBsUDVtNo4AVMG2T0ysYwypQ MYXxSEFDRlB1TyisnfDUwZfHzt0TmUm0957tP3Eh7Al/QDaHoJGNmmyOQxwAowTS 2QC1mPWjInEgNk+HYkCtd90I8YPM5stfz4gMJ/63XOWb9DUyQMLCoXk9OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHckKeyCjnqGX/7ssH3G6Jnkda37MB8GA1UdIwQY MBaAFMTYpzjUwTxKZ3r1EnW6hMizbcnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE5pbk9OVEJQRXBuZXZVU2RicUV5TE50eWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MTVhZGUtOWRhZS00MTUxLTgxOWYt YWY2MmM4NDY1ZGFiLzEveE5pbk9OVEJQRXBuZXZVU2RicUV5TE50eWM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS83MTVhZGUtOWRhZS00MTUxLTgxOWYtYWY2MmM4NDY1ZGFi LzEveE5pbk9OVEJQRXBuZXZVU2RicUV5TE50eWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrq7QLh3 mkpmP9vf4jn5fDYkPZNX67vbHlLYI8mGLHaXZpb2QVgVs4Ht4aZwGsLzLDa7hAPg beaS5ephZlS3gWQYpd/QjYTXpq4mcpaV68K+qZLHgdZGeN7wDiEKYHU6EGXUbcdS nC7uXE7mKgJXYRyh893wIRxEUCo9noOK8R0js6m3IGbjm8Oy7Z36QbHJmRVu8RQh 4x9FMnPg8jC8xz/8JSMo3hGq/DRKhj++k95X+VNES8oUzJe/yQFTuUvbF6i7OMil ZTPAsDRqfpTsfY3PE4T11CjAwPLdtyTVyTLt1VnpFTpEjDkeHS10fwqSZ1oWx9bl vexQRKuVTzsHZA== -----END CERTIFICATE-----Generated at Mon Dec 22 11:46:12 2025 by rpki-client