This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft File: eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft (raw, json) Hash identifier: 6KuE67okWym5UcdSiDqUNqe8rFfNYHuXDUA8TQgWeHs= Subject key identifier: F1:01:A1:07:3D:23:64:44:76:6D:6E:2D:F6:3B:94:04:C8:1A:55:71 Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93 Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693 Certificate serial: 019B66C394AC55E758282A4A4964C7D7DCBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft Manifest number: 07A2 Signing time: Sun 28 Dec 2025 21:00:52 +0000 Manifest this update: Sun 28 Dec 2025 21:00:52 +0000 Manifest next update: Mon 29 Dec 2025 21:00:52 +0000 Files and hashes: 1: L3gVEYY-SNWWzxbViYwIk4pbExk.roa (hash: 7OeYXRKEQzoTeSepGK6jCDC4REoaBlzhDjxELJRYDKc=) 2: aitzywJ0j_dARhrfoxNyxBJoyQk.roa (hash: dC62hnkZaqFuyH9e5I1F2VTnP1nJrO3yupT8VEw+fvg=) 3: eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl (hash: ShpWGp/JV32A8wcPshQldbQgPde1+9k/g6v32wtlknY=) 4: nYyTzI4wXbdYu948I9jdt28hAiU.roa (hash: JZ1SpvEjxZBTPHKIWDf1snwk5k6ZrolIHB7OLNEhoHk=) 5: roSBaoRvAnTIt76C3C33nUHwU3g.roa (hash: l3sqdOHSiVFg15vNcDdfbgIjlCa4lIwHlmQgrqAJ+sQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:c3:94:ac:55:e7:58:28:2a:4a:49:64:c7:d7:dc:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693 Validity Not Before: Dec 28 21:00:52 2025 GMT Not After : Dec 29 21:00:52 2025 GMT Subject: CN=f101a1073d236444766d6e2df63b9404c81a5571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f9:5f:21:72:9f:75:9d:d9:bb:a5:a7:9b:35: 97:0f:b9:08:ff:b2:11:bb:0e:51:ed:e9:b3:26:50: 4f:8d:54:f6:ff:de:d2:36:e0:46:b1:10:9b:b9:e5: 63:8c:b2:f6:7c:0f:83:88:5b:fb:4f:bb:0b:d4:df: c0:7f:d7:e8:d2:e2:76:34:ba:65:6b:08:e6:f6:0d: a0:b7:5a:02:a3:b2:1e:d0:d2:5f:fc:00:cb:f8:c6: 4d:03:bb:ff:e1:da:8d:32:67:c1:58:f5:0c:28:a8: b0:8a:80:34:b9:1f:3a:29:38:a7:75:69:4c:2a:20: 42:da:6b:13:2b:49:a6:07:c2:b6:5c:f9:bd:f9:03: 2b:c5:b1:aa:0f:78:a1:30:7c:43:f1:e9:d8:5f:64: 14:d5:88:78:99:c0:0d:e1:3e:ce:b7:44:18:47:ef: 06:23:47:f0:78:21:5d:f2:de:64:13:59:ca:8a:06: bf:91:ac:2d:05:86:fe:08:13:e4:9c:eb:b0:ce:ac: 4e:e1:26:a1:dc:3a:7c:24:9e:80:2d:99:ef:80:c5: c6:f4:56:05:97:4a:82:3a:fe:14:f3:90:a3:81:0e: 10:01:cd:ee:0f:ca:7c:6b:82:91:ef:e1:85:1b:1e: 01:13:2a:a0:a5:17:b3:86:16:a6:ae:65:21:e0:be: 37:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:01:A1:07:3D:23:64:44:76:6D:6E:2D:F6:3B:94:04:C8:1A:55:71 