This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json) Hash identifier: L7wQcj/vOb7hhyjCAKrEUS/hi7/jyBPiIyg2dyDVebY= Subject key identifier: 91:AE:A7:54:2F:E2:D8:BE:DA:19:29:A0:DB:F9:A6:7B:1A:26:8F:AA Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e Certificate serial: 019B30E90BBDF0B80C1F03BCB12A58703A26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 10:02:17 +0000 Manifest this update: Thu 18 Dec 2025 10:02:17 +0000 Manifest next update: Fri 19 Dec 2025 10:02:17 +0000 Files and hashes: 1: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: HZvZkCOlUgqAyxA5sxEPyt8jnSS0cSOnUJeKOlj3A8Y=) 2: uFHSzfk_zk3TIp45n5GBEUFKwao.roa (hash: KVIiwAo2wdMIe86msUEJxL5joqSg/x0TWu2flcitTfE=) 3: xJ-H39IOSB6XadrNN4evmOK-Bm8.roa (hash: 4175v9gOZ3L5ywBtB3+A8R3L8qZZ5FxiHwK6cbdkSKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:0b:bd:f0:b8:0c:1f:03:bc:b1:2a:58:70:3a:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e Validity Not Before: Dec 18 10:02:17 2025 GMT Not After : Dec 19 10:02:17 2025 GMT Subject: CN=91aea7542fe2d8beda1929a0dbf9a67b1a268faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6b:65:66:3b:cb:21:92:31:40:b7:37:9d:85: 07:ab:3a:ae:57:d0:62:1f:72:f1:34:e2:2b:89:e0: a9:82:01:6c:df:9c:fa:39:09:3c:dc:d4:72:cc:7c: e0:62:db:88:98:08:d1:e5:c0:7d:4f:38:8e:d8:f1: 4b:54:ea:31:96:de:2b:a6:d0:c3:1d:67:3d:4e:1a: 68:fc:c0:6e:0e:64:55:bf:3f:fc:b0:a2:9c:ae:c1: 11:9a:4a:f8:7a:46:75:6e:55:8b:73:cd:82:7f:cd: c4:71:bf:78:46:d5:f9:18:71:a8:30:4b:ca:68:1a: da:60:30:63:05:88:9b:7f:dd:22:9c:f1:70:06:79: b3:d7:41:cf:c5:3e:b1:29:31:8e:77:39:7f:fa:28: 57:5d:39:18:86:13:eb:62:af:e7:56:0f:5b:38:35: 05:a8:90:19:39:66:41:b9:0e:24:74:ba:d7:75:3c: bb:c4:16:76:84:42:a3:21:78:03:e5:6c:b3:e5:7d: 25:c9:d5:c5:92:1e:e3:c8:27:c0:cf:12:41:41:4e: af:38:16:96:12:0c:7c:b8:2f:37:00:fd:dc:6f:ed: 9c:b2:f1:92:cc:f4:be:02:f6:b8:49:fc:d5:2f:23: e1:5b:d3:53:7f:f7:b9:d6:da:65:48:56:77:22:48: b9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AE:A7:54:2F:E2:D8:BE:DA:19:29:A0:DB:F9:A6:7B:1A:26:8F:AA X509v3 Authority Key Identifier: keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a4:1f:c4:c0:1e:e9:77:52:a3:22:3e:ce:fc:33:6c:c2:5e: a7:2f:b7:81:98:fb:9f:e8:99:a4:30:9a:d1:82:36:6d:f0:85: 6b:a7:3b:fa:4a:a8:45:b9:6d:48:b9:d7:d9:8a:85:f9:6f:92: 2f:8a:20:03:66:9a:99:0e:76:a5:7e:4a:9b:94:3e:2a:9c:e2: e1:6b:bf:49:72:25:e8:21:da:89:f3:58:c6:71:ad:01:f4:d4: 2f:b7:6d:10:b3:9e:13:83:33:ed:b2:c6:b9:cd:d9:1b:f5:e8: bf:cb:46:33:5e:4b:95:76:7b:71:00:7b:e5:eb:93:f7:af:48: b9:83:81:1c:77:d9:7c:2f:fe:ad:22:82:ea:8b:45:02:4a:e1: a2:39:de:4a:fa:06:e0:d1:4c:82:b0:9e:32:36:4c:80:e4:07: c1:86:ae:cc:31:8f:a4:4b:37:f2:76:9b:ab:a5:23:49:91:b1: 9d:29:79:b1:30:56:38:be:e1:3a:2f:3c:dd:c6:db:46:77:76: 2e:05:ca:2d:2e:f0:2e:8c:74:a4:26:40:42:de:4e:3f:d8:ca: 03:62:75:96:8a:fb:e8:b9:88:06:eb:69:32:09:9e:6d:d0:aa: 92:a2:5b:47:c4:34:06:82:6a:a9:ea:8e:c9:e3:c1:47:31:8d: 5c:e3:f5:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6Qu98LgMHwO8sSpYcDomMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNzUxMTRhZGMyY2Y4ZWRlYTUwNTk1N2U3OWU4OTA0NDI2 NmMyNGUwHhcNMjUxMjE4MTAwMjE3WhcNMjUxMjE5MTAwMjE3WjAzMTEwLwYDVQQD Eyg5MWFlYTc1NDJmZTJkOGJlZGExOTI5YTBkYmY5YTY3YjFhMjY4ZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGtlZjvLIZIxQLc3nYUHqzquV9Bi H3LxNOIrieCpggFs35z6OQk83NRyzHzgYtuImAjR5cB9TziO2PFLVOoxlt4rptDD HWc9Thpo/MBuDmRVvz/8sKKcrsERmkr4ekZ1blWLc82Cf83Ecb94RtX5GHGoMEvK aBraYDBjBYibf90inPFwBnmz10HPxT6xKTGOdzl/+ihXXTkYhhPrYq/nVg9bODUF qJAZOWZBuQ4kdLrXdTy7xBZ2hEKjIXgD5Wyz5X0lydXFkh7jyCfAzxJBQU6vOBaW Egx8uC83AP3cb+2csvGSzPS+Ava4SfzVLyPhW9NTf/e51tplSFZ3Iki5bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGup1Qv4ti+2hkpoNv5pnsaJo+qMB8GA1UdIwQY MBaAFFx1EUrcLPjt6lBZV+eeiQRCZsJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMt YzVkYzA5NGRmOWM0LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMtYzVkYzA5NGRmOWM0 LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6QfxMAe 6XdSoyI+zvwzbMJepy+3gZj7n+iZpDCa0YI2bfCFa6c7+kqoRbltSLnX2YqF+W+S L4ogA2aamQ52pX5Km5Q+Kpzi4Wu/SXIl6CHaifNYxnGtAfTUL7dtELOeE4Mz7bLG uc3ZG/Xov8tGM15LlXZ7cQB75euT969IuYOBHHfZfC/+rSKC6otFAkrhojneSvoG 4NFMgrCeMjZMgOQHwYauzDGPpEs38nabq6UjSZGxnSl5sTBWOL7hOi883cbbRnd2 LgXKLS7wLox0pCZAQt5OP9jKA2J1lor76LmIButpMgmebdCqkqJbR8Q0BoJqqeqO yePBRzGNXOP1Tg== -----END CERTIFICATE-----Generated at Thu Dec 18 19:06:37 2025 by rpki-client