This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json) Hash identifier: mMsVgr1TrZ2x4cH45Y/AKi5/5/59gDuyJr1dlF1A+QI= Subject key identifier: FC:8B:C1:6D:A0:81:08:2E:26:92:E7:2D:14:E5:39:D6:CE:F1:2F:A4 Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81 Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581 Certificate serial: 019AF208EC9A2D7ECF4995B364834CEB0E02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft Manifest number: 176D Signing time: Sat 06 Dec 2025 05:01:02 +0000 Manifest this update: Sat 06 Dec 2025 05:01:02 +0000 Manifest next update: Sun 07 Dec 2025 05:01:02 +0000 Files and hashes: 1: V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa (hash: y15uODSxQaZUOAbMdJA7ksT4dYbu04f8NP7jQ2+xKpE=) 2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: z8VfM7HJlGe9AsVNIl91icKgtcOIGpk8Pk5zIuYktpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ec:9a:2d:7e:cf:49:95:b3:64:83:4c:eb:0e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581 Validity Not Before: Dec 6 05:01:02 2025 GMT Not After : Dec 7 05:01:02 2025 GMT Subject: CN=fc8bc16da081082e2692e72d14e539d6cef12fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:85:6c:65:1c:34:5a:5c:80:e1:eb:0d:59:52: bb:4b:0c:99:93:39:25:9b:b1:3a:db:da:77:95:59: cc:3a:e2:65:76:dc:2a:3d:e1:12:fe:4c:6c:44:84: 38:a2:e5:74:cb:64:8b:91:58:9c:22:22:9b:ae:17: 3e:e2:93:2c:af:e3:da:23:7d:76:c1:d5:98:5f:8e: 00:69:ca:2e:39:af:58:c5:ad:44:3b:01:89:de:7e: 2c:c7:a2:58:b4:ca:8e:82:c6:84:5d:16:d0:92:a4: e5:e2:f0:fa:75:93:51:e7:9e:fd:a1:2d:c4:cd:9e: b7:12:5e:fb:42:23:cc:dd:4c:42:ae:d7:76:81:58: 31:ec:32:24:76:41:3f:fd:c4:4e:82:e1:d3:21:fb: 3a:67:36:89:4c:26:55:4c:26:2e:ea:42:10:ad:61: 8e:ec:50:af:c5:ed:4c:91:9d:89:8c:af:2d:96:10: 21:68:a0:97:8b:45:0f:49:36:42:ea:22:7d:32:22: 5f:53:ca:95:57:2e:6f:30:81:64:05:43:aa:ec:43: f7:26:71:84:00:27:ad:f1:fe:73:de:de:6c:d3:76: 58:6e:f6:81:8e:ee:fa:24:a4:e3:12:b1:3b:03:25: 2a:17:c1:8e:3b:8c:4b:2f:cc:a5:83:8a:95:fa:12: b2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8B:C1:6D:A0:81:08:2E:26:92:E7:2D:14:E5:39:D6:CE:F1:2F:A4 X509v3 Authority Key Identifier: keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:12:1e:09:a6:e6:52:68:f9:19:56:87:85:30:f6:fa:c4:db: f5:ec:27:fe:7c:e3:74:f0:ee:ee:c9:82:c6:45:42:c1:ea:67: 8e:c6:8d:c3:c9:33:98:47:93:c1:52:6a:94:f8:0e:56:26:44: 9c:3b:82:fc:0a:1f:2e:d5:ab:96:f5:1c:c6:5b:73:bd:bd:e3: 6a:f9:3f:2e:6a:b5:e5:21:57:8d:7c:ff:82:8c:10:68:da:6a: a5:67:64:1d:9b:81:03:6d:f6:5f:66:d6:42:3b:e2:05:03:f5: 66:74:b8:2f:08:d8:62:13:8f:3d:48:db:76:4c:eb:01:31:09: 8f:bf:14:8b:bd:00:67:2c:aa:5e:9d:7a:63:a1:65:c2:59:fc: ed:7a:c3:05:47:37:be:dd:95:41:b0:39:fb:59:ee:2e:78:27: db:23:83:41:4a:e5:fe:d1:5e:66:de:39:33:7e:74:35:03:91: 2e:8e:5f:35:a5:7a:ee:93:36:ed:62:2f:0e:b6:8c:92:a1:57: c3:20:b5:b1:fb:ed:c4:a9:f8:a4:77:9f:87:d1:03:b9:2c:08: 52:00:05:d4:94:9d:55:5e:c7:4d:23:fe:c0:bf:4a:f7:f7:b7: 88:eb:55:1f:a2:75:e1:b0:e3:f1:8d:f7:c0:34:f1:a4:fc:5e: 34:4e:c9:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOyaLX7PSZWzZINM6w4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NTgzZjU4YzcxMTBhZDRjYzYwOWY0ZmZiN2NhYjJmODBj ODM1ODEwHhcNMjUxMjA2MDUwMTAyWhcNMjUxMjA3MDUwMTAyWjAzMTEwLwYDVQQD EyhmYzhiYzE2ZGEwODEwODJlMjY5MmU3MmQxNGU1MzlkNmNlZjEyZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYVsZRw0WlyA4esNWVK7SwyZkzkl m7E629p3lVnMOuJldtwqPeES/kxsRIQ4ouV0y2SLkVicIiKbrhc+4pMsr+PaI312 wdWYX44AacouOa9Yxa1EOwGJ3n4sx6JYtMqOgsaEXRbQkqTl4vD6dZNR5579oS3E zZ63El77QiPM3UxCrtd2gVgx7DIkdkE//cROguHTIfs6ZzaJTCZVTCYu6kIQrWGO 7FCvxe1MkZ2JjK8tlhAhaKCXi0UPSTZC6iJ9MiJfU8qVVy5vMIFkBUOq7EP3JnGE ACet8f5z3t5s03ZYbvaBju76JKTjErE7AyUqF8GOO4xLL8ylg4qV+hKy9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyLwW2ggQguJpLnLRTlOdbO8S+kMB8GA1UdIwQY MBaAFMZYP1jHEQrUzGCfT/t8qy+AyDWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMt M2Q1OTNlYmU1MjIwLzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMtM2Q1OTNlYmU1MjIw LzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArhIeCabm Umj5GVaHhTD2+sTb9ewn/nzjdPDu7smCxkVCwepnjsaNw8kzmEeTwVJqlPgOViZE nDuC/AofLtWrlvUcxltzvb3javk/Lmq15SFXjXz/gowQaNpqpWdkHZuBA232X2bW QjviBQP1ZnS4LwjYYhOPPUjbdkzrATEJj78Ui70AZyyqXp16Y6Flwln87XrDBUc3 vt2VQbA5+1nuLngn2yODQUrl/tFeZt45M350NQORLo5fNaV67pM27WIvDraMkqFX wyC1sfvtxKn4pHefh9EDuSwIUgAF1JSdVV7HTSP+wL9K9/e3iOtVH6J14bDj8Y33 wDTxpPxeNE7Jrg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:28:03 2025 by rpki-client