This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: AR9BZX44DrO9op31p59P1W7AVJV/qLyegEE07pz4tdk= Subject key identifier: EB:D2:52:C9:B7:C0:00:A3:42:B0:F7:6E:B5:53:4B:D3:A8:56:2B:16 Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019B12A6C165D00936B49F356E70EB073F40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0E07 Signing time: Fri 12 Dec 2025 13:01:16 +0000 Manifest this update: Fri 12 Dec 2025 13:01:16 +0000 Manifest next update: Sat 13 Dec 2025 13:01:16 +0000 Files and hashes: 1: 1C6P3GNOT9xCFcwCmWzySJRmx5A.roa (hash: s0f2U+jT20UZ968tvSAQBzHf4LLoAyTWw5fawKSyypo=) 2: 7uN2APKNMZUlxFAFIqYBRSCqDys.roa (hash: QOcGptnbwVOmKz9OIjxqVqiamHhCIYE4sShS5ZJ4aTM=) 3: IczkJXhr43WZT8v3yUWzEcJkBw0.roa (hash: LTXwRLr/WDRhlKr3y2cS8nQZO+NDEwmFh5j+X2jc1m0=) 4: K2uuH_N48kKDciCwYZZbSGxL28M.roa (hash: NsG2a8yGOGdFAhdHDu05B3aeAtofcTDzN6smpf4V84k=) 5: LBUZqsrF0Xi_tysp5fgmsqKHu6U.roa (hash: bW1H7SUVyNKU/d0SmTWJeMi8GRblO5Rw7PlbZQty7ek=) 6: NlsrM9j9VUiM42jtu0FZB88d1z8.roa (hash: 6PC/+zU3u3k/HKNCn3GHAiUb1zNn0DzxWjzqB9gdYy8=) 7: NulfbGD931XSEsWr8c6jWUL0R7Q.roa (hash: D+CXPQA8XOJm5kR7y6lx84ZALTBUpzFwD/yKT0THj0Y=) 8: Pn1Np93Fy5qllPMGwWd35SbCmNc.roa (hash: cJbqPsoGlyN2ttzOkuToXlqtqEo9ySrbCbr6liDOEGE=) 9: UsNIdz_x5mIF5xcKEVGVl_xXGJ4.roa (hash: DsadB7AkI1D6cE6zFHkD7luRohhY7h45wj6tqzPB3BY=) 10: VDkpUnsSEJjoQKN_SH5M51QJ0lQ.roa (hash: QbW1pR7wXkDRNg+GzvouMFRHYHZ7/eJ/CEgLt387C28=) 11: i7rWRuwzlkV8xCOhfpRpRle8KzA.roa (hash: At8E6e7EApB6fVuxCLUU7eIRYkhnemVz7pgrhH1erSM=) 12: mblfFy3mNdc1SwdAwOx5WQVE19A.roa (hash: C/C7a/Hgr0VETCqfGTruKe1/3x5QgzdC+FE6I3TYrWQ=) 13: o-58M0Oov2ZZz-Rl1Tywa9Uvd40.roa (hash: 0gFyw1TvnqI82S5Ak8R3q+0sFKi4FqNHCfwpsRB+ZM0=) 14: rQUffzmZx3UaMv2Z1sJaJ9Cotdw.roa (hash: 6IztPYrajYy5c8tTQhRlMBRKi0qqEFrjSmseUv+lHCw=) 15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: 2V105DDax9p08w9pZi5EaSgyR6LsMAICOFVSPd36IkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:a6:c1:65:d0:09:36:b4:9f:35:6e:70:eb:07:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Dec 12 13:01:16 2025 GMT Not After : Dec 13 13:01:16 2025 GMT Subject: CN=ebd252c9b7c000a342b0f76eb5534bd3a8562b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:14:a4:10:6a:5b:99:9d:93:e2:3a:61:bd:e5: 52:53:fd:5e:f3:e4:55:5b:d0:c2:ed:3e:5c:bc:10: aa:02:00:1e:37:c1:50:21:81:1b:75:5c:58:6c:f8: 54:7c:22:ca:c7:10:93:e0:ce:ba:05:12:ef:f3:01: f4:dd:e3:e4:94:05:fc:51:ed:f5:80:ff:6c:8f:24: ed:db:20:fd:29:c4:fb:04:76:3e:5e:ef:6b:e3:e3: 63:20:1f:06:2e:9d:12:80:79:b5:31:93:40:33:8c: b6:3b:fd:7e:8b:20:49:fc:48:ff:02:ef:4b:39:82: