This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft File: xWYvmAINpON9UO07swICd08pLXo.mft (raw, json) Hash identifier: Eqc1eOsLfYsyyytk73DGp44MukX8kJ0m8Jv3AdEkLbY= Subject key identifier: 55:5D:93:19:C9:24:99:64:EA:CF:F7:37:28:1C:6B:66:AB:B4:35:1B Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a Certificate serial: 019B4882B1B5057185B637A349FA41DE53E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft Manifest number: 03E0 Signing time: Tue 23 Dec 2025 00:01:23 +0000 Manifest this update: Tue 23 Dec 2025 00:01:23 +0000 Manifest next update: Wed 24 Dec 2025 00:01:23 +0000 Files and hashes: 1: k3mYd88nhjXgIJYUkD0IW4wB334.roa (hash: ES4bfd/D7kl4HbO8JFVGRKGNEndi7/c5Oef8CAe6LiM=) 2: xWYvmAINpON9UO07swICd08pLXo.crl (hash: etPwNdN+dzA3SlUHiqg6p/5ynVhnSyHDJEY8cmYaWY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:b1:b5:05:71:85:b6:37:a3:49:fa:41:de:53:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a Validity Not Before: Dec 23 00:01:23 2025 GMT Not After : Dec 24 00:01:23 2025 GMT Subject: CN=555d9319c9249964eacff737281c6b66abb4351b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:60:31:bf:19:8c:2e:44:17:3c:62:0d:6e:a1: ef:ff:45:43:07:e7:0f:8d:b5:71:bc:97:a2:d7:c9: d3:31:d9:8c:89:bb:46:5d:7d:5b:c9:b2:00:20:74: a1:c5:aa:21:f6:2c:60:d8:47:5e:06:5a:a1:c6:a0: 9f:96:ac:3a:27:e9:7e:5c:fe:c5:09:51:63:74:5f: 26:ce:32:ad:f5:b2:39:2d:8e:4d:df:b3:51:09:2e: f9:b4:91:b5:c7:6e:ec:51:8b:43:f7:2f:45:0f:c2: 21:11:e2:b4:2f:9a:c2:d1:8e:e4:c4:c9:2c:84:ee: 42:20:10:51:c5:c2:95:0e:21:0b:68:8e:f2:b7:35: e2:93:48:74:a8:0b:e0:2d:7c:0a:3f:02:25:d1:6f: f4:0b:38:4b:11:18:fd:08:9e:ce:c3:38:fd:19:76: a9:e4:de:91:b0:b8:89:c3:c8:df:18:dc:05:7a:8c: 68:c7:4f:d7:d8:d2:7b:d4:81:73:9d:19:94:f7:b2: 56:5f:b0:47:b5:1b:0d:7c:ef:3b:01:50:b4:1d:5d: 22:6e:16:df:b4:eb:52:06:71:17:55:c3:b4:75:49: 1c:5d:50:b0:cb:2c:14:ba:f9:8d:52:df:36:04:b6: af:b1:ba:e8:dd:0d:bb:67:f8:41:1b:21:6d:a6:ec: 3c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5D:93:19:C9:24:99:64:EA:CF:F7:37:28:1C:6B:66:AB:B4:35:1B X509v3 Authority Key Identifier: keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:0e:08:7a:2f:4e:fa:d3:97:8f:f9:6e:8f:32:77:cd:2b:54: 89:5f:f9:3b:8e:d4:84:ca:62:c2:f6:79:75:87:76:fe:cc:d9: 2d:b7:f4:46:a2:af:17:3f:91:3c:78:7a:9e:e1:29:7f:4a:f4: 