This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft File: EXdPipmODyrxj3UnnjJlSBNpRIg.mft (raw, json) Hash identifier: xCfBGSERMtbPpudNrfIvTesvq25PNHX9SxE6UQBmAuA= Subject key identifier: 71:AB:A6:59:90:4F:B4:33:8F:1C:13:EE:AB:97:D4:50:7F:D5:30:61 Authority key identifier: 11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88 Certificate issuer: /CN=11774f8a998e0f2af18f75279e32654813694488 Certificate serial: 019B4C5F58A8E04046AD198A951BD02CB279 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft Manifest number: 05D4 Signing time: Tue 23 Dec 2025 18:01:15 +0000 Manifest this update: Tue 23 Dec 2025 18:01:15 +0000 Manifest next update: Wed 24 Dec 2025 18:01:15 +0000 Files and hashes: 1: EXdPipmODyrxj3UnnjJlSBNpRIg.crl (hash: lVmXwlPP3BTKmJ68r1a0ArW0moSz1jItxlJVsS0CjpU=) 2: lEOnyeTSrhVKx1TLByVlPzDKz8w.roa (hash: n8RWZqmzmommBj8oDYR9O53K32j7DKyp4tQyqLf5eY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 18:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:58:a8:e0:40:46:ad:19:8a:95:1b:d0:2c:b2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11774f8a998e0f2af18f75279e32654813694488 Validity Not Before: Dec 23 18:01:15 2025 GMT Not After : Dec 24 18:01:15 2025 GMT Subject: CN=71aba659904fb4338f1c13eeab97d4507fd53061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6c:66:95:0d:21:17:58:36:07:89:8f:eb:5f: 09:00:8f:ca:e8:0a:b4:b6:dd:df:74:b6:b8:ec:8c: fd:6f:a6:5b:62:5e:80:5c:1e:c7:ed:45:e0:23:36: 27:82:eb:54:7a:18:bf:49:b2:71:80:1d:5e:59:8b: 51:9e:4c:6c:05:46:3f:b4:f4:2a:ec:4d:94:15:91: ec:5b:b6:a2:91:26:42:87:5c:8e:68:27:b2:9d:77: 2a:d7:0f:ff:fe:5f:05:1f:8a:5a:60:bd:58:60:42: 21:84:fd:ae:03:56:05:05:26:72:de:41:50:2b:63: 4c:f9:f6:21:5b:ab:da:22:94:2d:58:30:77:b9:37: 97:26:9f:a8:60:12:d2:ab:56:55:2c:91:4c:e7:97: 36:78:b9:70:7d:d1:66:db:f2:4c:fe:44:c6:1b:92: bd:4f:a0:ac:a2:4e:c8:f1:43:94:02:09:ab:d3:82: 6b:4b:72:88:f7:24:07:1b:c1:b8:a7:ae:69:04:ad: fb:97:b5:e5:13:43:30:ee:2b:86:3c:0e:e5:e4:e1: ab:53:c4:24:be:e2:2d:aa:93:63:1f:75:27:04:3e: 04:ec:a4:a7:bf:54:5a:1d:77:fd:5c:b5:79:0c:08: ad:ef:1a:a5:e4:d1:85:d8:dd:69:0c:16:80:a4:5f: 4f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AB:A6:59:90:4F:B4:33:8F:1C:13:EE:AB:97:D4:50:7F:D5:30:61 X509v3 Authority Key Identifier: keyid:11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1d:b7:37:3b:e2:29:34:2d:98:9a:36:d0:6c:46:a1:84:4f: 