This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft File: xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json) Hash identifier: l4zJxWEc7oEVghlC+f6qGul9Wr0xlLH9ZTs7yQLINw4= Subject key identifier: 2D:6C:88:10:6B:AA:94:E7:7E:11:52:D7:6F:68:95:5C:25:3F:08:18 Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d Certificate serial: 019B28C01B49F32442E279EF8E8F8DFEA532 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft Manifest number: 1781 Signing time: Tue 16 Dec 2025 20:00:36 +0000 Manifest this update: Tue 16 Dec 2025 20:00:36 +0000 Manifest next update: Wed 17 Dec 2025 20:00:36 +0000 Files and hashes: 1: CzBENFpROta46Ahh1b9jdj6JXrk.roa (hash: L4tfWnC6wyVnCN7M94V7ANHnHcbMgExMDsrJgBJJe38=) 2: WppkWIxYDl7yRokwyQv6w_qkTkM.roa (hash: pMxyfIHw8b62QMs/8crKL+TvmHlR2BI1fy3D9pIMtBI=) 3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: jdeIC+cyuUTfEtvWxGo+853jDUg//2pm2YXQLGjYwWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:1b:49:f3:24:42:e2:79:ef:8e:8f:8d:fe:a5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d Validity Not Before: Dec 16 20:00:36 2025 GMT Not After : Dec 17 20:00:36 2025 GMT Subject: CN=2d6c88106baa94e77e1152d76f68955c253f0818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:94:fc:10:06:03:93:12:37:92:aa:1a:bd:22: 96:70:b0:50:a9:2f:5a:1f:22:7a:58:b9:6f:40:2d: 75:c2:39:9f:e4:bb:21:5a:12:bc:55:bb:f7:fb:aa: 5a:8c:94:c2:42:93:05:02:54:6c:80:10:73:7b:4a: b2:c0:a3:dc:76:61:7b:6c:f6:8f:34:e9:f1:a7:e1: 85:ef:76:6a:ae:ae:6c:0f:84:ac:0a:89:83:2e:b7: 3c:83:ed:5c:ca:71:a4:86:22:48:23:cf:f4:22:1c: 15:a0:81:53:8e:78:69:ba:2c:4f:a8:9e:b4:b8:21: 97:71:8e:e1:96:2b:ef:cf:43:db:ec:54:45:09:b7: a8:3a:00:43:43:d6:2e:76:92:bd:d1:32:9d:27:cd: 92:8b:1f:af:ff:b6:de:90:33:5e:32:5d:16:ce:db: 79:84:59:1b:c1:c2:4a:98:d6:8d:17:12:e8:f7:b2: 86:14:9c:66:c2:a0:28:d0:21:9e:01:9b:08:8a:c7: 66:9e:e4:a1:4a:1b:6b:22:fd:f5:96:9c:b8:93:d4: 33:03:aa:de:7b:b9:25:43:41:fe:4e:eb:9b:4d:83: e6:26:03:44:18:8e:57:d0:7a:51:d1:a0:17:a1:9a: 4b:0c:e6:9d:65:f1:5e:af:85:d4:2a:dd:52:eb:f0: e0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6C:88:10:6B:AA:94:E7:7E:11:52:D7:6F:68:95:5C:25:3F:08:18 X509v3 Authority Key Identifier: keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d1:79:53:dd:7e:7c:c3:59:b8:d4:dd:4f:a0:bf:f9:e1:92: 66:82:09:75:bb:b7:18:1f:66:d1:28:a5:26:f7:21:00:99:a8: 