This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft File: xWwoao20vSFr9kx1szhRsARaF18.mft (raw, json) Hash identifier: h+iAqNgdfR5+P/DWhpJDh3A20PIAT1/4FXbsYnriYo4= Subject key identifier: 1C:42:12:D1:7D:FE:C9:A1:FF:17:2A:44:54:CF:9E:18:BD:A8:15:D1 Authority key identifier: C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F Certificate issuer: /CN=c56c286a8db4bd216bf64c75b33851b0045a175f Certificate serial: 019B3FB65BE7B4BB5B1BFFCB2C702531A9D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft Manifest number: 0BED Signing time: Sun 21 Dec 2025 07:01:14 +0000 Manifest this update: Sun 21 Dec 2025 07:01:14 +0000 Manifest next update: Mon 22 Dec 2025 07:01:14 +0000 Files and hashes: 1: wOQLTyNlgBk7kHZo7q30HbmjjsY.roa (hash: O4xN+z+lCTMoO1c7Ks6bcLVzrUBSXozi3e98+4QxAps=) 2: xWwoao20vSFr9kx1szhRsARaF18.crl (hash: ZMKlXqHThRkjPvWmJ/td1Vhg3JTiGsBSlS0P+DzoTxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:5b:e7:b4:bb:5b:1b:ff:cb:2c:70:25:31:a9:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c56c286a8db4bd216bf64c75b33851b0045a175f Validity Not Before: Dec 21 07:01:14 2025 GMT Not After : Dec 22 07:01:14 2025 GMT Subject: CN=1c4212d17dfec9a1ff172a4454cf9e18bda815d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:50:1b:64:0e:ec:f2:1a:fc:cb:01:a9:e7:ee: be:23:2a:af:ed:f9:70:13:57:b6:19:22:57:d0:e5: bc:c5:aa:a8:85:60:e9:f4:66:40:d7:ad:f8:50:c0: 9c:de:44:c0:96:48:ff:7f:cc:c5:72:4b:d6:37:d2: 82:3c:ac:63:9f:92:a5:60:39:0e:27:30:07:1a:98: e2:cd:a9:c5:67:b4:9d:27:c5:e1:72:d5:38:0d:33: a7:b2:80:fd:0e:63:37:55:8a:70:96:40:77:de:a7: 3e:06:31:42:61:d9:aa:f3:12:81:7c:e7:1a:40:8f: bf:21:d2:c9:89:5e:b7:f5:4e:fd:1f:5e:bc:fe:31: c7:09:9c:39:79:32:ee:6a:0d:8a:df:dd:aa:b7:fe: f2:0e:1f:9c:67:20:d7:7b:54:98:ae:6f:d9:8b:da: cc:de:33:f8:ba:b4:d6:13:73:1f:ba:4d:fa:7d:f7: cd:67:6a:7f:98:58:7a:61:1f:db:ac:c6:c6:d9:20: 3f:c0:17:af:d2:ce:1b:37:c6:07:d8:a1:d7:3d:d9: 45:ca:1f:c3:3a:4c:30:93:f2:29:7c:e8:94:cb:0d: 0e:7a:c8:c6:09:b0:d6:af:a4:f7:30:d6:9b:db:89: 32:7f:ab:6d:93:0d:02:a6:7a:c8:55:50:6f:f7:9d: 5b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:42:12:D1:7D:FE:C9:A1:FF:17:2A:44:54:CF:9E:18:BD:A8:15:D1 X509v3 Authority Key Identifier: keyid:C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2f:29:d8:1a:1f:b5:54:39:08:9d:fb:9e:19:b4:56:c0:56: c5:0d:06:b1:3c:81:40:a0:f0:6b:ca:22:b5:2e:95:6e:a1:fd: 