This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft File: XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft (raw, json) Hash identifier: lQ9ShjSV+thg43tlz9hj/2KBVqJPFiURn94qoNnq2po= Subject key identifier: C9:3F:5A:BC:0F:95:15:8F:77:FB:7F:6D:F2:99:FD:F9:95:B8:8F:72 Authority key identifier: 5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61 Certificate issuer: /CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61 Certificate serial: 019B2B8A66948BCF8A38DF628264EEA2B344 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft Manifest number: 121A Signing time: Wed 17 Dec 2025 09:00:49 +0000 Manifest this update: Wed 17 Dec 2025 09:00:49 +0000 Manifest next update: Thu 18 Dec 2025 09:00:49 +0000 Files and hashes: 1: Cla5c1NehU4owZxYbWxe5QAstj0.roa (hash: kJV6jFD/Rf8rBVTNLGsW3TqMX9jv4tuD1CIR8TuTHbQ=) 2: XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl (hash: 9n0iRjssWEmUNk0m684lju4KJhjVn39H5CCzcsy5fYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:66:94:8b:cf:8a:38:df:62:82:64:ee:a2:b3:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61 Validity Not Before: Dec 17 09:00:49 2025 GMT Not After : Dec 18 09:00:49 2025 GMT Subject: CN=c93f5abc0f95158f77fb7f6df299fdf995b88f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d6:51:f3:25:b5:08:46:94:4d:44:ad:d4:26: 57:53:3f:d4:8b:74:d2:fd:2e:07:4c:b0:62:66:87: cd:c6:a5:3e:c8:9d:f8:dd:72:28:e9:03:41:19:df: c5:b1:ae:de:91:ff:fd:99:8c:42:13:72:24:1b:ea: 3a:b9:9b:10:bd:cb:cd:6e:45:50:a7:34:7d:45:ba: ee:ec:14:fa:6f:98:2c:0b:60:6d:eb:5b:14:ab:fd: 7b:92:95:13:2e:0f:73:36:77:8a:e6:71:2b:9f:eb: 06:a0:13:e0:18:ff:e6:e8:e9:82:32:a6:8b:0d:eb: cd:3a:b3:38:d0:b6:b2:08:fa:59:65:48:11:d7:9c: 4e:11:2c:08:b4:65:ee:ed:e3:ec:4f:a0:14:67:2a: 67:2d:71:a9:b2:d2:3d:64:19:af:a0:02:35:4f:c9: e4:e1:70:4e:a4:f1:22:30:dd:de:24:68:0d:6f:cd: 5a:9a:4f:cd:c0:f3:df:56:d7:d2:9c:6e:a6:9f:87: 59:13:a5:3e:7a:0b:99:61:af:7b:f5:a3:74:37:c7: 03:6d:7a:2b:8b:dd:56:d1:8b:a2:63:5f:08:b0:08: 40:6c:76:e9:16:05:6a:d6:35:fb:19:4f:bf:65:79: ee:c0:d0:ef:24:a2:33:f9:4b:df:ce:51:7f:a7:1c: fa:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3F:5A:BC:0F:95:15:8F:77:FB:7F:6D:F2:99:FD:F9:95:B8:8F:72 X509v3 Authority Key Identifier: keyid:5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:68:3f:1c:0d:04:51:12:ee:57:bd:0b:e6:3e:09:bc:b2:c5: 82:95:30:31:01:e8:4a:8b:c7:11:49:8e:31:1b:50:7e:83:62: