This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft File: eXe1XjT_1yB1-92gOaZbNx3jmCA.mft (raw, json) Hash identifier: 6ZY6fCVoeeesRwsuOD9xwbzmgRhYjvFdLA98pD1w6+A= Subject key identifier: DF:5D:70:0A:2B:3D:B8:FB:64:FE:B7:BE:B0:A0:03:B3:17:AE:F0:B9 Authority key identifier: 79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20 Certificate issuer: /CN=7977b55e34ffd72075fbdda039a65b371de39820 Certificate serial: 019B631F1A7FEA2E6114E385C74C5175CADB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft Manifest number: 0DB7 Signing time: Sun 28 Dec 2025 04:02:21 +0000 Manifest this update: Sun 28 Dec 2025 04:02:21 +0000 Manifest next update: Mon 29 Dec 2025 04:02:21 +0000 Files and hashes: 1: Tx774YWupF3TJKc5zuGEprJ-8Q8.roa (hash: 6EvMus28/r2hOkn9lsQE7epJ2J6h3GLbCRAmFL/wVzM=) 2: eXe1XjT_1yB1-92gOaZbNx3jmCA.crl (hash: mITBhVw8kexgMUzxKBfza8HQUGZ2GuIanjYRV6uwZQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1f:1a:7f:ea:2e:61:14:e3:85:c7:4c:51:75:ca:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7977b55e34ffd72075fbdda039a65b371de39820 Validity Not Before: Dec 28 04:02:21 2025 GMT Not After : Dec 29 04:02:21 2025 GMT Subject: CN=df5d700a2b3db8fb64feb7beb0a003b317aef0b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:57:f1:60:ee:39:5b:54:38:62:2e:9c:45:d1: 6e:55:62:2d:2c:37:5a:22:15:c7:93:26:3e:ff:7d: 20:f9:a0:f1:b9:19:79:45:6c:f5:e8:4e:2f:33:5b: 15:a8:19:73:ef:88:65:6a:93:33:45:72:2e:3a:5d: 10:2c:39:bf:82:29:ec:e8:0e:a5:92:9a:ce:cc:0c: 61:25:c6:97:b9:1e:b7:ed:62:f0:e2:a3:d5:dd:cc: be:95:f4:b6:3a:2e:e7:c3:71:e5:26:c0:08:e4:30: 80:91:fe:74:56:57:3d:10:93:38:89:ff:27:c9:f3: 6c:58:8a:83:73:4d:56:33:39:e0:ac:ff:df:1f:57: c8:14:98:5c:89:8e:bd:81:67:ed:89:51:cd:dd:2c: 03:a4:b5:93:9d:45:c1:10:3b:97:7b:66:1d:5a:11: 65:d5:fc:64:4a:bd:70:62:48:e6:e9:3f:31:b6:6d: 36:3c:cf:db:07:2d:c9:fa:24:f1:85:b3:9a:97:53: fc:b0:57:b6:b7:40:0a:44:95:83:9c:81:a8:2d:7b: 13:6a:70:d1:3b:2d:ae:0d:52:22:a8:ca:a2:9b:c5: e1:37:5b:75:5b:d9:3c:85:1c:22:c4:f0:16:1a:01: 4a:b3:6d:74:73:80:e9:d3:7d:cc:0c:e7:21:56:89: 80:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5D:70:0A:2B:3D:B8:FB:64:FE:B7:BE:B0:A0:03:B3:17:AE:F0:B9 X509v3 Authority Key Identifier: keyid:79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:c8:fe:2d:e8:9f:98:cb:7d:dd:b8:30:3e:65:59:f7:98:95: