This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft File: XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json) Hash identifier: s3GReQ696N1Mx10hgWBD6J5kgqz0rh+FOXIXmZG9OUg= Subject key identifier: AC:94:11:1C:4D:12:CC:D0:8B:6E:EF:02:F2:71:8B:05:92:4F:DF:13 Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e Certificate serial: 019B1193C10F12C61F8CBB21AAA5F68D6EDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft Manifest number: 1771 Signing time: Fri 12 Dec 2025 08:00:54 +0000 Manifest this update: Fri 12 Dec 2025 08:00:54 +0000 Manifest next update: Sat 13 Dec 2025 08:00:54 +0000 Files and hashes: 1: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: MIQMAEXIECECmHvXylSxVYtD+mj6fSHD6mzR6DDaBGw=) 2: hC0t1cqhdoh6iyJ3cpDGc1N-nWg.roa (hash: PxIEeNMR+krZxWibCKKwK2CkVaApOYKXyBnr/5vAmac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:93:c1:0f:12:c6:1f:8c:bb:21:aa:a5:f6:8d:6e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e Validity Not Before: Dec 12 08:00:54 2025 GMT Not After : Dec 13 08:00:54 2025 GMT Subject: CN=ac94111c4d12ccd08b6eef02f2718b05924fdf13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1e:96:f3:a6:9c:17:63:87:da:50:dc:14:f8: 6e:a0:81:27:09:13:59:6c:71:14:57:20:42:da:43: d5:44:f5:91:ef:d2:9c:16:18:d8:7a:fb:34:7d:66: 8b:c9:92:fd:9d:f8:2b:2e:74:79:c9:58:72:b1:6a: a7:b4:5d:da:1c:68:eb:ee:1a:d8:1f:c9:18:d1:c5: 99:6a:9a:88:aa:18:69:6b:70:50:7d:e0:90:7c:f9: 0a:aa:cd:e9:36:ff:a1:a0:17:1b:fa:ee:7b:bd:71: 46:ba:b7:12:2e:10:ef:a1:a9:20:34:de:a9:6e:a2: 50:07:a7:6c:d0:10:29:74:9b:34:a3:ff:03:66:67: fd:22:4a:8b:13:d5:04:f1:da:fc:bb:14:31:51:aa: b5:c2:ca:67:08:c4:45:3a:e1:df:33:17:2e:c0:bc: 39:41:54:24:6c:09:7f:97:07:bf:14:e7:78:43:d7: 92:ea:64:a1:ba:f5:b9:59:6c:d8:0d:c7:8a:93:b0: d3:7e:6f:ed:61:19:06:e9:ea:cc:5b:0f:29:94:b6: a8:70:06:7f:ff:ba:8f:3c:af:1e:21:e8:dd:f5:2f: 76:cc:10:ed:51:80:21:e8:09:cf:cf:28:7e:57:23: 02:f4:af:14:72:31:ae:7a:b3:fa:c1:77:22:60:9e: e3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:94:11:1C:4D:12:CC:D0:8B:6E:EF:02:F2:71:8B:05:92:4F:DF:13 X509v3 Authority Key Identifier: keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:81:bd:6b:d2:6b:94:cc:d3:84:97:24:93:f2:03:01:ce:e8: 8e:24:a6:b8:44:29:9f:17:ff:eb:27:a7:9a:c1:e5:b7:32:a4: c8:f5:bd:5a:1e:33:27:b0:34:e6:1e:12:83:e1:f9:e9:aa:45: f3:1f:ad:3e:60:7c:c4:f1:39:7f:69:e6:cc:03:69:a1:cd:7a: a4:22:07:86:1c:fb:8f:4e:16:23:dc:79:3c:17:db:1c:da:97: 6c:e0:3b:1b:0e:bc:89:c2:22:70:99:74:23:35:ed:08:5d:3e: e5:e8:bd:bc:1b:1c:b6:4b:cf:85:ca:4b:c5:42:2c:af:fe:6b: ce:b4:9c:cc:70:14:43:bb:99:45:0f:c2:85:a9:80:39:c5:25: 71:0e:b8:21:bf:c8:80:60:34:84:19:ec:95:d8:49:0d:d2:bc: ff:04:17:87:12:9d:8e:0d:ab:3c:ca:b9:ab:78:7c:7b:fe:a0: e7:b9:7f:43:47:58:ad:7f:62:8d:06:bc:4b:4f:7e:45:9a:18: 0a:52:91:01:8d:98:7b:4b:f4:a1:95:f7:af:eb:f8:1c:6e:43: cd:b0:ec:c3:4c:de:21:57:cf:63:ff:dd:3e:a0:42:f6:b6:16: bc:bb:2b:d4:fc:5e:4e:1b:7f:c7:0d:21:2a:51:fd:eb:f6:c7: 1d:68:7d:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRk8EPEsYfjLshqqX2jW7aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNjk1M2RiNDg0MDRiMGM2NmExNWYwZGE2ZWZhN2ZhYzBh OTM2OWUwHhcNMjUxMjEyMDgwMDU0WhcNMjUxMjEzMDgwMDU0WjAzMTEwLwYDVQQD EyhhYzk0MTExYzRkMTJjY2QwOGI2ZWVmMDJmMjcxOGIwNTkyNGZkZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB6W86acF2OH2lDcFPhuoIEnCRNZ bHEUVyBC2kPVRPWR79KcFhjYevs0fWaLyZL9nfgrLnR5yVhysWqntF3aHGjr7hrY H8kY0cWZapqIqhhpa3BQfeCQfPkKqs3pNv+hoBcb+u57vXFGurcSLhDvoakgNN6p bqJQB6ds0BApdJs0o/8DZmf9IkqLE9UE8dr8uxQxUaq1wspnCMRFOuHfMxcuwLw5 QVQkbAl/lwe/FOd4Q9eS6mShuvW5WWzYDceKk7DTfm/tYRkG6erMWw8plLaocAZ/ /7qPPK8eIejd9S92zBDtUYAh6AnPzyh+VyMC9K8UcjGuerP6wXciYJ7jLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyUERxNEszQi27vAvJxiwWST98TMB8GA1UdIwQY MBaAFF1pU9tIQEsMZqFfDabvp/rAqTaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFdsVDIwaEFTd3htb1Y4TnB1LW4tc0NwTnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MzZmZGUtYTAyZC00OGY1LWE3NWQt ZmEyZmI5NGRhMWEyLzEvWFdsVDIwaEFTd3htb1Y4TnB1LW4tc0NwTnA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi81MzZmZGUtYTAyZC00OGY1LWE3NWQtZmEyZmI5NGRhMWEy LzEvWFdsVDIwaEFTd3htb1Y4TnB1LW4tc0NwTnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4G9a9Jr lMzThJckk/IDAc7ojiSmuEQpnxf/6yenmsHltzKkyPW9Wh4zJ7A05h4Sg+H56apF 8x+tPmB8xPE5f2nmzANpoc16pCIHhhz7j04WI9x5PBfbHNqXbOA7Gw68icIicJl0 IzXtCF0+5ei9vBsctkvPhcpLxUIsr/5rzrSczHAUQ7uZRQ/ChamAOcUlcQ64Ib/I gGA0hBnsldhJDdK8/wQXhxKdjg2rPMq5q3h8e/6g57l/Q0dYrX9ijQa8S09+RZoY ClKRAY2Ye0v0oZX3r+v4HG5DzbDsw0zeIVfPY//dPqBC9rYWvLsr1PxeTht/xw0h KlH96/bHHWh9nA== -----END CERTIFICATE-----Generated at Fri Dec 12 18:47:39 2025 by rpki-client