This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json) Hash identifier: fPMTIGifids1+0jkzRXVfE5A4qcWF3keZPcQbrNj1zk= Subject key identifier: F9:EE:92:05:B6:35:02:D1:79:9D:BF:35:48:E6:D6:07:70:AF:46:90 Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa Certificate serial: 019B38A2C285DABE8888CE9E2375CC46B69E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft Manifest number: 149F Signing time: Fri 19 Dec 2025 22:02:29 +0000 Manifest this update: Fri 19 Dec 2025 22:02:29 +0000 Manifest next update: Sat 20 Dec 2025 22:02:29 +0000 Files and hashes: 1: 39NfMlHhrMH0zRyfZciiqR6mIWs.roa (hash: y/nnfdi8YIAf5ZNy+0/8yGvD2yVcPkZoC4V02tMUx4U=) 2: Kj_GYCscFmlVFFmndDSFfAkuFwY.roa (hash: 6AgFYxmuaSYjaFZUd8eJPcRWj8cD+HYqY6zQ9lI9XGM=) 3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: RwjkDf8FUFIBhqWniPfVwZlzvfBY1lqncq0gU1nmK2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:c2:85:da:be:88:88:ce:9e:23:75:cc:46:b6:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c679522eb892589d7364af579a724040e929f0aa Validity Not Before: Dec 19 22:02:29 2025 GMT Not After : Dec 20 22:02:29 2025 GMT Subject: CN=f9ee9205b63502d1799dbf3548e6d60770af4690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f3:9a:73:5b:30:88:60:a9:54:07:60:5c:d9: 4c:bc:4c:e0:87:50:4a:96:7e:47:8d:51:90:41:3f: 1d:d4:e3:07:d8:27:49:6b:d6:d8:f6:a7:89:20:89: 87:2d:27:76:4e:94:35:74:f3:a9:03:b3:da:ae:df: 19:ed:dd:b8:f3:73:f8:80:fd:ec:d4:d0:38:0a:8a: c4:93:1c:c5:6f:29:83:58:92:f5:6c:49:d6:d2:7c: e0:6e:7c:b2:84:41:e0:f1:8c:3b:3d:09:ba:80:44: ae:e2:7a:88:d8:3d:ec:52:9f:e4:a1:98:90:e0:94: 6d:cc:a9:9a:7c:40:cf:23:89:b8:3c:39:4a:db:ad: df:e5:62:8b:a0:17:2a:fb:20:e7:b8:31:fc:97:5c: 46:38:87:3c:0e:ac:fc:4a:f5:0d:36:c2:66:e3:64: 53:47:89:8f:b3:55:ff:34:f3:6e:0e:6f:70:b6:bd: d6:35:1d:88:7f:d4:38:d1:2a:2b:c2:fa:5f:5e:67: ac:88:1a:f6:6c:4a:21:58:fc:86:2c:db:e3:b2:dc: f6:58:a3:10:68:6f:4b:ae:fd:ef:70:75:46:fa:ae: 97:5d:3b:ea:5c:80:49:62:b6:9f:5d:d1:6f:b7:1e: a5:2a:8e:08:95:a6:36:48:b7:cf:df:dd:0b:08:a4: cd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EE:92:05:B6:35:02:D1:79:9D:BF:35:48:E6:D6:07:70:AF:46:90 X509v3 Authority Key Identifier: keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:7d:f4:36:fd:53:b6:49:27:c7:e3:df:30:ed:b0:3c:81:f1: 18:0c:00:62:d8:a8:01:1a:a2:99:e7:75:41:31:f3:b0:e0:5a: 3b:b0:bd:ce:48:73:b7:48:51:67:26:19:9f:c4:16:9d:c4:31: 96:2b:b5:ea:d5:39:3c:45:57:fd:f7:f5:b6:6b:d8:49:f8:0d: c8:cc:6f:91:bc:e4:04:87:04:d4:1e:fa:02:96:7b:bd:6a:16: da:20:5e:8a:76:08:01:7e:c6:18:11:2c:d2:42:5e:ef:bf:36: 88:e9:d5:0b:8f:20:e6:cf:59:d4:23:90:fa:5f:b9:9a:3e:59: fb:42:1b:32:0b:3e:2c:d3:b3:6d:02:56:50:08:59:8c:75:5d: cc:68:5f:01:64:aa:73:66:ca:48:0b:c2:68:35:f9:fc:18:43: 32:ea:61:56:89:84:9e:e5:ff:f5:6d:6b:4a:d9:80:d4:08:42: 21:b7:8d:44:8a:09:13:23:d3:c1:73:e8:a2:49:20:a4:55:6b: 78:d6:65:27:8b:43:36:ab:d1:23:bc:61:f1:9a:2a:b6:d0:1a: f4:87:f1:7c:f7:eb:ce:46:6e:d3:b8:be:6c:1e:fd:f1:58:2e: 0c:31:06:a0:b5:cf:7f:ba:fc:8d:30:a4:19:16:e1:53:c1:85: 0d:be:e7:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4osKF2r6IiM6eI3XMRraeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Nzk1MjJlYjg5MjU4OWQ3MzY0YWY1NzlhNzI0MDQwZTky OWYwYWEwHhcNMjUxMjE5MjIwMjI5WhcNMjUxMjIwMjIwMjI5WjAzMTEwLwYDVQQD EyhmOWVlOTIwNWI2MzUwMmQxNzk5ZGJmMzU0OGU2ZDYwNzcwYWY0NjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPOac1swiGCpVAdgXNlMvEzgh1BK ln5HjVGQQT8d1OMH2CdJa9bY9qeJIImHLSd2TpQ1dPOpA7Part8Z7d2483P4gP3s 1NA4CorEkxzFbymDWJL1bEnW0nzgbnyyhEHg8Yw7PQm6gESu4nqI2D3sUp/koZiQ 4JRtzKmafEDPI4m4PDlK263f5WKLoBcq+yDnuDH8l1xGOIc8Dqz8SvUNNsJm42RT R4mPs1X/NPNuDm9wtr3WNR2If9Q40SorwvpfXmesiBr2bEohWPyGLNvjstz2WKMQ aG9Lrv3vcHVG+q6XXTvqXIBJYrafXdFvtx6lKo4IlaY2SLfP390LCKTNpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnukgW2NQLReZ2/NUjm1gdwr0aQMB8GA1UdIwQY MBaAFMZ5Ui64klidc2SvV5pyQEDpKfCqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80NWM5ODEtMTc4MC00YzY2LTlmOTgt ZGMxMGQ1ZDNiZDgwLzEveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80NWM5ODEtMTc4MC00YzY2LTlmOTgtZGMxMGQ1ZDNiZDgw LzEveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALH30Nv1T tkknx+PfMO2wPIHxGAwAYtioARqimed1QTHzsOBaO7C9zkhzt0hRZyYZn8QWncQx liu16tU5PEVX/ff1tmvYSfgNyMxvkbzkBIcE1B76ApZ7vWoW2iBeinYIAX7GGBEs 0kJe7782iOnVC48g5s9Z1COQ+l+5mj5Z+0IbMgs+LNOzbQJWUAhZjHVdzGhfAWSq c2bKSAvCaDX5/BhDMuphVomEnuX/9W1rStmA1AhCIbeNRIoJEyPTwXPookkgpFVr eNZlJ4tDNqvRI7xh8ZoqttAa9IfxfPfrzkZu07i+bB798VguDDEGoLXPf7r8jTCk GRbhU8GFDb7nRw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:15:27 2025 by rpki-client