This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft File: xpWUB18xxROhM36RdZKQA35me_k.mft (raw, json) Hash identifier: uDvIRw91WDjG17MKfU9rJkIMfLtWj2imqwR019JJlI8= Subject key identifier: D8:05:27:05:1B:15:1C:5A:22:AC:DE:59:E1:4D:2C:14:F9:30:D0:DE Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9 Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9 Certificate serial: 019AF23FF1AB6B35EED4BFE528B94D09B711 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft Manifest number: 03C7 Signing time: Sat 06 Dec 2025 06:01:08 +0000 Manifest this update: Sat 06 Dec 2025 06:01:08 +0000 Manifest next update: Sun 07 Dec 2025 06:01:08 +0000 Files and hashes: 1: INmTHMZsE_SqbdFkgIPWEnnNnuA.roa (hash: gXbWH54C+drRJZnXbEzI0DFd2J+yU0HljjT/VTaNTPc=) 2: xpWUB18xxROhM36RdZKQA35me_k.crl (hash: FGqvS905n/uV4Oh4orNj1BiIAoPJCf0geq0lajNiios=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f1:ab:6b:35:ee:d4:bf:e5:28:b9:4d:09:b7:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69594075f31c513a1337e91759290037e667bf9 Validity Not Before: Dec 6 06:01:08 2025 GMT Not After : Dec 7 06:01:08 2025 GMT Subject: CN=d80527051b151c5a22acde59e14d2c14f930d0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d7:12:ac:9f:1e:55:8b:02:29:c0:76:b1:6d: 59:ed:6e:81:f4:e1:15:f9:4d:2f:5c:85:f6:7d:d5: 4f:56:b5:67:91:56:05:11:f9:f7:e6:f5:ad:81:57: 8a:6f:1c:31:f8:05:74:be:6a:e4:9a:8d:3c:76:ee: 5d:4e:8a:01:f7:8e:e1:85:f7:41:29:f4:5c:fb:72: a3:27:21:d5:9d:bb:81:2f:35:59:d1:7b:15:e9:ba: 6b:00:bb:23:fc:4d:eb:26:42:42:f2:a2:c1:44:05: f6:cd:25:3c:63:5e:f0:26:13:07:f7:57:e7:1c:2a: d8:08:c9:d5:d0:5a:40:d0:6e:57:eb:82:0e:91:90: 3c:86:c7:ea:f9:26:08:92:03:65:78:26:77:aa:e2: 4a:c4:9d:30:03:17:d4:1e:3c:fc:ec:e9:d0:bf:3f: 70:c4:8b:be:c7:fd:40:aa:39:0d:c4:51:b3:d1:a9: ae:c3:d2:7b:01:44:1e:98:b6:66:bc:23:85:08:cb: 9b:f7:53:e3:0f:50:a2:cd:dd:5d:cb:a7:a5:e1:09: 39:f4:c1:15:32:0b:c8:4e:75:48:78:2a:dc:90:94: 80:90:8b:40:a1:61:b5:8a:9b:36:1a:2b:5e:a8:ed: 5d:ba:7d:c7:8d:8f:4b:20:4a:d4:7a:45:b9:33:fc: 33:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:05:27:05:1B:15:1C:5A:22:AC:DE:59:E1:4D:2C:14:F9:30:D0:DE X509v3 Authority Key Identifier: keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:aa:11:c3:0c:98:82:9d:c6:1d:88:f8:06:89:26:a8:00:c4: 9a:ad:b2:8c:cc:ee:15:6c:a2:60:84:1d:3e:bc:af:ce:c7:3e: 