This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json) Hash identifier: //an8EckHh51MDAzgYHm6eQMrPowLIM0wSJlopSeScE= Subject key identifier: 9B:AC:8F:D0:B1:37:18:5A:3B:F4:FC:39:63:BE:62:1C:0E:F3:25:96 Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad Certificate serial: 019B1A293A8B4B6472D29CC826185BF2CCAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft Manifest number: 0F43 Signing time: Sun 14 Dec 2025 00:01:08 +0000 Manifest this update: Sun 14 Dec 2025 00:01:08 +0000 Manifest next update: Mon 15 Dec 2025 00:01:08 +0000 Files and hashes: 1: SKLs3SUJ6QhNbVJrjYVyYf81aEc.roa (hash: R9s9J4TIgAF+/QEDyhuyAA67g5wViBKHguVZOslEIHs=) 2: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: zFmgd/k6o0sJKfH1L6xBZp0hKJUgRfO4l1VuegwgHyM=) 3: rAM6r2SFYvSQGaseydRgOte_bds.roa (hash: RYGmm+YYhr7YTk+o6zMn3og3hxzFO1fF/P5WPNoHQX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:3a:8b:4b:64:72:d2:9c:c8:26:18:5b:f2:cc:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad Validity Not Before: Dec 14 00:01:08 2025 GMT Not After : Dec 15 00:01:08 2025 GMT Subject: CN=9bac8fd0b137185a3bf4fc3963be621c0ef32596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:16:f0:4d:68:01:83:0e:ba:68:26:e7:fc:56: 3a:31:a4:f7:69:95:c9:f8:2b:b9:5a:fe:3f:43:90: 93:f4:4b:03:7e:8c:ca:9d:06:e2:06:ce:7d:3f:62: 38:06:53:7d:e4:fd:64:ee:64:0f:44:aa:2a:6e:68: ea:ae:85:f9:44:b4:a8:f7:b0:cb:42:21:79:37:f2: b6:e2:ef:8c:5c:10:64:8e:20:16:cd:f3:47:82:8a: 4f:65:e2:11:c9:db:7d:65:c8:36:d3:3c:94:91:2f: 24:26:4b:95:93:e2:ad:01:13:ee:43:e7:65:f7:1a: 35:43:87:7b:fd:53:0e:75:ea:64:24:06:30:77:46: ce:a4:29:03:9b:0c:c4:34:7a:6e:b2:0a:78:b2:fd: e6:d1:67:d3:ae:65:d9:6d:05:0f:33:35:87:5f:00: 33:b3:b9:49:89:4f:06:e7:42:35:3a:42:dd:c3:31: 09:35:24:4d:0f:8b:59:2e:a1:ab:c6:74:83:6b:d4: 6b:6b:ff:8b:80:75:11:ab:e3:fd:3a:c8:ed:13:c7: 53:72:2d:c6:ee:e4:03:46:d1:d4:03:5d:42:f4:50: 8b:81:b9:ec:67:68:5c:e1:cd:a8:60:b7:4c:be:4a: dd:73:6e:3d:24:b3:6c:9e:29:e2:bd:da:05:c1:c6: 3b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AC:8F:D0:B1:37:18:5A:3B:F4:FC:39:63:BE:62:1C:0E:F3:25:96 X509v3 Authority Key Identifier: keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f7:f4:f8:eb:8a:27:58:68:d0:cd:40:28:05:3c:8d:3b:7e: 9a:5b:0f:12:02:e2:49:f7:19:a0:c1:a4:dc:28:26:79:a4:2e: 28:2f:31:13:75:c7:18:2e:b4:df:5d:00:b3:a7:c0:00:f8:a6: 1c:ab:01:87:b0:b9:fd:94:c3:83:65:29:19:5a:32:5c:19:50: 20:11:18:e0:c5:72:77:96:5b:23:9c:68:3e:8f:ff:b8:85:8e: 91:6c:9a:b8:ce:95:f8:28:65:de:46:ca:60:89:15:34:5c:bc: bd:bb:9b:50:4c:c5:71:6b:a8:ba:23:9d:89:42:b0:65:42:ad: cd:07:f1:91:61:cb:33:4d:50:b8:a5:48:31:e6:83:fb:08:00: 1f:9d:29:c1:a5:58:46:25:ab:56:57:32:4a:1f:37:42:a7:97: eb:d9:ff:50:e9:ca:e3:f2:eb:34:c1:22:8e:11:bf:81:96:e2: ec:0f:f0:46:f0:2c:ff:5d:a5:dd:24:cb:47:05:ab:d5:7a:7e: 7c:2e:6d:70:c1:e0:43:76:c1:72:8a:45:e6:c4:3b:19:c5:9b: 64:a9:8f:38:f0:2a:ba:c1:0a:fd:5e:37:42:da:e6:02:c7:0b: 71:94:93:98:03:f7:c5:e8:fb:16:44:c7:be:33:2e:b2:29:bc: 82:85:84:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKTqLS2Ry0pzIJhhb8sytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlN2M3NzM2OTQ1YzI5YTc3YmFjZDViMThiMGZmNTg3NTEx MTdiYWQwHhcNMjUxMjE0MDAwMTA4WhcNMjUxMjE1MDAwMTA4WjAzMTEwLwYDVQQD Eyg5YmFjOGZkMGIxMzcxODVhM2JmNGZjMzk2M2JlNjIxYzBlZjMyNTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhbwTWgBgw66aCbn/FY6MaT3aZXJ +Cu5Wv4/Q5CT9EsDfozKnQbiBs59P2I4BlN95P1k7mQPRKoqbmjqroX5RLSo97DL QiF5N/K24u+MXBBkjiAWzfNHgopPZeIRydt9Zcg20zyUkS8kJkuVk+KtARPuQ+dl 9xo1Q4d7/VMOdepkJAYwd0bOpCkDmwzENHpusgp4sv3m0WfTrmXZbQUPMzWHXwAz s7lJiU8G50I1OkLdwzEJNSRND4tZLqGrxnSDa9Rra/+LgHURq+P9OsjtE8dTci3G 7uQDRtHUA11C9FCLgbnsZ2hc4c2oYLdMvkrdc249JLNsninivdoFwcY7pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJusj9CxNxhaO/T8OWO+YhwO8yWWMB8GA1UdIwQY MBaAFF58dzaUXCmne6zVsYsP9YdREXutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83YmRkMDctNmU1NS00YTA1LTlkMWIt ZWVlZGQ5OWI4Y2M0LzEvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83YmRkMDctNmU1NS00YTA1LTlkMWItZWVlZGQ5OWI4Y2M0 LzEvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvf0+OuK J1ho0M1AKAU8jTt+mlsPEgLiSfcZoMGk3CgmeaQuKC8xE3XHGC60310As6fAAPim HKsBh7C5/ZTDg2UpGVoyXBlQIBEY4MVyd5ZbI5xoPo//uIWOkWyauM6V+Chl3kbK YIkVNFy8vbubUEzFcWuouiOdiUKwZUKtzQfxkWHLM01QuKVIMeaD+wgAH50pwaVY RiWrVlcySh83QqeX69n/UOnK4/LrNMEijhG/gZbi7A/wRvAs/12l3STLRwWr1Xp+ fC5tcMHgQ3bBcopF5sQ7GcWbZKmPOPAqusEK/V43QtrmAscLcZSTmAP3xej7FkTH vjMusim8goWEEg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:39 2025 by rpki-client