This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft File: xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft (raw, json) Hash identifier: RXNVqYkkLvlcEPnzyYnQ4rV3vQyRil6eFOGmSP9S8pY= Subject key identifier: A0:B1:CF:8B:61:D4:9A:77:DA:E7:AA:25:BA:6C:6E:0B:BD:96:A8:63 Authority key identifier: C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8 Certificate issuer: /CN=c6999623ed0f0c49feab957fcd026148694087a8 Certificate serial: 019B32D6E81EE6FFF1A36950DCCF6968142B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft Manifest number: 1754 Signing time: Thu 18 Dec 2025 19:01:43 +0000 Manifest this update: Thu 18 Dec 2025 19:01:43 +0000 Manifest next update: Fri 19 Dec 2025 19:01:43 +0000 Files and hashes: 1: xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl (hash: SHEOaKhSFcU0onT7wHxqdc6NRqWoaZDyctYsbvSLVVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:e8:1e:e6:ff:f1:a3:69:50:dc:cf:69:68:14:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6999623ed0f0c49feab957fcd026148694087a8 Validity Not Before: Dec 18 19:01:43 2025 GMT Not After : Dec 19 19:01:43 2025 GMT Subject: CN=a0b1cf8b61d49a77dae7aa25ba6c6e0bbd96a863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:49:0d:85:4e:4a:15:ac:e2:f7:d2:53:50:5b: bd:e8:59:05:f0:9b:b7:fb:2c:cf:45:71:d1:ef:ec: f1:c8:a3:9b:48:16:7e:ad:92:da:c8:9d:43:2c:bd: b3:ff:f1:86:da:1f:ef:aa:8e:35:c9:dc:bc:af:5b: a5:54:e5:04:fe:c2:1f:b1:3a:72:e2:3a:62:c6:5e: 6b:65:38:33:4a:f9:ca:59:0a:b6:16:6d:d3:f3:19: 0d:4b:a2:a8:95:3d:d3:74:0f:45:2c:81:84:0f:84: 8a:3e:c3:3f:d3:a6:f4:89:ee:72:8a:53:85:18:76: e0:22:77:22:fd:51:79:74:16:16:a5:c0:66:5e:98: 1d:54:e3:0d:d5:72:44:1f:3f:03:8a:f6:5c:e0:1c: 39:33:88:a8:5f:a5:56:77:bb:3f:4a:b8:c6:9c:ec: 8a:16:96:08:64:99:5b:96:f4:19:7d:10:a2:be:51: 3c:d0:82:51:9f:5a:47:4c:cc:49:fc:72:6c:83:c7: be:d5:04:77:30:61:d2:9e:d9:31:87:ac:c0:38:65: 93:c5:62:59:c3:18:bd:d7:4f:81:28:5c:b5:86:a1: 1d:8f:c2:8d:28:de:0a:c4:17:ad:dc:26:14:b2:1d: 9c:99:dc:39:db:3a:f2:bf:06:26:21:68:96:13:7b: d3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B1:CF:8B:61:D4:9A:77:DA:E7:AA:25:BA:6C:6E:0B:BD:96:A8:63 X509v3 Authority Key Identifier: keyid:C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c1:84:0f:c5:f0:06:74:07:e5:cf:be:25:7d:eb:17:c8:36: 86:4b:2d:9b:6a:b8:bd:43:a0:80:b5:5b:c7:08:af:8c:3a:ce: 