This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: +nBTpPkHQdQPF5rl5bzxZDX6txLv2gs9RVuO1P+/0X4= Subject key identifier: 74:8A:EB:BB:20:95:AE:98:78:B9:5D:98:CD:D7:71:8E:82:5F:ED:BB Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019B3B34F6F9CE5BD0CD7B7AE77537BC3AAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0E1C Signing time: Sat 20 Dec 2025 10:01:25 +0000 Manifest this update: Sat 20 Dec 2025 10:01:25 +0000 Manifest next update: Sun 21 Dec 2025 10:01:25 +0000 Files and hashes: 1: 1C6P3GNOT9xCFcwCmWzySJRmx5A.roa (hash: s0f2U+jT20UZ968tvSAQBzHf4LLoAyTWw5fawKSyypo=) 2: 7uN2APKNMZUlxFAFIqYBRSCqDys.roa (hash: QOcGptnbwVOmKz9OIjxqVqiamHhCIYE4sShS5ZJ4aTM=) 3: IczkJXhr43WZT8v3yUWzEcJkBw0.roa (hash: LTXwRLr/WDRhlKr3y2cS8nQZO+NDEwmFh5j+X2jc1m0=) 4: K2uuH_N48kKDciCwYZZbSGxL28M.roa (hash: NsG2a8yGOGdFAhdHDu05B3aeAtofcTDzN6smpf4V84k=) 5: LBUZqsrF0Xi_tysp5fgmsqKHu6U.roa (hash: bW1H7SUVyNKU/d0SmTWJeMi8GRblO5Rw7PlbZQty7ek=) 6: NlsrM9j9VUiM42jtu0FZB88d1z8.roa (hash: 6PC/+zU3u3k/HKNCn3GHAiUb1zNn0DzxWjzqB9gdYy8=) 7: NulfbGD931XSEsWr8c6jWUL0R7Q.roa (hash: D+CXPQA8XOJm5kR7y6lx84ZALTBUpzFwD/yKT0THj0Y=) 8: Pn1Np93Fy5qllPMGwWd35SbCmNc.roa (hash: cJbqPsoGlyN2ttzOkuToXlqtqEo9ySrbCbr6liDOEGE=) 9: UsNIdz_x5mIF5xcKEVGVl_xXGJ4.roa (hash: DsadB7AkI1D6cE6zFHkD7luRohhY7h45wj6tqzPB3BY=) 10: VDkpUnsSEJjoQKN_SH5M51QJ0lQ.roa (hash: QbW1pR7wXkDRNg+GzvouMFRHYHZ7/eJ/CEgLt387C28=) 11: i7rWRuwzlkV8xCOhfpRpRle8KzA.roa (hash: At8E6e7EApB6fVuxCLUU7eIRYkhnemVz7pgrhH1erSM=) 12: mblfFy3mNdc1SwdAwOx5WQVE19A.roa (hash: C/C7a/Hgr0VETCqfGTruKe1/3x5QgzdC+FE6I3TYrWQ=) 13: o-58M0Oov2ZZz-Rl1Tywa9Uvd40.roa (hash: 0gFyw1TvnqI82S5Ak8R3q+0sFKi4FqNHCfwpsRB+ZM0=) 14: rQUffzmZx3UaMv2Z1sJaJ9Cotdw.roa (hash: 6IztPYrajYy5c8tTQhRlMBRKi0qqEFrjSmseUv+lHCw=) 15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: dPy9qgjGBc0NCN+sKlU9dPOxN9COULCUnGTBQ9Fs3YU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:f6:f9:ce:5b:d0:cd:7b:7a:e7:75:37:bc:3a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Dec 20 10:01:25 2025 GMT Not After : Dec 21 10:01:25 2025 GMT Subject: CN=748aebbb2095ae9878b95d98cdd7718e825fedbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:13:89:82:a9:4c:4d:4f:64:65:10:c1:46: 64:1e:0f:04:cd:a7:12:92:e4:f7:d5:e5:38:f4:13: 56:b0:c2:36:34:79:b2:a7:a3:6e:c7:32:42:05:db: d7:f5:bd:80:d6:e8:5d:e8:3d:98:b8:46:06:1e:fc: 74:1d:75:18:38:af:0f:24:4e:0b:19:97:0b:98:d7: fa:7d:4d:68:dc:cc:89:5a:51:9f:fc:24:29:1b:77: 4e:78:ee:f2:eb:b8:03:37:79:62:65:69:fc:06:aa: 04:83:5b:37:b8:a5:a0:7d:94:d1:3e:53:09:b5:30: