This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft File: XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft (raw, json) Hash identifier: quClRgvmt14cePjIA0iawU5EvxKAUkifQ/FOdwu9K2U= Subject key identifier: B9:BD:BC:C7:68:32:A4:82:7C:DA:45:CE:43:4B:4D:A6:1D:DF:31:54 Authority key identifier: 5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61 Certificate issuer: /CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61 Certificate serial: 019B1E05DCC2BD3C76E77090E0D5EE852739 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft Manifest number: 1213 Signing time: Sun 14 Dec 2025 18:00:59 +0000 Manifest this update: Sun 14 Dec 2025 18:00:59 +0000 Manifest next update: Mon 15 Dec 2025 18:00:59 +0000 Files and hashes: 1: Cla5c1NehU4owZxYbWxe5QAstj0.roa (hash: kJV6jFD/Rf8rBVTNLGsW3TqMX9jv4tuD1CIR8TuTHbQ=) 2: XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl (hash: sSVOWINt0FrBcnKF+w7M3nYb/1C4sSuwXdWYvdhs2vo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 18:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:05:dc:c2:bd:3c:76:e7:70:90:e0:d5:ee:85:27:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61 Validity Not Before: Dec 14 18:00:59 2025 GMT Not After : Dec 15 18:00:59 2025 GMT Subject: CN=b9bdbcc76832a4827cda45ce434b4da61ddf3154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2b:a1:07:44:c4:77:65:48:cc:a0:f6:5c:56: 63:6c:62:7e:39:08:2f:f8:53:1e:9d:6a:10:67:d9: 54:6b:57:df:10:27:fa:5d:58:e2:83:35:de:32:ee: bd:22:90:e9:10:69:83:fa:34:07:30:0f:98:30:64: 9c:f3:4c:6c:e6:2c:f6:db:4f:5c:05:79:18:43:c7: 92:0a:b0:11:87:39:ad:c1:e2:0b:b8:b5:21:69:e4: e6:62:fb:ae:7e:cb:68:0b:d7:21:dc:a0:82:c3:d0: 96:ab:ff:fa:af:15:b4:fe:7f:6d:04:cd:4b:8a:f9: d1:f1:ad:8e:7d:b6:69:ab:a4:f3:81:da:a8:e6:50: c5:f0:63:fb:fd:e8:23:25:18:17:a7:51:fe:84:47: 3c:25:b2:67:0b:51:90:d6:a4:81:bf:06:bf:28:ad: 18:4c:a6:8f:aa:2c:56:91:c3:de:10:8d:e7:4a:91: a6:12:b3:93:15:a9:38:e3:c1:b1:03:28:b5:2a:de: 47:50:19:8b:e8:f8:7e:3d:76:2a:44:6f:74:26:38: d0:91:04:76:91:da:03:3b:77:31:d6:44:48:ac:62: 26:44:50:31:52:03:d5:bd:82:c3:05:8f:d8:41:36: e1:63:ff:05:e3:8f:26:2a:d3:be:9e:5b:d9:dc:40: 4c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BD:BC:C7:68:32:A4:82:7C:DA:45:CE:43:4B:4D:A6:1D:DF:31:54 X509v3 Authority Key Identifier: keyid:5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:bb:f9:45:5d:9d:68:89:ad:54:a2:d9:3a:8d:94:45:f7:f1: 