9f:10:5f:5f:2f:f4:05:be:57:5c:00:47:90:81:16:b1:42:74: 3c:e7:7b:85:4a:f6:4d:10:95:f4:bc:5d:2f:d2:28:c1:a2:82: a0:19:00:30:46:70:b1:67:7f:8f:67:22:92:c7:8c:c4:5c:d2: 61:37:40:7e:99:8a:27:ef:53:e3:ce:8a:ca:11:28:41:fb:9b: 09:5e:dd:1b:5e:e7:a1:9c:5d:e3:07:8e:6d:aa:99:70:73:2e: 1e:7a:e4:03:74:30:2f:b2:90:f6:b4:2d:63:28:b6:1a:84:a5: 50:d4:2f:46:48:d2:00:6b:b1:52:e3:ad:a6:5c:75:6b:3e:f3: db:d3:db:70:0d:49:84:ee:30:4e:09:d8:39:60:74:2c:96:6d: 05:3f:24:89:7e:13:09:38:4d:77:79:ac:f6:d4:15:62:bf:c0: f3:e6:b1:fe:83:df:72:2d:8f:4c:87:ff:64:f6:88:16:b0:5a: 53:3f:4c:ed:31:4f:b0:6f:4a:ec:31:aa:57:2a:74:24:46:a4: da:e4:0d:08:d1:55:5e:a1:59:df:2a:6b:3b:e2:4d:97:85:23: 71:89:4f:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsowBtJ8yRC4nnvjo+N/qUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MDU4NzE4ODliOWRjYWZlN2VjMzEzNmFlZDFkZGZlZTJk ZmJjN2QwHhcNMjUxMjE2MjAwMDM2WhcNMjUxMjE3MjAwMDM2WjAzMTEwLwYDVQQD EygyZDZjODgxMDZiYWE5NGU3N2UxMTUyZDc2ZjY4OTU1YzI1M2YwODE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5T8EAYDkxI3kqoavSKWcLBQqS9a HyJ6WLlvQC11wjmf5LshWhK8Vbv3+6pajJTCQpMFAlRsgBBze0qywKPcdmF7bPaP NOnxp+GF73Zqrq5sD4SsComDLrc8g+1cynGkhiJII8/0IhwVoIFTjnhpuixPqJ60 uCGXcY7hlivvz0Pb7FRFCbeoOgBDQ9YudpK90TKdJ82Six+v/7bekDNeMl0Wztt5 hFkbwcJKmNaNFxLo97KGFJxmwqAo0CGeAZsIisdmnuShShtrIv31lpy4k9QzA6re e7klQ0H+TuubTYPmJgNEGI5X0HpR0aAXoZpLDOadZfFer4XUKt1S6/DgyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1siBBrqpTnfhFS129olVwlPwgYMB8GA1UdIwQY MBaAFMYFhxiJudyv5+wxNq7R3f7i37x9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGdXSEdJbTUzS19uN0RFMnJ0SGRfdUxmdkgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MDQ2YTYtZGVjYi00OWEzLWEzYjQt MzA4N2Y4NmE2M2FiLzEveGdXSEdJbTUzS19uN0RFMnJ0SGRfdUxmdkgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MDQ2YTYtZGVjYi00OWEzLWEzYjQtMzA4N2Y4NmE2M2Fi LzEveGdXSEdJbTUzS19uN0RFMnJ0SGRfdUxmdkgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNF5U91+ fMNZuNTdT6C/+eGSZoIJdbu3GB9m0SilJvchAJmonxBfXy/0Bb5XXABHkIEWsUJ0 POd7hUr2TRCV9LxdL9IowaKCoBkAMEZwsWd/j2cikseMxFzSYTdAfpmKJ+9T486K yhEoQfubCV7dG17noZxd4weObaqZcHMuHnrkA3QwL7KQ9rQtYyi2GoSlUNQvRkjS AGuxUuOtplx1az7z29PbcA1JhO4wTgnYOWB0LJZtBT8kiX4TCThNd3ms9tQVYr/A 8+ax/oPfci2PTIf/ZPaIFrBaUz9M7TFPsG9K7DGqVyp0JEak2uQNCNFVXqFZ3ypr O+JNl4UjcYlPhA== -----END CERTIFICATE-----Generated at Tue Dec 16 21:31:09 2025 by rpki-client