This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft File: eXe1XjT_1yB1-92gOaZbNx3jmCA.mft (raw, json) Hash identifier: ARibajqOZt3YBUnEkHmw+cl1aw/H1PX95zMuxvOOQ9c= Subject key identifier: EA:F1:61:CD:01:BF:62:05:F9:5E:5A:39:D1:26:E3:CB:57:FC:1D:08 Authority key identifier: 79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20 Certificate issuer: /CN=7977b55e34ffd72075fbdda039a65b371de39820 Certificate serial: 019B3C7F55915C03400EA373805FCAAC1009 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft Manifest number: 0DA3 Signing time: Sat 20 Dec 2025 16:02:16 +0000 Manifest this update: Sat 20 Dec 2025 16:02:16 +0000 Manifest next update: Sun 21 Dec 2025 16:02:16 +0000 Files and hashes: 1: Tx774YWupF3TJKc5zuGEprJ-8Q8.roa (hash: 6EvMus28/r2hOkn9lsQE7epJ2J6h3GLbCRAmFL/wVzM=) 2: eXe1XjT_1yB1-92gOaZbNx3jmCA.crl (hash: P99b38sfhYWyyHEiiH61e/xbe8vtpZ7ymwZeF/GYGvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:55:91:5c:03:40:0e:a3:73:80:5f:ca:ac:10:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7977b55e34ffd72075fbdda039a65b371de39820 Validity Not Before: Dec 20 16:02:16 2025 GMT Not After : Dec 21 16:02:16 2025 GMT Subject: CN=eaf161cd01bf6205f95e5a39d126e3cb57fc1d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9d:08:4e:54:f4:5e:b0:5b:04:5c:47:74:49: 4d:b2:ef:f4:19:aa:8a:a5:36:93:b1:80:9b:02:4c: da:14:ab:ee:da:a3:4e:db:ff:62:e0:e7:34:99:c8: aa:0f:34:23:01:dd:38:98:7c:9e:33:3c:77:ad:5e: 2b:e9:4b:8f:45:f3:bf:ce:b9:6e:e3:3d:5c:6d:51: f4:31:9a:78:6a:31:9f:25:e6:81:f9:6a:ef:5b:72: 46:36:c0:18:ae:51:f6:8a:14:bb:32:30:b9:e9:87: ad:b7:37:bb:9f:8b:8c:21:17:c6:8d:b3:9f:86:57: c9:b1:5b:f7:11:38:c8:26:a8:7b:1d:91:45:5e:78: fa:75:54:d2:d6:2d:d8:9f:3f:bd:46:b4:26:f9:54: 9e:f0:e3:fe:95:57:6d:1e:9a:eb:d2:92:e5:f1:96: 2d:d8:2f:0b:1b:25:18:68:ed:aa:bf:7b:15:19:cb: 54:76:1f:23:39:b4:de:64:63:26:de:0e:7c:9d:89: f3:90:f6:6e:07:42:c7:a3:c7:42:c9:dd:f8:cd:0d: 4e:0a:53:35:3f:3b:9b:55:0b:70:33:9c:a5:f7:81: 8e:d8:83:b5:40:8d:31:0e:dd:77:95:26:80:b1:e4: 70:5e:05:0a:54:0e:f5:c6:8f:59:6b:d2:a5:55:68: a5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F1:61:CD:01:BF:62:05:F9:5E:5A:39:D1:26:E3:CB:57:FC:1D:08 X509v3 Authority Key Identifier: keyid:79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:aa:42:8d:fa:1a:15:95:7a:7f:98:ea:27:08:dd:aa:73:91: 