This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft File: xw2_VVhwtVas-rQox06s7lb3siI.mft (raw, json) Hash identifier: Vtr3qcL4oOCUx0bZV/WiBDqzYKCReWs4/gqr2Hlu4cA= Subject key identifier: A2:56:97:11:A9:DE:F3:EB:DD:09:08:E1:33:8B:F8:27:B7:69:63:B1 Authority key identifier: C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22 Certificate issuer: /CN=c70dbf555870b556acfab428c74eacee56f7b222 Certificate serial: 019AF12EF093FBE1E15D661C7BA24B071EFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:02:56 +0000 Manifest this update: Sat 06 Dec 2025 01:02:56 +0000 Manifest next update: Sun 07 Dec 2025 01:02:56 +0000 Files and hashes: 1: BIAxUnW_hCjMRjCzGvcDZv9IbZI.roa (hash: lpTkJGPX7x3xgf0arKc8U2BOXhSzOpi1sRj7xRP++p4=) 2: xw2_VVhwtVas-rQox06s7lb3siI.crl (hash: ug0XeLQktF0fL6q6/SNpJBjF7q9LWdiTG463Kl23FUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:f0:93:fb:e1:e1:5d:66:1c:7b:a2:4b:07:1e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c70dbf555870b556acfab428c74eacee56f7b222 Validity Not Before: Dec 6 01:02:56 2025 GMT Not After : Dec 7 01:02:56 2025 GMT Subject: CN=a2569711a9def3ebdd0908e1338bf827b76963b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2f:90:dc:d4:e9:f0:68:bc:d9:70:06:aa:52: 3a:87:f6:48:45:e3:68:39:b9:1f:d7:09:59:3a:d8: cd:96:1b:63:7b:0d:81:9c:d8:d3:14:cb:1a:4f:2c: 79:82:c1:21:bc:05:57:61:ab:c0:c4:50:9f:5a:9f: c9:22:3f:ac:5b:91:fb:e5:53:22:1b:12:09:9d:a0: 28:38:06:b5:87:aa:9d:19:f9:d3:d4:cf:91:53:80: c5:c5:82:23:bf:18:a8:ed:d0:a2:74:36:5a:59:d0: 1b:59:0b:7c:89:35:69:63:a4:30:7d:66:91:0d:fb: b3:1c:85:b2:1b:23:92:98:dd:05:e3:7d:bf:04:db: 68:7e:66:a7:a8:f9:d4:75:78:72:f0:90:fa:1e:c6: f0:f0:e8:b8:00:67:f5:cd:9e:f3:bb:d2:bb:17:61: 47:bd:10:e4:08:50:e6:78:2d:55:8f:ba:fa:23:5d: 95:b8:51:52:61:c4:cf:73:79:94:23:51:7d:f3:71: 2b:0f:82:9c:5f:ff:9f:aa:95:89:78:30:84:d7:c5: b2:42:02:52:20:8b:c6:2d:57:cb:24:62:b7:ab:a8: bb:04:e3:25:fd:e2:6b:42:0d:87:a0:f0:01:e2:a1: 53:d7:e6:5b:b0:3c:85:ab:14:ba:a8:0e:1a:98:9d: d2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:56:97:11:A9:DE:F3:EB:DD:09:08:E1:33:8B:F8:27:B7:69:63:B1 X509v3 Authority Key Identifier: keyid:C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ac:9b:47:c9:1d:4f:8f:f6:1d:12:34:36:58:ed:79:d9:30: 2e:3b:ed:93:99:e2:5a:a2:dc:2d:81:38:ea:75:7b:fc:49:e4: 