This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft File: xw2_VVhwtVas-rQox06s7lb3siI.mft (raw, json) Hash identifier: 5vEs+soNRyz0Ap56JS2HFcEmgiEdiGdLC2MShMbvIT0= Subject key identifier: 5C:9C:85:8F:72:EF:05:B5:76:91:A4:3F:28:7C:0C:28:DE:96:4F:47 Authority key identifier: C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22 Certificate issuer: /CN=c70dbf555870b556acfab428c74eacee56f7b222 Certificate serial: 019B3A904AF8A01C34B7DA790C4B82330038 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 07:01:33 +0000 Manifest this update: Sat 20 Dec 2025 07:01:33 +0000 Manifest next update: Sun 21 Dec 2025 07:01:33 +0000 Files and hashes: 1: BIAxUnW_hCjMRjCzGvcDZv9IbZI.roa (hash: lpTkJGPX7x3xgf0arKc8U2BOXhSzOpi1sRj7xRP++p4=) 2: xw2_VVhwtVas-rQox06s7lb3siI.crl (hash: KjxqUgX+Na0viepKQL8MgzRUaSW5YFCBUJgzjv9eXcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:4a:f8:a0:1c:34:b7:da:79:0c:4b:82:33:00:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c70dbf555870b556acfab428c74eacee56f7b222 Validity Not Before: Dec 20 07:01:33 2025 GMT Not After : Dec 21 07:01:33 2025 GMT Subject: CN=5c9c858f72ef05b57691a43f287c0c28de964f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:40:36:55:6d:36:dd:1b:ce:c2:92:72:dc:b5: bb:c6:75:52:bf:44:bc:7e:3a:3c:6d:7f:d7:ec:64: f2:a3:f5:a5:aa:57:b8:b8:a2:c5:22:7c:32:f8:96: 3d:fc:dd:08:62:38:dc:50:ff:0f:40:f9:c1:f1:1d: fa:13:f0:30:7a:52:37:97:a5:4f:c8:17:35:4c:56: 19:31:67:11:ac:d6:81:f1:e4:42:57:76:07:26:9b: b7:99:90:17:bc:af:ee:f3:ce:69:30:5d:49:ca:75: 15:ed:1d:3a:29:c6:a6:24:10:a7:ed:ce:f0:ee:37: c1:c3:ad:aa:c7:da:4d:da:c6:18:10:a3:a6:df:22: fc:a3:08:fb:13:80:4f:4c:a6:ce:a6:c0:bc:24:ef: 93:37:62:00:df:77:2c:46:f5:f2:91:8d:90:2e:61: 49:d3:b7:97:d8:3c:e4:81:ff:44:34:44:50:16:26: 7b:7c:7d:97:5c:c1:4c:5f:71:be:3e:69:c0:1d:5a: 13:ab:0f:f7:a4:d8:a9:a0:e4:9b:cc:c6:46:8a:4d: 9d:8b:68:1d:e5:af:f9:0d:f8:b8:f1:06:0a:8e:bb: ac:43:95:da:70:15:9b:0f:1d:66:eb:8f:23:7f:54: a4:68:4e:d4:06:10:e5:ed:0d:6a:76:84:01:6f:23: ad:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9C:85:8F:72:EF:05:B5:76:91:A4:3F:28:7C:0C:28:DE:96:4F:47 X509v3 Authority Key Identifier: keyid:C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:db:5b:2b:07:e9:84:b2:0e:ad:03:1d:31:18:87:c0:34:df: a5:99:c2:56:82:2d:d5:61:a9:8c:1f:7f:3a:fc:78:a9:28:e5: 