This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json) Hash identifier: 3Cb5nVxUtDkZyjJF5TKTgGy5wGT5wgvWOvPqnmVkE7U= Subject key identifier: F6:57:24:1D:DB:51:30:85:54:D5:C9:89:D3:BA:B1:4F:61:FC:EA:3D Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61 Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61 Certificate serial: 019AF5406E512E83566D95D4E5556B19780E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 20:00:31 +0000 Manifest this update: Sat 06 Dec 2025 20:00:31 +0000 Manifest next update: Sun 07 Dec 2025 20:00:31 +0000 Files and hashes: 1: SRX9IKEEjT5oSeB-7SJhSMjZVJU.roa (hash: JogYdyXTs6jUeLci5HV5dPXTp8hackvCsA5/0iZx0fw=) 2: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: O6Xe8DNDypM7HP96eE7SjRhzfwTPcVnmqRu4EHu6jmQ=) 3: wl9SNv70naNlxlbGYA9UwaRdUUM.roa (hash: cBLc9nicdCyrqpLVSvLzNsHxSpcCPqY4HcbtkzPI2zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:6e:51:2e:83:56:6d:95:d4:e5:55:6b:19:78:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61 Validity Not Before: Dec 6 20:00:31 2025 GMT Not After : Dec 7 20:00:31 2025 GMT Subject: CN=f657241ddb51308554d5c989d3bab14f61fcea3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c9:29:26:90:76:bf:a4:28:b7:df:e5:92:61: 53:bb:ec:ee:a0:32:37:a2:57:4d:27:bf:80:8c:56: 8f:63:f9:c7:27:c5:ad:41:8f:ac:36:78:06:3c:73: 37:c3:84:d3:f0:b3:c1:38:8c:04:36:58:b5:ce:3e: d8:aa:83:b4:47:09:79:ac:12:49:f7:af:a0:40:31: e6:a6:c7:15:7d:4e:88:9f:0b:cb:90:76:b4:e1:2f: 21:2a:5b:29:32:3b:5e:b5:ed:3f:5b:55:bc:13:a1: 26:8b:a2:48:87:00:56:f6:f8:23:3f:9a:f7:33:58: cd:07:45:06:4c:94:60:eb:77:20:bc:6b:79:1d:a6: 8a:5f:d5:b7:d4:36:6f:35:c7:a1:cc:50:c7:c5:89: 5c:6f:6d:6f:32:96:42:1d:ea:24:fd:dd:c3:24:f5: a7:7c:1b:d3:d0:e9:a0:9a:53:cb:69:8f:cb:73:97: 05:df:dd:fe:b7:d3:26:5c:0a:97:69:ac:26:ed:08: 35:05:79:ec:be:ee:fe:dd:6d:e7:5b:b8:73:4d:0e: 22:8b:27:95:ba:7a:6c:03:32:83:37:04:b8:d4:54: de:af:9d:67:1f:58:a9:57:9b:55:07:40:1b:ce:04: 57:76:38:c2:48:c5:be:03:f3:55:f7:3e:27:70:45: 1b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:57:24:1D:DB:51:30:85:54:D5:C9:89:D3:BA:B1:4F:61:FC:EA:3D X509v3 Authority Key Identifier: keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:36:1e:86:d7:93:c5:a6:b2:21:dd:78:9d:b0:97:43:d6:0e: 17:86:de:93:d6:44:c3:56:38:0a:57:8e:99:35:45:7b:e5:9c: 36:f7:91:5f:a5:99:c2:d3:c1:95:2a:ff:f1:c4:bb:50:13:0d: 