87:ef:0d:ed:a7:87:45:82:92:2a:57:e7:cc:90:3e:8f:3e:d8: c3:97:03:c9:c5:aa:7d:fe:c9:77:fc:d2:35:94:68:82:19:69: aa:e9:af:8f:47:7a:1c:be:fe:8b:e8:49:71:40:3f:ca:c4:57: f1:03:90:1a:41:4e:02:11:5d:00:59:79:69:66:69:7b:c0:51: ce:22:55:f9:84:72:14:68:10:0f:b8:20:62:e4:7a:e5:95:71: e0:65:9f:d7:fb:e6:4a:37:d4:e7:5d:ea:3a:08:17:51:56:b2: 50:37:96:69:92:9c:cd:02:53:5a:fd:81:3c:d0:df:e7:b2:66: dd:85:3d:96:88:dd:6b:28:93:e3:e9:bf:08:65:ef:87:76:eb: 27:83:8b:02:97:99:b4:e7:cb:94:08:d8:41:c8:f7:63:4b:c7: e6:db:64:15:45:0d:70:42:c1:3f:9b:2b:57:0b:9a:f9:89:a5: 2e:9d:b6:52:86:27:85:88:2a:e7:6e:b0:28:c5:09:74:f8:51: 98:7d:cd:19:0e:7b:c4:bf:ac:e6:4a:89:49:35:e6:80:7d:83: 47:4e:44:0b:d5:3e:ec:bd:f6:ae:ca:8a:39:da:56:5d:e0:49: 1d:ff:43:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f1WRXANADqNzgF/KrBAJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzdiNTVlMzRmZmQ3MjA3NWZiZGRhMDM5YTY1YjM3MWRl Mzk4MjAwHhcNMjUxMjIwMTYwMjE2WhcNMjUxMjIxMTYwMjE2WjAzMTEwLwYDVQQD EyhlYWYxNjFjZDAxYmY2MjA1Zjk1ZTVhMzlkMTI2ZTNjYjU3ZmMxZDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ0ITlT0XrBbBFxHdElNsu/0GaqK pTaTsYCbAkzaFKvu2qNO2/9i4Oc0mciqDzQjAd04mHyeMzx3rV4r6UuPRfO/zrlu 4z1cbVH0MZp4ajGfJeaB+WrvW3JGNsAYrlH2ihS7MjC56Yettze7n4uMIRfGjbOf hlfJsVv3ETjIJqh7HZFFXnj6dVTS1i3Ynz+9RrQm+VSe8OP+lVdtHprr0pLl8ZYt 2C8LGyUYaO2qv3sVGctUdh8jObTeZGMm3g58nYnzkPZuB0LHo8dCyd34zQ1OClM1 PzubVQtwM5yl94GO2IO1QI0xDt13lSaAseRwXgUKVA71xo9Za9KlVWilNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOrxYc0Bv2IF+V5aOdEm48tX/B0IMB8GA1UdIwQY MBaAFHl3tV40/9cgdfvdoDmmWzcd45ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iZDBhNzYtMDRiMS00NDkwLWFkMDQt OTdlZWM3Y2Y2MDkzLzEvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iZDBhNzYtMDRiMS00NDkwLWFkMDQtOTdlZWM3Y2Y2MDkz LzEvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARapCjfoa FZV6f5jqJwjdqnORh+8N7aeHRYKSKlfnzJA+jz7Yw5cDycWqff7Jd/zSNZRoghlp qumvj0d6HL7+i+hJcUA/ysRX8QOQGkFOAhFdAFl5aWZpe8BRziJV+YRyFGgQD7gg YuR65ZVx4GWf1/vmSjfU513qOggXUVayUDeWaZKczQJTWv2BPNDf57Jm3YU9lojd ayiT4+m/CGXvh3brJ4OLApeZtOfLlAjYQcj3Y0vH5ttkFUUNcELBP5srVwua+Yml Lp22UoYnhYgq526wKMUJdPhRmH3NGQ57xL+s5kqJSTXmgH2DR05EC9U+7L32rsqK OdpWXeBJHf9D6w== -----END CERTIFICATE-----Generated at Sat Dec 20 22:48:37 2025 by rpki-client