This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json) Hash identifier: 5grIdUyhdTLN/BgHISQnyaqORL7klpQOcksojOjN1wQ= Subject key identifier: 01:11:61:0A:94:4C:F9:0A:41:91:4D:68:8D:3C:F8:5F:F8:9A:A4:C1 Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb Certificate serial: 019B42B6F50B62C0364372297DC8A6A563F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 21:00:45 +0000 Manifest this update: Sun 21 Dec 2025 21:00:45 +0000 Manifest next update: Mon 22 Dec 2025 21:00:45 +0000 Files and hashes: 1: 9L54EUQDrSQbGEvAwVt0tZoi-Uw.roa (hash: o6ynacAiEqoceTEtJPDu7iMTJ+MrYoRzYB7BFREjSAA=) 2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: YUjXlznHURiLIUe3SU2kYTTr45XGwxdglMfsBt557cI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:f5:0b:62:c0:36:43:72:29:7d:c8:a6:a5:63:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb Validity Not Before: Dec 21 21:00:45 2025 GMT Not After : Dec 22 21:00:45 2025 GMT Subject: CN=0111610a944cf90a41914d688d3cf85ff89aa4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:60:8b:f2:82:4c:76:b1:de:64:62:ee:76:54: 20:7f:19:51:39:66:62:1f:22:ad:7f:4b:90:75:01: 2c:bd:f2:35:61:c8:c7:fc:23:06:c5:c1:b4:4e:e8: cf:ee:66:4f:1d:23:e0:b8:0a:67:17:7c:82:d3:09: c1:60:01:c6:3c:f5:0b:ed:9e:a6:10:93:11:0f:44: 6a:a1:a0:35:f2:e1:a4:5d:b4:d2:41:fa:30:b5:46: 65:b9:2e:bf:84:93:f3:cb:b9:a3:ca:50:01:9a:7e: 47:70:3e:32:ba:1e:54:68:1f:f8:cc:c4:dd:50:dc: 68:9c:fa:fe:83:ba:ca:63:64:37:2c:2e:ef:89:80: 5f:0b:7d:97:a3:36:57:0a:a2:7f:c0:ff:48:cd:d9: 54:0d:df:93:b4:d1:1c:35:62:5d:aa:31:f5:b8:b5: 30:81:5a:94:fe:51:4d:7d:ce:ea:ae:81:f7:b9:4e: d8:bc:b8:d9:74:4c:92:da:8b:a9:5e:af:37:22:5f: 76:bc:29:0f:2a:66:72:62:9f:bb:4f:ad:ce:67:84: 4b:50:3c:d2:81:9b:99:14:18:8a:ef:49:98:7a:17: cd:4c:61:42:58:86:0c:07:eb:70:6e:6c:25:52:b2: e2:b7:48:d8:db:75:c4:b6:a3:e2:5a:f1:45:07:3f: 1a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:11:61:0A:94:4C:F9:0A:41:91:4D:68:8D:3C:F8:5F:F8:9A:A4:C1 X509v3 Authority Key Identifier: keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b5:3b:54:ce:c5:9a:2d:00:75:80:e4:0c:f7:62:16:9e:70: c1:3e:e9:4b:b8:6c:98:3b:9f:db:b5:fd:86:2d:28:36:f8:54: 48:b5:0c:2d:69:64:58:3b:18:f1:2e:32:a6:e6:44:80:6e:1c: 0a:ac:c6:2b:eb:0a:37:e6:7c:95:13:51:06:5f:ed:70:1e:36: f8:72:05:37:16:72:50:74:28:36:92:03:1b:0f:a9:2d:34:0f: 00:ed:9f:19:09:c7:b4:1a:ff:a9:b4:e8:53:e3:00:e8:17:f4: f8:a0:9f:49:97:59:93:47:dd:ee:41:72:ec:4e:87:7e:3d:de: 25:0a:8b:9a:8e:9b:b9:d4:16:bc:bc:fb:ba:0d:49:d3:82:23: af:2f:0a:c3:e8:62:0c:d2:0e:fe:c1:87:b1:86:0b:5f:30:5d: 0d:8e:b5:e4:f5:a3:ea:d2:7c:8b:0d:4f:9c:a0:6a:3d:cb:7a: e0:91:60:3e:68:d8:ca:de:87:a5:b8:ca:62:3c:a2:87:4f:f6: ed:32:3d:25:33:85:72:10:26:97:97:48:b7:34:c9:0b:99:cb: c9:73:f0:99:8d:3c:02:72:d7:73:bd:56:44:12:ea:69:f2:fb: d2:de:cc:b7:97:62:73:99:b1:bb:ae:8f:aa:61:15:89:ad:78: a9:52:f2:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtvULYsA2Q3IpfcimpWP3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZGZmMGUxNTIzNzgwNTUwN2FmNWQwM2FiZWRlYjg4MzJi NGI4Y2IwHhcNMjUxMjIxMjEwMDQ1WhcNMjUxMjIyMjEwMDQ1WjAzMTEwLwYDVQQD EygwMTExNjEwYTk0NGNmOTBhNDE5MTRkNjg4ZDNjZjg1ZmY4OWFhNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WCL8oJMdrHeZGLudlQgfxlROWZi HyKtf0uQdQEsvfI1YcjH/CMGxcG0TujP7mZPHSPguApnF3yC0wnBYAHGPPUL7Z6m EJMRD0RqoaA18uGkXbTSQfowtUZluS6/hJPzy7mjylABmn5HcD4yuh5UaB/4zMTd UNxonPr+g7rKY2Q3LC7viYBfC32XozZXCqJ/wP9IzdlUDd+TtNEcNWJdqjH1uLUw gVqU/lFNfc7qroH3uU7YvLjZdEyS2oupXq83Il92vCkPKmZyYp+7T63OZ4RLUDzS gZuZFBiK70mYehfNTGFCWIYMB+twbmwlUrLit0jY23XEtqPiWvFFBz8aNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAERYQqUTPkKQZFNaI08+F/4mqTBMB8GA1UdIwQY MBaAFMTf8OFSN4BVB69dA6vt64gytLjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUt NzE4ODdkMGE4M2JlLzEveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUtNzE4ODdkMGE4M2Jl LzEveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7U7VM7F mi0AdYDkDPdiFp5wwT7pS7hsmDuf27X9hi0oNvhUSLUMLWlkWDsY8S4ypuZEgG4c CqzGK+sKN+Z8lRNRBl/tcB42+HIFNxZyUHQoNpIDGw+pLTQPAO2fGQnHtBr/qbTo U+MA6Bf0+KCfSZdZk0fd7kFy7E6Hfj3eJQqLmo6budQWvLz7ug1J04Ijry8Kw+hi DNIO/sGHsYYLXzBdDY615PWj6tJ8iw1PnKBqPct64JFgPmjYyt6HpbjKYjyih0/2 7TI9JTOFchAml5dItzTJC5nLyXPwmY08AnLXc71WRBLqafL70t7Mt5dic5mxu66P qmEVia14qVLyLw== -----END CERTIFICATE-----Generated at Mon Dec 22 04:22:37 2025 by rpki-client