56:8e:0f:d1:5c:d1:24:bc:c7:17:58:ff:65:79:80:4c:8b:6c: 83:bd:fa:b5:d1:f6:e3:b2:3b:99:6a:c4:c0:50:4a:b9:d0:81: e8:c1:9c:ad:fa:ac:a5:7e:e4:6c:46:0e:40:9e:fb:f8:c3:d8: 63:94:89:d2:40:04:1d:b3:64:63:15:ca:0c:a3:8b:7e:a8:54: eb:57:0f:dd:98:f1:a6:ee:c5:05:65:99:0e:24:8a:ec:04:d1: 04:77:92:d6:ec:b7:16:61:f0:da:bb:e8:d7:93:1f:c9:c6:84: 37:fc:2e:f9:9c:f9:d3:89:e3:47:58:ca:82:77:59:c3:38:8d: ec:70:4d:16:b8:8a:ae:b1:99:9b:2b:d6:7a:ae:eb:11:4f:86: b2:93:fa:06:cd:b2:55:cc:df:fd:b3:8c:72:37:5a:2a:e1:0e: 55:c7:d3:7a:78:b7:2b:b9:ab:be:a4:96:e1:ca:e3:c5:db:2a: de:09:2a:d6:ee:97:08:60:59:7f:50:10:44:22:2b:b0:de:ca: da:02:6e:c0:9f:c3:f7:af:e5:ae:c1:60:f9:ed:c0:5b:f9:79: 92:b0:e1:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLvCT++HhXWYce6JLBx7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MGRiZjU1NTg3MGI1NTZhY2ZhYjQyOGM3NGVhY2VlNTZm N2IyMjIwHhcNMjUxMjA2MDEwMjU2WhcNMjUxMjA3MDEwMjU2WjAzMTEwLwYDVQQD EyhhMjU2OTcxMWE5ZGVmM2ViZGQwOTA4ZTEzMzhiZjgyN2I3Njk2M2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i+Q3NTp8Gi82XAGqlI6h/ZIReNo Obkf1wlZOtjNlhtjew2BnNjTFMsaTyx5gsEhvAVXYavAxFCfWp/JIj+sW5H75VMi GxIJnaAoOAa1h6qdGfnT1M+RU4DFxYIjvxio7dCidDZaWdAbWQt8iTVpY6QwfWaR DfuzHIWyGyOSmN0F432/BNtofmanqPnUdXhy8JD6Hsbw8Oi4AGf1zZ7zu9K7F2FH vRDkCFDmeC1Vj7r6I12VuFFSYcTPc3mUI1F983ErD4KcX/+fqpWJeDCE18WyQgJS IIvGLVfLJGK3q6i7BOMl/eJrQg2HoPAB4qFT1+ZbsDyFqxS6qA4amJ3SswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJWlxGp3vPr3QkI4TOL+Ce3aWOxMB8GA1UdIwQY MBaAFMcNv1VYcLVWrPq0KMdOrO5W97IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHcyX1ZWaHd0VmFzLXJRb3gwNnM3bGIzc2lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ODJiN2YtNjBjMy00MTFhLTk2MjUt MzJkYTFkYjRiMjAzLzEveHcyX1ZWaHd0VmFzLXJRb3gwNnM3bGIzc2lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ODJiN2YtNjBjMy00MTFhLTk2MjUtMzJkYTFkYjRiMjAz LzEveHcyX1ZWaHd0VmFzLXJRb3gwNnM3bGIzc2lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaybR8kd T4/2HRI0NljtedkwLjvtk5niWqLcLYE46nV7/EnkVo4P0VzRJLzHF1j/ZXmATIts g736tdH247I7mWrEwFBKudCB6MGcrfqspX7kbEYOQJ77+MPYY5SJ0kAEHbNkYxXK DKOLfqhU61cP3Zjxpu7FBWWZDiSK7ATRBHeS1uy3FmHw2rvo15MfycaEN/wu+Zz5 04njR1jKgndZwziN7HBNFriKrrGZmyvWeq7rEU+GspP6Bs2yVczf/bOMcjdaKuEO VcfTeni3K7mrvqSW4crjxdsq3gkq1u6XCGBZf1AQRCIrsN7K2gJuwJ/D96/lrsFg +e3AW/l5krDhbA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:26:24 2025 by rpki-client