This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft File: xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json) Hash identifier: 4kNlgvAcxXZaNvJEuaBeBEmoy/K0fB0438GRWC1hxNg= Subject key identifier: D6:71:D9:A1:D8:1B:57:CA:91:D0:C2:61:89:63:1B:E4:02:01:FA:F4 Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d Certificate serial: 019AF49BB7030E1FE1DE06F70B13ED85703B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 17:00:36 +0000 Manifest this update: Sat 06 Dec 2025 17:00:36 +0000 Manifest next update: Sun 07 Dec 2025 17:00:36 +0000 Files and hashes: 1: CzBENFpROta46Ahh1b9jdj6JXrk.roa (hash: L4tfWnC6wyVnCN7M94V7ANHnHcbMgExMDsrJgBJJe38=) 2: WppkWIxYDl7yRokwyQv6w_qkTkM.roa (hash: pMxyfIHw8b62QMs/8crKL+TvmHlR2BI1fy3D9pIMtBI=) 3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: cEcNLfsnALJnfi4OFy+y1Ek8DLqVJOIId3rdly92UEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:b7:03:0e:1f:e1:de:06:f7:0b:13:ed:85:70:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d Validity Not Before: Dec 6 17:00:36 2025 GMT Not After : Dec 7 17:00:36 2025 GMT Subject: CN=d671d9a1d81b57ca91d0c26189631be40201faf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:60:a2:60:7f:17:b0:88:fa:1a:3c:b5:03:d8: 12:8d:64:f9:11:10:ee:a2:82:93:11:f9:00:1e:bf: e0:77:27:7d:1b:99:85:dd:22:0a:3a:dc:18:db:d0: bf:91:6f:f9:7e:84:cf:78:33:cc:11:63:96:69:60: 91:30:99:a5:a9:a8:22:23:47:c9:c4:63:1f:7f:51: 05:ef:39:44:e7:21:21:af:4b:04:95:3b:b9:93:f9: 0c:32:b9:5a:e6:40:8b:61:26:19:05:9c:83:5b:47: 9f:a0:40:7f:6d:69:6d:bc:99:b2:b4:a7:98:93:02: a7:fd:8a:a2:3a:79:11:8e:be:13:06:bb:e7:17:6d: b9:cb:36:7c:43:0f:20:c8:df:db:8a:33:a7:f7:18: 87:29:35:1d:42:4e:60:10:e0:b6:1c:fb:1e:10:db: 3e:b8:1f:c3:e0:3c:d9:30:67:11:cc:05:89:f4:c0: d3:f8:c9:f8:bc:f4:fd:8d:5f:38:7e:56:66:51:78: ef:60:68:01:de:4b:30:83:9e:81:86:ba:9f:fc:41: 2f:06:60:e6:6e:65:6f:54:f6:06:94:37:6a:31:f7: d9:4c:d4:d0:b6:6a:f9:9b:90:ac:be:e5:d1:bb:2e: 74:15:8b:7c:a6:76:31:09:23:22:33:f3:ba:54:85: df:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:71:D9:A1:D8:1B:57:CA:91:D0:C2:61:89:63:1B:E4:02:01:FA:F4 X509v3 Authority Key Identifier: keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:b7:9c:2a:5a:ce:bd:95:4a:fb:c1:5e:ef:21:38:9c:c6:a6: ef:46:bb:b6:85:98:76:50:92:8e:cc:15:d3:0b:a3:fc:50:99: 