X509v3 Authority Key Identifier: keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7a:f1:12:2b:60:5a:83:52:a1:68:bd:33:10:09:b2:68:de: 3b:f9:ec:2b:fa:e4:90:94:3e:c3:d2:3c:7c:9d:c3:a0:67:78: 72:f1:c8:25:00:85:ea:8a:6e:86:db:d4:2e:41:5a:71:87:d7: f0:d2:33:57:52:7a:6b:9c:7b:8b:02:00:98:54:b6:03:e5:47: 58:01:3d:51:af:c4:65:68:3e:47:d2:e9:51:b6:e4:b2:15:f8: 20:f4:11:15:6c:10:70:dc:e8:9a:5f:33:3e:a9:33:1b:7d:72: 58:50:83:c6:32:25:ee:f3:52:dc:39:ff:f2:47:d6:bf:de:81: 88:8f:32:03:16:96:c3:7e:c3:5e:c9:f7:5f:11:d2:4d:4c:ec: 25:e8:ec:5d:9e:4c:95:e8:68:ef:9b:f3:27:82:5d:da:8f:b1: 04:cd:a4:4f:1e:3d:2e:4c:a1:8f:de:db:af:57:85:09:69:f5: db:7c:bd:67:e9:93:2f:68:30:f8:18:60:cd:e6:88:77:ec:e1: d1:92:62:f5:68:cb:74:16:d5:2f:4e:31:ad:3c:3a:7b:44:a8: e0:46:0b:c1:8e:29:d4:24:77:3a:a5:6d:78:1b:5b:ee:4c:74: 9e:a3:22:b1:58:1d:7e:92:26:2e:ed:d4:87:42:26:b1:d4:f1: b3:79:b1:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmw5SsVedYKCpKSWTH19y8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzZkN2QwYmJjYzA4NTE2NTIzZDVkZjI0ZTY4ODJiNzJj YTU2OTMwHhcNMjUxMjI4MjEwMDUyWhcNMjUxMjI5MjEwMDUyWjAzMTEwLwYDVQQD EyhmMTAxYTEwNzNkMjM2NDQ0NzY2ZDZlMmRmNjNiOTQwNGM4MWE1NTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoflfIXKfdZ3Zu6WnmzWXD7kI/7IR uw5R7emzJlBPjVT2/97SNuBGsRCbueVjjLL2fA+DiFv7T7sL1N/Af9fo0uJ2NLpl awjm9g2gt1oCo7Ie0NJf/ADL+MZNA7v/4dqNMmfBWPUMKKiwioA0uR86KTindWlM KiBC2msTK0mmB8K2XPm9+QMrxbGqD3ihMHxD8enYX2QU1Yh4mcAN4T7Ot0QYR+8G I0fweCFd8t5kE1nKiga/kawtBYb+CBPknOuwzqxO4Sah3Dp8JJ6ALZnvgMXG9FYF l0qCOv4U85CjgQ4QAc3uD8p8a4KR7+GFGx4BEyqgpRezhhamrmUh4L43twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEBoQc9I2REdm1uLfY7lATIGlVxMB8GA1UdIwQY MBaAFHl219C7zAhRZSPV3yTmiCtyylaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMt ODU0MTgyY2IwNmE2LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMtODU0MTgyY2IwNmE2 LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnrxEitg WoNSoWi9MxAJsmjeO/nsK/rkkJQ+w9I8fJ3DoGd4cvHIJQCF6opuhtvULkFacYfX 8NIzV1J6a5x7iwIAmFS2A+VHWAE9Ua/EZWg+R9LpUbbkshX4IPQRFWwQcNzoml8z PqkzG31yWFCDxjIl7vNS3Dn/8kfWv96BiI8yAxaWw37DXsn3XxHSTUzsJejsXZ5M leho75vzJ4Jd2o+xBM2kTx49Lkyhj97br1eFCWn123y9Z+mTL2gw+BhgzeaId+zh 0ZJi9WjLdBbVL04xrTw6e0So4EYLwY4p1CR3OqVteBtb7kx0nqMisVgdfpImLu3U h0ImsdTxs3mxPQ== -----END CERTIFICATE-----Generated at Sun Dec 28 23:21:57 2025 by rpki-client