This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft File: EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft (raw, json) Hash identifier: icplGigI9SISoqn2J4QiAoQmySLy62+tyM9nwSk4vuQ= Subject key identifier: 3D:BC:09:10:21:22:89:DA:82:03:F5:E2:D7:15:BB:81:CB:0B:6E:F0 Authority key identifier: 11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA Certificate issuer: /CN=1170356135adf47ed9708cb0a13680894c2339ea Certificate serial: 019B4A038F75CAE1EE465204DE6F0BD5486A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft Manifest number: 1721 Signing time: Tue 23 Dec 2025 07:01:45 +0000 Manifest this update: Tue 23 Dec 2025 07:01:45 +0000 Manifest next update: Wed 24 Dec 2025 07:01:45 +0000 Files and hashes: 1: 8u57ArQxKO_4JRsiP8ig9E_nJLs.roa (hash: ifzsEyICQHhNmNaBIhgOvnazrnhVrug9jj3mLB5h7cs=) 2: EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl (hash: uFjOD20abqwxkwG72gR96u0QZXKr790lFcy+U48OCO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:8f:75:ca:e1:ee:46:52:04:de:6f:0b:d5:48:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1170356135adf47ed9708cb0a13680894c2339ea Validity Not Before: Dec 23 07:01:45 2025 GMT Not After : Dec 24 07:01:45 2025 GMT Subject: CN=3dbc0910212289da8203f5e2d715bb81cb0b6ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:dc:15:82:9e:94:a0:a5:23:f1:eb:7a:ac: e5:4a:f9:05:30:df:52:17:07:ff:0b:59:2b:2d:cb: f4:8c:e3:26:73:1f:87:4d:21:5f:e8:ab:89:69:1b: 8e:f7:c9:a4:e1:c6:73:00:9d:6f:ed:8c:43:3c:48: 26:96:aa:28:d4:27:62:d6:8a:a3:12:02:31:eb:34: fb:25:b3:73:8d:28:0a:6b:7d:db:d0:7d:0d:99:28: 48:d4:ef:98:90:b1:aa:99:57:05:5a:2c:fc:96:52: b8:8c:7a:4b:5c:a3:73:be:1f:ae:9d:a1:88:75:69: b6:0b:64:54:fd:d4:a3:ce:49:e3:d7:fb:aa:7d:0a: ea:09:10:cd:a6:85:0a:66:cd:b8:0b:06:c7:59:79: 9f:60:e0:5a:a0:0a:d8:69:53:67:c0:d5:0b:6a:59: 7d:50:e3:37:5d:70:9a:24:08:0f:97:1c:ed:56:41: 2a:63:86:da:e3:40:e7:0c:11:19:20:dc:09:22:a3: 14:0c:ab:fc:28:c1:c8:a8:fb:5c:e3:01:34:ec:00: 90:44:87:02:61:ce:33:64:63:e9:9f:46:3a:65:6b: 53:40:ad:7c:f1:7c:e2:c0:07:de:f5:c4:ab:13:39: 27:fa:46:1c:f2:d2:c7:7b:36:3f:8b:12:6d:fe:ff: 50:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BC:09:10:21:22:89:DA:82:03:F5:E2:D7:15:BB:81:CB:0B:6E:F0 X509v3 Authority Key Identifier: keyid:11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:85:8f:1e:44:02:ab:78:1b:8c:95:49:73:b3:fd:8a:b5:c9: f1:2d:12:f2:92:b1:f0:66:70:a9:ac:7e:0c:c1:71:ba:49:a8: a1:89:28:92:60:c7:b3:dd:94:11:7b:8d:c4:23:ec:46:0b:d2: 7f:e5:2b:a2:b1:40:54:07:80:4b:fd:80:b3:15:f3:b6:c8:83: a2:83:75:fe:b8:e4:d4:82:5a:58:64:f1:20:b8:7d:4e:67:d7: b7:a4:3b:a5:e9:eb:a9:64:74:06:d4:2b:53:5f:99:f2:b1:4a: 0d:8a:b0:56:96:d6:ed:c9:ce:02:71:a8:14:c1:61:e9:64:fd: 13:5b:e6:1a:f5:b5:09:2f:71:3f:9e:9f:9f:16:23:25:b7:4a: 86:d4:14:d0:24:eb:f2:ad:2b:f9:94:0a:f8:25:96:69:24:f2: cc:70:2a:03:5f:4d:4f:b8:8c:46:47:90:e7:e2:64:e2:de:5b: 5a:22:70:95:0f:aa:3d:c8:64:d3:b0:6a:d5:f4:22:14:4d:f5: 36:3a:4d:0a:d4:01:f5:16:77:9d:8a:4d:68:1d:4e:77:ca:3a: 59:3e:60:06:3c:7f:17:67:2f:7d:ac:8a:85:24:0b:ca:24:0c: d2:e3:31:d6:61:4e:8f:ec:ba:7b:ed:c0:2e:7e:36:69:0d:dd: 4b:38:a2:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA491yuHuRlIE3m8L1UhqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNzAzNTYxMzVhZGY0N2VkOTcwOGNiMGExMzY4MDg5NGMy MzM5ZWEwHhcNMjUxMjIzMDcwMTQ1WhcNMjUxMjI0MDcwMTQ1WjAzMTEwLwYDVQQD EygzZGJjMDkxMDIxMjI4OWRhODIwM2Y1ZTJkNzE1YmI4MWNiMGI2ZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnjcFYKelKClI/HreqzlSvkFMN9S Fwf/C1krLcv0jOMmcx+HTSFf6KuJaRuO98mk4cZzAJ1v7YxDPEgmlqoo1Cdi1oqj EgIx6zT7JbNzjSgKa33b0H0NmShI1O+YkLGqmVcFWiz8llK4jHpLXKNzvh+unaGI dWm2C2RU/dSjzknj1/uqfQrqCRDNpoUKZs24CwbHWXmfYOBaoArYaVNnwNULall9 UOM3XXCaJAgPlxztVkEqY4ba40DnDBEZINwJIqMUDKv8KMHIqPtc4wE07ACQRIcC Yc4zZGPpn0Y6ZWtTQK188XziwAfe9cSrEzkn+kYc8tLHezY/ixJt/v9QqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD28CRAhIonaggP14tcVu4HLC27wMB8GA1UdIwQY MBaAFBFwNWE1rfR+2XCMsKE2gIlMIznqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVhBMVlUV3Q5SDdaY0l5d29UYUFpVXdqT2VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9jOGI0MGMtMmMwYi00N2ZmLWI5MjEt ZTYzMTQ2M2IxMjNiLzEvRVhBMVlUV3Q5SDdaY0l5d29UYUFpVXdqT2VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9jOGI0MGMtMmMwYi00N2ZmLWI5MjEtZTYzMTQ2M2IxMjNi LzEvRVhBMVlUV3Q5SDdaY0l5d29UYUFpVXdqT2VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMoWPHkQC q3gbjJVJc7P9irXJ8S0S8pKx8GZwqax+DMFxukmooYkokmDHs92UEXuNxCPsRgvS f+UrorFAVAeAS/2AsxXztsiDooN1/rjk1IJaWGTxILh9TmfXt6Q7penrqWR0BtQr U1+Z8rFKDYqwVpbW7cnOAnGoFMFh6WT9E1vmGvW1CS9xP56fnxYjJbdKhtQU0CTr 8q0r+ZQK+CWWaSTyzHAqA19NT7iMRkeQ5+Jk4t5bWiJwlQ+qPchk07Bq1fQiFE31 NjpNCtQB9RZ3nYpNaB1Od8o6WT5gBjx/F2cvfayKhSQLyiQM0uMx1mFOj+y6e+3A Ln42aQ3dSziikQ== -----END CERTIFICATE-----Generated at Tue Dec 23 11:06:29 2025 by rpki-client