This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft File: EXoEqScBnDzi0MnbOjFJd6Cns1w.mft (raw, json) Hash identifier: 199wDvoVbd9+wcO05XXuJql73fb+sG9kwFcF9B58KaM= Subject key identifier: F5:93:D2:E8:B7:30:A9:B6:9C:2D:A1:CD:27:19:59:AB:00:E7:B3:32 Authority key identifier: 11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C Certificate issuer: /CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c Certificate serial: 019B36B2AF2556761B359B68235E80F00CB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft Manifest number: 0454 Signing time: Fri 19 Dec 2025 13:00:38 +0000 Manifest this update: Fri 19 Dec 2025 13:00:38 +0000 Manifest next update: Sat 20 Dec 2025 13:00:38 +0000 Files and hashes: 1: 2BzyKfn5TceQ5f_OzQ0CHZnS4gI.roa (hash: QgfXzSLSDf5EWcjraHDYOpI/UP8b9CbWgxlTSxy1O3c=) 2: EXoEqScBnDzi0MnbOjFJd6Cns1w.crl (hash: B2SzkQZl5vGVjgMRnBavWnjs1lRz5+g5g/ECgBTnsIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b2:af:25:56:76:1b:35:9b:68:23:5e:80:f0:0c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c Validity Not Before: Dec 19 13:00:38 2025 GMT Not After : Dec 20 13:00:38 2025 GMT Subject: CN=f593d2e8b730a9b69c2da1cd271959ab00e7b332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:72:c8:a8:53:db:0f:4a:7f:7d:52:c7:32:41: 39:26:4b:02:f4:51:5f:b6:e9:6c:4f:33:38:9d:2b: 6b:33:2a:82:e5:8c:d3:84:a9:4a:cf:bf:b6:1a:1f: 1a:6d:f7:07:2b:d7:bd:55:b0:08:5b:03:d3:ff:d6: bd:4e:12:c3:c2:07:4c:61:20:fd:0f:b7:49:ee:e0: d7:b9:14:30:d2:59:72:4a:b7:c8:ca:76:54:45:b7: a6:6f:f2:df:19:23:a9:5c:a1:f6:c8:8b:b0:4e:36: 90:19:46:cd:ce:43:06:d8:72:70:db:62:2a:06:f3: 5a:c4:91:a6:f1:8b:20:f5:69:89:fe:88:40:1c:5e: 89:9b:8d:3a:90:63:82:be:38:d2:30:32:54:ef:37: 90:ad:b8:f1:e8:c3:87:b6:65:bd:40:da:b9:80:d0: b3:9a:3d:06:0f:c4:bf:f8:08:8f:0f:74:ec:68:2b: 29:ca:50:1e:8c:fe:5a:f7:de:3c:fd:fa:28:23:7b: 66:64:10:34:b9:aa:b2:ac:fd:f8:dc:7d:be:0d:83: f4:78:69:b8:e0:9e:b7:1f:6d:11:98:60:46:d8:84: aa:a1:bf:75:b2:c7:3e:4f:57:cb:00:24:a8:ee:da: 87:e1:d3:c3:c2:31:be:ef:a5:32:04:ba:a8:97:d9: 47:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:93:D2:E8:B7:30:A9:B6:9C:2D:A1:CD:27:19:59:AB:00:E7:B3:32 X509v3 Authority Key Identifier: keyid:11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:6e:94:9e:8f:08:13:59:16:92:fb:39:d2:24:74:e8:63:c9: 45:ff:d0:44:08:f7:5d:50:d2:3c:5d:0c:3e:ca:34:92:9c:68: 