This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft File: _xwhiBHZKUrWMSU6RF7R05WpY58.mft (raw, json) Hash identifier: iH4zcsfRjFYxhnnQWf3PZHGBbgbHHkXgeKOGTA2Rdis= Subject key identifier: 63:D2:19:4D:79:78:31:D4:DE:E1:2C:F4:57:3C:26:2A:A9:16:6C:22 Authority key identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F Certificate issuer: /CN=ff1c218811d9294ad631253a445ed1d395a9639f Certificate serial: 019B2D0C475A51CD631FFFDD6C7FAFB342FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft Manifest number: 15DB Signing time: Wed 17 Dec 2025 16:02:17 +0000 Manifest this update: Wed 17 Dec 2025 16:02:17 +0000 Manifest next update: Thu 18 Dec 2025 16:02:17 +0000 Files and hashes: 1: _xwhiBHZKUrWMSU6RF7R05WpY58.crl (hash: fZ5eJm8nWkvlUNuLUjLsPRqj5vsmNBLx2E6nSers9Go=) 2: v5mMLWDyDi7CQki8wtNGLvZaSFo.roa (hash: QY/aaNbMvjreUlmsWUFxIkBwGJaecYw8AUp+m4XK/7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:47:5a:51:cd:63:1f:ff:dd:6c:7f:af:b3:42:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff1c218811d9294ad631253a445ed1d395a9639f Validity Not Before: Dec 17 16:02:17 2025 GMT Not After : Dec 18 16:02:17 2025 GMT Subject: CN=63d2194d797831d4dee12cf4573c262aa9166c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cf:dd:2d:e6:27:e2:bb:b9:63:86:58:33:ae: 41:36:c8:08:c7:7f:5c:47:5e:b2:7d:87:d9:43:fb: 0f:29:5c:9b:80:98:f0:67:8f:9d:63:da:ba:ae:a5: a1:58:5e:6b:f2:6c:97:6e:36:04:1a:64:29:1c:c9: a3:2b:9d:b5:83:c0:29:9d:49:2d:df:ca:ba:d8:6f: f9:3f:1c:1f:4a:36:57:cd:45:af:ed:d2:6b:e6:70: 58:f6:4e:c8:73:e8:64:fe:75:7f:5c:62:12:dc:72: f9:6e:f7:32:3b:5d:d7:17:83:21:38:e8:a8:b4:58: 0c:6b:a8:f6:fb:56:60:12:61:7d:58:3f:3f:52:25: b2:7c:b8:9d:8f:9f:45:36:f9:e4:5a:f7:66:95:b1: 81:ed:b1:c4:72:f9:73:ef:db:bf:e6:45:08:fb:a3: 0c:be:9c:35:53:cf:b8:9c:a2:74:bd:f4:b9:dc:4b: 0d:ae:a9:cb:89:bb:0f:8f:3c:5c:f2:f1:e8:c7:da: bb:02:46:d6:2a:72:1b:bb:bf:02:44:fb:24:fb:61: 86:44:a1:c3:f7:0e:56:e5:71:9d:85:fd:af:60:b2: 77:64:af:45:32:57:71:72:45:0d:13:47:1b:40:72: d9:1f:60:3d:fe:5f:0d:03:35:08:b0:10:c4:9b:4e: 59:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D2:19:4D:79:78:31:D4:DE:E1:2C:F4:57:3C:26:2A:A9:16:6C:22 X509v3 Authority Key Identifier: keyid:FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4c:8b:aa:45:1c:67:83:20:e1:a4:c4:68:4e:a8:b1:55:94: 52:63:cf:de:d1:8c:fd:8c:3d:6e:fd:ac:e9:09:45:a8:98:e3: 