This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: N94jKqHGlG4JdSdttmPesWVeui1INdwQjTTKiFJUFBo= Subject key identifier: 97:62:A1:34:C1:3E:16:A7:DA:72:D9:D9:C1:9F:9A:01:5D:A5:43:CC Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019B318D066606A803FF12FFAF458F1FB278 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0E17 Signing time: Thu 18 Dec 2025 13:01:24 +0000 Manifest this update: Thu 18 Dec 2025 13:01:24 +0000 Manifest next update: Fri 19 Dec 2025 13:01:24 +0000 Files and hashes: 1: 1C6P3GNOT9xCFcwCmWzySJRmx5A.roa (hash: s0f2U+jT20UZ968tvSAQBzHf4LLoAyTWw5fawKSyypo=) 2: 7uN2APKNMZUlxFAFIqYBRSCqDys.roa (hash: QOcGptnbwVOmKz9OIjxqVqiamHhCIYE4sShS5ZJ4aTM=) 3: IczkJXhr43WZT8v3yUWzEcJkBw0.roa (hash: LTXwRLr/WDRhlKr3y2cS8nQZO+NDEwmFh5j+X2jc1m0=) 4: K2uuH_N48kKDciCwYZZbSGxL28M.roa (hash: NsG2a8yGOGdFAhdHDu05B3aeAtofcTDzN6smpf4V84k=) 5: LBUZqsrF0Xi_tysp5fgmsqKHu6U.roa (hash: bW1H7SUVyNKU/d0SmTWJeMi8GRblO5Rw7PlbZQty7ek=) 6: NlsrM9j9VUiM42jtu0FZB88d1z8.roa (hash: 6PC/+zU3u3k/HKNCn3GHAiUb1zNn0DzxWjzqB9gdYy8=) 7: NulfbGD931XSEsWr8c6jWUL0R7Q.roa (hash: D+CXPQA8XOJm5kR7y6lx84ZALTBUpzFwD/yKT0THj0Y=) 8: Pn1Np93Fy5qllPMGwWd35SbCmNc.roa (hash: cJbqPsoGlyN2ttzOkuToXlqtqEo9ySrbCbr6liDOEGE=) 9: UsNIdz_x5mIF5xcKEVGVl_xXGJ4.roa (hash: DsadB7AkI1D6cE6zFHkD7luRohhY7h45wj6tqzPB3BY=) 10: VDkpUnsSEJjoQKN_SH5M51QJ0lQ.roa (hash: QbW1pR7wXkDRNg+GzvouMFRHYHZ7/eJ/CEgLt387C28=) 11: i7rWRuwzlkV8xCOhfpRpRle8KzA.roa (hash: At8E6e7EApB6fVuxCLUU7eIRYkhnemVz7pgrhH1erSM=) 12: mblfFy3mNdc1SwdAwOx5WQVE19A.roa (hash: C/C7a/Hgr0VETCqfGTruKe1/3x5QgzdC+FE6I3TYrWQ=) 13: o-58M0Oov2ZZz-Rl1Tywa9Uvd40.roa (hash: 0gFyw1TvnqI82S5Ak8R3q+0sFKi4FqNHCfwpsRB+ZM0=) 14: rQUffzmZx3UaMv2Z1sJaJ9Cotdw.roa (hash: 6IztPYrajYy5c8tTQhRlMBRKi0qqEFrjSmseUv+lHCw=) 15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: dCRysqSUFUVCcir2bZezW0KqDwYyNOlyQu/iDuYPcCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8d:06:66:06:a8:03:ff:12:ff:af:45:8f:1f:b2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Dec 18 13:01:24 2025 GMT Not After : Dec 19 13:01:24 2025 GMT Subject: CN=9762a134c13e16a7da72d9d9c19f9a015da543cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:6a:dd:13:8a:4b:bb:44:c9:3e:d7:8a:b7: 88:01:82:8b:a8:f9:1b:ad:cb:1d:d3:90:b0:de:3f: 88:36:a3:4d:95:98:43:15:eb:a5:b7:ad:14:be:ab: e8:54:12:cf:10:4b:60:f2:bd:ba:46:52:89:d6:77: c3:2b:b9:27:4b:40:21:60:38:3f:4e:63:dc:a5:e3: 27:af:19:10:f4:66:3a:b7:3f:88:f3:7a:e5:74:24: 8c:7c:06:fc:3a:e0:38:7a:46:ce:5f:bc:11:c3:72: 25:61:09:86:e0:2b:9e:a4:cd:65:3f:8c:ad:37:e3: 