9d:ba:f5:1c:b3:03:9c:ab:39:15:15:d7:72:5e:80:4c:e8:bf: 4c:9e:51:00:2e:01:b8:ca:20:63:dc:e3:a1:ac:56:6c:a7:0f: 1a:b6:11:db:e4:c4:c2:62:68:ec:f2:ff:87:34:52:d5:cf:8c: 5f:d0:4c:5f:84:1a:a0:0a:e6:0b:32:1c:f6:0f:83:f1:02:da: 3f:a8:63:c0:e8:57:6c:a9:f1:0e:18:77:94:fc:e3:ad:7f:38: c3:36:70:61:c3:f6:9c:e7:48:45:48:cd:5a:c3:d2:3d:10:32: 60:92:0b:9b:72:83:d3:98:78:66:a4:74:03:5b:38:7a:33:bb: 1f:6d:e8:e3:3a:a2:66:02:c8:45:8e:5d:5f:91:0a:fa:a4:46: cc:a7:f7:b0:d5:f6:b6:5f:f1:b8:25:c4:51:11:e6:15:c2:99: a0:ee:b2:23:3d:d7:78:93:bf:8d:fc:f9:2f:ce:e2:c9:1e:51: fd:32:4b:00:35:7a:88:06:b5:f9:6e:2d:5b:71:7a:fa:54:56: 50:56:a7:aa:db:36:97:4a:3c:f4:4b:bd:3c:43:10:03:44:5a: 7f:29:5a:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7cDDh/h3gb3CxPthXA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MDU4NzE4ODliOWRjYWZlN2VjMzEzNmFlZDFkZGZlZTJk ZmJjN2QwHhcNMjUxMjA2MTcwMDM2WhcNMjUxMjA3MTcwMDM2WjAzMTEwLwYDVQQD EyhkNjcxZDlhMWQ4MWI1N2NhOTFkMGMyNjE4OTYzMWJlNDAyMDFmYWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimCiYH8XsIj6Gjy1A9gSjWT5ERDu ooKTEfkAHr/gdyd9G5mF3SIKOtwY29C/kW/5foTPeDPMEWOWaWCRMJmlqagiI0fJ xGMff1EF7zlE5yEhr0sElTu5k/kMMrla5kCLYSYZBZyDW0efoEB/bWltvJmytKeY kwKn/YqiOnkRjr4TBrvnF225yzZ8Qw8gyN/bijOn9xiHKTUdQk5gEOC2HPseENs+ uB/D4DzZMGcRzAWJ9MDT+Mn4vPT9jV84flZmUXjvYGgB3kswg56Bhrqf/EEvBmDm bmVvVPYGlDdqMffZTNTQtmr5m5CsvuXRuy50FYt8pnYxCSMiM/O6VIXftwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZx2aHYG1fKkdDCYYljG+QCAfr0MB8GA1UdIwQY MBaAFMYFhxiJudyv5+wxNq7R3f7i37x9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGdXSEdJbTUzS19uN0RFMnJ0SGRfdUxmdkgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MDQ2YTYtZGVjYi00OWEzLWEzYjQt MzA4N2Y4NmE2M2FiLzEveGdXSEdJbTUzS19uN0RFMnJ0SGRfdUxmdkgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MDQ2YTYtZGVjYi00OWEzLWEzYjQtMzA4N2Y4NmE2M2Fi LzEveGdXSEdJbTUzS19uN0RFMnJ0SGRfdUxmdkgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbecKlrO vZVK+8Fe7yE4nMam70a7toWYdlCSjswV0wuj/FCZnbr1HLMDnKs5FRXXcl6ATOi/ TJ5RAC4BuMogY9zjoaxWbKcPGrYR2+TEwmJo7PL/hzRS1c+MX9BMX4QaoArmCzIc 9g+D8QLaP6hjwOhXbKnxDhh3lPzjrX84wzZwYcP2nOdIRUjNWsPSPRAyYJILm3KD 05h4ZqR0A1s4ejO7H23o4zqiZgLIRY5dX5EK+qRGzKf3sNX2tl/xuCXEURHmFcKZ oO6yIz3XeJO/jfz5L87iyR5R/TJLADV6iAa1+W4tW3F6+lRWUFanqts2l0o89Eu9 PEMQA0RafylajQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:21:20 2025 by rpki-client