08:71:4e:0e:f1:66:23:c7:4a:22:d1:cd:76:12:21:3b:8a:e7: 74:e6:8f:20:1c:2c:0f:7f:02:0f:2a:60:ab:29:c3:09:7c:b1: d6:68:20:74:bc:e9:17:9e:e6:30:ae:e9:8a:48:c6:59:92:ac: 48:cc:f5:33:f3:9a:d8:33:5e:43:ae:62:4d:dc:a4:3e:43:b3: ae:c7:ef:12:e3:4c:88:3f:71:ff:6e:55:4f:73:a1:38:df:1a: bc:06:8c:4b:8e:24:b7:41:e6:7d:cf:ce:95:23:9b:aa:69:45: 66:bc:21:8a:11:fb:25:c4:24:fd:85:7f:31:14:52:41:c1:96: b6:25:37:53:99:65:d7:34:53:64:93:d1:3d:16:45:aa:67:e3: 1d:e6:cc:10:a4:5b:9d:65:b5:fc:69:68:c8:fd:00:04:73:93: 6d:ec:a5:4a:3b:9c:82:75:8e:b2:e4:ac:0f:4b:b3:4b:32:d9: 7a:59:38:9b:58:20:38:2f:5f:99:a1:ee:b6:e8:0a:6c:40:63: 41:32:d2:32:d2:67:d6:ab:5e:33:c5:61:70:3e:56:72:da:2c: 65:4f:47:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tlvntLtbG//LLHAlManVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NmMyODZhOGRiNGJkMjE2YmY2NGM3NWIzMzg1MWIwMDQ1 YTE3NWYwHhcNMjUxMjIxMDcwMTE0WhcNMjUxMjIyMDcwMTE0WjAzMTEwLwYDVQQD EygxYzQyMTJkMTdkZmVjOWExZmYxNzJhNDQ1NGNmOWUxOGJkYTgxNWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+VAbZA7s8hr8ywGp5+6+Iyqv7flw E1e2GSJX0OW8xaqohWDp9GZA1634UMCc3kTAlkj/f8zFckvWN9KCPKxjn5KlYDkO JzAHGpjizanFZ7SdJ8XhctU4DTOnsoD9DmM3VYpwlkB33qc+BjFCYdmq8xKBfOca QI+/IdLJiV639U79H168/jHHCZw5eTLuag2K392qt/7yDh+cZyDXe1SYrm/Zi9rM 3jP4urTWE3Mfuk36fffNZ2p/mFh6YR/brMbG2SA/wBev0s4bN8YH2KHXPdlFyh/D Okwwk/IpfOiUyw0OesjGCbDWr6T3MNab24kyf6ttkw0CpnrIVVBv951bWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxCEtF9/smh/xcqRFTPnhi9qBXRMB8GA1UdIwQY MBaAFMVsKGqNtL0ha/ZMdbM4UbAEWhdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFd3b2FvMjB2U0ZyOWt4MXN6aFJzQVJhRjE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85YzA5MTMtMDMwMS00YWQ0LWI5Mzkt ODEzNDliMDJhMmQ5LzEveFd3b2FvMjB2U0ZyOWt4MXN6aFJzQVJhRjE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85YzA5MTMtMDMwMS00YWQ0LWI5MzktODEzNDliMDJhMmQ5 LzEveFd3b2FvMjB2U0ZyOWt4MXN6aFJzQVJhRjE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXy8p2Bof tVQ5CJ37nhm0VsBWxQ0GsTyBQKDwa8oitS6VbqH9CHFODvFmI8dKItHNdhIhO4rn dOaPIBwsD38CDypgqynDCXyx1mggdLzpF57mMK7pikjGWZKsSMz1M/Oa2DNeQ65i TdykPkOzrsfvEuNMiD9x/25VT3OhON8avAaMS44kt0Hmfc/OlSObqmlFZrwhihH7 JcQk/YV/MRRSQcGWtiU3U5ll1zRTZJPRPRZFqmfjHebMEKRbnWW1/GloyP0ABHOT beylSjucgnWOsuSsD0uzSzLZelk4m1ggOC9fmaHutugKbEBjQTLSMtJn1qteM8Vh cD5WctosZU9HTQ== -----END CERTIFICATE-----Generated at Sun Dec 21 14:42:56 2025 by rpki-client