6e:6a:ca:2e:32:de:2a:b7:b9:c6:7a:30:2f:ec:04:11:18:8a: be:a4:27:d6:f8:05:e2:76:2b:28:a8:8b:d7:6a:a6:e9:65:f9: 6d:76:41:3d:11:cd:f4:8b:07:49:15:a5:9f:7c:e5:9a:64:d8: 18:43:83:c3:72:c1:79:63:fe:f1:c1:cf:14:f0:ea:8c:5a:4c: a8:87:c8:23:a2:04:b4:93:e5:62:05:5b:84:f5:dd:5d:7c:5b: 1d:4d:54:b2:97:9f:ad:ed:8d:a9:a2:fb:ce:bb:61:cf:b8:b3: e3:7e:2f:62:e6:60:11:7b:aa:cd:b8:fb:4d:49:8c:88:12:b1: 58:f9:f0:73:c2:80:e2:b1:01:ba:7a:76:c3:aa:bd:b5:70:47: 80:73:ae:95:87:94:0c:6b:db:5a:c8:19:e4:85:81:eb:90:04: b1:36:6b:ee:b8:5b:07:05:dd:38:8b:dd:9a:2f:fc:a3:b6:1e: 66:70:a4:3d:65:3a:ef:e4:7b:c7:3f:72:eb:45:2c:42:29:25: df:04:f8:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QG5RLoNWbZXU5VVrGXgOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDk5ZjQ5OTc4Yjk2MGZhMzFmODFhY2Y1NDY3MTI3M2Rj N2ZmNjEwHhcNMjUxMjA2MjAwMDMxWhcNMjUxMjA3MjAwMDMxWjAzMTEwLwYDVQQD EyhmNjU3MjQxZGRiNTEzMDg1NTRkNWM5ODlkM2JhYjE0ZjYxZmNlYTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ckpJpB2v6Qot9/lkmFTu+zuoDI3 oldNJ7+AjFaPY/nHJ8WtQY+sNngGPHM3w4TT8LPBOIwENli1zj7YqoO0Rwl5rBJJ 96+gQDHmpscVfU6InwvLkHa04S8hKlspMjtete0/W1W8E6Emi6JIhwBW9vgjP5r3 M1jNB0UGTJRg63cgvGt5HaaKX9W31DZvNcehzFDHxYlcb21vMpZCHeok/d3DJPWn fBvT0OmgmlPLaY/Lc5cF393+t9MmXAqXaawm7Qg1BXnsvu7+3W3nW7hzTQ4iiyeV unpsAzKDNwS41FTer51nH1ipV5tVB0AbzgRXdjjCSMW+A/NV9z4ncEUbAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZXJB3bUTCFVNXJidO6sU9h/Oo9MB8GA1UdIwQY MBaAFF8Jn0mXi5YPox+BrPVGcSc9x/9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdtZlNaZUxsZy1qSDRHczlVWnhKejNIXzJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hZDViZmQtODVjNy00N2I3LTk5N2Mt ZjVkMmNiNzk0NTZkLzEvWHdtZlNaZUxsZy1qSDRHczlVWnhKejNIXzJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hZDViZmQtODVjNy00N2I3LTk5N2MtZjVkMmNiNzk0NTZk LzEvWHdtZlNaZUxsZy1qSDRHczlVWnhKejNIXzJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjYehteT xaayId14nbCXQ9YOF4bek9ZEw1Y4CleOmTVFe+WcNveRX6WZwtPBlSr/8cS7UBMN bmrKLjLeKre5xnowL+wEERiKvqQn1vgF4nYrKKiL12qm6WX5bXZBPRHN9IsHSRWl n3zlmmTYGEODw3LBeWP+8cHPFPDqjFpMqIfII6IEtJPlYgVbhPXdXXxbHU1Uspef re2NqaL7zrthz7iz434vYuZgEXuqzbj7TUmMiBKxWPnwc8KA4rEBunp2w6q9tXBH gHOulYeUDGvbWsgZ5IWB65AEsTZr7rhbBwXdOIvdmi/8o7YeZnCkPWU67+R7xz9y 60UsQikl3wT45A== -----END CERTIFICATE-----Generated at Sat Dec 6 23:36:14 2025 by rpki-client