This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: VJq3pjlQ1uuB1hYL9j9P6fLzhI1rC9hmNyg6QFWrk2M= Subject key identifier: 5C:5D:AE:46:EC:B7:15:8B:61:1F:25:B1:E3:AD:63:8E:28:85:5C:0F Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019B48B978D4305BD6064458CCB7D0D1E18B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0E23 Signing time: Tue 23 Dec 2025 01:01:13 +0000 Manifest this update: Tue 23 Dec 2025 01:01:13 +0000 Manifest next update: Wed 24 Dec 2025 01:01:13 +0000 Files and hashes: 1: 1C6P3GNOT9xCFcwCmWzySJRmx5A.roa (hash: s0f2U+jT20UZ968tvSAQBzHf4LLoAyTWw5fawKSyypo=) 2: 7uN2APKNMZUlxFAFIqYBRSCqDys.roa (hash: QOcGptnbwVOmKz9OIjxqVqiamHhCIYE4sShS5ZJ4aTM=) 3: IczkJXhr43WZT8v3yUWzEcJkBw0.roa (hash: LTXwRLr/WDRhlKr3y2cS8nQZO+NDEwmFh5j+X2jc1m0=) 4: K2uuH_N48kKDciCwYZZbSGxL28M.roa (hash: NsG2a8yGOGdFAhdHDu05B3aeAtofcTDzN6smpf4V84k=) 5: LBUZqsrF0Xi_tysp5fgmsqKHu6U.roa (hash: bW1H7SUVyNKU/d0SmTWJeMi8GRblO5Rw7PlbZQty7ek=) 6: NlsrM9j9VUiM42jtu0FZB88d1z8.roa (hash: 6PC/+zU3u3k/HKNCn3GHAiUb1zNn0DzxWjzqB9gdYy8=) 7: NulfbGD931XSEsWr8c6jWUL0R7Q.roa (hash: D+CXPQA8XOJm5kR7y6lx84ZALTBUpzFwD/yKT0THj0Y=) 8: Pn1Np93Fy5qllPMGwWd35SbCmNc.roa (hash: cJbqPsoGlyN2ttzOkuToXlqtqEo9ySrbCbr6liDOEGE=) 9: UsNIdz_x5mIF5xcKEVGVl_xXGJ4.roa (hash: DsadB7AkI1D6cE6zFHkD7luRohhY7h45wj6tqzPB3BY=) 10: VDkpUnsSEJjoQKN_SH5M51QJ0lQ.roa (hash: QbW1pR7wXkDRNg+GzvouMFRHYHZ7/eJ/CEgLt387C28=) 11: i7rWRuwzlkV8xCOhfpRpRle8KzA.roa (hash: At8E6e7EApB6fVuxCLUU7eIRYkhnemVz7pgrhH1erSM=) 12: mblfFy3mNdc1SwdAwOx5WQVE19A.roa (hash: C/C7a/Hgr0VETCqfGTruKe1/3x5QgzdC+FE6I3TYrWQ=) 13: o-58M0Oov2ZZz-Rl1Tywa9Uvd40.roa (hash: 0gFyw1TvnqI82S5Ak8R3q+0sFKi4FqNHCfwpsRB+ZM0=) 14: rQUffzmZx3UaMv2Z1sJaJ9Cotdw.roa (hash: 6IztPYrajYy5c8tTQhRlMBRKi0qqEFrjSmseUv+lHCw=) 15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: QizCMdrTfycWCXDOuxPZvU4bhQ0dJhhKDmTafJM6jR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:78:d4:30:5b:d6:06:44:58:cc:b7:d0:d1:e1:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Dec 23 01:01:13 2025 GMT Not After : Dec 24 01:01:13 2025 GMT Subject: CN=5c5dae46ecb7158b611f25b1e3ad638e28855c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:c4:b2:64:0d:49:29:d3:32:6b:60:97:23: 84:f9:c9:4d:ef:33:15:94:c4:10:ab:72:f8:3b:29: ba:79:3f:cc:76:23:e2:54:3f:dd:ab:65:46:13:50: 37:43:80:5b:11:9f:7c:39:25:c7:c6:58:53:59:f7: 06:9a:13:74:77:1e:d6:4a:1d:95:59:6f:e1:f7:3e: 3b:94:6b:86:a9:50:1e:a1:00:38:38:9a:b4:e6:c8: f2:b5:39:a9:6f:b9:d3:32:d0:a9:df:9e:d7:6b:d7: cb:52:e5:9e:92:24:4e:63:be:1c:e5:ef:6d:b7:37: