This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft File: ex9VfuJjyzWaGeos1_oOjJE563Y.mft (raw, json) Hash identifier: fUvl9XV0neL5VVXcViQK0Tt6SfLH9cJ9a2h9SwvAZfM= Subject key identifier: 3D:40:47:F7:B3:39:0B:A3:88:F7:28:13:66:33:51:FE:9B:88:AC:E0 Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76 Certificate issuer: /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76 Certificate serial: 019B3CB546389153246E26DF5AD1A61425F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 17:01:11 +0000 Manifest this update: Sat 20 Dec 2025 17:01:11 +0000 Manifest next update: Sun 21 Dec 2025 17:01:11 +0000 Files and hashes: 1: 6Sxszx8NiFM_JbWUMjBDeEvUps8.roa (hash: 8MVKcBrtv6jJ845AEcn3hP00h2PQrFrI39BtX0LnXv4=) 2: Ha78yg7qqGZ0v8W1DWmHUAWoLSA.roa (hash: mO1w4kIt1AKbmRPhw4OwRAWPyk0O9BdOZhhOqd4nLR0=) 3: ex9VfuJjyzWaGeos1_oOjJE563Y.crl (hash: O8AeB8UND684/fQbqWyVzKhgOq3ISfyG32/+BcHugtc=) 4: xVoWPteOkysGzMqfxgi3XvQDa0c.roa (hash: y5AR4qkIxHvuU7VtfK3TX7mIOGmTaWSa06ypi+bML3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:46:38:91:53:24:6e:26:df:5a:d1:a6:14:25:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76 Validity Not Before: Dec 20 17:01:11 2025 GMT Not After : Dec 21 17:01:11 2025 GMT Subject: CN=3d4047f7b3390ba388f72813663351fe9b88ace0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:aa:e9:3a:5a:30:d6:c4:80:0d:45:c1:36:3f: fe:b3:a1:bf:bd:b7:d0:ce:56:2b:0a:0f:23:58:2b: 04:40:0d:d6:4e:7a:a5:64:9e:49:97:a2:40:7a:07: 9d:a6:72:1b:ac:5c:a6:51:d4:a1:ca:8f:6e:3c:b1: 9b:69:98:63:8a:9d:8e:52:33:c0:94:46:f8:05:f4: ba:de:99:f7:bb:e9:7d:df:18:1d:f0:51:24:64:c6: b1:ca:a1:9a:7e:82:13:d6:97:6e:53:55:b7:d3:f6: 82:1a:f0:cf:13:07:da:f6:73:bb:0c:a9:58:71:9d: 52:12:e0:77:e7:2d:97:eb:6b:3f:9d:b1:68:1a:63: 35:14:4d:82:05:b1:9e:29:e8:81:2e:f9:96:ae:a1: c3:ec:a1:83:65:d1:2a:32:50:83:36:99:37:45:45: 2a:8e:af:db:43:d9:af:72:fd:dc:86:34:12:8b:c5: 46:93:e4:71:7b:c6:b1:35:7c:78:6f:fb:6a:a3:18: a8:14:44:60:cc:9a:9c:92:ac:64:26:26:b5:dd:35: a9:a9:1c:96:f9:a0:07:e5:d9:f6:52:25:7f:8c:86: c0:22:09:e4:ce:1e:5e:23:c9:66:c2:a3:1c:be:b5: 4e:dc:39:5c:d3:1e:b3:31:0c:64:99:7f:44:0b:cf: 64:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:40:47:F7:B3:39:0B:A3:88:F7:28:13:66:33:51:FE:9B:88:AC:E0 X509v3 Authority Key Identifier: keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a2:3d:10:4c:ce:99:16:06:e2:a7:a2:db:16:e4:6a:d9:c0: 39:32:4a:d6:d8:af:2d:4e:b9:8d:cf:8b:d9:05:cb:d7:f1:ce: 54:95:a1:f6:7f:b3:a1:19:4c:98:7d:77:40:71:24:09:14:af: 01:ce:99:d2:73:60:05:00:ae:d5:ed:6e:c1:27:90:9b:8b:57: da:5a:f9:3f:05:f5:99:bb:ef:e6:dd:9e:b2:d7:22:bf:8e:fd: 50:37:38:ac:63:63:98:56:86:b2:22:b5:f8:61:e1:37:dd:d0: 14:35:9a:5f:c2:d3:3a:e3:8a:7c:82:44:cb:0a:01:8c:0b:9a: 13:13:29:1b:58:70:9c:97:a8:d9:fd:bb:6b:37:54:ab:a5:be: 58:29:eb:16:70:62:6c:03:54:dc:99:aa:3d:6c:52:c9:79:b2: 77:3a:9e:11:d2:7f:da:c7:a4:4d:51:a5:78:5f:5e:b6:73:f5: b4:3e:b3:5e:88:79:f4:89:77:88:c8:9b:f7:48:eb:c7:02:88: d2:a4:92:02:9a:27:cb:5e:69:e2:59:96:b8:74:9b:74:07:2c: 58:ce:dc:1d:6b:f8:1f:3c:74:bb:6b:ea:d3:0d:80:e7:1a:8f: 10:01:50:a2:71:a3:ac:87:ea:08:c8:20:e6:19:ec:81:27:35: 2b:9b:d5:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tUY4kVMkbibfWtGmFCX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMWY1NTdlZTI2M2NiMzU5YTE5ZWEyY2Q3ZmEwZThjOTEz OWViNzYwHhcNMjUxMjIwMTcwMTExWhcNMjUxMjIxMTcwMTExWjAzMTEwLwYDVQQD EygzZDQwNDdmN2IzMzkwYmEzODhmNzI4MTM2NjMzNTFmZTliODhhY2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6rpOlow1sSADUXBNj/+s6G/vbfQ zlYrCg8jWCsEQA3WTnqlZJ5Jl6JAegedpnIbrFymUdShyo9uPLGbaZhjip2OUjPA lEb4BfS63pn3u+l93xgd8FEkZMaxyqGafoIT1pduU1W30/aCGvDPEwfa9nO7DKlY cZ1SEuB35y2X62s/nbFoGmM1FE2CBbGeKeiBLvmWrqHD7KGDZdEqMlCDNpk3RUUq jq/bQ9mvcv3chjQSi8VGk+Rxe8axNXx4b/tqoxioFERgzJqckqxkJia13TWpqRyW +aAH5dn2UiV/jIbAIgnkzh5eI8lmwqMcvrVO3Dlc0x6zMQxkmX9EC89kuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1AR/ezOQujiPcoE2YzUf6biKzgMB8GA1UdIwQY MBaAFHsfVX7iY8s1mhnqLNf6DoyROet2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MzZkOTgtNzAxOS00MDFmLTllMmEt M2UzNjYwZGExM2E0LzEvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85MzZkOTgtNzAxOS00MDFmLTllMmEtM2UzNjYwZGExM2E0 LzEvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6I9EEzO mRYG4qei2xbkatnAOTJK1tivLU65jc+L2QXL1/HOVJWh9n+zoRlMmH13QHEkCRSv Ac6Z0nNgBQCu1e1uwSeQm4tX2lr5PwX1mbvv5t2estciv479UDc4rGNjmFaGsiK1 +GHhN93QFDWaX8LTOuOKfIJEywoBjAuaExMpG1hwnJeo2f27azdUq6W+WCnrFnBi bANU3JmqPWxSyXmydzqeEdJ/2sekTVGleF9etnP1tD6zXoh59Il3iMib90jrxwKI 0qSSApony15p4lmWuHSbdAcsWM7cHWv4Hzx0u2vq0w2A5xqPEAFQonGjrIfqCMgg 5hnsgSc1K5vVlg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:06:48 2025 by rpki-client