ff:10:5b:6b:0a:f4:c2:f2:15:10:9d:11:a7:f3:26: 67:ee:d4:59:d0:11:17:85:f2:22:5d:ac:20:ff:70: 1c:e0:a9:d9:b0:2a:86:33:46:e6:1e:c6:74:5b:d1: 8f:25:cf:17:db:31:29:84:10:08:2a:72:4f:66:45: 08:6d:f0:ce:27:77:79:39:7f:79:d4:3c:37:13:e3: 55:54:40:08:e8:89:8a:68:58:9a:fb:5e:ba:ae:10: 78:bb:ba:da:ad:7c:8b:3d:a9:06:df:93:59:eb:55: 51:d8:1b:7c:1b:c1:b5:af:a2:26:95:b4:1a:e9:b1: 55:cd:5b:fe:c1:a1:93:b5:55:ef:42:7f:73:44:51: 3d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D2:52:C9:B7:C0:00:A3:42:B0:F7:6E:B5:53:4B:D3:A8:56:2B:16 X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:08:82:b8:99:d7:99:2d:40:bb:f2:cc:2f:2c:a1:29:50:5b: 52:1c:e6:57:d5:0e:ac:e5:51:09:51:3c:6f:f5:15:4f:a6:30: 9d:cd:b5:30:57:00:76:e4:1f:2b:ed:b4:38:c4:ff:51:6e:f0: 4c:21:3c:fa:55:1c:8d:2d:b9:98:73:f2:81:68:b5:e2:9a:3c: 89:96:c6:ef:bd:0b:15:d1:47:7e:7a:1b:25:c0:7c:0e:11:db: 3e:8c:01:ee:6a:66:93:07:aa:28:7e:47:ed:01:4b:35:f3:24: 41:5d:a5:20:9f:d5:46:bf:13:79:b6:65:87:7a:72:d2:ef:70: 6c:71:e1:5c:63:1b:3c:25:0e:45:73:74:43:af:fb:e4:3a:36: a6:fd:26:ce:2d:9f:11:e7:a0:e8:71:9a:a8:76:34:96:4b:b1: 61:f2:d3:69:5b:08:1e:84:b3:c8:0e:d6:4a:75:cd:e0:0a:04: 26:c6:6b:dc:76:4d:77:09:75:36:ff:61:80:36:22:bb:73:5b: 36:35:06:de:45:c4:43:6b:02:05:cb:9e:c5:51:cb:81:05:79: d8:52:df:ca:7f:6a:d5:2a:9a:2d:16:0a:57:19:a1:c6:7d:c7: e3:03:52:8d:a3:a3:9a:47:aa:9e:57:69:10:a8:9e:5d:ad:23: 64:c0:ab:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSpsFl0Ak2tJ81bnDrBz9AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjUxMjEyMTMwMTE2WhcNMjUxMjEzMTMwMTE2WjAzMTEwLwYDVQQD EyhlYmQyNTJjOWI3YzAwMGEzNDJiMGY3NmViNTUzNGJkM2E4NTYyYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxSkEGpbmZ2T4jphveVSU/1e8+RV W9DC7T5cvBCqAgAeN8FQIYEbdVxYbPhUfCLKxxCT4M66BRLv8wH03ePklAX8Ue31 gP9sjyTt2yD9KcT7BHY+Xu9r4+NjIB8GLp0SgHm1MZNAM4y2O/1+iyBJ/Ej/Au9L OYL/EFtrCvTC8hUQnRGn8yZn7tRZ0BEXhfIiXawg/3Ac4KnZsCqGM0bmHsZ0W9GP Jc8X2zEphBAIKnJPZkUIbfDOJ3d5OX951Dw3E+NVVEAI6ImKaFia+166rhB4u7ra rXyLPakG35NZ61VR2Bt8G8G1r6ImlbQa6bFVzVv+waGTtVXvQn9zRFE92QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvSUsm3wACjQrD3brVTS9OoVisWMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQiCuJnX mS1Au/LMLyyhKVBbUhzmV9UOrOVRCVE8b/UVT6Ywnc21MFcAduQfK+20OMT/UW7w TCE8+lUcjS25mHPygWi14po8iZbG770LFdFHfnobJcB8DhHbPowB7mpmkweqKH5H 7QFLNfMkQV2lIJ/VRr8TebZlh3py0u9wbHHhXGMbPCUORXN0Q6/75Do2pv0mzi2f Eeeg6HGaqHY0lkuxYfLTaVsIHoSzyA7WSnXN4AoEJsZr3HZNdwl1Nv9hgDYiu3Nb NjUG3kXEQ2sCBcuexVHLgQV52FLfyn9q1SqaLRYKVxmhxn3H4wNSjaOjmkeqnldp EKieXa0jZMCrrw== -----END CERTIFICATE-----Generated at Fri Dec 12 19:54:29 2025 by rpki-client