70:c3:1d:19:76:1a:f9:fc:6a:47:a0:97:f4:dc:0e:0f:21:3f: 61:02:c7:23:41:ff:60:cf:b8:8e:88:3f:68:70:43:1d:a2:2c: a1:c0:08:25:3b:b1:41:ed:66:3c:df:81:fd:58:63:1c:d3:ac: 5d:51:73:69:e0:ee:9a:28:0b:d0:e3:d1:a7:f8:32:74:21:40: 68:80:d2:a4:85:f2:bc:d7:c9:d7:b9:93:42:5c:6a:cb:c2:3d: c7:00:1a:68:a4:18:0a:e3:b2:94:8f:d4:04:42:30:74:64:24: f8:37:41:87:1d:70:57:eb:84:20:9f:59:c2:36:ac:7e:b5:67: f1:33:9a:e8:05:c0:7a:7d:aa:2b:65:80:c8:5b:24:18:2b:30: 51:fd:db:c0:87:3e:32:dc:cc:38:5f:97:eb:01:1c:55:02:4f: be:af:77:a5:20:20:c4:99:3e:32:ea:14:a4:b7:b9:98:6f:27: ae:16:26:8d:ee:3a:45:c0:87:47:4e:36:fa:36:23:d7:84:b1: 1b:cd:fe:88:aa:f5:a2:e3:c9:d1:50:6b:c3:d1:7a:ad:a8:d1: 09:01:66:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDEdaUc1jH//dbH+vs0L/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMWMyMTg4MTFkOTI5NGFkNjMxMjUzYTQ0NWVkMWQzOTVh OTYzOWYwHhcNMjUxMjE3MTYwMjE3WhcNMjUxMjE4MTYwMjE3WjAzMTEwLwYDVQQD Eyg2M2QyMTk0ZDc5NzgzMWQ0ZGVlMTJjZjQ1NzNjMjYyYWE5MTY2YzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys/dLeYn4ru5Y4ZYM65BNsgIx39c R16yfYfZQ/sPKVybgJjwZ4+dY9q6rqWhWF5r8myXbjYEGmQpHMmjK521g8ApnUkt 38q62G/5PxwfSjZXzUWv7dJr5nBY9k7Ic+hk/nV/XGIS3HL5bvcyO13XF4MhOOio tFgMa6j2+1ZgEmF9WD8/UiWyfLidj59FNvnkWvdmlbGB7bHEcvlz79u/5kUI+6MM vpw1U8+4nKJ0vfS53EsNrqnLibsPjzxc8vHox9q7AkbWKnIbu78CRPsk+2GGRKHD 9w5W5XGdhf2vYLJ3ZK9FMldxckUNE0cbQHLZH2A9/l8NAzUIsBDEm05ZBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPSGU15eDHU3uEs9Fc8JiqpFmwiMB8GA1UdIwQY MBaAFP8cIYgR2SlK1jElOkRe0dOVqWOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3h3aGlCSFpLVXJXTVNVNlJGN1IwNVdwWTU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYzZiMTQtN2U4Ny00OWM3LWEzYjMt YTBhNjBiYjljZDliLzEvX3h3aGlCSFpLVXJXTVNVNlJGN1IwNVdwWTU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yYzZiMTQtN2U4Ny00OWM3LWEzYjMtYTBhNjBiYjljZDli LzEvX3h3aGlCSFpLVXJXTVNVNlJGN1IwNVdwWTU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakyLqkUc Z4Mg4aTEaE6osVWUUmPP3tGM/Yw9bv2s6QlFqJjjcMMdGXYa+fxqR6CX9NwODyE/ YQLHI0H/YM+4jog/aHBDHaIsocAIJTuxQe1mPN+B/VhjHNOsXVFzaeDumigL0OPR p/gydCFAaIDSpIXyvNfJ17mTQlxqy8I9xwAaaKQYCuOylI/UBEIwdGQk+DdBhx1w V+uEIJ9ZwjasfrVn8TOa6AXAen2qK2WAyFskGCswUf3bwIc+MtzMOF+X6wEcVQJP vq93pSAgxJk+MuoUpLe5mG8nrhYmje46RcCHR042+jYj14SxG83+iKr1ouPJ0VBr w9F6rajRCQFmBg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:28:29 2025 by rpki-client