This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json) Hash identifier: oombAl4mBXnFwFfi8Z+OLFAq6a7P0bFV2dOvhH9/tv8= Subject key identifier: AA:1B:57:53:65:02:BA:32:8F:38:E9:A5:D2:8A:E6:03:1C:B1:9D:B9 Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb Certificate serial: 019B2F67229D47B364B713FEFF486AF2E4C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 03:00:46 +0000 Manifest this update: Thu 18 Dec 2025 03:00:46 +0000 Manifest next update: Fri 19 Dec 2025 03:00:46 +0000 Files and hashes: 1: 9L54EUQDrSQbGEvAwVt0tZoi-Uw.roa (hash: o6ynacAiEqoceTEtJPDu7iMTJ+MrYoRzYB7BFREjSAA=) 2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: wXJrZLTgZnnRtDNjI1BGp/6TBiF3pilfnH6WVDDpi4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:22:9d:47:b3:64:b7:13:fe:ff:48:6a:f2:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb Validity Not Before: Dec 18 03:00:46 2025 GMT Not After : Dec 19 03:00:46 2025 GMT Subject: CN=aa1b57536502ba328f38e9a5d28ae6031cb19db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a5:6b:67:ac:49:9e:55:fa:aa:32:cc:8d:3f: db:c4:72:e0:d1:b6:5c:28:f9:2b:96:6c:37:c9:6f: b4:f5:b3:d9:8d:9a:e4:4c:7f:b9:db:42:6f:a1:c1: 18:c9:cb:4c:bb:50:ee:9a:85:d2:9f:00:86:13:6e: 7b:5d:93:56:2f:6b:d4:a3:16:4d:5e:97:3c:34:eb: d4:2e:95:1b:63:2f:d5:ae:cb:8e:94:80:44:b7:22: 4b:8a:9b:76:5f:cc:25:1b:e9:f5:71:3a:48:79:e2: 47:cf:83:a2:c6:ab:06:04:5a:b2:84:a9:9f:03:2e: b5:ea:78:bc:52:22:72:6d:d1:f8:1a:fe:58:bc:98: a3:63:3a:6a:57:ea:7f:b5:49:3b:40:c1:a1:87:22: bd:32:f3:e5:69:cb:08:a9:a7:fb:ce:ff:5f:e8:30: 1d:3e:39:2b:ef:17:3f:26:72:0c:1c:f9:92:1e:a2: 33:e1:9e:7a:04:1d:15:36:cc:69:4a:6b:8d:a7:e0: 4b:7d:ce:00:ac:a7:83:2e:06:a0:01:f5:c2:a0:7e: e0:1f:53:e1:43:5b:bf:67:b8:db:9d:45:2e:bc:42: 05:40:f1:3c:0b:f8:7f:8a:54:f0:d4:55:c8:a4:1e: 72:70:74:01:73:f7:80:ab:f1:dd:04:10:e3:b9:2f: f3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1B:57:53:65:02:BA:32:8F:38:E9:A5:D2:8A:E6:03:1C:B1:9D:B9 X509v3 Authority Key Identifier: keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:96:f9:f8:64:c2:65:cc:6f:b4:9e:79:95:3d:34:db:eb:05: c8:cf:d3:b9:1a:4d:02:3b:3e:b6:f2:3a:8b:22:21:e2:cf:92: d5:b3:f5:df:64:27:29:7a:19:da:3d:0e:72:5a:f3:c5:c6:e7: b1:a8:52:ad:2a:d9:e6:61:53:35:72:cb:ed:04:c1:19:f5:a9: 73:2f:ff:bc:a9:43:dc:ec:ac:d2:61:7e:45:d4:44:b3:41:68: 17:5c:b8:80:39:0a:7e:24:37:a1:f2:ca:8a:4d:12:8a:b7:d0: ea:f6:10:f4:93:b3:a6:64:cc:b9:73:2a:ee:13:ad:4b:d5:5a: 76:a3:e8:c1:50:ad:bc:5c:32:fa:59:b7:ee:d6:cc:d8:aa:af: f1:2d:7f:09:2b:6d:5e:c5:8c:e6:80:3d:cc:5e:e5:55:30:e6: f8:89:bf:b3:b7:87:95:6c:6f:d7:f8:8d:d3:fe:aa:49:e4:61: e5:d9:3d:70:30:57:bf:98:e1:24:24:19:bf:b0:01:46:df:22: a7:bd:52:e5:ff:bb:51:b8:b8:cb:e6:f2:21:68:e4:07:03:cf: be:4b:77:61:11:79:00:17:fe:96:02:5d:07:6f:dd:6b:43:bc: 57:8f:27:34:f3:2c:5f:70:12:41:34:7e:89:f5:c1:17:f4:d8: 3c:77:24:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZyKdR7NktxP+/0hq8uTAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZGZmMGUxNTIzNzgwNTUwN2FmNWQwM2FiZWRlYjg4MzJi NGI4Y2IwHhcNMjUxMjE4MDMwMDQ2WhcNMjUxMjE5MDMwMDQ2WjAzMTEwLwYDVQQD EyhhYTFiNTc1MzY1MDJiYTMyOGYzOGU5YTVkMjhhZTYwMzFjYjE5ZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aVrZ6xJnlX6qjLMjT/bxHLg0bZc KPkrlmw3yW+09bPZjZrkTH+520JvocEYyctMu1DumoXSnwCGE257XZNWL2vUoxZN Xpc8NOvULpUbYy/VrsuOlIBEtyJLipt2X8wlG+n1cTpIeeJHz4OixqsGBFqyhKmf Ay616ni8UiJybdH4Gv5YvJijYzpqV+p/tUk7QMGhhyK9MvPlacsIqaf7zv9f6DAd Pjkr7xc/JnIMHPmSHqIz4Z56BB0VNsxpSmuNp+BLfc4ArKeDLgagAfXCoH7gH1Ph Q1u/Z7jbnUUuvEIFQPE8C/h/ilTw1FXIpB5ycHQBc/eAq/HdBBDjuS/zsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKobV1NlAroyjzjppdKK5gMcsZ25MB8GA1UdIwQY MBaAFMTf8OFSN4BVB69dA6vt64gytLjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUt NzE4ODdkMGE4M2JlLzEveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUtNzE4ODdkMGE4M2Jl LzEveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpb5+GTC ZcxvtJ55lT002+sFyM/TuRpNAjs+tvI6iyIh4s+S1bP132QnKXoZ2j0Oclrzxcbn sahSrSrZ5mFTNXLL7QTBGfWpcy//vKlD3Oys0mF+RdREs0FoF1y4gDkKfiQ3ofLK ik0SirfQ6vYQ9JOzpmTMuXMq7hOtS9VadqPowVCtvFwy+lm37tbM2Kqv8S1/CStt XsWM5oA9zF7lVTDm+Im/s7eHlWxv1/iN0/6qSeRh5dk9cDBXv5jhJCQZv7ABRt8i p71S5f+7Ubi4y+byIWjkBwPPvkt3YRF5ABf+lgJdB2/da0O8V48nNPMsX3ASQTR+ ifXBF/TYPHckCw== -----END CERTIFICATE-----Generated at Thu Dec 18 08:42:01 2025 by rpki-client