This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft File: eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft (raw, json) Hash identifier: e8HrVq3fTnuCCVp7i/rzsoxYU6hOQWe1KRs9VIMJgU8= Subject key identifier: 35:FF:6A:62:36:16:F3:0E:DC:A1:A3:C0:62:B6:BF:DD:F7:68:5D:92 Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93 Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693 Certificate serial: 019B386A31A66486CCEA11130281CE35C6B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft Manifest number: 078A Signing time: Fri 19 Dec 2025 21:00:42 +0000 Manifest this update: Fri 19 Dec 2025 21:00:42 +0000 Manifest next update: Sat 20 Dec 2025 21:00:42 +0000 Files and hashes: 1: L3gVEYY-SNWWzxbViYwIk4pbExk.roa (hash: 7OeYXRKEQzoTeSepGK6jCDC4REoaBlzhDjxELJRYDKc=) 2: aitzywJ0j_dARhrfoxNyxBJoyQk.roa (hash: dC62hnkZaqFuyH9e5I1F2VTnP1nJrO3yupT8VEw+fvg=) 3: eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl (hash: Q5hnykrOgdmivskDVf6K1B7ER7KptuR4Cwct3TG77hU=) 4: nYyTzI4wXbdYu948I9jdt28hAiU.roa (hash: JZ1SpvEjxZBTPHKIWDf1snwk5k6ZrolIHB7OLNEhoHk=) 5: roSBaoRvAnTIt76C3C33nUHwU3g.roa (hash: l3sqdOHSiVFg15vNcDdfbgIjlCa4lIwHlmQgrqAJ+sQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:31:a6:64:86:cc:ea:11:13:02:81:ce:35:c6:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693 Validity Not Before: Dec 19 21:00:42 2025 GMT Not After : Dec 20 21:00:42 2025 GMT Subject: CN=35ff6a623616f30edca1a3c062b6bfddf7685d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e4:aa:77:ea:91:90:58:95:49:ea:a9:f0:4b: 41:7c:e4:81:8c:a8:0d:8e:18:df:8c:2f:24:2d:26: 1d:af:54:42:8b:b8:b5:46:74:bc:cc:93:f3:9f:e9: 8b:18:e7:67:b6:c2:2f:b4:bb:64:b1:66:c6:6a:45: 50:b1:2e:a2:90:bf:e6:0a:c3:27:72:d5:9f:5d:56: 15:fb:fa:8a:25:ad:b3:a7:25:64:91:34:d1:54:a6: 29:eb:10:6f:c0:ba:92:6d:1f:64:6a:6d:50:8a:c5: a2:ee:5e:43:40:b4:19:33:57:a6:8f:bd:ab:61:87: f3:52:c3:8d:d6:00:5e:ca:1d:12:21:a2:ae:18:50: a4:6f:85:14:7d:91:a0:c9:99:0e:e8:f9:20:d8:8c: ca:08:73:bc:fd:9b:fd:f0:73:66:6c:36:9e:64:43: ea:b6:ab:42:dd:14:d5:fc:9b:a7:6d:17:9c:61:cb: 03:e1:59:3b:b7:cc:33:e2:1d:53:17:7a:1c:24:4b: bc:74:07:af:a7:89:92:a5:26:93:84:30:24:36:7d: 8d:b1:cb:bd:5e:77:28:6a:01:e7:05:d1:e6:86:2e: fa:0e:92:b9:78:eb:91:48:bf:6c:a2:2d:80:57:1b: ea:d8:ac:ec:a1:34:12:90:d5:87:65:c4:b2:58:09: 60:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FF:6A:62:36:16:F3:0E:DC:A1:A3:C0:62:B6:BF:DD:F7:68:5D:92 