72:94:5d:cb:10:d8:e0:f4:69:7c:8f:f8:bd:e3:8b:3d:a4:97: 90:52:14:97:89:d4:79:ba:ca:83:3c:4b:fc:d6:53:b6:bb:d4: 69:94:5b:04:34:0b:66:5b:81:7d:70:f9:e8:9a:ce:79:1e:ed: 99:b1:b5:a7:81:1b:00:02:b6:c7:ea:56:c4:e4:30:53:18:71: bb:f1:a6:1c:2a:8b:fb:0e:8f:a8:fd:cd:64:6b:b3:a1:7d:2a: 45:be:cc:55:3e:8f:54:34:fd:d0:02:bd:2d:e2:47:24:f8:20: 60:c4:9b:6d:68:35:4e:17:ac:aa:af:d0:4b:15:5f:62:03:9a: 15:9c:58:2d:15:c2:e8:91:84:cf:81:41:0b:ad:8b:ad:11:ed: fb:7a:e5:9d:22:76:bc:8b:10:d7:3d:26:ad:b2:8a:c7:a9:79: 57:cb:37:5c:7d:6c:24:94:1a:bc:32:79:9f:29:62:17:ea:da: 48:05:ad:3f:c6:82:73:ca:ad:23:ce:3b:2f:26:85:13:7b:ec: 71:45:af:40:99:bb:c4:25:a1:17:70:88:d1:6c:c3:07:de:7c: 01:32:f0:cb:e7:95:fc:8b:3a:1f:7b:5e:14:2d:b9:cc:12:9d: 24:f1:f0:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBdzCvTx253CQ4NXuhSc5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNjM3M2Y1ZGY5OWQ4MjFkY2I1N2M3ZmI5MjAyZmI0Njg2 ZTVkNjEwHhcNMjUxMjE0MTgwMDU5WhcNMjUxMjE1MTgwMDU5WjAzMTEwLwYDVQQD EyhiOWJkYmNjNzY4MzJhNDgyN2NkYTQ1Y2U0MzRiNGRhNjFkZGYzMTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yuhB0TEd2VIzKD2XFZjbGJ+OQgv +FMenWoQZ9lUa1ffECf6XVjigzXeMu69IpDpEGmD+jQHMA+YMGSc80xs5iz2209c BXkYQ8eSCrARhzmtweILuLUhaeTmYvuufstoC9ch3KCCw9CWq//6rxW0/n9tBM1L ivnR8a2OfbZpq6Tzgdqo5lDF8GP7/egjJRgXp1H+hEc8JbJnC1GQ1qSBvwa/KK0Y TKaPqixWkcPeEI3nSpGmErOTFak448GxAyi1Kt5HUBmL6Ph+PXYqRG90JjjQkQR2 kdoDO3cx1kRIrGImRFAxUgPVvYLDBY/YQTbhY/8F448mKtO+nlvZ3EBMywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLm9vMdoMqSCfNpFzkNLTaYd3zFUMB8GA1UdIwQY MBaAFF1jc/Xfmdgh3LV8f7kgL7Robl1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFdOejlkLVoyQ0hjdFh4X3VTQXZ0R2h1WFdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wYzkxMjgtYTA0My00NzhjLTk5MjAt YWQyMTUyODVjODY0LzEvWFdOejlkLVoyQ0hjdFh4X3VTQXZ0R2h1WFdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wYzkxMjgtYTA0My00NzhjLTk5MjAtYWQyMTUyODVjODY0 LzEvWFdOejlkLVoyQ0hjdFh4X3VTQXZ0R2h1WFdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmbv5RV2d aImtVKLZOo2URffxcpRdyxDY4PRpfI/4veOLPaSXkFIUl4nUebrKgzxL/NZTtrvU aZRbBDQLZluBfXD56JrOeR7tmbG1p4EbAAK2x+pWxOQwUxhxu/GmHCqL+w6PqP3N ZGuzoX0qRb7MVT6PVDT90AK9LeJHJPggYMSbbWg1Thesqq/QSxVfYgOaFZxYLRXC 6JGEz4FBC62LrRHt+3rlnSJ2vIsQ1z0mrbKKx6l5V8s3XH1sJJQavDJ5nyliF+ra SAWtP8aCc8qtI847LyaFE3vscUWvQJm7xCWhF3CI0WzDB958ATLwy+eV/Is6H3te FC25zBKdJPHwEQ== -----END CERTIFICATE-----Generated at Mon Dec 15 04:52:10 2025 by rpki-client