This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json) Hash identifier: f0QbqKB6DOsWEeRFDT/5sfIwZTfzTEZ3Pscp/uDqJek= Subject key identifier: F2:90:2C:B3:DD:32:73:47:57:23:9D:43:83:F6:14:B9:B2:9A:58:AE Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e Certificate serial: 019B32D641A23B5B7A915176A0D34522249B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 19:01:00 +0000 Manifest this update: Thu 18 Dec 2025 19:01:00 +0000 Manifest next update: Fri 19 Dec 2025 19:01:00 +0000 Files and hashes: 1: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: r8F5jPuCgWNDE5Vf7S1Wgm4hFIda6OaU+ReQnk9auhQ=) 2: uFHSzfk_zk3TIp45n5GBEUFKwao.roa (hash: KVIiwAo2wdMIe86msUEJxL5joqSg/x0TWu2flcitTfE=) 3: xJ-H39IOSB6XadrNN4evmOK-Bm8.roa (hash: 4175v9gOZ3L5ywBtB3+A8R3L8qZZ5FxiHwK6cbdkSKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:41:a2:3b:5b:7a:91:51:76:a0:d3:45:22:24:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e Validity Not Before: Dec 18 19:01:00 2025 GMT Not After : Dec 19 19:01:00 2025 GMT Subject: CN=f2902cb3dd32734757239d4383f614b9b29a58ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cc:1d:8f:b7:3a:40:d9:a0:ca:1e:3e:f1:a7: 80:78:64:3f:15:04:2e:fd:14:f4:f0:98:5a:bd:47: 07:d0:d0:ce:9f:02:2d:25:a5:d9:2a:63:d6:24:24: e1:bb:cf:90:e0:b7:3f:12:4c:1e:23:ff:e8:4c:91: 2d:55:0f:0c:71:bb:8c:29:22:90:51:f1:81:df:cc: 2c:fe:fc:4b:1e:05:87:b8:6f:19:70:61:9b:05:f1: 14:e6:f9:b1:52:6b:f6:02:c5:dc:33:56:25:1e:c6: 5d:08:2a:66:db:16:5b:f5:1b:78:b3:9f:aa:83:ad: ca:ab:6b:9e:d7:1e:23:7c:45:a2:96:92:22:6d:bf: d5:95:b1:a7:05:4f:53:47:29:0b:4b:87:b3:d0:6a: 42:c4:52:95:e1:83:22:c7:25:1a:a2:37:8c:80:71: 0a:48:33:3b:ba:a8:b6:54:16:4f:1c:db:b4:6b:e1: 27:07:b9:d5:58:1b:4a:ab:07:a4:f8:26:a6:56:3e: c1:32:fb:6c:10:ce:c8:83:97:d9:47:b2:20:8b:39: 08:17:63:26:de:76:b8:36:d1:74:5c:f4:2d:3d:60: 85:9d:b5:cd:1a:1c:91:44:89:81:14:e4:40:95:47: 9b:2e:e6:61:03:12:b3:0c:bb:af:ec:70:bf:0c:10: 15:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:90:2C:B3:DD:32:73:47:57:23:9D:43:83:F6:14:B9:B2:9A:58:AE X509v3 Authority Key Identifier: keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:88:8a:fb:0d:29:d7:3d:b9:fa:48:c6:93:dd:78:2d:c6:95: 37:8a:ef:98:f1:08:c0:88:b1:23:49:d6:91:95:a8:2a:43:6a: 0a:a8:f5:c8:84:f5:bb:a2:dd:5b:de:ef:a5:58:31:6d:cc:11: 34:0a:d7:15:53:6c:47:cb:3b:72:03:6a:46:e3:24:a0:4d:95: e7:7b:04:1f:d0:0d:a3:2b:d0:a8:85:72:76:ac:6a:f0:52:50: 65:61:8c:53:b2:e5:ef:1c:a0:5e:3d:65:aa:0d:40:d1:ba:79: 6c:b3:fc:8a:a7:56:71:c4:24:ee:ca:e4:5c:38:8c:18:e4:1f: 69:22:30:49:3f:9e:b9:83:cd:08:ae:aa:f0:b3:10:b4:30:02: b5:04:c8:eb:19:db:0a:84:29:e3:0e:03:ab:0f:0c:60:80:6b: 93:25:40:0e:4a:55:8c:d4:58:29:b5:97:a3:40:08:8b:28:71: ad:cf:03:91:9a:2b:55:5b:94:c2:59:90:c4:56:f6:45:5a:1d: dd:51:d2:34:12:fb:9a:e6:e9:c1:fb:34:e2:2f:08:3a:ce:09: 16:bf:11:23:6d:4c:87:57:68:9a:43:af:90:16:20:20:17:c1: 6e:dc:63:b7:5f:d7:2d:d4:5c:5c:bc:52:77:d9:f0:a9:68:40: 7b:02:36:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1kGiO1t6kVF2oNNFIiSbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNzUxMTRhZGMyY2Y4ZWRlYTUwNTk1N2U3OWU4OTA0NDI2 NmMyNGUwHhcNMjUxMjE4MTkwMTAwWhcNMjUxMjE5MTkwMTAwWjAzMTEwLwYDVQQD EyhmMjkwMmNiM2RkMzI3MzQ3NTcyMzlkNDM4M2Y2MTRiOWIyOWE1OGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8wdj7c6QNmgyh4+8aeAeGQ/FQQu /RT08JhavUcH0NDOnwItJaXZKmPWJCThu8+Q4Lc/EkweI//oTJEtVQ8McbuMKSKQ UfGB38ws/vxLHgWHuG8ZcGGbBfEU5vmxUmv2AsXcM1YlHsZdCCpm2xZb9Rt4s5+q g63Kq2ue1x4jfEWilpIibb/VlbGnBU9TRykLS4ez0GpCxFKV4YMixyUaojeMgHEK SDM7uqi2VBZPHNu0a+EnB7nVWBtKqwek+CamVj7BMvtsEM7Ig5fZR7IgizkIF2Mm 3na4NtF0XPQtPWCFnbXNGhyRRImBFORAlUebLuZhAxKzDLuv7HC/DBAVoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKQLLPdMnNHVyOdQ4P2FLmymliuMB8GA1UdIwQY MBaAFFx1EUrcLPjt6lBZV+eeiQRCZsJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMt YzVkYzA5NGRmOWM0LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMtYzVkYzA5NGRmOWM0 LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoiK+w0p 1z25+kjGk914LcaVN4rvmPEIwIixI0nWkZWoKkNqCqj1yIT1u6LdW97vpVgxbcwR NArXFVNsR8s7cgNqRuMkoE2V53sEH9ANoyvQqIVydqxq8FJQZWGMU7Ll7xygXj1l qg1A0bp5bLP8iqdWccQk7srkXDiMGOQfaSIwST+euYPNCK6q8LMQtDACtQTI6xnb CoQp4w4Dqw8MYIBrkyVADkpVjNRYKbWXo0AIiyhxrc8DkZorVVuUwlmQxFb2RVod 3VHSNBL7mubpwfs04i8IOs4JFr8RI21Mh1domkOvkBYgIBfBbtxjt1/XLdRcXLxS d9nwqWhAewI2xw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:44:30 2025 by rpki-client