This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft File: XOMWuo-zBWfOy8cnBR02QA4lH8c.mft (raw, json) Hash identifier: kNODLrnGVyxT/5PYWtW3o3AkWMY/bZWkdrkEmOzFCaE= Subject key identifier: A5:3C:F6:DE:C9:57:B2:1F:01:8D:72:CF:4E:67:23:F2:AF:EB:17:5C Authority key identifier: 5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7 Certificate issuer: /CN=5ce316ba8fb30567cecbc727051d36400e251fc7 Certificate serial: 019B318C8CE4A4751C3C3623DDAB52960709 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft Manifest number: 055A Signing time: Thu 18 Dec 2025 13:00:53 +0000 Manifest this update: Thu 18 Dec 2025 13:00:53 +0000 Manifest next update: Fri 19 Dec 2025 13:00:53 +0000 Files and hashes: 1: XOMWuo-zBWfOy8cnBR02QA4lH8c.crl (hash: ukJ8wUJ6u0ff9Dh+VhJhSRk/+JIy/fQaliybkbzGi5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:8c:e4:a4:75:1c:3c:36:23:dd:ab:52:96:07:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ce316ba8fb30567cecbc727051d36400e251fc7 Validity Not Before: Dec 18 13:00:53 2025 GMT Not After : Dec 19 13:00:53 2025 GMT Subject: CN=a53cf6dec957b21f018d72cf4e6723f2afeb175c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:19:a2:7c:99:95:9d:e4:b6:a0:30:7d:83:44: 68:1f:4b:bd:22:e2:05:ec:ce:8a:04:76:d6:9e:8b: 48:e1:bb:90:00:3b:82:7d:a4:fa:39:4a:84:53:82: 8f:9f:f9:28:c9:5b:42:2b:33:e3:9b:bd:26:f9:79: c4:f0:91:49:23:07:58:ba:f4:43:04:aa:4c:9d:e2: 73:f3:1f:d0:84:c0:bc:bc:b7:68:c1:85:ca:82:a1: 2a:14:b5:b3:11:13:da:71:15:02:2c:34:8a:6e:6c: 49:4d:b1:88:b5:06:46:09:49:de:0e:de:67:74:31: bb:f1:44:ed:cf:1c:bb:a5:21:c3:87:c9:56:71:79: 8f:90:f6:15:3d:d0:37:e1:52:9d:c5:83:9c:3a:5e: e0:8f:32:f0:a3:d5:a5:3b:64:b9:8c:30:92:c5:af: 88:fa:3f:24:77:e5:c3:ec:88:72:f8:83:f5:c2:6f: 97:f7:5b:7c:da:b4:cd:1d:91:8e:a0:5c:7a:2c:7c: 09:2a:0f:94:a3:98:c5:40:60:22:4d:30:3f:69:3d: 49:38:7e:5b:bd:92:15:c9:10:8c:84:5a:58:15:7e: 1a:52:30:af:c0:bd:f7:a5:58:44:be:4c:b0:ea:48: 85:9c:35:1e:5a:ee:e5:e0:d2:29:91:13:0b:dc:9e: 2a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3C:F6:DE:C9:57:B2:1F:01:8D:72:CF:4E:67:23:F2:AF:EB:17:5C X509v3 Authority Key Identifier: keyid:5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3d:20:3f:01:b2:a6:a9:4f:57:cd:80:f0:6f:f4:eb:f3:cd: 5c:d9:cd:ea:6b:fa:ac:9a:dc:97:11:a8:08:5b:61:54:95:e8: 58:48:db:1e:44:ee:79:d7:32:33:1a:26:5d:ba:8f:b6:ed:b8: 