X509v3 Authority Key Identifier: keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:35:ae:f3:d1:66:4a:ef:ea:b0:c8:87:82:96:65:ce:5f:5e: 55:56:21:d2:25:1f:71:e6:07:33:74:e9:1f:21:69:d4:26:e2: c4:52:31:b3:70:4c:69:66:90:c6:8a:2f:bd:d2:c8:8d:2d:ff: 0a:21:d3:27:97:29:b9:fb:cd:7a:cc:3e:7d:2b:70:e1:c9:3f: e7:05:b9:2c:2e:2f:75:41:95:ee:76:db:0d:3f:24:3e:7c:ee: 47:24:f2:26:0f:be:f4:59:c7:32:42:62:ee:c6:8a:b9:b7:05: fa:bc:55:25:30:55:51:04:ef:f7:58:f0:3b:80:82:31:ce:de: 32:1c:c5:75:41:0c:5a:b0:df:ff:6e:bb:11:68:46:51:e8:db: 3f:59:5b:3a:51:1f:f0:33:6b:56:93:b1:0e:19:f0:13:84:1c: 41:d3:b2:9a:44:c6:2c:4d:ef:d8:64:e8:ad:cb:5a:75:8e:0a: f6:09:2e:b7:de:01:24:00:eb:fe:c3:e0:d9:4e:13:0f:d4:91: e8:dd:96:ab:a9:95:ab:d9:4b:87:c5:f1:c4:8f:1a:b4:4f:c1: e1:8a:57:73:d0:69:5d:3a:93:84:9d:d9:e0:73:0c:72:69:e9: 8e:46:7a:2b:bd:ad:1e:c0:12:09:f2:ea:3b:02:76:8b:0d:9c: 88:ae:bb:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ajGmZIbM6hETAoHONca0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzZkN2QwYmJjYzA4NTE2NTIzZDVkZjI0ZTY4ODJiNzJj YTU2OTMwHhcNMjUxMjE5MjEwMDQyWhcNMjUxMjIwMjEwMDQyWjAzMTEwLwYDVQQD EygzNWZmNmE2MjM2MTZmMzBlZGNhMWEzYzA2MmI2YmZkZGY3Njg1ZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOSqd+qRkFiVSeqp8EtBfOSBjKgN jhjfjC8kLSYdr1RCi7i1RnS8zJPzn+mLGOdntsIvtLtksWbGakVQsS6ikL/mCsMn ctWfXVYV+/qKJa2zpyVkkTTRVKYp6xBvwLqSbR9kam1QisWi7l5DQLQZM1emj72r YYfzUsON1gBeyh0SIaKuGFCkb4UUfZGgyZkO6Pkg2IzKCHO8/Zv98HNmbDaeZEPq tqtC3RTV/JunbRecYcsD4Vk7t8wz4h1TF3ocJEu8dAevp4mSpSaThDAkNn2Nscu9 XncoagHnBdHmhi76DpK5eOuRSL9soi2AVxvq2KzsoTQSkNWHZcSyWAlgEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDX/amI2FvMO3KGjwGK2v933aF2SMB8GA1UdIwQY MBaAFHl219C7zAhRZSPV3yTmiCtyylaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMt ODU0MTgyY2IwNmE2LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMtODU0MTgyY2IwNmE2 LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDWu89Fm Su/qsMiHgpZlzl9eVVYh0iUfceYHM3TpHyFp1CbixFIxs3BMaWaQxoovvdLIjS3/ CiHTJ5cpufvNesw+fStw4ck/5wW5LC4vdUGV7nbbDT8kPnzuRyTyJg++9FnHMkJi 7saKubcF+rxVJTBVUQTv91jwO4CCMc7eMhzFdUEMWrDf/267EWhGUejbP1lbOlEf 8DNrVpOxDhnwE4QcQdOymkTGLE3v2GTorctadY4K9gkut94BJADr/sPg2U4TD9SR 6N2Wq6mVq9lLh8XxxI8atE/B4YpXc9BpXTqThJ3Z4HMMcmnpjkZ6K72tHsASCfLq OwJ2iw2ciK67PQ== -----END CERTIFICATE-----Generated at Sat Dec 20 05:00:40 2025 by rpki-client