This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json) Hash identifier: uk6wZInGtBcayba/hkOmQ4HxlVyjOLORd90gcb3gatU= Subject key identifier: C2:BA:4A:ED:02:49:BE:62:0B:FE:F0:E7:D5:AA:2E:27:05:9D:46:FB Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81 Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581 Certificate serial: 019B4324D4B88E88DC1C7155710BB7AA9C31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft Manifest number: 1797 Signing time: Sun 21 Dec 2025 23:00:45 +0000 Manifest this update: Sun 21 Dec 2025 23:00:45 +0000 Manifest next update: Mon 22 Dec 2025 23:00:45 +0000 Files and hashes: 1: V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa (hash: y15uODSxQaZUOAbMdJA7ksT4dYbu04f8NP7jQ2+xKpE=) 2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: ccmn+C88xCgQJqyamVLxWu/Sg5YxbXySXoD+enwS0Vs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:d4:b8:8e:88:dc:1c:71:55:71:0b:b7:aa:9c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581 Validity Not Before: Dec 21 23:00:45 2025 GMT Not After : Dec 22 23:00:45 2025 GMT Subject: CN=c2ba4aed0249be620bfef0e7d5aa2e27059d46fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:ea:78:31:9e:2b:ec:2a:87:ed:70:9f:9c: 70:78:4b:f8:d7:d5:99:53:64:42:d0:4d:7c:02:09: 54:84:9b:94:62:ed:ad:85:59:60:70:ad:22:12:87: 2a:ea:06:88:0b:92:8a:69:26:66:52:76:97:c6:9f: f2:a4:aa:ca:ac:22:24:d8:cb:3c:50:4a:6e:1d:ed: c6:3e:08:5a:8c:11:f7:9e:6f:42:c9:b5:3c:92:cf: c2:e7:77:ca:b1:9b:5c:cc:be:22:53:50:88:e3:86: a0:f2:22:58:13:6f:6c:b3:20:93:35:45:fc:c0:5c: d3:f0:fb:e9:fb:a8:a3:c7:1d:b4:67:3d:4b:df:2a: 79:11:09:bd:94:1b:10:95:31:17:36:30:c6:b9:f3: 63:9b:06:bc:ae:9f:26:bb:1a:ad:c9:6f:2c:99:f5: 1d:34:94:c8:48:6d:65:db:e7:29:0f:39:52:ff:09: 2d:e8:46:93:3d:12:8b:70:bb:8e:1e:43:2a:e8:f7: ef:43:2e:3f:42:c1:bb:89:2d:83:c8:af:19:49:a4: e5:7c:2b:84:71:63:3a:63:e9:f3:1b:96:cc:ac:52: 77:de:04:9b:7b:04:3f:32:4e:36:c6:fe:29:c2:7b: e2:7e:c2:e9:af:e3:30:86:8e:1a:d5:08:7c:23:a3: 44:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BA:4A:ED:02:49:BE:62:0B:FE:F0:E7:D5:AA:2E:27:05:9D:46:FB X509v3 Authority Key Identifier: keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:73:6d:9b:4b:f7:35:f5:0c:0b:cc:dd:bc:28:d0:12:42:fb: e3:08:ff:5d:8b:e9:23:e9:d3:fa:d2:39:72:b9:ba:2b:06:87: 33:f7:6e:b9:69:84:f0:84:ca:1b:10:d1:3d:29:6a:bc:a8:d0: 5e:ec:3a:d6:cc:ab:13:4d:b1:54:9e:c4:7d:ed:0e:4c:95:85: e5:eb:db:5a:d3:db:4a:ed:3d:fe:6d:9c:4c:f7:53:04:c2:cd: d5:4f:2b:a7:ee:eb:07:d1:3e:59:8a:96:7e:a3:0d:5c:bc:79: 91:3b:17:e8:4a:5a:af:9e:fe:3a:35:6a:1d:c3:b9:bc:0a:eb: bd:fb:fe:e1:82:54:e0:e0:16:98:2e:74:92:28:37:90:e0:e6: b1:5c:73:de:3f:f9:05:5e:cc:4a:98:33:9a:e3:4d:6e:9f:73: e4:b7:99:11:21:fe:bf:7e:1b:65:97:9e:27:e6:96:f1:65:0c: 86:87:11:fa:37:8a:f0:5d:bb:dd:ee:a2:2a:f2:76:84:95:77: 8e:af:fc:69:bb:65:96:b1:ba:37:f9:b5:b1:75:af:f8:5f:a8: ef:77:81:f6:ee:b2:5e:fa:fb:5a:ee:28:27:5e:87:ad:0a:12: 0d:d4:23:cd:03:34:e8:38:eb:96:2c:78:a4:00:5e:8f:e1:91: 00:0f:b4:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJNS4jojcHHFVcQu3qpwxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NTgzZjU4YzcxMTBhZDRjYzYwOWY0ZmZiN2NhYjJmODBj ODM1ODEwHhcNMjUxMjIxMjMwMDQ1WhcNMjUxMjIyMjMwMDQ1WjAzMTEwLwYDVQQD EyhjMmJhNGFlZDAyNDliZTYyMGJmZWYwZTdkNWFhMmUyNzA1OWQ0NmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteTqeDGeK+wqh+1wn5xweEv419WZ U2RC0E18AglUhJuUYu2thVlgcK0iEocq6gaIC5KKaSZmUnaXxp/ypKrKrCIk2Ms8 UEpuHe3GPghajBH3nm9CybU8ks/C53fKsZtczL4iU1CI44ag8iJYE29ssyCTNUX8 wFzT8Pvp+6ijxx20Zz1L3yp5EQm9lBsQlTEXNjDGufNjmwa8rp8muxqtyW8smfUd NJTISG1l2+cpDzlS/wkt6EaTPRKLcLuOHkMq6PfvQy4/QsG7iS2DyK8ZSaTlfCuE cWM6Y+nzG5bMrFJ33gSbewQ/Mk42xv4pwnvifsLpr+Mwho4a1Qh8I6NE6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMK6Su0CSb5iC/7w59WqLicFnUb7MB8GA1UdIwQY MBaAFMZYP1jHEQrUzGCfT/t8qy+AyDWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMt M2Q1OTNlYmU1MjIwLzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMtM2Q1OTNlYmU1MjIw LzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXNtm0v3 NfUMC8zdvCjQEkL74wj/XYvpI+nT+tI5crm6KwaHM/duuWmE8ITKGxDRPSlqvKjQ Xuw61syrE02xVJ7Efe0OTJWF5evbWtPbSu09/m2cTPdTBMLN1U8rp+7rB9E+WYqW fqMNXLx5kTsX6Epar57+OjVqHcO5vArrvfv+4YJU4OAWmC50kig3kODmsVxz3j/5 BV7MSpgzmuNNbp9z5LeZESH+v34bZZeeJ+aW8WUMhocR+jeK8F273e6iKvJ2hJV3 jq/8abtllrG6N/m1sXWv+F+o73eB9u6yXvr7Wu4oJ16HrQoSDdQjzQM06Djrlix4 pABej+GRAA+0Gw== -----END CERTIFICATE-----Generated at Mon Dec 22 00:45:44 2025 by rpki-client