This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json) Hash identifier: iCFR1w5zcqZVa/FjELFj+lXhK1+c+izNQkWVoPnmacA= Subject key identifier: 34:80:29:18:BD:05:71:1D:B4:90:93:BC:0B:23:A8:18:9E:A3:AB:3E Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa Certificate serial: 019B5D5285A17F91ED93FFA5112C7AF0CDA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft Manifest number: 14B2 Signing time: Sat 27 Dec 2025 01:00:47 +0000 Manifest this update: Sat 27 Dec 2025 01:00:47 +0000 Manifest next update: Sun 28 Dec 2025 01:00:47 +0000 Files and hashes: 1: 39NfMlHhrMH0zRyfZciiqR6mIWs.roa (hash: y/nnfdi8YIAf5ZNy+0/8yGvD2yVcPkZoC4V02tMUx4U=) 2: Kj_GYCscFmlVFFmndDSFfAkuFwY.roa (hash: 6AgFYxmuaSYjaFZUd8eJPcRWj8cD+HYqY6zQ9lI9XGM=) 3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: dB0KL9unme9fxvAqHjzR9qvfza1ll/+lNupsgJ2nXr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:52:85:a1:7f:91:ed:93:ff:a5:11:2c:7a:f0:cd:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c679522eb892589d7364af579a724040e929f0aa Validity Not Before: Dec 27 01:00:47 2025 GMT Not After : Dec 28 01:00:47 2025 GMT Subject: CN=34802918bd05711db49093bc0b23a8189ea3ab3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:76:17:6c:42:75:71:1a:bc:f8:5e:7e:1b: 80:bd:55:74:d7:34:9c:1e:0c:10:e8:db:9b:1e:6a: 96:9e:59:8b:6b:22:c2:9f:1f:57:fe:bb:71:28:70: a6:0a:94:c5:9f:31:d9:25:ee:76:b6:6c:70:e8:f5: 1c:00:d5:3f:cc:b9:7b:96:8e:04:16:00:96:4f:81: 93:19:3c:56:14:11:c5:3a:0b:0c:75:a2:bc:f6:f0: 90:67:1a:b3:32:2b:2b:0d:08:d9:2a:62:8b:b4:8e: 82:13:fb:2d:38:77:7d:dc:61:72:a5:43:32:b5:98: c7:65:ee:d3:e5:e9:b7:03:9b:c9:fb:86:b1:4e:7f: 61:87:84:11:aa:9b:2e:5e:e1:f0:6a:92:1b:1f:00: 8a:38:23:12:32:d0:db:7e:df:7a:cc:a9:26:27:d6: 12:01:71:9c:1e:a1:65:bd:97:0b:fc:e2:e6:8a:6f: 9c:a9:1b:d2:eb:8c:78:27:61:7c:c5:a8:77:b6:19: 1e:e4:4a:9a:33:ee:78:ca:ac:6c:5d:4e:28:2a:5e: bf:95:ae:33:ae:b4:58:19:b4:27:83:38:25:48:c8: af:a1:01:e0:7f:6d:fd:9f:27:a2:35:06:58:9a:8b: 69:2a:f5:97:be:3a:a3:63:84:83:7c:01:e4:61:db: f9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:80:29:18:BD:05:71:1D:B4:90:93:BC:0B:23:A8:18:9E:A3:AB:3E X509v3 Authority Key Identifier: keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d2:b5:96:8c:e5:79:b4:18:a2:94:2a:a7:f1:89:a9:b3:62: fc:7a:5b:47:e0:a8:c5:bb:e5:92:ce:2d:df:75:ae:7e:ba:2e: bc:3d:f1:6f:67:76:5b:de:89:ab:01:f4:4d:71:6a:93:6f:93: 44:fa:bf:28:b5:26:56:bd:c8:56:57:da:41:d1:a2:64:e6:4e: fc:b4:57:89:6a:d4:7c:be:6a:c1:03:1d:c3:09:e8:7f:39:0b: 58:d4:81:9d:ea:c8:22:93:ae:15:e9:09:33:f7:a4:c9:27:f2: 48:ac:cf:2a:a6:40:49:02:8b:c5:15:90:dc:ab:77:87:8a:8b: b0:e5:4d:e1:24:42:7c:fb:78:aa:b9:e4:09:01:55:6b:f1:f7: 20:1c:ab:67:cd:06:e4:e4:ef:b4:21:53:a1:4b:33:63:f4:b4: 14:fe:60:d4:1f:34:1b:be:b3:6f:65:79:46:4f:78:bb:9d:47: 21:48:90:7b:25:5e:c5:f4:ed:9b:f9:08:51:0e:ad:4f:43:c3: ad:6c:cd:15:48:15:ff:e0:ff:26:4c:fa:42:1a:6b:74:5f:98: 43:0b:dd:f5:db:78:25:f5:ca:9d:0c:95:1f:1c:bf:97:69:f8: be:dc:65:88:03:1a:f1:44:72:00:b5:54:24:90:3d:f4:40:b6: 72:a0:9e:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdUoWhf5Htk/+lESx68M2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Nzk1MjJlYjg5MjU4OWQ3MzY0YWY1NzlhNzI0MDQwZTky OWYwYWEwHhcNMjUxMjI3MDEwMDQ3WhcNMjUxMjI4MDEwMDQ3WjAzMTEwLwYDVQQD EygzNDgwMjkxOGJkMDU3MTFkYjQ5MDkzYmMwYjIzYTgxODllYTNhYjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmV2F2xCdXEavPhefhuAvVV01zSc HgwQ6NubHmqWnlmLayLCnx9X/rtxKHCmCpTFnzHZJe52tmxw6PUcANU/zLl7lo4E FgCWT4GTGTxWFBHFOgsMdaK89vCQZxqzMisrDQjZKmKLtI6CE/stOHd93GFypUMy tZjHZe7T5em3A5vJ+4axTn9hh4QRqpsuXuHwapIbHwCKOCMSMtDbft96zKkmJ9YS AXGcHqFlvZcL/OLmim+cqRvS64x4J2F8xah3thke5EqaM+54yqxsXU4oKl6/la4z rrRYGbQngzglSMivoQHgf239nyeiNQZYmotpKvWXvjqjY4SDfAHkYdv5zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSAKRi9BXEdtJCTvAsjqBieo6s+MB8GA1UdIwQY MBaAFMZ5Ui64klidc2SvV5pyQEDpKfCqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80NWM5ODEtMTc4MC00YzY2LTlmOTgt ZGMxMGQ1ZDNiZDgwLzEveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80NWM5ODEtMTc4MC00YzY2LTlmOTgtZGMxMGQ1ZDNiZDgw LzEveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltK1lozl ebQYopQqp/GJqbNi/HpbR+Coxbvlks4t33WufrouvD3xb2d2W96JqwH0TXFqk2+T RPq/KLUmVr3IVlfaQdGiZOZO/LRXiWrUfL5qwQMdwwnofzkLWNSBnerIIpOuFekJ M/ekySfySKzPKqZASQKLxRWQ3Kt3h4qLsOVN4SRCfPt4qrnkCQFVa/H3IByrZ80G 5OTvtCFToUszY/S0FP5g1B80G76zb2V5Rk94u51HIUiQeyVexfTtm/kIUQ6tT0PD rWzNFUgV/+D/Jkz6QhprdF+YQwvd9dt4JfXKnQyVHxy/l2n4vtxliAMa8URyALVU JJA99EC2cqCeVQ== -----END CERTIFICATE-----Generated at Sat Dec 27 04:10:35 2025 by rpki-client