c6:70:f0:f0:e1:6b:90:fd:29:8a:b2:e2:98:14:56: e1:21:a1:6f:4a:81:aa:ae:3d:ef:c5:88:25:44:05: 94:37:4a:b7:25:cb:a1:98:f7:ef:84:a6:92:ba:2a: 7f:0d:1c:85:63:73:b0:32:f8:ed:ee:fc:52:2c:b3: e0:83:de:76:93:36:6f:b3:b7:fa:1b:f6:15:a2:56: ae:cf:b4:dd:65:05:3e:48:36:67:9f:aa:8a:ab:ae: 5e:a9:85:d9:94:4e:1b:e1:cc:aa:4f:be:c1:8c:69: 4d:4e:88:4c:36:d8:ec:e5:2f:c3:50:24:23:ef:8c: d0:44:18:ff:d4:2e:9a:10:17:4c:8b:c1:bd:c2:7b: 47:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8A:EB:BB:20:95:AE:98:78:B9:5D:98:CD:D7:71:8E:82:5F:ED:BB X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:96:53:54:a5:22:b2:b8:0b:d3:fa:77:ef:38:c3:1a:51:42: 4e:76:a0:d7:1f:e3:c2:c5:5f:18:35:e1:dc:17:43:45:65:56: 35:97:de:b9:5f:cb:d0:79:97:b7:6e:d1:94:01:ae:50:12:83: 04:69:7e:f5:08:03:95:ee:12:f7:8b:82:c5:4c:b0:a2:9b:4b: 36:ad:3a:eb:ea:ad:ef:c9:ac:bd:94:41:f9:9c:03:4a:76:2a: 7c:ca:a4:55:d2:21:c6:98:9a:4f:11:5e:2e:17:99:6d:5a:31: 2c:3a:2b:9b:e9:25:8a:6f:0c:e3:2f:d8:2b:f0:5a:cf:44:95: ac:d6:66:c1:75:10:5c:04:50:5f:7c:d6:96:38:24:19:8b:c0: b5:88:5b:76:e3:8b:01:31:65:db:23:08:c1:0c:7b:1e:c2:a6: 98:37:9f:8e:2e:08:9f:44:45:c2:2b:ed:ca:70:78:62:91:70: 24:94:ad:cf:cf:6c:ae:a3:4e:69:3a:2d:a0:5c:7e:37:f8:55: b1:1c:d5:14:60:b5:36:e5:6f:49:dc:c8:25:28:d0:18:30:0e: 6d:95:6d:05:9d:de:7d:d1:2b:3f:5e:c9:b8:24:49:36:50:7b: 7a:64:8f:4d:cb:88:5a:85:49:8f:47:58:e6:b2:0c:90:4a:4c: 4d:75:5e:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NPb5zlvQzXt653U3vDqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjUxMjIwMTAwMTI1WhcNMjUxMjIxMTAwMTI1WjAzMTEwLwYDVQQD Eyg3NDhhZWJiYjIwOTVhZTk4NzhiOTVkOThjZGQ3NzE4ZTgyNWZlZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAITiYKpTE1PZGUQwUZkHg8EzacS kuT31eU49BNWsMI2NHmyp6NuxzJCBdvX9b2A1uhd6D2YuEYGHvx0HXUYOK8PJE4L GZcLmNf6fU1o3MyJWlGf/CQpG3dOeO7y67gDN3liZWn8BqoEg1s3uKWgfZTRPlMJ tTDGcPDw4WuQ/SmKsuKYFFbhIaFvSoGqrj3vxYglRAWUN0q3JcuhmPfvhKaSuip/ DRyFY3OwMvjt7vxSLLPgg952kzZvs7f6G/YVolauz7TdZQU+SDZnn6qKq65eqYXZ lE4b4cyqT77BjGlNTohMNtjs5S/DUCQj74zQRBj/1C6aEBdMi8G9wntHzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSK67sgla6YeLldmM3XcY6CX+27MB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZZTVKUi srgL0/p37zjDGlFCTnag1x/jwsVfGDXh3BdDRWVWNZfeuV/L0HmXt27RlAGuUBKD BGl+9QgDle4S94uCxUywoptLNq066+qt78msvZRB+ZwDSnYqfMqkVdIhxpiaTxFe LheZbVoxLDorm+klim8M4y/YK/Baz0SVrNZmwXUQXARQX3zWljgkGYvAtYhbduOL ATFl2yMIwQx7HsKmmDefji4In0RFwivtynB4YpFwJJStz89srqNOaTotoFx+N/hV sRzVFGC1NuVvSdzIJSjQGDAObZVtBZ3efdErP17JuCRJNlB7emSPTcuIWoVJj0dY 5rIMkEpMTXVeRA== -----END CERTIFICATE-----Generated at Sat Dec 20 17:57:08 2025 by rpki-client