This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json) Hash identifier: bT5sbrDKgw1M3itcXLn/0Lyrqm5E+BWyCrG0qouBHkI= Subject key identifier: 54:17:B1:B9:FD:A2:CF:E5:3F:4B:00:A1:C4:88:B9:70:E6:E4:09:3B Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81 Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581 Certificate serial: 019B1C857C4544ACC63EC1EA8EBFC6155AA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft Manifest number: 1783 Signing time: Sun 14 Dec 2025 11:01:08 +0000 Manifest this update: Sun 14 Dec 2025 11:01:08 +0000 Manifest next update: Mon 15 Dec 2025 11:01:08 +0000 Files and hashes: 1: V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa (hash: y15uODSxQaZUOAbMdJA7ksT4dYbu04f8NP7jQ2+xKpE=) 2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: tnnxFDurUix38kdZg1BlatE7ciJYn+c3AQutbqvCS50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:7c:45:44:ac:c6:3e:c1:ea:8e:bf:c6:15:5a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581 Validity Not Before: Dec 14 11:01:08 2025 GMT Not After : Dec 15 11:01:08 2025 GMT Subject: CN=5417b1b9fda2cfe53f4b00a1c488b970e6e4093b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:26:c4:94:98:e6:bb:14:44:5d:90:53:48:69: 92:26:5b:6f:dc:b6:df:52:45:4b:07:53:be:ed:7f: 43:7b:d5:65:1a:29:b9:14:6c:43:28:0f:d8:78:33: 75:40:b7:05:06:7f:09:5f:46:2a:8e:fe:b5:d6:c4: a4:b8:7b:1b:39:a6:c2:9d:0b:7d:58:24:f1:09:62: cb:d5:c3:c7:5a:d1:da:7d:16:31:a0:0b:44:9e:3b: e6:65:10:ea:fd:ba:46:71:be:9d:d0:7c:01:a2:80: f7:87:93:0e:05:0e:d8:80:fd:5f:07:5b:a3:20:ea: a3:fd:d5:e6:60:3f:f4:ad:2e:cf:8b:13:52:fa:05: 98:1f:16:3e:e0:6d:b6:82:da:e6:f4:34:14:73:d3: 8c:f1:f0:5c:d3:d2:fc:9f:28:bf:19:ed:19:a9:5c: 6e:89:bc:bb:d0:39:a3:67:41:fc:f2:3a:b7:c6:6c: 9f:a3:d7:f0:22:21:4d:ef:d4:99:ae:f4:bc:00:73: ff:99:86:b5:c2:e8:71:28:8b:6a:90:08:d1:cc:46: ae:ad:0f:65:bf:d5:ee:1c:3c:4e:04:67:5f:ab:d9: 3b:4c:60:e0:0f:eb:9b:d6:f9:cc:b0:88:0a:25:d0: a8:94:fe:b8:e1:bb:d6:43:44:9e:2c:69:21:0e:c9: 95:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:17:B1:B9:FD:A2:CF:E5:3F:4B:00:A1:C4:88:B9:70:E6:E4:09:3B X509v3 Authority Key Identifier: keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:97:cd:5c:f7:1c:ea:9e:bf:5e:9f:46:a4:d2:eb:44:09:f6: 48:0c:10:e9:a4:e6:8c:f6:29:7b:fd:93:d8:bb:41:09:d4:ff: 87:8c:8a:80:64:62:9a:b5:ac:ef:ac:21:c0:ec:5a:ac:63:92: d1:2b:70:1e:8f:89:8e:eb:38:76:86:25:56:4d:44:14:bc:33: c8:a7:16:c7:78:9f:8a:b9:e1:22:f3:01:ca:f6:b8:8f:03:8d: 66:9c:5e:67:95:de:9e:29:24:84:c3:50:e8:82:5f:7c:fd:23: 92:bf:4b:44:c2:58:b8:41:5a:66:de:95:4d:92:75:b2:a6:7f: ba:6e:02:25:8c:cb:80:e6:53:06:59:b7:71:10:6f:ae:30:4e: 87:fb:90:4a:07:92:ee:ff:1e:86:26:52:40:b2:43:f7:b4:74: 23:6a:37:76:c8:a0:68:a0:27:ce:5e:48:39:81:e5:69:a3:e5: d3:f0:48:9e:83:a1:35:5a:3d:7f:0d:29:1a:9b:80:3b:87:b3: 22:24:9c:ed:73:a1:83:f7:a8:a3:ea:cc:03:3c:c4:9e:ba:2b: 48:37:f9:19:88:4c:c3:5c:69:60:9a:f5:eb:41:e8:2f:14:74: ed:1b:b7:38:45:ba:b3:53:59:23:a1:99:83:5d:65:1d:40:77: 8e:f4:87:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschXxFRKzGPsHqjr/GFVqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NTgzZjU4YzcxMTBhZDRjYzYwOWY0ZmZiN2NhYjJmODBj ODM1ODEwHhcNMjUxMjE0MTEwMTA4WhcNMjUxMjE1MTEwMTA4WjAzMTEwLwYDVQQD Eyg1NDE3YjFiOWZkYTJjZmU1M2Y0YjAwYTFjNDg4Yjk3MGU2ZTQwOTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSbElJjmuxREXZBTSGmSJltv3Lbf UkVLB1O+7X9De9VlGim5FGxDKA/YeDN1QLcFBn8JX0Yqjv611sSkuHsbOabCnQt9 WCTxCWLL1cPHWtHafRYxoAtEnjvmZRDq/bpGcb6d0HwBooD3h5MOBQ7YgP1fB1uj IOqj/dXmYD/0rS7PixNS+gWYHxY+4G22gtrm9DQUc9OM8fBc09L8nyi/Ge0ZqVxu iby70DmjZ0H88jq3xmyfo9fwIiFN79SZrvS8AHP/mYa1wuhxKItqkAjRzEaurQ9l v9XuHDxOBGdfq9k7TGDgD+ub1vnMsIgKJdColP644bvWQ0SeLGkhDsmVBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQXsbn9os/lP0sAocSIuXDm5Ak7MB8GA1UdIwQY MBaAFMZYP1jHEQrUzGCfT/t8qy+AyDWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMt M2Q1OTNlYmU1MjIwLzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMtM2Q1OTNlYmU1MjIw LzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZfNXPcc 6p6/Xp9GpNLrRAn2SAwQ6aTmjPYpe/2T2LtBCdT/h4yKgGRimrWs76whwOxarGOS 0StwHo+Jjus4doYlVk1EFLwzyKcWx3ifirnhIvMByva4jwONZpxeZ5XenikkhMNQ 6IJffP0jkr9LRMJYuEFaZt6VTZJ1sqZ/um4CJYzLgOZTBlm3cRBvrjBOh/uQSgeS 7v8ehiZSQLJD97R0I2o3dsigaKAnzl5IOYHlaaPl0/BInoOhNVo9fw0pGpuAO4ez IiSc7XOhg/eoo+rMAzzEnrorSDf5GYhMw1xpYJr160HoLxR07Ru3OEW6s1NZI6GZ g11lHUB3jvSHBg== -----END CERTIFICATE-----Generated at Sun Dec 14 13:30:17 2025 by rpki-client