67:54:8e:fa:80:96:d0:5b:e8:ce:92:78:6b:49:9c:32:94:37: e5:ca:e1:48:e6:e3:40:09:7b:84:81:c2:19:6d:fb:4e:e6:d0: b3:07:a5:03:7b:72:fb:3f:b9:6d:51:79:29:d8:02:38:08:d4: a9:86:e6:9f:6f:53:bf:c4:1a:d2:43:d5:08:b8:40:65:a5:84: 9b:bb:84:35:20:36:3a:86:b3:06:84:a1:45:7c:d1:e4:2b:40: bb:a4:82:00:8a:4a:b3:d5:a8:12:2b:08:bc:f4:1a:e0:5c:d4: 4c:52:c8:c0:ff:f5:43:4c:e2:af:e1:c6:10:2a:b0:f8:28:cf: e3:e6:43:e1:58:1b:63:7a:aa:90:cc:51:9f:fc:d8:a5:68:34: 6b:9b:d5:e5:7d:ef:d3:75:fd:ca:0b:c3:cf:f7:ea:cb:07:5b: 3e:01:81:91:c2:b6:e6:78:0f:84:de:21:bd:0e:9e:83:54:4a: 5e:84:ac:c3:97:53:90:4d:f0:a8:5e:25:64:36:6d:17:d4:3b: 0f:f9:9f:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgrG1BXGFtjejSfpB3lPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NjYyZjk4MDIwZGE0ZTM3ZDUwZWQzYmIzMDIwMjc3NGYy OTJkN2EwHhcNMjUxMjIzMDAwMTIzWhcNMjUxMjI0MDAwMTIzWjAzMTEwLwYDVQQD Eyg1NTVkOTMxOWM5MjQ5OTY0ZWFjZmY3MzcyODFjNmI2NmFiYjQzNTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2AxvxmMLkQXPGINbqHv/0VDB+cP jbVxvJei18nTMdmMibtGXX1bybIAIHShxaoh9ixg2EdeBlqhxqCflqw6J+l+XP7F CVFjdF8mzjKt9bI5LY5N37NRCS75tJG1x27sUYtD9y9FD8IhEeK0L5rC0Y7kxMks hO5CIBBRxcKVDiELaI7ytzXik0h0qAvgLXwKPwIl0W/0CzhLERj9CJ7Owzj9GXap 5N6RsLiJw8jfGNwFeoxox0/X2NJ71IFznRmU97JWX7BHtRsNfO87AVC0HV0ibhbf tOtSBnEXVcO0dUkcXVCwyywUuvmNUt82BLavsbro3Q27Z/hBGyFtpuw8YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVdkxnJJJlk6s/3Nygca2artDUbMB8GA1UdIwQY MBaAFMVmL5gCDaTjfVDtO7MCAndPKS16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFdZdm1BSU5wT045VU8wN3N3SUNkMDhwTFhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81ZDZjMTUtYTU4OC00MWRjLWE2YTIt Zjg5OTc3YTQ1YjYwLzEveFdZdm1BSU5wT045VU8wN3N3SUNkMDhwTFhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81ZDZjMTUtYTU4OC00MWRjLWE2YTItZjg5OTc3YTQ1YjYw LzEveFdZdm1BSU5wT045VU8wN3N3SUNkMDhwTFhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmA4Iei9O +tOXj/lujzJ3zStUiV/5O47UhMpiwvZ5dYd2/szZLbf0RqKvFz+RPHh6nuEpf0r0 Z1SO+oCW0FvozpJ4a0mcMpQ35crhSObjQAl7hIHCGW37TubQswelA3ty+z+5bVF5 KdgCOAjUqYbmn29Tv8Qa0kPVCLhAZaWEm7uENSA2OoazBoShRXzR5CtAu6SCAIpK s9WoEisIvPQa4FzUTFLIwP/1Q0zir+HGECqw+CjP4+ZD4VgbY3qqkMxRn/zYpWg0 a5vV5X3v03X9ygvDz/fqywdbPgGBkcK25ngPhN4hvQ6eg1RKXoSsw5dTkE3wqF4l ZDZtF9Q7D/mflw== -----END CERTIFICATE-----Generated at Tue Dec 23 09:15:12 2025 by rpki-client