0b:fc:39:5b:66:9f:20:f2:9f:01:4c:5e:57:b3:0d:78:54:0c: 45:a9:ca:a4:a7:aa:dd:aa:17:97:10:b4:fc:19:bb:0e:63:fc: f4:f0:6c:15:24:93:0d:e9:5a:e1:6d:d6:44:be:0d:b8:0d:5a: 8e:ce:18:af:d9:d6:2c:a8:85:9b:81:df:0b:f5:0f:d5:0f:e6: e8:7e:74:df:cc:2b:dd:50:f9:d8:42:da:82:1f:5e:0d:20:42: 88:e1:26:22:de:be:7a:0e:0b:0c:f5:c9:61:3d:d6:b2:02:50: 4f:c1:e1:b6:f2:1e:d1:39:f2:e4:a4:1f:cd:fa:f0:26:28:d7: 70:c8:10:0f:ab:95:b1:3e:90:de:54:65:2f:1d:41:91:95:32: c7:38:2f:1a:6c:72:5d:ee:0a:e9:4f:d4:ee:ef:95:e3:4b:87: 1b:df:79:17:44:13:b2:61:71:e1:1e:ff:fe:39:22:45:53:a3: 5c:fe:a7:62:86:66:d7:49:39:52:9b:4d:61:d9:a8:af:0b:67: e4:50:6b:3a:4f:f2:c1:b2:4a:23:72:45:d9:4f:c8:e6:7a:4f: 33:c9:13:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/GrazXu1L/lKLlNCbcRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OTU5NDA3NWYzMWM1MTNhMTMzN2U5MTc1OTI5MDAzN2U2 NjdiZjkwHhcNMjUxMjA2MDYwMTA4WhcNMjUxMjA3MDYwMTA4WjAzMTEwLwYDVQQD EyhkODA1MjcwNTFiMTUxYzVhMjJhY2RlNTllMTRkMmMxNGY5MzBkMGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9cSrJ8eVYsCKcB2sW1Z7W6B9OEV +U0vXIX2fdVPVrVnkVYFEfn35vWtgVeKbxwx+AV0vmrkmo08du5dTooB947hhfdB KfRc+3KjJyHVnbuBLzVZ0XsV6bprALsj/E3rJkJC8qLBRAX2zSU8Y17wJhMH91fn HCrYCMnV0FpA0G5X64IOkZA8hsfq+SYIkgNleCZ3quJKxJ0wAxfUHjz87OnQvz9w xIu+x/1AqjkNxFGz0amuw9J7AUQemLZmvCOFCMub91PjD1Cizd1dy6el4Qk59MEV MgvITnVIeCrckJSAkItAoWG1ips2GiteqO1dun3HjY9LIErUekW5M/wz4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgFJwUbFRxaIqzeWeFNLBT5MNDeMB8GA1UdIwQY MBaAFMaVlAdfMcUToTN+kXWSkAN+Znv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHBXVUIxOHh4Uk9oTTM2UmRaS1FBMzVtZV9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MGJlYmUtYjY0Ny00YjlkLWFiNzYt MjI4OWM3N2EyZDM5LzEveHBXVUIxOHh4Uk9oTTM2UmRaS1FBMzVtZV9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy84MGJlYmUtYjY0Ny00YjlkLWFiNzYtMjI4OWM3N2EyZDM5 LzEveHBXVUIxOHh4Uk9oTTM2UmRaS1FBMzVtZV9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqoRwwyY gp3GHYj4BokmqADEmq2yjMzuFWyiYIQdPryvzsc+C/w5W2afIPKfAUxeV7MNeFQM RanKpKeq3aoXlxC0/Bm7DmP89PBsFSSTDela4W3WRL4NuA1ajs4Yr9nWLKiFm4Hf C/UP1Q/m6H5038wr3VD52ELagh9eDSBCiOEmIt6+eg4LDPXJYT3WsgJQT8HhtvIe 0Tny5KQfzfrwJijXcMgQD6uVsT6Q3lRlLx1BkZUyxzgvGmxyXe4K6U/U7u+V40uH G995F0QTsmFx4R7//jkiRVOjXP6nYoZm10k5UptNYdmorwtn5FBrOk/ywbJKI3JF 2U/I5npPM8kTww== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:47 2025 by rpki-client