This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft File: XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft (raw, json) Hash identifier: RFM5deqOTvrXfTPd1x/6+Wk2h8SGGWJHXmQ/oAkxyNk= Subject key identifier: 3A:A3:18:EA:B9:5B:64:59:A4:97:BD:62:F2:40:6A:2E:E3:1E:CE:7A Authority key identifier: 5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82 Certificate issuer: /CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82 Certificate serial: 019AF3C0B482281E0E0EEA0A653B02BAA1B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft Manifest number: 0235 Signing time: Sat 06 Dec 2025 13:01:23 +0000 Manifest this update: Sat 06 Dec 2025 13:01:23 +0000 Manifest next update: Sun 07 Dec 2025 13:01:23 +0000 Files and hashes: 1: 3uPLM02UL2awUH-Kuoh6brdmF8Q.roa (hash: 7YTaX8xKCH2MetKx49NBdkYFZn8uvSI3o4szPzVZP/w=) 2: XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl (hash: Ytb3raJy+jdWKo/9PgtTue+wYYrpT2CqFgslxZysBxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:b4:82:28:1e:0e:0e:ea:0a:65:3b:02:ba:a1:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82 Validity Not Before: Dec 6 13:01:23 2025 GMT Not After : Dec 7 13:01:23 2025 GMT Subject: CN=3aa318eab95b6459a497bd62f2406a2ee31ece7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e6:02:cc:b4:e2:9f:57:b9:3f:bd:6b:94:31: 40:7d:67:49:6a:28:81:fe:1f:fb:f1:99:f0:fb:6a: 0b:7f:4b:70:ba:65:a6:ff:ca:c2:80:85:59:3f:41: 4a:44:c4:9e:c3:f5:c9:86:26:3d:c0:09:a9:81:23: 35:1d:4c:8f:fd:ea:61:d4:45:3d:21:8e:5d:f6:90: dd:bf:2d:99:b6:2f:01:1b:3a:47:50:5c:48:e8:ab: 2a:bc:36:0d:65:f3:28:66:dc:81:4f:e1:86:f6:24: 1e:8a:e5:c4:49:ab:99:1b:1d:3f:85:a5:d6:e7:21: 80:a9:a8:dc:32:5f:2e:29:00:1e:53:d8:5f:9f:45: 48:d0:21:96:b2:de:9e:f3:b1:a9:be:c8:54:67:39: f2:39:c3:04:04:fb:c4:fa:2e:82:ba:dd:84:47:7d: c8:79:ba:44:ec:e3:08:7d:69:e7:46:ca:ff:20:79: f8:f6:34:d2:68:5d:8e:c0:97:2b:bd:e3:11:c5:07: 4e:e9:ae:78:dd:5f:b1:50:fa:1f:65:42:4f:99:cf: 6c:a9:9e:c3:fb:3d:11:b5:a6:f5:4e:6a:65:b4:55: 7d:c3:0f:04:1d:f4:ce:65:aa:96:0c:15:e6:d9:a4: 73:bb:44:44:51:66:b7:ad:a1:3e:93:6f:26:0c:a8: 48:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A3:18:EA:B9:5B:64:59:A4:97:BD:62:F2:40:6A:2E:E3:1E:CE:7A X509v3 Authority Key Identifier: keyid:5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:76:17:c7:dc:7c:f2:87:95:93:47:7f:f6:47:bf:c3:18:32: 1d:eb:bd:2c:f0:6c:03:cf:d8:ee:8b:77:4c:96:91:06:87:f2: