This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft File: eXfk4sKqJsENBx-hBFwTHm0WD3A.mft (raw, json) Hash identifier: GwA5G9+HouYrU0Oo39Y2bMciFxWMVISdF3GlmgdIjTY= Subject key identifier: 15:45:AC:F9:A2:7B:72:DF:1D:17:E3:73:37:B6:BF:9A:A8:9C:9D:DB Authority key identifier: 79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70 Certificate issuer: /CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70 Certificate serial: 019B3BD9541662B81DEA7FEB41F1FC84E590 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft Manifest number: 3F Signing time: Sat 20 Dec 2025 13:00:57 +0000 Manifest this update: Sat 20 Dec 2025 13:00:57 +0000 Manifest next update: Sun 21 Dec 2025 13:00:57 +0000 Files and hashes: 1: 8dWVecaIxfKIjwRXWLlOpoyXF14.roa (hash: jPnLwFVsLz62bJAhbBOBBR/wCFFQ27PJG+odr0mpoMM=) 2: eXfk4sKqJsENBx-hBFwTHm0WD3A.crl (hash: 6TtdydUFuLcxk2+S63hEIApbaZai2IPvBgqzZ0b4uY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:54:16:62:b8:1d:ea:7f:eb:41:f1:fc:84:e5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70 Validity Not Before: Dec 20 13:00:57 2025 GMT Not After : Dec 21 13:00:57 2025 GMT Subject: CN=1545acf9a27b72df1d17e37337b6bf9aa89c9ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2d:54:a7:d1:36:98:69:aa:c1:de:dc:3b:87: c5:96:1c:2c:52:ba:50:be:15:09:2d:ed:4e:cc:98: 57:43:2f:b8:bf:3f:ae:a5:1c:ed:ca:d0:58:67:4d: 80:dc:5d:89:dc:c6:56:c5:b6:91:61:2d:8a:c5:3c: 4f:98:f3:83:8f:85:28:91:7a:4a:af:03:3d:86:5d: bc:77:40:30:bf:c7:64:dc:04:84:57:9a:8f:39:53: 6e:f1:a7:05:f2:91:be:5b:91:1b:5b:cb:45:ff:a5: 7e:f7:5b:e6:3e:37:24:23:c4:f6:33:e1:4e:93:bb: 22:f4:86:d0:39:69:2d:b7:f9:91:4b:dc:33:17:4d: 5f:0d:83:fa:ff:1e:26:83:38:a9:aa:bf:6b:24:cc: b3:cf:78:86:ae:49:5e:ac:06:e1:32:b3:6a:7b:23: 91:97:05:d6:f5:5e:c9:a0:ca:72:d9:e0:79:bb:42: ad:7c:20:a8:9b:bb:77:42:59:54:62:9a:af:85:2d: 8d:9b:b3:5f:0c:13:98:20:15:4c:d3:88:3c:b0:e1: 80:b1:de:f5:43:63:49:dd:7b:45:7d:3c:e0:ba:83: 7b:fa:ea:cf:9f:88:6d:e7:f0:69:ec:b4:b4:f3:6f: 61:71:ec:c7:bf:8e:4c:49:e4:47:b9:ed:85:f6:fc: 11:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:45:AC:F9:A2:7B:72:DF:1D:17:E3:73:37:B6:BF:9A:A8:9C:9D:DB X509v3 Authority Key Identifier: keyid:79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:30:69:01:39:60:6f:b5:27:ea:9e:4f:6d:64:91:cb:0f:53: 72:74:ad:9a:c3:d4:1a:f1:a3:cc:57:7c:9d:09:33:d2:b1:44: a2:08:a2:fa:3d:c6:39:bd:5c:be:31:06:d0:86:d1:23:f6:37: 2f:9f:5f:d1:a9:d1:e4:69:d5:5c:f2:b4:2b:04:71:ff:b0:37: a0:a1:29:a9:2c:cd:1a:2c:8e:2b:47:ef:0f:21:44:e7:45:9a: 5b:eb:5d:74:e9:ce:9f:52:51:a4:cf:08:01:71:9e:34:de:d4: f1:15:61:33:c4:07:e9:88:1f:e8:f9:fe:3d:ea:df:df:de:7a: 8f:b3:4d:17:12:e2:6a:a7:cd:99:c5:75:5d:89:6e:9b:f8:45: 0e:fb:d1:68:de:5f:26:69:bb:03:c9:e6:b6:c3:2e:f3:c8:19: fe:72:5d:c1:19:ee:7d:ae:3d:df:8a:27:24:38:0f:8f:7a:95: 7c:08:df:46:bc:b8:2f:a6:12:7d:68:d4:21:36:dc:cc:02:98: 46:44:02:b6:84:75:43:50:62:4b:64:b6:9f:a7:a9:93:93:f6: 29:63:63:e8:b2:2c:f3:56:49:4c:a8:9d:af:cd:7e:86:81:6e: ac:7e:36:e2:7c:ce:52:62:95:9a:c9:e4:bb:c7:b8:5d:2d:b8: 19:ef:74:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72VQWYrgd6n/rQfH8hOWQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzdlNGUyYzJhYTI2YzEwZDA3MWZhMTA0NWMxMzFlNmQx NjBmNzAwHhcNMjUxMjIwMTMwMDU3WhcNMjUxMjIxMTMwMDU3WjAzMTEwLwYDVQQD EygxNTQ1YWNmOWEyN2I3MmRmMWQxN2UzNzMzN2I2YmY5YWE4OWM5ZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS1Up9E2mGmqwd7cO4fFlhwsUrpQ vhUJLe1OzJhXQy+4vz+upRztytBYZ02A3F2J3MZWxbaRYS2KxTxPmPODj4UokXpK rwM9hl28d0Awv8dk3ASEV5qPOVNu8acF8pG+W5EbW8tF/6V+91vmPjckI8T2M+FO k7si9IbQOWktt/mRS9wzF01fDYP6/x4mgzipqr9rJMyzz3iGrklerAbhMrNqeyOR lwXW9V7JoMpy2eB5u0KtfCCom7t3QllUYpqvhS2Nm7NfDBOYIBVM04g8sOGAsd71 Q2NJ3XtFfTzguoN7+urPn4ht5/Bp7LS0829hcezHv45MSeRHue2F9vwRcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVFrPmie3LfHRfjcze2v5qonJ3bMB8GA1UdIwQY MBaAFHl35OLCqibBDQcfoQRcEx5tFg9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NzE3ZDktODY3MS00YzYwLThmZDkt MjIxNmMzOTU3NTk4LzEvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS82NzE3ZDktODY3MS00YzYwLThmZDktMjIxNmMzOTU3NTk4 LzEvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDBpATlg b7Un6p5PbWSRyw9TcnStmsPUGvGjzFd8nQkz0rFEogii+j3GOb1cvjEG0IbRI/Y3 L59f0anR5GnVXPK0KwRx/7A3oKEpqSzNGiyOK0fvDyFE50WaW+tddOnOn1JRpM8I AXGeNN7U8RVhM8QH6Ygf6Pn+Perf3956j7NNFxLiaqfNmcV1XYlum/hFDvvRaN5f Jmm7A8nmtsMu88gZ/nJdwRnufa4934onJDgPj3qVfAjfRry4L6YSfWjUITbczAKY RkQCtoR1Q1BiS2S2n6epk5P2KWNj6LIs81ZJTKidr81+hoFurH424nzOUmKVmsnk u8e4XS24Ge904g== -----END CERTIFICATE-----Generated at Sat Dec 20 16:32:12 2025 by rpki-client