This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft File: xpWUB18xxROhM36RdZKQA35me_k.mft (raw, json) Hash identifier: B0990P7vy55LIEcVlxXmtif3Cu0T/Yq2cJbmEBHYalg= Subject key identifier: FF:60:0B:71:95:BC:DE:2E:94:C7:2A:D9:7B:F6:DE:BC:FA:7C:89:57 Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9 Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9 Certificate serial: 019B35D6FCECA6D04835842FBACAB0221153 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft Manifest number: 03EA Signing time: Fri 19 Dec 2025 09:00:40 +0000 Manifest this update: Fri 19 Dec 2025 09:00:40 +0000 Manifest next update: Sat 20 Dec 2025 09:00:40 +0000 Files and hashes: 1: INmTHMZsE_SqbdFkgIPWEnnNnuA.roa (hash: gXbWH54C+drRJZnXbEzI0DFd2J+yU0HljjT/VTaNTPc=) 2: xpWUB18xxROhM36RdZKQA35me_k.crl (hash: Kts9IB7uY+cP9Kgh1SZQo/cUuWjgGUoytYELSdGvSng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d6:fc:ec:a6:d0:48:35:84:2f:ba:ca:b0:22:11:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69594075f31c513a1337e91759290037e667bf9 Validity Not Before: Dec 19 09:00:40 2025 GMT Not After : Dec 20 09:00:40 2025 GMT Subject: CN=ff600b7195bcde2e94c72ad97bf6debcfa7c8957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:6f:aa:be:2b:72:56:14:5f:bc:9a:5f:b5: 57:ab:90:6a:e8:86:7e:20:c9:24:d8:fa:b9:de:83: e2:7d:bd:a4:7c:fd:3e:4a:ae:3b:21:03:49:ed:22: 20:33:24:d7:33:0d:92:4f:1e:23:19:ab:35:79:9e: 1f:57:1e:bf:fe:0a:ae:86:4a:8c:25:e7:0f:e4:05: e6:0f:38:d5:fc:d3:5b:bd:b7:a4:a9:d6:ee:b8:53: 12:11:3e:7a:e3:6a:48:90:2f:be:8d:13:ab:3f:b8: 50:e2:f7:29:19:65:e3:08:d9:a2:04:42:b0:c4:ae: 90:3c:39:75:ab:31:1d:4c:b2:e9:06:92:7b:48:0f: 44:3e:41:d5:35:e3:8e:00:b3:21:97:39:7d:35:b7: 04:b4:11:39:12:54:3e:a8:cc:c7:84:93:4f:a4:9d: 58:b6:51:c5:e6:23:d1:51:3d:cb:6f:26:10:bc:f6: 12:a0:28:b0:eb:f3:a0:f6:22:ce:28:7c:8a:2f:c3: 38:12:60:36:73:39:e3:d7:cb:a0:e9:94:8e:a9:fd: 98:fa:f0:be:17:88:3b:38:59:3f:e1:21:81:b6:34: a9:31:e6:8f:76:81:03:4a:99:55:91:93:c4:50:59: b8:99:55:54:5f:1d:40:d5:dd:48:3e:38:7e:c3:eb: e1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:60:0B:71:95:BC:DE:2E:94:C7:2A:D9:7B:F6:DE:BC:FA:7C:89:57 X509v3 Authority Key Identifier: keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:b7:06:f6:d7:f4:27:92:dd:70:f6:44:88:27:48:d0:21:47: 2d:50:8b:0d:5b:0a:63:12:b8:12:37:d3:d9:8d:1a:e9:c2:b8: f7:14:07:e3:0f:76:80:10:60:30:99:14:b5:29:ae:b2:21:fe: 9c:22:9c:ba:65:04:78:be:b1:c6:84:91:dc:d0:c7:38:f9:33: ae:11:59:25:c9:73:55:bc:c5:b6:f2:ae:2b:78:c3:76:f7:3d: 04:26:15:63:26:4e:4a:6c:e6:1f:99:8f:66:72:ff:b5:45:ce: b5:16:7f:05:fa:24:ae:e2:c1:ce:15:fe:06:a7:46:81:1b:2d: bd:55:b7:a7:87:1b:9c:e2:6c:84:ea:81:6c:71:d2:3a:31:9b: 03:5c:de:f0:99:f5:05:34:0c:58:03:6a:72:2e:59:50:2e:7b: cf:84:48:1f:78:e9:44:9d:15:53:00:4f:06:92:a5:22:e7:15: d6:03:06:32:a2:1b:1e:09:e5:0d:65:50:ea:38:4d:b7:e5:27: 05:c9:27:b3:52:bd:53:d8:35:a7:cf:36:01:b4:08:47:97:d6: b4:1d:e9:11:8f:e4:ce:47:5b:2e:47:c1:33:d6:1c:94:6f:4f: 55:82:be:ae:60:2c:a9:c9:23:cc:a1:36:05:b2:f2:04:49:49: ae:e3:bb:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11vzsptBINYQvusqwIhFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OTU5NDA3NWYzMWM1MTNhMTMzN2U5MTc1OTI5MDAzN2U2 NjdiZjkwHhcNMjUxMjE5MDkwMDQwWhcNMjUxMjIwMDkwMDQwWjAzMTEwLwYDVQQD EyhmZjYwMGI3MTk1YmNkZTJlOTRjNzJhZDk3YmY2ZGViY2ZhN2M4OTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtclvqr4rclYUX7yaX7VXq5Bq6IZ+ IMkk2Pq53oPifb2kfP0+Sq47IQNJ7SIgMyTXMw2STx4jGas1eZ4fVx6//gquhkqM JecP5AXmDzjV/NNbvbekqdbuuFMSET5642pIkC++jROrP7hQ4vcpGWXjCNmiBEKw xK6QPDl1qzEdTLLpBpJ7SA9EPkHVNeOOALMhlzl9NbcEtBE5ElQ+qMzHhJNPpJ1Y tlHF5iPRUT3LbyYQvPYSoCiw6/Og9iLOKHyKL8M4EmA2cznj18ug6ZSOqf2Y+vC+ F4g7OFk/4SGBtjSpMeaPdoEDSplVkZPEUFm4mVVUXx1A1d1IPjh+w+vhKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9gC3GVvN4ulMcq2Xv23rz6fIlXMB8GA1UdIwQY MBaAFMaVlAdfMcUToTN+kXWSkAN+Znv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHBXVUIxOHh4Uk9oTTM2UmRaS1FBMzVtZV9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MGJlYmUtYjY0Ny00YjlkLWFiNzYt MjI4OWM3N2EyZDM5LzEveHBXVUIxOHh4Uk9oTTM2UmRaS1FBMzVtZV9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy84MGJlYmUtYjY0Ny00YjlkLWFiNzYtMjI4OWM3N2EyZDM5 LzEveHBXVUIxOHh4Uk9oTTM2UmRaS1FBMzVtZV9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLcG9tf0 J5LdcPZEiCdI0CFHLVCLDVsKYxK4EjfT2Y0a6cK49xQH4w92gBBgMJkUtSmusiH+ nCKcumUEeL6xxoSR3NDHOPkzrhFZJclzVbzFtvKuK3jDdvc9BCYVYyZOSmzmH5mP ZnL/tUXOtRZ/BfokruLBzhX+BqdGgRstvVW3p4cbnOJshOqBbHHSOjGbA1ze8Jn1 BTQMWANqci5ZUC57z4RIH3jpRJ0VUwBPBpKlIucV1gMGMqIbHgnlDWVQ6jhNt+Un Bckns1K9U9g1p882AbQIR5fWtB3pEY/kzkdbLkfBM9YclG9PVYK+rmAsqckjzKE2 BbLyBElJruO7AQ== -----END CERTIFICATE-----Generated at Fri Dec 19 15:10:14 2025 by rpki-client