This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft File: xpWUB18xxROhM36RdZKQA35me_k.mft (raw, json) Hash identifier: mmLg197eYOIcXg+uVqveXoTBTqXGuyALfMe/RlwurjQ= Subject key identifier: 79:77:AD:48:9F:38:B3:89:F1:8E:EE:85:1F:2E:46:D8:37:D2:2D:A5 Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9 Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9 Certificate serial: 019B454A1C3F718E0B0943D6D4CEAADF8B05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft Manifest number: 03F2 Signing time: Mon 22 Dec 2025 09:00:43 +0000 Manifest this update: Mon 22 Dec 2025 09:00:43 +0000 Manifest next update: Tue 23 Dec 2025 09:00:43 +0000 Files and hashes: 1: INmTHMZsE_SqbdFkgIPWEnnNnuA.roa (hash: gXbWH54C+drRJZnXbEzI0DFd2J+yU0HljjT/VTaNTPc=) 2: xpWUB18xxROhM36RdZKQA35me_k.crl (hash: CrwsFjQLufmpw+uMLqd9+fTKSi9Q7FwQlRIXG+vufDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:1c:3f:71:8e:0b:09:43:d6:d4:ce:aa:df:8b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69594075f31c513a1337e91759290037e667bf9 Validity Not Before: Dec 22 09:00:43 2025 GMT Not After : Dec 23 09:00:43 2025 GMT Subject: CN=7977ad489f38b389f18eee851f2e46d837d22da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a8:d4:c9:4c:bc:e3:5b:c0:e7:49:1b:3d:94: a5:db:27:8b:2a:e7:d6:8b:61:62:d8:58:f3:30:15: 91:88:db:c8:fb:f9:f4:8d:24:f1:a3:e6:07:fb:a7: 80:de:92:f1:bf:af:79:ed:86:08:20:fc:f3:80:4b: 32:3a:fa:30:c8:d1:cf:cb:4e:47:34:d6:6d:ce:a3: 65:a5:d0:92:3b:2c:09:6a:a6:05:61:2d:f5:a4:cd: bc:b7:b3:57:ba:e1:fc:4a:07:7e:d4:7c:94:d3:de: 8f:b8:02:0c:9c:db:4d:2c:19:4b:30:af:77:ab:c0: a0:ea:03:00:9f:ef:20:34:67:97:93:67:44:9d:88: 63:dd:6b:87:59:43:7c:ae:23:e7:04:3a:c4:c2:64: 9e:67:29:ad:87:b6:4b:7f:b2:24:29:fb:ce:ec:2e: e0:4f:82:1b:c3:52:19:93:bf:26:df:63:4a:cd:60: 15:c5:cc:25:55:6b:5b:87:57:41:f6:2f:4e:52:81: 34:1e:65:ad:e9:8e:ae:5b:c2:e1:9e:78:71:47:57: 1f:8d:83:b6:67:f9:70:f8:a7:86:f9:88:05:85:df: 7d:e5:6c:89:8d:2e:d5:ab:a5:2b:0d:1b:98:be:86: aa:9a:09:48:7b:95:15:77:34:7c:68:67:19:d8:2a: 5f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:77:AD:48:9F:38:B3:89:F1:8E:EE:85:1F:2E:46:D8:37:D2:2D:A5 X509v3 Authority Key Identifier: keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:fe:57:b8:ba:4b:2e:59:d7:f6:69:f0:1a:a5:7e:c8:65:96: 1d:b4:6c:4d:24:ba:7f:6e:16:08:fa:4b:16:0e:78:d2:c6:2a: d3:fe:0c:bb:d3:73:1f:e9:4b:e9:f4:bc:fa:38:9e:4a:0b:be: 0e:a0:c9:b0:18:ed:c7:29:58:eb:f6:ef:41:e8:1c:12:eb:d1: 84:f4:38:01:2c:c0:fd:ac:ce:9c:d5:42:8f:c8:2b:6e:b8:d8: 00:bb:7c:95:15:62:11:f5:29:7e:f4:7d:11:52:57:2b:f3:72: 3b:2a:74:07:2d:a7:e2:9f:f0:a5:1d:b3:76:5b:58:01:90:3f: 62:d7:10:37:f1:54:36:36:80:85:e0:67:dc:8e:59:8d:1d:03: 58:a2:74:8b:38:ae:2e:e4:5b:4c:ff:d4:80:58:a6:56:ba:d8: bc:d1:f9:c0:45:20:eb:6c:8f:57:31:7c:36:f9:35:9f:c5:d2: 33:c5:d7:7a:fa:4e:f7:41:bd:5d:26:39:97:78:7e:98:99:fc: fc:c9:e4:5f:73:f2:43:b8:5a:34:d1:ee:57:86:ed:a6:d5:be: 0b:c9:ea:39:46:96:16:7a:d0:3e:40:42:05:d7:0d:68:fc:b0: 8b:9d:09:b6:58:f4:10:5b:7e:4d:82:e3:07:7d:a6:8b:b3:56: 74:68:7f:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFShw/cY4LCUPW1M6q34sFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OTU5NDA3NWYzMWM1MTNhMTMzN2U5MTc1OTI5MDAzN2U2 NjdiZjkwHhcNMjUxMjIyMDkwMDQzWhcNMjUxMjIzMDkwMDQzWjAzMTEwLwYDVQQD Eyg3OTc3YWQ0ODlmMzhiMzg5ZjE4ZWVlODUxZjJlNDZkODM3ZDIyZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6jUyUy841vA50kbPZSl2yeLKufW i2Fi2FjzMBWRiNvI+/n0jSTxo+YH+6eA3pLxv6957YYIIPzzgEsyOvowyNHPy05H NNZtzqNlpdCSOywJaqYFYS31pM28t7NXuuH8Sgd+1HyU096PuAIMnNtNLBlLMK93 q8Cg6gMAn+8gNGeXk2dEnYhj3WuHWUN8riPnBDrEwmSeZymth7ZLf7IkKfvO7C7g T4Ibw1IZk78m32NKzWAVxcwlVWtbh1dB9i9OUoE0HmWt6Y6uW8LhnnhxR1cfjYO2 Z/lw+KeG+YgFhd995WyJjS7Vq6UrDRuYvoaqmglIe5UVdzR8aGcZ2CpfWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHl3rUifOLOJ8Y7uhR8uRtg30i2lMB8GA1UdIwQY MBaAFMaVlAdfMcUToTN+kXWSkAN+Znv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHBXVUIxOHh4Uk9oTTM2UmRaS1FBMzVtZV9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MGJlYmUtYjY0Ny00YjlkLWFiNzYt MjI4OWM3N2EyZDM5LzEveHBXVUIxOHh4Uk9oTTM2UmRaS1FBMzVtZV9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy84MGJlYmUtYjY0Ny00YjlkLWFiNzYtMjI4OWM3N2EyZDM5 LzEveHBXVUIxOHh4Uk9oTTM2UmRaS1FBMzVtZV9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGP5XuLpL LlnX9mnwGqV+yGWWHbRsTSS6f24WCPpLFg540sYq0/4Mu9NzH+lL6fS8+jieSgu+ DqDJsBjtxylY6/bvQegcEuvRhPQ4ASzA/azOnNVCj8grbrjYALt8lRViEfUpfvR9 EVJXK/NyOyp0By2n4p/wpR2zdltYAZA/YtcQN/FUNjaAheBn3I5ZjR0DWKJ0iziu LuRbTP/UgFimVrrYvNH5wEUg62yPVzF8Nvk1n8XSM8XXevpO90G9XSY5l3h+mJn8 /MnkX3PyQ7haNNHuV4btptW+C8nqOUaWFnrQPkBCBdcNaPywi50Jtlj0EFt+TYLj B32mi7NWdGh/Ew== -----END CERTIFICATE-----Generated at Mon Dec 22 12:58:16 2025 by rpki-client