This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft File: XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json) Hash identifier: AFuagyszhinZGRNojXoeflw0DMr8rjybWReF0LafFn0= Subject key identifier: E1:11:36:71:25:53:0B:D2:F8:8E:EB:32:10:46:24:3F:78:B4:34:62 Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e Certificate serial: 019B3DFE82BF5ADDFAC81725ED9EC38246C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 23:00:48 +0000 Manifest this update: Sat 20 Dec 2025 23:00:48 +0000 Manifest next update: Sun 21 Dec 2025 23:00:48 +0000 Files and hashes: 1: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: NNzXGw/OyZ7cjKNH+YDT/IbHo1HxgqFSbargmAMo6Zk=) 2: hC0t1cqhdoh6iyJ3cpDGc1N-nWg.roa (hash: PxIEeNMR+krZxWibCKKwK2CkVaApOYKXyBnr/5vAmac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:82:bf:5a:dd:fa:c8:17:25:ed:9e:c3:82:46:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e Validity Not Before: Dec 20 23:00:48 2025 GMT Not After : Dec 21 23:00:48 2025 GMT Subject: CN=e111367125530bd2f88eeb321046243f78b43462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dd:24:11:08:3d:29:12:6f:23:77:c8:7e:51: dc:dd:e0:87:14:3f:28:82:40:cb:1c:c1:f0:ee:1e: af:96:8e:50:ce:a3:b7:76:b2:70:1b:fb:be:04:63: c4:6b:41:54:bb:60:56:d2:15:f1:cc:ab:df:54:7d: c3:48:2d:df:91:38:ee:d6:e0:e7:50:09:cd:7c:79: e7:df:55:7c:91:e5:55:84:55:5e:d3:56:5a:32:04: 92:55:6b:19:a8:ab:d0:16:e5:93:7a:0b:2b:eb:10: 0c:c2:ec:6f:47:9c:24:a1:d4:b0:4a:64:01:ae:90: 66:7e:49:c6:71:cf:ef:76:65:cd:29:46:f0:30:4c: 18:76:a0:3a:52:1e:d2:4e:1c:8f:9b:03:43:7d:73: 19:08:b7:63:1e:89:b1:56:a0:d5:b8:c9:a7:eb:a5: 0c:ff:73:b3:98:c1:58:6c:c9:e7:0a:13:c5:3d:90: 0f:de:36:cd:2a:78:39:15:f9:05:b3:07:0e:4a:cf: 3b:04:60:dc:f1:13:47:53:82:64:23:36:4b:dc:e3: ec:15:cb:2c:63:37:9d:24:74:7a:0c:62:b5:50:a1: 91:bd:cf:b4:63:58:14:4d:ac:b1:fb:2c:79:b0:43: bf:ff:a6:8e:b7:d7:f3:f9:11:6a:f1:41:fa:a7:6e: 3a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:11:36:71:25:53:0B:D2:F8:8E:EB:32:10:46:24:3F:78:B4:34:62 X509v3 Authority Key Identifier: keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:99:0b:01:4c:50:ad:5c:fa:73:16:18:28:85:77:f1:5b:7a: 3e:0b:4e:63:1c:c5:df:9e:99:73:0a:f2:c1:0e:08:30:55:f9: 91:28:6b:9f:f9:6f:5c:ab:9d:16:86:5a:f5:74:a7:8d:52:bd: 46:9f:4e:e8:39:71:7c:af:4f:48:4a:85:54:ae:da:0c:41:37: 55:5a:90:c9:c5:d4:22:80:47:6c:47:62:47:22:41:01:37:cd: 1a:26:16:ba:95:51:14:80:a4:e9:93:ad:44:83:a1:a3:b3:3c: e5:ca:83:31:9e:ec:23:4f:85:53:33:9f:66:79:34:b4:e6:59: d4:dd:6e:6f:bf:a9:41:06:ce:80:4a:33:99:94:a5:37:6e:22: 78:da:c7:d5:10:6a:df:70:f2:dc:de:cd:1c:68:5a:64:2d:f2: 16:a7:4a:08:19:be:04:d6:43:84:53:eb:81:04:3c:a7:40:87: a7:39:21:ed:05:06:d8:78:b8:3e:0e:ee:1b:3b:e4:65:65:11: e6:77:db:33:a6:28:46:00:ce:41:81:4f:4b:10:2f:2b:e0:40: df:a6:c7:95:82:9c:6a:2c:e1:fb:bf:c9:79:7b:dc:0f:56:e5: a4:88:89:e0:e2:d3:06:2d:a1:f4:27:96:01:51:57:48:a5:db: 8d:ab:69:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/oK/Wt36yBcl7Z7DgkbHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNjk1M2RiNDg0MDRiMGM2NmExNWYwZGE2ZWZhN2ZhYzBh OTM2OWUwHhcNMjUxMjIwMjMwMDQ4WhcNMjUxMjIxMjMwMDQ4WjAzMTEwLwYDVQQD EyhlMTExMzY3MTI1NTMwYmQyZjg4ZWViMzIxMDQ2MjQzZjc4YjQzNDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd0kEQg9KRJvI3fIflHc3eCHFD8o gkDLHMHw7h6vlo5QzqO3drJwG/u+BGPEa0FUu2BW0hXxzKvfVH3DSC3fkTju1uDn UAnNfHnn31V8keVVhFVe01ZaMgSSVWsZqKvQFuWTegsr6xAMwuxvR5wkodSwSmQB rpBmfknGcc/vdmXNKUbwMEwYdqA6Uh7SThyPmwNDfXMZCLdjHomxVqDVuMmn66UM /3OzmMFYbMnnChPFPZAP3jbNKng5FfkFswcOSs87BGDc8RNHU4JkIzZL3OPsFcss YzedJHR6DGK1UKGRvc+0Y1gUTayx+yx5sEO//6aOt9fz+RFq8UH6p246QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOERNnElUwvS+I7rMhBGJD94tDRiMB8GA1UdIwQY MBaAFF1pU9tIQEsMZqFfDabvp/rAqTaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFdsVDIwaEFTd3htb1Y4TnB1LW4tc0NwTnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MzZmZGUtYTAyZC00OGY1LWE3NWQt ZmEyZmI5NGRhMWEyLzEvWFdsVDIwaEFTd3htb1Y4TnB1LW4tc0NwTnA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi81MzZmZGUtYTAyZC00OGY1LWE3NWQtZmEyZmI5NGRhMWEy LzEvWFdsVDIwaEFTd3htb1Y4TnB1LW4tc0NwTnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZkLAUxQ rVz6cxYYKIV38Vt6PgtOYxzF356ZcwrywQ4IMFX5kShrn/lvXKudFoZa9XSnjVK9 Rp9O6DlxfK9PSEqFVK7aDEE3VVqQycXUIoBHbEdiRyJBATfNGiYWupVRFICk6ZOt RIOho7M85cqDMZ7sI0+FUzOfZnk0tOZZ1N1ub7+pQQbOgEozmZSlN24ieNrH1RBq 33Dy3N7NHGhaZC3yFqdKCBm+BNZDhFPrgQQ8p0CHpzkh7QUG2Hi4Pg7uGzvkZWUR 5nfbM6YoRgDOQYFPSxAvK+BA36bHlYKcaizh+7/JeXvcD1blpIiJ4OLTBi2h9CeW AVFXSKXbjatpDA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:42:08 2025 by rpki-client