ab:34:2c:e6:87:1d:74:9b:8e:39:3e:65:cd:04:2f:66:1b:2d: a4:8b:f2:65:09:40:d1:50:93:81:1e:b2:25:99:64:55:f6:db: cc:38:b8:bc:df:31:50:ec:2b:2a:a9:22:d9:07:49:0d:02:b8: 5c:d9:8c:74:e3:e9:a1:11:7a:36:e0:7a:78:0f:e8:7d:c9:ae: a3:63:95:b8:b7:61:9b:52:62:94:cf:78:57:e7:62:b7:8c:3d: fb:87:84:3a:82:46:5d:96:4d:20:5b:24:f1:29:7c:fe:a5:f4: 94:48:5f:ae:71:e1:4b:24:d2:7f:84:be:0c:0a:38:98:e9:8f: c6:a8:ae:f3:ef:41:6e:87:b0:4f:74:c4:aa:5b:84:d0:7b:07: 83:06:e6:de:3e:89:07:f5:cf:96:96:8d:25:6d:e2:4c:8d:91: 1e:c9:3b:c3:99:09:56:a6:c4:39:73:42:c7:05:4e:f4:51:b0: 73:1f:f2:65:1f:55:ee:52:04:f3:4d:f9:de:73:7c:7b:a6:44: 22:5c:04:fa:af:47:75:c0:3e:60:e5:04:03:3c:24:b0:b6:84: dd:fc:c5:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwLSCKB4ODuoKZTsCuqG2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNzE5NmRjNWY0MGY5NmQyZGU2Nzk5ZGM3NzFiYWEzYjUz ZGNkODIwHhcNMjUxMjA2MTMwMTIzWhcNMjUxMjA3MTMwMTIzWjAzMTEwLwYDVQQD EygzYWEzMThlYWI5NWI2NDU5YTQ5N2JkNjJmMjQwNmEyZWUzMWVjZTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuYCzLTin1e5P71rlDFAfWdJaiiB /h/78Znw+2oLf0twumWm/8rCgIVZP0FKRMSew/XJhiY9wAmpgSM1HUyP/eph1EU9 IY5d9pDdvy2Zti8BGzpHUFxI6KsqvDYNZfMoZtyBT+GG9iQeiuXESauZGx0/haXW 5yGAqajcMl8uKQAeU9hfn0VI0CGWst6e87GpvshUZznyOcMEBPvE+i6Cut2ER33I ebpE7OMIfWnnRsr/IHn49jTSaF2OwJcrveMRxQdO6a543V+xUPofZUJPmc9sqZ7D +z0Rtab1TmpltFV9ww8EHfTOZaqWDBXm2aRzu0REUWa3raE+k28mDKhIKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqjGOq5W2RZpJe9YvJAai7jHs56MB8GA1UdIwQY MBaAFFxxltxfQPltLeZ5ncdxuqO1Pc2CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEhHVzNGOUEtVzB0NW5tZHgzRzZvN1U5ellJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi83M2VhNTktYzE0ZC00MmI4LWI2OWMt YzUyYjVkZDBlN2FjLzEvWEhHVzNGOUEtVzB0NW5tZHgzRzZvN1U5ellJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi83M2VhNTktYzE0ZC00MmI4LWI2OWMtYzUyYjVkZDBlN2Fj LzEvWEhHVzNGOUEtVzB0NW5tZHgzRzZvN1U5ellJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3YXx9x8 8oeVk0d/9ke/wxgyHeu9LPBsA8/Y7ot3TJaRBofyqzQs5ocddJuOOT5lzQQvZhst pIvyZQlA0VCTgR6yJZlkVfbbzDi4vN8xUOwrKqki2QdJDQK4XNmMdOPpoRF6NuB6 eA/ofcmuo2OVuLdhm1JilM94V+dit4w9+4eEOoJGXZZNIFsk8Sl8/qX0lEhfrnHh SyTSf4S+DAo4mOmPxqiu8+9BboewT3TEqluE0HsHgwbm3j6JB/XPlpaNJW3iTI2R Hsk7w5kJVqbEOXNCxwVO9FGwcx/yZR9V7lIE80353nN8e6ZEIlwE+q9HdcA+YOUE AzwksLaE3fzFcg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:15:59 2025 by rpki-client