This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json) Hash identifier: pNW53vgDPqpPUJiivOdedY5IpTaIkrF0RuUEpha3SSA= Subject key identifier: 12:AD:18:F2:39:67:37:93:88:8F:7B:BB:69:D1:31:98:53:DD:DA:C8 Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad Certificate serial: 019B0E92A671CD2ECCBCE571840F114EFDC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft Manifest number: 0F3D Signing time: Thu 11 Dec 2025 18:00:50 +0000 Manifest this update: Thu 11 Dec 2025 18:00:50 +0000 Manifest next update: Fri 12 Dec 2025 18:00:50 +0000 Files and hashes: 1: SKLs3SUJ6QhNbVJrjYVyYf81aEc.roa (hash: R9s9J4TIgAF+/QEDyhuyAA67g5wViBKHguVZOslEIHs=) 2: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: 0CUwpVGmZtnUmtR74xmAKmzm/PKLnIX+8dVTzY9NYN8=) 3: rAM6r2SFYvSQGaseydRgOte_bds.roa (hash: RYGmm+YYhr7YTk+o6zMn3og3hxzFO1fF/P5WPNoHQX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:a6:71:cd:2e:cc:bc:e5:71:84:0f:11:4e:fd:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad Validity Not Before: Dec 11 18:00:50 2025 GMT Not After : Dec 12 18:00:50 2025 GMT Subject: CN=12ad18f239673793888f7bbb69d1319853dddac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:52:9f:79:70:5b:73:6c:14:7e:16:ff:e9:8d: 40:8e:1b:df:ef:13:e6:6d:5e:67:c6:c2:cd:aa:e1: cd:34:b7:60:0b:8f:b9:e8:0c:b2:95:2d:02:92:87: 2b:3d:14:5f:ee:34:f1:91:1b:e7:9d:2e:0f:56:c3: 24:3d:7a:ff:95:55:0e:ab:a5:37:77:0c:9b:ad:43: 35:80:6a:bc:d0:5d:5b:e9:c4:ee:ab:c8:cf:82:cc: d7:fd:f1:99:50:64:5c:f2:0b:27:14:7b:2e:86:33: db:0e:81:7b:ac:e6:2d:26:c4:ec:36:67:42:81:b8: a1:c5:ac:fc:9a:22:2f:55:5c:80:a3:cd:b6:17:9d: c3:1d:75:6e:69:18:71:97:05:16:1f:48:a8:fc:b4: 3e:33:e6:f4:bc:ec:b1:4f:88:6e:d9:ee:11:84:e9: f9:95:0f:3b:18:9d:e8:c2:15:77:ec:f3:93:68:cf: 7f:54:8a:07:0e:cf:13:40:e2:14:04:01:b2:1b:4c: 03:79:8b:36:40:29:a3:e2:a5:2f:02:d0:81:d7:56: f1:8f:6f:f2:7f:91:3f:30:72:6a:dd:a0:9e:ae:0b: 40:7a:90:21:d3:e4:9b:95:ad:1f:a9:43:4b:5c:fd: 92:f0:0b:20:02:d8:76:6a:c2:6c:a2:32:19:de:24: 75:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AD:18:F2:39:67:37:93:88:8F:7B:BB:69:D1:31:98:53:DD:DA:C8 X509v3 Authority Key Identifier: keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:51:ce:cd:6c:25:50:6f:75:3f:31:0a:9d:14:e9:3a:c4:53: 99:65:30:22:56:44:47:e4:2c:d7:06:94:9c:c6:ed:bb:12:83: 8c:e6:1b:f8:ee:b4:1f:26:05:7a:55:55:4a:6f:f1:74:35:0a: 5a:e6:46:ec:0f:7c:cc:4c:7b:f1:c3:66:6b:2e:38:7d:58:06: 81:74:ab:26:8b:f5:1a:07:88:8b:50:c1:05:7e:df:f1:1d:a6: 9c:6f:f8:93:66:2d:e7:61:5a:f4:97:30:85:29:1a:33:45:23: 28:0e:62:1a:cf:f0:33:b4:86:a2:fd:25:c6:fa:5d:f1:de:78: 03:99:c0:2f:cf:dc:f6:0c:86:31:ca:67:dd:d2:2c:66:45:9d: cf:a4:57:95:7c:52:61:c6:e9:ac:9b:e4:50:33:9c:1f:58:e6: d1:08:8e:07:46:e2:19:6e:10:0c:6a:76:6e:da:56:bd:c7:f4: 38:74:43:0b:08:94:fc:dd:e1:fd:38:9a:e3:1a:0a:c9:26:a9: dc:19:84:e9:53:fd:0b:d3:49:65:b0:f1:71:d1:95:d4:1d:f9: ef:04:03:6e:22:9a:b7:1b:8b:5b:22:1c:50:37:58:4f:b8:69: 4c:13:08:4c:9c:88:5d:e3:aa:68:5c:ef:30:9f:f2:3a:ab:a5: ec:e6:9d:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkqZxzS7MvOVxhA8RTv3HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlN2M3NzM2OTQ1YzI5YTc3YmFjZDViMThiMGZmNTg3NTEx MTdiYWQwHhcNMjUxMjExMTgwMDUwWhcNMjUxMjEyMTgwMDUwWjAzMTEwLwYDVQQD EygxMmFkMThmMjM5NjczNzkzODg4ZjdiYmI2OWQxMzE5ODUzZGRkYWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1KfeXBbc2wUfhb/6Y1Ajhvf7xPm bV5nxsLNquHNNLdgC4+56AyylS0CkocrPRRf7jTxkRvnnS4PVsMkPXr/lVUOq6U3 dwybrUM1gGq80F1b6cTuq8jPgszX/fGZUGRc8gsnFHsuhjPbDoF7rOYtJsTsNmdC gbihxaz8miIvVVyAo822F53DHXVuaRhxlwUWH0io/LQ+M+b0vOyxT4hu2e4RhOn5 lQ87GJ3owhV37POTaM9/VIoHDs8TQOIUBAGyG0wDeYs2QCmj4qUvAtCB11bxj2/y f5E/MHJq3aCergtAepAh0+Sbla0fqUNLXP2S8AsgAth2asJsojIZ3iR1OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKtGPI5ZzeTiI97u2nRMZhT3drIMB8GA1UdIwQY MBaAFF58dzaUXCmne6zVsYsP9YdREXutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83YmRkMDctNmU1NS00YTA1LTlkMWIt ZWVlZGQ5OWI4Y2M0LzEvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83YmRkMDctNmU1NS00YTA1LTlkMWItZWVlZGQ5OWI4Y2M0 LzEvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVHOzWwl UG91PzEKnRTpOsRTmWUwIlZER+Qs1waUnMbtuxKDjOYb+O60HyYFelVVSm/xdDUK WuZG7A98zEx78cNmay44fVgGgXSrJov1GgeIi1DBBX7f8R2mnG/4k2Yt52Fa9Jcw hSkaM0UjKA5iGs/wM7SGov0lxvpd8d54A5nAL8/c9gyGMcpn3dIsZkWdz6RXlXxS YcbprJvkUDOcH1jm0QiOB0biGW4QDGp2btpWvcf0OHRDCwiU/N3h/Tia4xoKySap 3BmE6VP9C9NJZbDxcdGV1B357wQDbiKatxuLWyIcUDdYT7hpTBMITJyIXeOqaFzv MJ/yOqul7Oad7A== -----END CERTIFICATE-----Generated at Thu Dec 11 23:56:41 2025 by rpki-client