This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft File: xNN466ZI9D5TpKQeE0uQExypPNg.mft (raw, json) Hash identifier: xbWZo2twd5I9bBuUEw84vcQr2iXN/abLo3BX3Hk3s1s= Subject key identifier: D8:83:AC:FB:3D:A0:8F:33:6C:B3:2E:54:F5:7E:1E:1E:C2:5A:13:9C Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8 Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8 Certificate serial: 019B4A710AC9DE5983C4F05D95C2719B9FE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft Manifest number: 0CD0 Signing time: Tue 23 Dec 2025 09:01:20 +0000 Manifest this update: Tue 23 Dec 2025 09:01:20 +0000 Manifest next update: Wed 24 Dec 2025 09:01:20 +0000 Files and hashes: 1: gsd0lN6ZnIrIQD5lIwOejLd2Dv0.roa (hash: n34ueBlgPlEEtyoifu0C2ju9FVvPJQshh3AnTXlwP14=) 2: xNN466ZI9D5TpKQeE0uQExypPNg.crl (hash: 0RTTUZm05t+KUzt4sIOlRoh21ALC3sZpPA/b5u+to18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:0a:c9:de:59:83:c4:f0:5d:95:c2:71:9b:9f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8 Validity Not Before: Dec 23 09:01:20 2025 GMT Not After : Dec 24 09:01:20 2025 GMT Subject: CN=d883acfb3da08f336cb32e54f57e1e1ec25a139c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:fd:30:af:9e:64:91:04:45:2d:79:3f:c2: c8:3f:a6:28:a9:51:a2:56:a3:60:d6:38:42:da:63: f2:0e:df:76:c1:0a:a9:a6:d8:7c:6b:94:55:1d:06: a4:f3:fc:2d:3d:51:4f:2d:a9:b1:a7:9d:a9:e1:f0: 5c:31:90:2e:50:8e:6a:17:7a:d7:ce:dd:95:db:cc: 1a:0e:41:94:35:19:a7:b5:93:a7:5c:13:0e:7e:e5: 62:d2:e9:d3:c9:96:ad:90:9b:aa:57:bf:fe:93:1e: 30:0d:42:96:fa:04:85:9f:89:2f:d3:ed:ea:30:da: 45:60:c5:a4:29:e3:27:ff:03:eb:10:cd:3e:25:53: 9c:a1:8c:5f:82:3f:6a:05:fb:35:29:85:ea:55:a1: b0:7c:32:18:5c:ea:84:bf:a1:44:35:4e:7a:78:37: 25:90:de:ad:88:d4:1f:d8:3f:66:33:8d:99:92:81: 05:c0:24:d2:ce:49:24:3e:d6:cf:14:b4:04:50:18: fa:bc:4a:b3:11:bc:62:41:bb:09:80:2a:21:fa:da: f5:9a:f4:25:04:f5:a3:03:74:cb:96:f6:5a:f5:02: 54:2b:69:32:22:55:7b:ab:e1:68:a4:0a:e7:34:14: 1b:e6:35:36:01:88:75:a5:bd:5b:5c:be:17:d3:b9: 13:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:83:AC:FB:3D:A0:8F:33:6C:B3:2E:54:F5:7E:1E:1E:C2:5A:13:9C X509v3 Authority Key Identifier: keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:3d:cc:66:b6:6a:e4:9a:56:79:f4:2b:7a:61:bc:99:de:a0: 60:8d:13:f9:96:30:e3:07:b2:ee:f8:8f:c8:66:de:18:d9:10: 96:b6:83:93:37:a2:0d:7c:57:f9:95:9b:34:bc:f1:5f:7e:66: e4:43:8f:79:cb:77:b5:73:d2:cc:ee:f0:93:95:36:b0:4d:53: 1e:5b:cb:d1:73:52:93:a1:bc:57:34:63:4d:b2:ff:01:57:7a: 58:44:bd:24:01:9c:4c:4b:08:f6:ac:02:3d:55:2b:a8:06:a9: 71:d9:95:ce:3a:85:62:1c:7b:eb:ed:c0:24:91:6a:69:63:5f: da:87:e1:9e:76:6e:d2:32:90:a9:b7:1b:c3:4e:13:af:b3:48: c2:7d:c7:28:3f:92:d0:cb:22:34:14:83:d3:b6:6c:ef:27:97: 18:ec:38:b7:b1:49:06:88:7e:07:04:0b:51:79:b6:85:11:e2: 30:7f:0a:92:43:a1:54:8c:06:bc:c3:ec:18:aa:65:42:58:43: dd:cd:6e:8b:74:70:83:50:e0:16:b1:ca:0c:53:33:a5:ba:c1: 48:5a:0e:73:83:64:b3:59:b0:69:d1:55:50:9f:7f:6f:d2:ed: d0:9b:69:d7:10:dc:ee:cd:4c:b5:86:84:9d:42:cf:f4:99:db: 5c:39:47:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcQrJ3lmDxPBdlcJxm5/jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZDM3OGViYTY0OGY0M2U1M2E0YTQxZTEzNGI5MDEzMWNh OTNjZDgwHhcNMjUxMjIzMDkwMTIwWhcNMjUxMjI0MDkwMTIwWjAzMTEwLwYDVQQD EyhkODgzYWNmYjNkYTA4ZjMzNmNiMzJlNTRmNTdlMWUxZWMyNWExMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD/9MK+eZJEERS15P8LIP6YoqVGi VqNg1jhC2mPyDt92wQqppth8a5RVHQak8/wtPVFPLamxp52p4fBcMZAuUI5qF3rX zt2V28waDkGUNRmntZOnXBMOfuVi0unTyZatkJuqV7/+kx4wDUKW+gSFn4kv0+3q MNpFYMWkKeMn/wPrEM0+JVOcoYxfgj9qBfs1KYXqVaGwfDIYXOqEv6FENU56eDcl kN6tiNQf2D9mM42ZkoEFwCTSzkkkPtbPFLQEUBj6vEqzEbxiQbsJgCoh+tr1mvQl BPWjA3TLlvZa9QJUK2kyIlV7q+FopArnNBQb5jU2AYh1pb1bXL4X07kTEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiDrPs9oI8zbLMuVPV+Hh7CWhOcMB8GA1UdIwQY MBaAFMTTeOumSPQ+U6SkHhNLkBMcqTzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81MTY0YWQtOTE1OC00OGYyLWE0ZTMt ZGQ1NWE4MDU2MzAzLzEveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy81MTY0YWQtOTE1OC00OGYyLWE0ZTMtZGQ1NWE4MDU2MzAz LzEveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcT3MZrZq 5JpWefQremG8md6gYI0T+ZYw4wey7viPyGbeGNkQlraDkzeiDXxX+ZWbNLzxX35m 5EOPect3tXPSzO7wk5U2sE1THlvL0XNSk6G8VzRjTbL/AVd6WES9JAGcTEsI9qwC PVUrqAapcdmVzjqFYhx76+3AJJFqaWNf2ofhnnZu0jKQqbcbw04Tr7NIwn3HKD+S 0MsiNBSD07Zs7yeXGOw4t7FJBoh+BwQLUXm2hRHiMH8KkkOhVIwGvMPsGKplQlhD 3c1ui3Rwg1DgFrHKDFMzpbrBSFoOc4Nks1mwadFVUJ9/b9Lt0Jtp1xDc7s1MtYaE nULP9JnbXDlHCg== -----END CERTIFICATE-----Generated at Tue Dec 23 11:00:29 2025 by rpki-client