8d:45:c7:51:e8:27:1b:c4:2a:f5:56:7d:0a:e5:76:c6:9f:39: 80:d2:c3:fe:44:61:40:31:9b:6c:f8:97:61:85:da:19:52:cc: 5c:e0:22:11:ad:94:76:7b:b9:86:46:48:d2:45:a4:e8:64:11: 35:e6:ae:72:10:dd:18:79:a5:c6:c1:e8:2e:72:31:f2:9e:84: 02:11:26:e0:a8:a4:2c:c1:d6:ad:2b:d3:94:ed:39:48:59:3c: 0e:7f:0c:0b:e5:00:4a:3a:0f:f3:98:52:96:cf:55:ad:4b:fb: b1:b5:7a:49:c2:7c:87:18:8f:f6:75:40:b8:2e:5d:8d:4d:5c: 0a:3e:76:a2:d6:41:51:92:35:45:46:ab:f7:ca:d2:03:48:85: 5b:3b:76:bf:da:87:50:2a:41:3b:94:e5:b3:6b:de:8a:d6:4a: 8e:a8:c0:a9:28:bb:7d:3d:9e:18:2a:5e:cf:3e:33:40:0b:d9: 69:b1:45:b2:f0:88:df:8d:6b:c3:de:0e:40:13:5d:d8:bd:e2: d8:41:2c:dd:61:22:4f:14:e6:9f:4c:c3:c2:50:e5:e0:c3:a5: 53:e3:00:ed:f4:ca:e6:b5:28:10:42:7a:32:a7:fb:7b:8f:ce: b5:91:17:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMX1io4EBGrRmKlRvQLLJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNzc0ZjhhOTk4ZTBmMmFmMThmNzUyNzllMzI2NTQ4MTM2 OTQ0ODgwHhcNMjUxMjIzMTgwMTE1WhcNMjUxMjI0MTgwMTE1WjAzMTEwLwYDVQQD Eyg3MWFiYTY1OTkwNGZiNDMzOGYxYzEzZWVhYjk3ZDQ1MDdmZDUzMDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWxmlQ0hF1g2B4mP618JAI/K6Aq0 tt3fdLa47Iz9b6ZbYl6AXB7H7UXgIzYngutUehi/SbJxgB1eWYtRnkxsBUY/tPQq 7E2UFZHsW7aikSZCh1yOaCeynXcq1w///l8FH4paYL1YYEIhhP2uA1YFBSZy3kFQ K2NM+fYhW6vaIpQtWDB3uTeXJp+oYBLSq1ZVLJFM55c2eLlwfdFm2/JM/kTGG5K9 T6Csok7I8UOUAgmr04JrS3KI9yQHG8G4p65pBK37l7XlE0Mw7iuGPA7l5OGrU8Qk vuItqpNjH3UnBD4E7KSnv1RaHXf9XLV5DAit7xql5NGF2N1pDBaApF9PKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGrplmQT7QzjxwT7quX1FB/1TBhMB8GA1UdIwQY MBaAFBF3T4qZjg8q8Y91J54yZUgTaUSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVhkUGlwbU9EeXJ4ajNVbm5qSmxTQk5wUklnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yNDFjMTgtNzhkYS00YjNkLWE0NDAt MDgwMmQ0YzdkOTZkLzEvRVhkUGlwbU9EeXJ4ajNVbm5qSmxTQk5wUklnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8yNDFjMTgtNzhkYS00YjNkLWE0NDAtMDgwMmQ0YzdkOTZk LzEvRVhkUGlwbU9EeXJ4ajNVbm5qSmxTQk5wUklnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPB23Nzvi KTQtmJo20GxGoYRPjUXHUegnG8Qq9VZ9CuV2xp85gNLD/kRhQDGbbPiXYYXaGVLM XOAiEa2Udnu5hkZI0kWk6GQRNeauchDdGHmlxsHoLnIx8p6EAhEm4KikLMHWrSvT lO05SFk8Dn8MC+UASjoP85hSls9VrUv7sbV6ScJ8hxiP9nVAuC5djU1cCj52otZB UZI1RUar98rSA0iFWzt2v9qHUCpBO5Tls2veitZKjqjAqSi7fT2eGCpezz4zQAvZ abFFsvCI341rw94OQBNd2L3i2EEs3WEiTxTmn0zDwlDl4MOlU+MA7fTK5rUoEEJ6 Mqf7e4/OtZEX8w== -----END CERTIFICATE-----Generated at Wed Dec 24 03:34:38 2025 by rpki-client