This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft File: Xm6clCz1a-uGksXVYu2OrWlFKO0.mft (raw, json) Hash identifier: 8nTzUeFd4RKZRQIJMK+AWlOlt7w0esp6A+i50J7V3Bs= Subject key identifier: 58:6C:75:38:75:54:CB:A5:5C:47:31:65:D0:C7:D0:FF:3B:E2:C5:51 Authority key identifier: 5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED Certificate issuer: /CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed Certificate serial: 019B37C5DB741C70F80D35578D5E9CFF44BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft Manifest number: 03FA Signing time: Fri 19 Dec 2025 18:01:12 +0000 Manifest this update: Fri 19 Dec 2025 18:01:12 +0000 Manifest next update: Sat 20 Dec 2025 18:01:12 +0000 Files and hashes: 1: Xm6clCz1a-uGksXVYu2OrWlFKO0.crl (hash: OeSIvuo+J/qBKb3oX/qkBbWFOTXap41f2QkDShjuHEg=) 2: vosIopFKuVooFEnT_WoSvrVtBQk.roa (hash: MbdzDkBGjpybqFx3qcRSqHdBprEga+vyojjcpFHnoSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:db:74:1c:70:f8:0d:35:57:8d:5e:9c:ff:44:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed Validity Not Before: Dec 19 18:01:12 2025 GMT Not After : Dec 20 18:01:12 2025 GMT Subject: CN=586c75387554cba55c473165d0c7d0ff3be2c551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:21:09:89:f8:ee:45:d9:a1:87:45:b8:88:29: 01:b3:08:89:f7:6d:57:83:ff:bf:ac:5b:0e:06:72: 2f:d0:15:9c:ad:7a:26:7c:22:26:14:54:c5:47:4c: d5:8e:89:82:bb:2d:ab:a5:6b:ca:63:32:79:35:1b: 86:85:0c:9a:4f:c3:1d:ab:bd:0c:4c:eb:5e:b1:fc: 81:fb:37:e4:d7:e3:fb:91:6c:2f:51:b5:5b:a6:41: cc:79:9e:12:96:3c:4f:b8:fa:05:cc:3d:b1:9c:e4: 9b:d9:6b:fa:81:43:25:90:f8:f7:87:40:5c:bd:67: 8f:3e:22:f2:b8:9a:4b:b8:cf:a6:c2:cd:7e:2a:d0: 31:15:27:1c:e0:ed:35:de:0c:8d:31:4a:81:93:49: 85:56:9a:40:ec:c2:50:11:cf:9f:a9:de:a8:fe:89: 08:14:27:8d:d6:50:88:65:62:ec:f1:cb:d2:cf:b4: d2:a8:ed:ff:30:19:80:84:3d:87:45:2e:b7:3d:33: d8:c5:37:b6:20:88:52:23:a7:a9:0f:c3:7d:ac:63: 96:62:b9:50:0a:a8:37:91:34:7e:77:45:ed:2c:14: 51:77:ab:3c:14:c0:67:f2:44:3d:20:a1:c2:db:47: 6e:cc:cb:d6:eb:26:61:b4:08:ec:ce:b9:f5:0e:d5: 72:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6C:75:38:75:54:CB:A5:5C:47:31:65:D0:C7:D0:FF:3B:E2:C5:51 X509v3 Authority Key Identifier: keyid:5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d9:75:43:10:1c:85:7d:94:77:98:ca:a0:80:87:f4:ea:f8: c5:3a:68:89:0e:d6:26:4d:ac:d5:40:20:cf:e2:67:c3:cb:69: ee:99:6d:6d:76:7f:60:0a:63:77:7b:c9:1c:9c:83:33:ad:74: 6b:c8:74:48:c8:47:65:40:6c:5f:cc:1c:18:5e:59:c6:7e:9e: 02:f6:71:c8:94:7e:9b:dd:b9:89:52:b1:3d:21:5c:cb:5f:f5: ec:7f:ac:fb:49:d2:b5:d4:f0:4a:c1:0d:b4:2a:24:06:19:17: e5:d9:90:42:89:c0:2e:50:f5:31:e0:77:65:43:ca:8a:29:4c: d9:07:d5:b9:f8:94:43:a6:f2:36:b4:7a:0d:98:0e:4e:18:5e: b4:c7:8e:9c:74:02:bb:2a:ba:e4:38:3d:83:5a:e8:2a:31:b4: 2b:81:ca:93:83:ae:17:aa:39:e5:a5:60:39:66:64:b7:df:98: f4:60:cb:25:c2:d8:96:2a:fb:26:46:64:04:b4:0f:81:ef:37: 8d:18:58:d1:ac:07:1d:c1:c6:5a:18:71:b7:1c:a9:ac:d2:61: 3d:72:ec:f5:db:24:39:d2:bb:22:69:17:be:43:9f:10:f9:74: 8b:9f:0c:2f:e6:ff:e4:33:66:b8:d5:56:7a:80:18:1b:4d:76: 5d:81:15:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xdt0HHD4DTVXjV6c/0S8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNmU5Yzk0MmNmNTZiZWI4NjkyYzVkNTYyZWQ4ZWFkNjk0 NTI4ZWQwHhcNMjUxMjE5MTgwMTEyWhcNMjUxMjIwMTgwMTEyWjAzMTEwLwYDVQQD Eyg1ODZjNzUzODc1NTRjYmE1NWM0NzMxNjVkMGM3ZDBmZjNiZTJjNTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SEJifjuRdmhh0W4iCkBswiJ921X g/+/rFsOBnIv0BWcrXomfCImFFTFR0zVjomCuy2rpWvKYzJ5NRuGhQyaT8Mdq70M TOtesfyB+zfk1+P7kWwvUbVbpkHMeZ4SljxPuPoFzD2xnOSb2Wv6gUMlkPj3h0Bc vWePPiLyuJpLuM+mws1+KtAxFScc4O013gyNMUqBk0mFVppA7MJQEc+fqd6o/okI FCeN1lCIZWLs8cvSz7TSqO3/MBmAhD2HRS63PTPYxTe2IIhSI6epD8N9rGOWYrlQ Cqg3kTR+d0XtLBRRd6s8FMBn8kQ9IKHC20duzMvW6yZhtAjszrn1DtVyBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhsdTh1VMulXEcxZdDH0P874sVRMB8GA1UdIwQY MBaAFF5unJQs9WvrhpLF1WLtjq1pRSjtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG02Y2xDejFhLXVHa3NYVll1Mk9yV2xGS08wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mYWIxMmEtNDQ0Yy00NzRhLTg2ZjMt ZTM0Mzc3N2MzOTczLzEvWG02Y2xDejFhLXVHa3NYVll1Mk9yV2xGS08wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mYWIxMmEtNDQ0Yy00NzRhLTg2ZjMtZTM0Mzc3N2MzOTcz LzEvWG02Y2xDejFhLXVHa3NYVll1Mk9yV2xGS08wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddl1QxAc hX2Ud5jKoICH9Or4xTpoiQ7WJk2s1UAgz+Jnw8tp7pltbXZ/YApjd3vJHJyDM610 a8h0SMhHZUBsX8wcGF5Zxn6eAvZxyJR+m925iVKxPSFcy1/17H+s+0nStdTwSsEN tCokBhkX5dmQQonALlD1MeB3ZUPKiilM2QfVufiUQ6byNrR6DZgOThhetMeOnHQC uyq65Dg9g1roKjG0K4HKk4OuF6o55aVgOWZkt9+Y9GDLJcLYlir7JkZkBLQPge83 jRhY0awHHcHGWhhxtxyprNJhPXLs9dskOdK7ImkXvkOfEPl0i58ML+b/5DNmuNVW eoAYG012XYEVDg== -----END CERTIFICATE-----Generated at Sat Dec 20 02:03:58 2025 by rpki-client