This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft File: ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft (raw, json) Hash identifier: 0Fu1d7045+yd0Ehrd5nvfRsvmxRcCA2h9mLNWtkmKEA= Subject key identifier: 86:00:AB:6A:86:C6:2F:D5:B1:77:E2:E3:73:5D:CC:EC:E9:08:BA:A4 Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92 Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692 Certificate serial: 019B39B441DB5F0B3A66C6DE4485617FCB58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft Manifest number: 17C3 Signing time: Sat 20 Dec 2025 03:01:13 +0000 Manifest this update: Sat 20 Dec 2025 03:01:13 +0000 Manifest next update: Sun 21 Dec 2025 03:01:13 +0000 Files and hashes: 1: 6S6VH_4xu88lT362tqHywTMo1V4.roa (hash: r+/MUaPzWcX/fm4Btgu3AsrSItwgso8rcrd3ve5oHWA=) 2: 9Jn3Ao8kD2UL0UBy8f0i2zzE-8o.roa (hash: x5aIy8suItwCsXcwC1xvM9N3xbkHkVnj8Bi3Hjm0x2A=) 3: ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl (hash: KRep0nxls2PMyyy5QBftaE87zAKL+9nhiKrr5tC1aC4=) 4: HTGaeGMP8CdzPiu4Kdvv1i2tT0s.roa (hash: fsIzfA72TKkiu+lQEzJHOVfbq74I+G15Uri9KTlcXHM=) 5: L01JaFs6upvCxukuRpNJVKLONEM.roa (hash: RD22oITNNi+VkpKpvsFNn1oAsq5Be0nqy5KSTok7hqU=) 6: h6iO8UxKDT-IVtEyA0eFJpuAcwk.roa (hash: QDji/HILU7o7EJCVoA31iw52NhQO2ISN+f+1SQIXk6M=) 7: rDaXGUyGwUkO9XfIiSqMwkYNrOk.roa (hash: M2xlEmHMl0fzyVUI+KlQhxYNVrKFAswg7JKkafU0EsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:41:db:5f:0b:3a:66:c6:de:44:85:61:7f:cb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692 Validity Not Before: Dec 20 03:01:13 2025 GMT Not After : Dec 21 03:01:13 2025 GMT Subject: CN=8600ab6a86c62fd5b177e2e3735dccece908baa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:64:9c:e7:cb:a5:43:53:6e:98:7e:e8:32:96: 6f:a1:0a:65:f5:c9:d1:ac:b7:2d:59:14:51:ca:56: 1d:65:95:0f:9b:06:21:dd:f9:51:91:15:b6:1b:eb: 28:b5:78:a3:78:3b:8a:40:96:d7:0a:8a:2a:50:7e: e0:a7:45:50:bd:de:41:6c:c9:b0:fe:4a:5f:60:f5: 6b:e1:cf:10:0f:eb:18:c2:7e:00:ce:84:60:10:65: bb:fa:02:28:29:e5:4c:99:3e:88:61:3e:07:1d:2a: 76:43:33:e7:3f:9e:49:3c:3e:80:16:be:88:06:38: 93:be:01:d6:aa:c7:52:72:ad:15:a8:77:c2:fd:29: 97:61:6a:5b:1e:21:16:dc:7c:23:c4:1b:b9:aa:00: 29:22:48:f5:f6:91:4c:a3:b1:40:ed:a8:de:e7:4e: 50:12:80:31:d9:88:a6:a3:af:6d:26:16:d9:da:f8: cb:42:e9:e2:53:3a:bc:a3:c7:e9:41:78:4f:33:36: 1e:58:8a:a7:52:0a:43:b8:90:09:80:df:2d:82:d8: 43:52:e3:73:36:e6:61:dd:23:82:2d:15:b4:ca:38: 98:bb:76:e4:4e:10:9c:30:5d:f9:67:e2:a3:13:a1: c7:2c:19:2d:1f:ba:bc:fe:18:c3:67:cd:9b:07:4c: 56:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:00:AB:6A:86:C6:2F:D5:B1:77:E2:E3:73:5D:CC:EC:E9:08:BA:A4 X509v3 Authority Key Identifier: keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:6f:18:8f:00:6d:16:bb:ee:11:cf:59:d5:94:36:6f:72:f2: 58:68:0e:a0:bb:0c:fb:77:5f:72:8f:3c:bc:dd:57:4c:c7:b3: 34:71:60:ff:af:34:81:9b:03:e5:7e:29:22:3a:a4:74:30:47: 3a:6a:04:04:88:ec:c1:cb:78:4a:e5:9c:68:34:30:b7:de:e9: 04:c2:b6:f5:da:a1:74:41:84:2a:7e:04:0b:7e:85:65:4e:b0: 79:a4:e3:4a:56:9f:27:4b:81:0f:b0:c2:83:a2:2a:66:50:92: 8a:96:88:8c:e9:ff:3d:aa:e0:f9:7d:b9:f6:96:ac:63:ed:90: 31:5a:d1:60:24:36:dd:03:a1:0b:45:3e:61:6b:8d:ea:a6:4b: 90:bd:72:82:ed:0c:a6:04:16:78:89:3a:87:cf:86:42:e7:11: 6f:5c:fd:e2:37:57:27:b8:ac:34:4d:32:24:78:37:c4:fc:09: 29:99:b2:82:4d:b6:1e:db:6b:e2:fd:44:99:69:ef:50:4e:89: 88:3d:8a:21:9f:13:99:de:a9:54:7e:7d:3d:aa:97:5c:81:2a: 5b:82:78:f1:44:a4:67:35:17:ce:a6:80:82:65:f7:5b:26:37: 78:0e:fc:14:1f:95:5f:c4:28:81:0f:35:e5:f3:ac:4b:b0:e2: 65:a4:55:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tEHbXws6ZsbeRIVhf8tYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTlmMDUyYmM5ZTcyODQ4ODgwNzQzOTBjOWQwYmMxMjc2 MDY2OTIwHhcNMjUxMjIwMDMwMTEzWhcNMjUxMjIxMDMwMTEzWjAzMTEwLwYDVQQD Eyg4NjAwYWI2YTg2YzYyZmQ1YjE3N2UyZTM3MzVkY2NlY2U5MDhiYWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGSc58ulQ1NumH7oMpZvoQpl9cnR rLctWRRRylYdZZUPmwYh3flRkRW2G+sotXijeDuKQJbXCooqUH7gp0VQvd5BbMmw /kpfYPVr4c8QD+sYwn4AzoRgEGW7+gIoKeVMmT6IYT4HHSp2QzPnP55JPD6AFr6I BjiTvgHWqsdScq0VqHfC/SmXYWpbHiEW3HwjxBu5qgApIkj19pFMo7FA7aje505Q EoAx2Yimo69tJhbZ2vjLQuniUzq8o8fpQXhPMzYeWIqnUgpDuJAJgN8tgthDUuNz NuZh3SOCLRW0yjiYu3bkThCcMF35Z+KjE6HHLBktH7q8/hjDZ82bB0xWHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYAq2qGxi/VsXfi43NdzOzpCLqkMB8GA1UdIwQY MBaAFBMZ8FK8nnKEiIB0OQydC8EnYGaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUt MmMxYTc3MzBiZDI1LzEvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUtMmMxYTc3MzBiZDI1 LzEvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARm8YjwBt FrvuEc9Z1ZQ2b3LyWGgOoLsM+3dfco88vN1XTMezNHFg/680gZsD5X4pIjqkdDBH OmoEBIjswct4SuWcaDQwt97pBMK29dqhdEGEKn4EC36FZU6weaTjSlafJ0uBD7DC g6IqZlCSipaIjOn/Parg+X259pasY+2QMVrRYCQ23QOhC0U+YWuN6qZLkL1ygu0M pgQWeIk6h8+GQucRb1z94jdXJ7isNE0yJHg3xPwJKZmygk22Httr4v1EmWnvUE6J iD2KIZ8Tmd6pVH59PaqXXIEqW4J48USkZzUXzqaAgmX3WyY3eA78FB+VX8QogQ81 5fOsS7DiZaRVDg== -----END CERTIFICATE-----Generated at Sat Dec 20 13:04:05 2025 by rpki-client