64:24:2f:28:70:11:f6:60:c2:be:13:7e:91:fc:3c:74:35:6d: a0:17:b5:bf:ad:c6:ee:e5:c1:78:fd:2f:4b:76:43:b9:c6:f5: 9f:84:92:4f:f2:7c:03:d4:9c:52:42:f6:fc:6f:fc:72:f1:af: a1:8a:1f:b3:87:3b:b0:79:1c:01:4e:66:1c:97:4a:4d:48:4a: 0f:95:b1:aa:28:90:30:1a:51:ba:b9:d4:ba:52:eb:65:e1:3b: e8:5f:cf:12:ec:a3:7c:92:0e:c3:6f:e8:08:0a:9f:dd:a5:a5: 24:dc:42:c8:8e:5b:21:14:de:ee:3b:b3:59:18:ea:63:4d:55: ce:6c:e8:28:36:60:7b:d9:94:e2:6b:c5:2e:d3:cb:9d:12:54: ff:11:c6:01:3d:ee:a4:19:f5:0c:5a:39:24:9b:35:13:47:be: d7:4e:8d:b3:44:bc:8a:1c:47:14:5a:5b:9a:44:5c:38:68:1b: f1:2f:ec:d9:61:b5:ba:89:3a:1a:91:d1:ab:fc:17:08:6a:51: cf:4f:ec:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjIzkpHUcPDYj3atSlgcJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZTMxNmJhOGZiMzA1NjdjZWNiYzcyNzA1MWQzNjQwMGUy NTFmYzcwHhcNMjUxMjE4MTMwMDUzWhcNMjUxMjE5MTMwMDUzWjAzMTEwLwYDVQQD EyhhNTNjZjZkZWM5NTdiMjFmMDE4ZDcyY2Y0ZTY3MjNmMmFmZWIxNzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRmifJmVneS2oDB9g0RoH0u9IuIF 7M6KBHbWnotI4buQADuCfaT6OUqEU4KPn/koyVtCKzPjm70m+XnE8JFJIwdYuvRD BKpMneJz8x/QhMC8vLdowYXKgqEqFLWzERPacRUCLDSKbmxJTbGItQZGCUneDt5n dDG78UTtzxy7pSHDh8lWcXmPkPYVPdA34VKdxYOcOl7gjzLwo9WlO2S5jDCSxa+I +j8kd+XD7Ihy+IP1wm+X91t82rTNHZGOoFx6LHwJKg+Uo5jFQGAiTTA/aT1JOH5b vZIVyRCMhFpYFX4aUjCvwL33pVhEvkyw6kiFnDUeWu7l4NIpkRML3J4qgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKU89t7JV7IfAY1yz05nI/Kv6xdcMB8GA1UdIwQY MBaAFFzjFrqPswVnzsvHJwUdNkAOJR/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE9NV3VvLXpCV2ZPeThjbkJSMDJRQTRsSDhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8yNDdlZWYtZjcxYS00MjFmLWJiODYt MjY3MjlkODk0ZWY3LzEvWE9NV3VvLXpCV2ZPeThjbkJSMDJRQTRsSDhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8yNDdlZWYtZjcxYS00MjFmLWJiODYtMjY3MjlkODk0ZWY3 LzEvWE9NV3VvLXpCV2ZPeThjbkJSMDJRQTRsSDhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXT0gPwGy pqlPV82A8G/06/PNXNnN6mv6rJrclxGoCFthVJXoWEjbHkTuedcyMxomXbqPtu24 ZCQvKHAR9mDCvhN+kfw8dDVtoBe1v63G7uXBeP0vS3ZDucb1n4SST/J8A9ScUkL2 /G/8cvGvoYofs4c7sHkcAU5mHJdKTUhKD5WxqiiQMBpRurnUulLrZeE76F/PEuyj fJIOw2/oCAqf3aWlJNxCyI5bIRTe7juzWRjqY01VzmzoKDZge9mU4mvFLtPLnRJU /xHGAT3upBn1DFo5JJs1E0e+106Ns0S8ihxHFFpbmkRcOGgb8S/s2WG1uok6GpHR q/wXCGpRz0/sZA== -----END CERTIFICATE-----Generated at Thu Dec 18 20:38:22 2025 by rpki-client