07:db:de:e5:0d:ff:49:83:22:23:5c:34:09:d5:a8: 4e:72:79:c7:91:56:50:8a:f0:34:92:17:6d:cc:3f: 8a:aa:0d:76:32:5d:de:ff:66:7f:3d:a6:d2:fd:cf: 2b:5f:be:79:96:f3:28:9a:fa:2a:16:4f:19:ac:ac: 34:bd:4f:0f:b6:11:38:3b:ee:7a:00:19:35:d0:28: 60:04:ff:87:31:dd:f1:a4:21:fe:1a:f1:16:42:58: 19:68:41:c8:ac:0e:05:25:89:64:86:05:2d:47:a6: 53:57:32:d3:86:95:53:a2:e1:1b:c4:76:b9:8b:ea: 3a:bf:12:bc:13:13:37:27:29:47:73:f3:14:25:ad: 1d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:62:A1:34:C1:3E:16:A7:DA:72:D9:D9:C1:9F:9A:01:5D:A5:43:CC X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b2:c6:88:82:c8:7b:bf:88:9a:c3:4a:61:4b:b2:36:0e:ce: 44:86:d3:f6:7d:d7:05:50:5c:87:f8:ce:9b:be:b8:08:d5:fe: 0d:1a:1e:8b:1a:6e:54:0c:fc:1a:49:b5:f0:6d:f0:f3:e3:63: 9a:4e:6d:a3:5e:ed:da:0e:1c:7d:12:18:c4:cc:52:8b:e1:6b: 57:f4:87:e4:98:f5:7d:d1:04:72:b3:af:50:25:c4:bd:ec:8e: a2:d3:b7:2f:a6:69:47:53:37:2e:ca:bd:af:c1:98:2c:bb:4e: 17:f1:d6:88:40:e6:51:69:e0:d3:2f:5d:a5:f6:0f:b2:0a:99: 7a:98:f8:31:06:5f:50:48:79:f0:22:67:a7:c7:5c:9f:0a:40: fa:2b:0a:41:63:18:e5:9d:3b:7b:47:97:ac:1a:8b:1b:9f:3c: d1:57:6d:e1:00:a0:19:aa:3e:3c:34:55:d7:64:cd:64:1a:da: 84:04:d4:28:a3:7a:2b:c1:85:5f:15:2a:99:a2:aa:24:66:db: 56:33:ea:12:55:0c:00:a8:9d:f4:c0:cf:56:21:bb:10:9a:1e: 58:b7:e8:e6:51:dc:73:ab:3f:bf:49:01:ac:b8:7d:3c:39:f5: 22:79:7f:33:4d:1a:bc:0a:14:04:46:e5:38:e2:ee:00:c6:68: 71:73:ed:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjQZmBqgD/xL/r0WPH7J4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjUxMjE4MTMwMTI0WhcNMjUxMjE5MTMwMTI0WjAzMTEwLwYDVQQD Eyg5NzYyYTEzNGMxM2UxNmE3ZGE3MmQ5ZDljMTlmOWEwMTVkYTU0M2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJtq3ROKS7tEyT7XireIAYKLqPkb rcsd05Cw3j+INqNNlZhDFeult60UvqvoVBLPEEtg8r26RlKJ1nfDK7knS0AhYDg/ TmPcpeMnrxkQ9GY6tz+I83rldCSMfAb8OuA4ekbOX7wRw3IlYQmG4CuepM1lP4yt N+MH297lDf9JgyIjXDQJ1ahOcnnHkVZQivA0khdtzD+Kqg12Ml3e/2Z/PabS/c8r X755lvMomvoqFk8ZrKw0vU8PthE4O+56ABk10ChgBP+HMd3xpCH+GvEWQlgZaEHI rA4FJYlkhgUtR6ZTVzLThpVTouEbxHa5i+o6vxK8ExM3JylHc/MUJa0dkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdioTTBPhan2nLZ2cGfmgFdpUPMMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrLGiILI e7+ImsNKYUuyNg7ORIbT9n3XBVBch/jOm764CNX+DRoeixpuVAz8Gkm18G3w8+Nj mk5to17t2g4cfRIYxMxSi+FrV/SH5Jj1fdEEcrOvUCXEveyOotO3L6ZpR1M3Lsq9 r8GYLLtOF/HWiEDmUWng0y9dpfYPsgqZepj4MQZfUEh58CJnp8dcnwpA+isKQWMY 5Z07e0eXrBqLG5880Vdt4QCgGao+PDRV12TNZBrahATUKKN6K8GFXxUqmaKqJGbb VjPqElUMAKid9MDPViG7EJoeWLfo5lHcc6s/v0kBrLh9PDn1Inl/M00avAoUBEbl OOLuAMZocXPtvg== -----END CERTIFICATE-----Generated at Thu Dec 18 19:12:27 2025 by rpki-client