09:cd:bd:2a:70:52:be:96:c1:31:7b:41:8f:49:2e:43:20:04: 14:95:43:a9:da:9c:ab:80:2c:ca:1b:77:98:57:51:22:32:cb: 33:bd:db:48:8f:31:e6:a2:23:0c:0b:2a:a2:2c:69:6e:94:ee: a9:c7:61:51:86:7d:89:13:c5:6b:0f:e4:92:77:3a:97:72:68: 4b:81:02:74:f0:db:e8:7b:60:ec:32:65:4d:e9:b2:60:0c:fe: ec:02:8a:1e:ee:e6:03:85:29:21:1b:07:81:80:46:22:58:a5: 47:cb:dc:9e:d0:11:95:1c:db:67:d1:b6:e3:6e:32:c3:7a:f8: 6e:74:03:a8:3b:82:b7:7e:88:16:c4:15:d9:f8:4d:aa:09:4a: 1e:b2:7b:d6:df:fe:fe:e9:53:61:aa:17:1b:b0:a7:9b:07:5e: c3:a5:08:74:e6:ee:ac:4b:0b:54:d9:11:80:2e:35:f0:cc:70: ea:54:df:00:33:b7:29:28:1d:3c:dd:cd:a7:78:2d:a9:10:0c: 92:31:2f:c0:ae:9f:b0:34:25:2e:f1:84:8c:9a:ce:b3:b1:d5: 8f:a7:44:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kEr4oBw0t9p5DEuCMwA4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MGRiZjU1NTg3MGI1NTZhY2ZhYjQyOGM3NGVhY2VlNTZm N2IyMjIwHhcNMjUxMjIwMDcwMTMzWhcNMjUxMjIxMDcwMTMzWjAzMTEwLwYDVQQD Eyg1YzljODU4ZjcyZWYwNWI1NzY5MWE0M2YyODdjMGMyOGRlOTY0ZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EA2VW023RvOwpJy3LW7xnVSv0S8 fjo8bX/X7GTyo/Wlqle4uKLFInwy+JY9/N0IYjjcUP8PQPnB8R36E/AwelI3l6VP yBc1TFYZMWcRrNaB8eRCV3YHJpu3mZAXvK/u885pMF1JynUV7R06KcamJBCn7c7w 7jfBw62qx9pN2sYYEKOm3yL8owj7E4BPTKbOpsC8JO+TN2IA33csRvXykY2QLmFJ 07eX2Dzkgf9ENERQFiZ7fH2XXMFMX3G+PmnAHVoTqw/3pNipoOSbzMZGik2di2gd 5a/5Dfi48QYKjrusQ5XacBWbDx1m648jf1SkaE7UBhDl7Q1qdoQBbyOtjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFychY9y7wW1dpGkPyh8DCjelk9HMB8GA1UdIwQY MBaAFMcNv1VYcLVWrPq0KMdOrO5W97IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHcyX1ZWaHd0VmFzLXJRb3gwNnM3bGIzc2lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ODJiN2YtNjBjMy00MTFhLTk2MjUt MzJkYTFkYjRiMjAzLzEveHcyX1ZWaHd0VmFzLXJRb3gwNnM3bGIzc2lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ODJiN2YtNjBjMy00MTFhLTk2MjUtMzJkYTFkYjRiMjAz LzEveHcyX1ZWaHd0VmFzLXJRb3gwNnM3bGIzc2lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNtbKwfp hLIOrQMdMRiHwDTfpZnCVoIt1WGpjB9/Ovx4qSjlCc29KnBSvpbBMXtBj0kuQyAE FJVDqdqcq4Asyht3mFdRIjLLM73bSI8x5qIjDAsqoixpbpTuqcdhUYZ9iRPFaw/k knc6l3JoS4ECdPDb6Htg7DJlTemyYAz+7AKKHu7mA4UpIRsHgYBGIlilR8vcntAR lRzbZ9G2424yw3r4bnQDqDuCt36IFsQV2fhNqglKHrJ71t/+/ulTYaoXG7Cnmwde w6UIdOburEsLVNkRgC418Mxw6lTfADO3KSgdPN3Np3gtqRAMkjEvwK6fsDQlLvGE jJrOs7HVj6dE5g== -----END CERTIFICATE-----Generated at Sat Dec 20 17:02:31 2025 by rpki-client