e5:10:6e:2c:24:7e:b5:5c:c7:61:15:b2:f5:87:45:e7:40:6d: 8d:f6:15:6d:84:3a:42:74:ba:f9:89:b9:c8:60:9c:e8:35:ec: d1:4c:e6:52:cb:a7:7e:be:13:6a:97:29:30:63:14:ed:dd:ec: c7:5a:72:37:fd:ce:a2:81:fa:14:5c:a1:40:54:b8:d8:4a:da: 09:52:84:ac:e9:dd:8f:fa:4f:82:38:f7:13:4c:53:29:3c:36: 9e:e6:46:bb:43:d3:3a:15:a0:ba:a7:fc:5b:a9:33:ed:a4:fc: 1a:92:3f:4c:bf:60:1d:b2:4b:0b:e1:15:64:3c:6c:a9:d4:b3: ae:61:49:ed:fc:1d:3e:78:25:9c:10:5f:c1:a7:34:d9:eb:f7: c9:79:b5:7f:f5:b5:78:3e:4f:60:da:c8:80:43:0f:73:ee:c3: 19:f0:26:c2:87:87:aa:32:65:f2:35:b7:a7:3b:2e:34:a2:2e: 2c:06:32:47:be:81:ee:b0:f7:90:72:0e:12:84:59:4a:4a:90: 70:fb:2b:bd:0b:50:de:a5:1f:75:86:86:0d:7d:95:09:c5:46: 72:9f:c3:53:d6:fe:94:93:75:33:05:06:e9:11:b7:d5:5b:0c: d3:0a:fc:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHxp/6i5hFOOFx0xRdcrbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzdiNTVlMzRmZmQ3MjA3NWZiZGRhMDM5YTY1YjM3MWRl Mzk4MjAwHhcNMjUxMjI4MDQwMjIxWhcNMjUxMjI5MDQwMjIxWjAzMTEwLwYDVQQD EyhkZjVkNzAwYTJiM2RiOGZiNjRmZWI3YmViMGEwMDNiMzE3YWVmMGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FfxYO45W1Q4Yi6cRdFuVWItLDda IhXHkyY+/30g+aDxuRl5RWz16E4vM1sVqBlz74hlapMzRXIuOl0QLDm/gins6A6l kprOzAxhJcaXuR637WLw4qPV3cy+lfS2Oi7nw3HlJsAI5DCAkf50Vlc9EJM4if8n yfNsWIqDc01WMzngrP/fH1fIFJhciY69gWftiVHN3SwDpLWTnUXBEDuXe2YdWhFl 1fxkSr1wYkjm6T8xtm02PM/bBy3J+iTxhbOal1P8sFe2t0AKRJWDnIGoLXsTanDR Oy2uDVIiqMqim8XhN1t1W9k8hRwixPAWGgFKs210c4Dp033MDOchVomAIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9dcAorPbj7ZP63vrCgA7MXrvC5MB8GA1UdIwQY MBaAFHl3tV40/9cgdfvdoDmmWzcd45ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iZDBhNzYtMDRiMS00NDkwLWFkMDQt OTdlZWM3Y2Y2MDkzLzEvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iZDBhNzYtMDRiMS00NDkwLWFkMDQtOTdlZWM3Y2Y2MDkz LzEvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Mj+Leif mMt93bgwPmVZ95iV5RBuLCR+tVzHYRWy9YdF50BtjfYVbYQ6QnS6+Ym5yGCc6DXs 0UzmUsunfr4TapcpMGMU7d3sx1pyN/3OooH6FFyhQFS42EraCVKErOndj/pPgjj3 E0xTKTw2nuZGu0PTOhWguqf8W6kz7aT8GpI/TL9gHbJLC+EVZDxsqdSzrmFJ7fwd PnglnBBfwac02ev3yXm1f/W1eD5PYNrIgEMPc+7DGfAmwoeHqjJl8jW3pzsuNKIu LAYyR76B7rD3kHIOEoRZSkqQcPsrvQtQ3qUfdYaGDX2VCcVGcp/DU9b+lJN1MwUG 6RG31VsM0wr85A== -----END CERTIFICATE-----Generated at Sun Dec 28 06:22:17 2025 by rpki-client