2a:40:ed:4a:e2:7a:5f:11:8d:6a:b9:0f:1a:5a:b1:70:32:f0: c6:24:36:b4:a9:d1:d2:ce:da:6a:c8:1f:78:92:0e:3e:78:cb: 09:27:ed:77:3f:ae:53:3a:ee:40:16:45:5d:13:7d:d8:be:03: 93:0a:ee:54:73:ae:82:b1:8a:4a:46:d7:af:e8:ea:c0:7f:8c: a1:e5:a5:5e:b4:ed:e8:f2:2b:8d:fc:9a:63:0f:f2:e0:63:16: 56:80:3f:e7:0c:48:74:80:ed:d3:01:b4:a3:d4:34:bc:6d:66: 3e:42:44:06:31:d8:79:ab:3b:71:e7:fd:42:69:c6:70:74:b3: 61:9e:66:dc:b4:65:30:00:c8:f2:16:8e:00:f1:e4:fa:84:23: 49:47:9e:50:79:97:df:a1:48:ba:8c:6c:a4:e6:bf:e7:d9:05: bc:9c:56:8a:41:51:5e:ee:61:a8:f4:c3:05:3d:89:9b:af:39: d9:bf:48:cc:fc:6f:f4:e4:e6:1c:a8:96:38:b2:78:11:72:e0: 4a:4c:0f:7f:2b:02:44:15:f4:08:ab:15:fd:6d:a0:c7:75:33: 61:3a:b7:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1uge5v/xo2lQ3M9paBQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OTk5NjIzZWQwZjBjNDlmZWFiOTU3ZmNkMDI2MTQ4Njk0 MDg3YTgwHhcNMjUxMjE4MTkwMTQzWhcNMjUxMjE5MTkwMTQzWjAzMTEwLwYDVQQD EyhhMGIxY2Y4YjYxZDQ5YTc3ZGFlN2FhMjViYTZjNmUwYmJkOTZhODYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkkNhU5KFazi99JTUFu96FkF8Ju3 +yzPRXHR7+zxyKObSBZ+rZLayJ1DLL2z//GG2h/vqo41ydy8r1ulVOUE/sIfsTpy 4jpixl5rZTgzSvnKWQq2Fm3T8xkNS6KolT3TdA9FLIGED4SKPsM/06b0ie5yilOF GHbgInci/VF5dBYWpcBmXpgdVOMN1XJEHz8DivZc4Bw5M4ioX6VWd7s/SrjGnOyK FpYIZJlblvQZfRCivlE80IJRn1pHTMxJ/HJsg8e+1QR3MGHSntkxh6zAOGWTxWJZ wxi910+BKFy1hqEdj8KNKN4KxBet3CYUsh2cmdw52zryvwYmIWiWE3vTaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCxz4th1Jp32ueqJbpsbgu9lqhjMB8GA1UdIwQY MBaAFMaZliPtDwxJ/quVf80CYUhpQIeoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHBtV0ktMFBERW4tcTVWX3pRSmhTR2xBaDZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mMjdmNDAtYTBjMS00ZjBhLTkxN2Ut MDViNTdkMmQ1NzZjLzEveHBtV0ktMFBERW4tcTVWX3pRSmhTR2xBaDZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mMjdmNDAtYTBjMS00ZjBhLTkxN2UtMDViNTdkMmQ1NzZj LzEveHBtV0ktMFBERW4tcTVWX3pRSmhTR2xBaDZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8GED8Xw BnQH5c++JX3rF8g2hkstm2q4vUOggLVbxwivjDrOKkDtSuJ6XxGNarkPGlqxcDLw xiQ2tKnR0s7aasgfeJIOPnjLCSftdz+uUzruQBZFXRN92L4DkwruVHOugrGKSkbX r+jqwH+MoeWlXrTt6PIrjfyaYw/y4GMWVoA/5wxIdIDt0wG0o9Q0vG1mPkJEBjHY eas7cef9QmnGcHSzYZ5m3LRlMADI8haOAPHk+oQjSUeeUHmX36FIuoxspOa/59kF vJxWikFRXu5hqPTDBT2Jm6852b9IzPxv9OTmHKiWOLJ4EXLgSkwPfysCRBX0CKsV /W2gx3UzYTq3wg== -----END CERTIFICATE-----Generated at Thu Dec 18 22:35:58 2025 by rpki-client