dc:62:4e:1f:0d:66:d4:d4:db:d1:68:6a:98:9e:2e: f6:99:c2:17:6e:c3:68:6b:7d:ec:42:cd:1b:92:cc: 96:93:2d:69:91:d2:67:51:3f:66:2c:63:c8:3b:22: f6:a5:b1:b4:9c:9b:5b:bb:19:f7:10:f4:02:09:6a: d4:b3:63:31:6b:01:26:c8:15:ab:04:20:06:1c:7a: 5b:ae:a0:31:5c:e0:42:e2:1e:57:92:18:6e:c7:2e: 9f:50:d2:d6:d2:bb:9c:ff:df:50:a5:02:a2:5c:b6: c8:13:83:bc:92:36:d4:65:e5:df:8d:90:d1:8e:b2: 9c:2c:be:08:29:fc:95:96:33:63:90:ca:4e:ff:1b: 7f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5D:AE:46:EC:B7:15:8B:61:1F:25:B1:E3:AD:63:8E:28:85:5C:0F X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d2:25:ef:0a:11:23:09:e7:4c:7d:30:c6:75:f2:53:29:ca: 02:df:93:a0:d1:2f:b0:f7:7b:03:d9:46:eb:e5:db:99:7d:f4: 10:99:3f:e3:d3:8a:da:a5:e0:0e:99:b1:82:1f:92:cd:f9:fe: e2:a9:8c:b3:12:23:59:44:19:f6:0d:e6:80:6d:7d:5a:b5:47: f1:64:3d:9b:33:6e:ea:54:25:6c:9f:3d:81:3c:38:90:c5:06: a6:49:f6:4e:89:b7:16:50:7a:b8:53:5d:9b:da:12:ba:c4:75: 7f:04:15:f5:eb:67:cc:65:60:07:4b:57:04:8c:59:1a:6d:ca: 72:af:4b:b1:a5:be:f9:44:7a:71:e2:03:b1:a6:40:2c:5d:7a: e8:de:57:57:74:d7:94:01:e2:21:f4:a7:ec:e6:7e:76:9e:30: ba:75:7a:f6:d4:8f:14:6d:1d:3f:be:73:54:92:ec:d1:20:fa: 6a:7b:43:62:ea:b9:01:38:66:99:20:41:79:6b:9b:f7:3c:f9: b5:6c:95:db:50:b5:b3:41:4b:d6:87:62:d2:b2:9a:19:9d:6a: f0:ef:fb:0d:85:4e:1f:16:a4:53:00:8b:dd:e0:ef:f7:2d:0a: 57:37:4f:be:ad:f8:f6:8a:86:ef:85:64:d5:a5:49:4b:3e:11: 4e:a5:9d:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuXjUMFvWBkRYzLfQ0eGLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjUxMjIzMDEwMTEzWhcNMjUxMjI0MDEwMTEzWjAzMTEwLwYDVQQD Eyg1YzVkYWU0NmVjYjcxNThiNjExZjI1YjFlM2FkNjM4ZTI4ODU1YzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVnEsmQNSSnTMmtglyOE+clN7zMV lMQQq3L4Oym6eT/MdiPiVD/dq2VGE1A3Q4BbEZ98OSXHxlhTWfcGmhN0dx7WSh2V WW/h9z47lGuGqVAeoQA4OJq05sjytTmpb7nTMtCp357Xa9fLUuWekiROY74c5e9t tzfcYk4fDWbU1NvRaGqYni72mcIXbsNoa33sQs0bksyWky1pkdJnUT9mLGPIOyL2 pbG0nJtbuxn3EPQCCWrUs2MxawEmyBWrBCAGHHpbrqAxXOBC4h5Xkhhuxy6fUNLW 0ruc/99QpQKiXLbIE4O8kjbUZeXfjZDRjrKcLL4IKfyVljNjkMpO/xt/2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxdrkbstxWLYR8lseOtY44ohVwPMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9Il7woR IwnnTH0wxnXyUynKAt+ToNEvsPd7A9lG6+XbmX30EJk/49OK2qXgDpmxgh+Szfn+ 4qmMsxIjWUQZ9g3mgG19WrVH8WQ9mzNu6lQlbJ89gTw4kMUGpkn2Tom3FlB6uFNd m9oSusR1fwQV9etnzGVgB0tXBIxZGm3Kcq9LsaW++UR6ceIDsaZALF166N5XV3TX lAHiIfSn7OZ+dp4wunV69tSPFG0dP75zVJLs0SD6antDYuq5AThmmSBBeWub9zz5 tWyV21C1s0FL1odi0rKaGZ1q8O/7DYVOHxakUwCL3eDv9y0KVzdPvq349oqG74Vk 1aVJSz4RTqWdUA== -----END CERTIFICATE-----Generated at Tue Dec 23 09:05:19 2025 by rpki-client