cf:99:d8:e3:a5:72:5a:20:fe:d3:06:da:4c:7b:cd:cd:e9:87: 6f:86:72:55:d1:40:02:3c:09:ea:50:27:20:24:57:6e:c6:ce: e6:90:e3:3c:cf:56:83:c1:ba:8e:55:e7:dc:38:d2:b8:3a:0b: 90:98:a3:ca:01:f8:f9:f8:1e:4b:f2:9b:5f:9a:67:12:30:e6: 99:1b:4f:f5:b5:34:b8:3a:1d:4f:86:ae:67:78:de:23:98:c4: d6:c4:d5:34:7a:ce:b4:a3:52:03:1a:30:58:79:73:04:ef:e3: 02:0b:33:1e:c5:c0:fc:16:ee:25:35:42:1d:47:01:31:87:cf: 08:ae:6f:ce:83:68:6f:3c:25:ee:9e:8a:40:22:29:47:45:06: 58:1c:fb:04:9e:f8:f1:ac:d3:3f:e9:ff:0c:50:9a:6a:33:dc: b4:9e:b0:94:21:f2:fa:f1:2a:dd:a4:dc:86:88:eb:ff:cc:fc: 63:08:4f:61:59:ea:c4:36:9c:1b:1a:6e:50:09:12:52:b6:c3: e3:9d:60:48:58:16:0e:e4:60:28:c4:ab:04:19:fe:bb:5d:f8: 81:8f:bd:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrimaUi8+KON9igmTuorNEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNjM3M2Y1ZGY5OWQ4MjFkY2I1N2M3ZmI5MjAyZmI0Njg2 ZTVkNjEwHhcNMjUxMjE3MDkwMDQ5WhcNMjUxMjE4MDkwMDQ5WjAzMTEwLwYDVQQD EyhjOTNmNWFiYzBmOTUxNThmNzdmYjdmNmRmMjk5ZmRmOTk1Yjg4ZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9ZR8yW1CEaUTUSt1CZXUz/Ui3TS /S4HTLBiZofNxqU+yJ343XIo6QNBGd/Fsa7ekf/9mYxCE3IkG+o6uZsQvcvNbkVQ pzR9Rbru7BT6b5gsC2Bt61sUq/17kpUTLg9zNneK5nErn+sGoBPgGP/m6OmCMqaL DevNOrM40LayCPpZZUgR15xOESwItGXu7ePsT6AUZypnLXGpstI9ZBmvoAI1T8nk 4XBOpPEiMN3eJGgNb81amk/NwPPfVtfSnG6mn4dZE6U+eguZYa979aN0N8cDbXor i91W0YuiY18IsAhAbHbpFgVq1jX7GU+/ZXnuwNDvJKIz+UvfzlF/pxz6zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMk/WrwPlRWPd/t/bfKZ/fmVuI9yMB8GA1UdIwQY MBaAFF1jc/Xfmdgh3LV8f7kgL7Robl1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFdOejlkLVoyQ0hjdFh4X3VTQXZ0R2h1WFdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wYzkxMjgtYTA0My00NzhjLTk5MjAt YWQyMTUyODVjODY0LzEvWFdOejlkLVoyQ0hjdFh4X3VTQXZ0R2h1WFdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wYzkxMjgtYTA0My00NzhjLTk5MjAtYWQyMTUyODVjODY0 LzEvWFdOejlkLVoyQ0hjdFh4X3VTQXZ0R2h1WFdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGg/HA0E URLuV70L5j4JvLLFgpUwMQHoSovHEUmOMRtQfoNiz5nY46VyWiD+0wbaTHvNzemH b4ZyVdFAAjwJ6lAnICRXbsbO5pDjPM9Wg8G6jlXn3DjSuDoLkJijygH4+fgeS/Kb X5pnEjDmmRtP9bU0uDodT4auZ3jeI5jE1sTVNHrOtKNSAxowWHlzBO/jAgszHsXA /BbuJTVCHUcBMYfPCK5vzoNobzwl7p6KQCIpR0UGWBz7BJ748azTP+n/DFCaajPc tJ6wlCHy+vEq3aTchojr/8z8YwhPYVnqxDacGxpuUAkSUrbD451gSFgWDuRgKMSr BBn+u134gY+9xQ== -----END CERTIFICATE-----Generated at Wed Dec 17 17:04:12 2025 by rpki-client