33:b0:79:4b:c8:aa:24:ea:9f:04:d0:84:db:ea:c7:a2:5f:cb: 23:76:06:8c:1b:12:b7:4a:58:9d:7d:de:cc:ed:4e:d7:f8:ce: 60:c1:1f:e2:be:c3:96:8a:0a:96:ea:1a:c0:df:03:6c:67:ed: 59:1a:95:72:2d:58:08:0a:6a:e2:40:6c:aa:c2:e0:68:1f:f9: c5:b4:97:7a:d4:8e:42:d5:4c:96:54:a1:8f:bf:a4:2b:b2:a2: ad:c4:27:30:aa:57:f9:4f:54:5e:a7:63:a4:16:ff:1e:03:a1: 7b:18:0c:5c:2d:96:1f:40:7e:fd:af:c1:5d:15:d7:43:36:f3: 5c:e7:c2:ec:30:d0:4d:35:da:c2:63:1c:8e:b5:0b:f8:f3:6d: 6f:3d:82:6f:8f:6b:48:61:30:34:1a:0c:9f:81:b0:e6:24:31: 0a:3b:76:b4:3c:bf:71:f0:3c:d5:91:01:99:12:73:23:3f:2e: 16:2b:5b:96:b7:7d:2b:0e:ec:64:f2:52:b2:d2:1b:b1:cd:e6: ea:33:78:ed:6e:3d:95:cb:0d:ba:5e:12:29:15:f2:bb:2a:f9: 92:7c:23:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2sq8lVnYbNZtoI16A8AyxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2EwNGE5MjcwMTljM2NlMmQwYzlkYjNhMzE0OTc3YTBh N2IzNWMwHhcNMjUxMjE5MTMwMDM4WhcNMjUxMjIwMTMwMDM4WjAzMTEwLwYDVQQD EyhmNTkzZDJlOGI3MzBhOWI2OWMyZGExY2QyNzE5NTlhYjAwZTdiMzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXLIqFPbD0p/fVLHMkE5JksC9FFf tulsTzM4nStrMyqC5YzThKlKz7+2Gh8abfcHK9e9VbAIWwPT/9a9ThLDwgdMYSD9 D7dJ7uDXuRQw0llySrfIynZURbemb/LfGSOpXKH2yIuwTjaQGUbNzkMG2HJw22Iq BvNaxJGm8Ysg9WmJ/ohAHF6Jm406kGOCvjjSMDJU7zeQrbjx6MOHtmW9QNq5gNCz mj0GD8S/+AiPD3TsaCspylAejP5a9948/fooI3tmZBA0uaqyrP343H2+DYP0eGm4 4J63H20RmGBG2ISqob91ssc+T1fLACSo7tqH4dPDwjG+76UyBLqol9lHDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWT0ui3MKm2nC2hzScZWasA57MyMB8GA1UdIwQY MBaAFBF6BKknAZw84tDJ2zoxSXegp7NcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVhvRXFTY0JuRHppME1uYk9qRkpkNkNuczF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZGU5OGUtMTdiNC00N2ZmLWE5Yzkt MTFjMzAwOWY0NGRmLzEvRVhvRXFTY0JuRHppME1uYk9qRkpkNkNuczF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85ZGU5OGUtMTdiNC00N2ZmLWE5YzktMTFjMzAwOWY0NGRm LzEvRVhvRXFTY0JuRHppME1uYk9qRkpkNkNuczF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg26Uno8I E1kWkvs50iR06GPJRf/QRAj3XVDSPF0MPso0kpxoM7B5S8iqJOqfBNCE2+rHol/L I3YGjBsSt0pYnX3ezO1O1/jOYMEf4r7DlooKluoawN8DbGftWRqVci1YCApq4kBs qsLgaB/5xbSXetSOQtVMllShj7+kK7KircQnMKpX+U9UXqdjpBb/HgOhexgMXC2W H0B+/a/BXRXXQzbzXOfC7DDQTTXawmMcjrUL+PNtbz2Cb49rSGEwNBoMn4Gw5iQx Cjt2tDy/cfA81ZEBmRJzIz8uFitblrd9Kw7sZPJSstIbsc3m6jN47W49lcsNul4S KRXyuyr5knwjRg== -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:32 2025 by rpki-client