This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json) Hash identifier: 5VEiPlRk/8Phj8UMHToBBtTnBPYJPpITQ8Q9oR7ERS4= Subject key identifier: A9:FA:82:E7:2E:E2:FF:E1:78:AD:FD:95:F1:8B:44:8F:7F:73:B3:EF Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa Certificate serial: 019B405ABE1A11DA48ED1C368A79B8E9BB01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft Manifest number: 14A3 Signing time: Sun 21 Dec 2025 10:00:47 +0000 Manifest this update: Sun 21 Dec 2025 10:00:47 +0000 Manifest next update: Mon 22 Dec 2025 10:00:47 +0000 Files and hashes: 1: 39NfMlHhrMH0zRyfZciiqR6mIWs.roa (hash: y/nnfdi8YIAf5ZNy+0/8yGvD2yVcPkZoC4V02tMUx4U=) 2: Kj_GYCscFmlVFFmndDSFfAkuFwY.roa (hash: 6AgFYxmuaSYjaFZUd8eJPcRWj8cD+HYqY6zQ9lI9XGM=) 3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: oeYRLlr/ZsZuJTqnyNyLLuodi3I8sxCQUoQdjpZnAn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:be:1a:11:da:48:ed:1c:36:8a:79:b8:e9:bb:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c679522eb892589d7364af579a724040e929f0aa Validity Not Before: Dec 21 10:00:47 2025 GMT Not After : Dec 22 10:00:47 2025 GMT Subject: CN=a9fa82e72ee2ffe178adfd95f18b448f7f73b3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f2:21:b0:5f:b2:c8:05:1e:d8:49:ca:94:a3: 82:fc:5b:80:e8:06:6c:5f:30:f1:9f:19:24:d6:b8: e5:ba:17:3d:72:a3:0b:d4:d9:91:f5:65:52:94:dc: a3:c6:cb:44:77:52:0b:71:3e:ac:8b:9a:de:7c:34: a2:3d:21:f5:fd:be:d6:b9:41:e7:8e:c7:54:cd:02: 83:fa:31:21:5f:e7:c1:72:d1:42:e1:fd:fe:89:61: 3a:bf:6e:b0:d9:f7:e9:0b:65:69:2c:9c:9a:a1:1c: a8:ce:c2:8b:ec:0d:c8:57:b5:f7:08:a1:2c:35:72: b0:80:dc:4f:69:7c:d3:86:37:70:db:b2:46:47:5d: b9:21:b6:d4:96:6f:69:84:d4:6a:b9:2c:97:64:a2: 1d:fb:b3:3b:0d:38:1d:31:76:7f:37:48:b7:6a:fd: eb:92:cd:06:0d:59:7a:77:24:5f:8f:5f:dc:42:50: 9c:4a:a5:e4:a4:84:55:0a:f2:37:50:4c:15:4b:48: f2:97:a6:d2:e4:72:e1:7c:49:74:94:85:e4:b0:94: e5:63:fa:f0:61:85:8b:f4:f9:5b:f0:50:c1:4d:23: b0:ae:2d:cb:ce:c2:96:46:e3:9f:50:63:19:40:3f: cd:0d:06:cd:a2:44:14:0d:7d:2a:e1:7a:5c:ab:06: 10:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FA:82:E7:2E:E2:FF:E1:78:AD:FD:95:F1:8B:44:8F:7F:73:B3:EF X509v3 Authority Key Identifier: keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:06:f3:ad:0e:ec:1f:92:b8:39:88:05:ae:08:a5:df:52:4a: c5:45:96:5d:9c:2b:2b:64:3c:8a:f7:84:da:a1:cf:bb:52:b7: a5:24:ef:2d:78:be:cc:25:ef:9a:41:b2:ec:ae:75:23:6b:18: b5:a7:65:4c:74:12:1b:4a:28:86:fc:45:9b:a4:25:b5:48:b2: 6e:4c:d4:21:75:36:33:9d:0d:5b:bc:5e:1e:d3:ec:57:6c:13: c6:93:b9:cb:15:6e:aa:d2:4b:22:df:7b:52:24:66:41:c0:9d: 66:6d:0c:ff:7d:1e:25:8e:16:3e:9f:ed:c8:f9:d3:5e:cf:53: 2c:92:f7:1a:55:df:33:c8:bd:6b:cc:e8:6e:69:86:49:63:c2: ea:95:5f:e1:01:bc:6d:4f:55:49:1e:71:62:f3:b5:1b:27:79: 76:8c:9f:f1:4a:53:eb:06:9e:66:6f:83:1f:87:27:df:4c:93: ae:6e:38:a2:2b:e1:56:ff:cd:5d:dd:67:04:34:4c:eb:a0:ce: 6e:95:86:51:97:99:67:4c:68:e0:54:25:7c:95:78:fb:35:2e: 06:45:ad:71:01:5a:96:e2:24:c8:83:5d:bd:23:23:80:0d:4d: e0:c8:62:bb:f1:66:06:dc:8c:d5:e7:66:d6:f2:95:f1:41:7d: 09:30:a6:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWr4aEdpI7Rw2inm46bsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Nzk1MjJlYjg5MjU4OWQ3MzY0YWY1NzlhNzI0MDQwZTky OWYwYWEwHhcNMjUxMjIxMTAwMDQ3WhcNMjUxMjIyMTAwMDQ3WjAzMTEwLwYDVQQD EyhhOWZhODJlNzJlZTJmZmUxNzhhZGZkOTVmMThiNDQ4ZjdmNzNiM2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/IhsF+yyAUe2EnKlKOC/FuA6AZs XzDxnxkk1rjluhc9cqML1NmR9WVSlNyjxstEd1ILcT6si5refDSiPSH1/b7WuUHn jsdUzQKD+jEhX+fBctFC4f3+iWE6v26w2ffpC2VpLJyaoRyozsKL7A3IV7X3CKEs NXKwgNxPaXzThjdw27JGR125IbbUlm9phNRquSyXZKId+7M7DTgdMXZ/N0i3av3r ks0GDVl6dyRfj1/cQlCcSqXkpIRVCvI3UEwVS0jyl6bS5HLhfEl0lIXksJTlY/rw YYWL9Plb8FDBTSOwri3LzsKWRuOfUGMZQD/NDQbNokQUDX0q4XpcqwYQWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKn6gucu4v/heK39lfGLRI9/c7PvMB8GA1UdIwQY MBaAFMZ5Ui64klidc2SvV5pyQEDpKfCqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80NWM5ODEtMTc4MC00YzY2LTlmOTgt ZGMxMGQ1ZDNiZDgwLzEveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80NWM5ODEtMTc4MC00YzY2LTlmOTgtZGMxMGQ1ZDNiZDgw LzEveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAbzrQ7s H5K4OYgFrgil31JKxUWWXZwrK2Q8iveE2qHPu1K3pSTvLXi+zCXvmkGy7K51I2sY tadlTHQSG0oohvxFm6QltUiybkzUIXU2M50NW7xeHtPsV2wTxpO5yxVuqtJLIt97 UiRmQcCdZm0M/30eJY4WPp/tyPnTXs9TLJL3GlXfM8i9a8zobmmGSWPC6pVf4QG8 bU9VSR5xYvO1Gyd5doyf8UpT6waeZm+DH4cn30yTrm44oivhVv/NXd1nBDRM66DO bpWGUZeZZ0xo4FQlfJV4+zUuBkWtcQFaluIkyINdvSMjgA1N4Mhiu/FmBtyM1edm 1vKV8UF9CTCmrw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:59:47 2025 by rpki-client