This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft File: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft (raw, json) Hash identifier: WBKNfF0/QptYZ2TGuXL85B2oPh7mxGcv+1gB4UOabqE= Subject key identifier: 60:E4:33:AB:C8:01:D8:6F:52:35:24:28:11:94:FF:6B:18:4A:06:36 Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94 Certificate issuer: /CN=79730b9ea010d832f940efb589c51889132f4c94 Certificate serial: 019B522A7597F3E3AC7DD9049D0A69144015 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft Manifest number: 1796 Signing time: Wed 24 Dec 2025 21:01:12 +0000 Manifest this update: Wed 24 Dec 2025 21:01:12 +0000 Manifest next update: Thu 25 Dec 2025 21:01:12 +0000 Files and hashes: 1: 4-Hd07EQEQSMnF-RmoIQG-f-msw.roa (hash: 5L2RHjf2nHKLV7uL0XKnWxDBxm9LnDeMDKIuvtcOWVI=) 2: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl (hash: BY4tiXoPqBu+C+MZx7kqM44Xh0H6cOSI1aE8dHgVMPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:75:97:f3:e3:ac:7d:d9:04:9d:0a:69:14:40:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94 Validity Not Before: Dec 24 21:01:12 2025 GMT Not After : Dec 25 21:01:12 2025 GMT Subject: CN=60e433abc801d86f523524281194ff6b184a0636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:45:70:5a:ad:fc:59:39:03:8c:c5:47:45:76: 7f:84:25:51:83:5e:46:64:57:36:00:f9:90:42:29: 2f:35:49:89:34:d9:6a:7e:f7:df:df:59:e2:c9:e8: 06:ab:7d:65:fd:4b:3d:d9:e6:8e:f3:45:21:bf:2a: ba:fd:64:e8:6e:6a:ff:ee:6d:95:52:bd:23:2a:4a: 1c:55:33:8a:54:d5:c8:f9:03:2b:25:1f:6d:96:5e: 8c:98:35:97:c1:3b:1b:3d:52:b2:cc:e4:cc:8a:77: a2:38:cd:2e:62:b8:6a:ce:a3:79:88:30:d6:4b:22: db:c2:ef:02:45:fa:79:68:12:ca:dc:f2:09:c7:4a: b4:20:88:17:ff:8f:ea:8a:fa:87:85:88:df:dc:05: 7e:4e:3a:dd:a0:5f:2c:ac:cb:0c:a3:cf:db:98:04: f9:72:2f:97:ea:e2:c7:82:3c:14:7a:58:74:3b:70: fb:da:d9:e7:55:3b:5a:c3:12:ac:95:90:3b:ef:00: 94:70:9a:6e:84:b5:08:4c:8d:32:aa:01:6f:e6:5c: a4:07:5d:74:2d:09:b1:0f:00:b9:98:15:3b:8f:bd: 20:72:27:ca:a0:a5:9d:10:32:1f:b9:61:af:91:2a: 27:aa:0f:2f:c6:1b:ad:24:9c:d9:54:0f:df:b3:35: 1e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E4:33:AB:C8:01:D8:6F:52:35:24:28:11:94:FF:6B:18:4A:06:36 X509v3 Authority Key Identifier: keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:42:bd:5b:ae:0c:c3:ae:23:11:68:a0:0a:38:8d:11:a7:31: e4:66:02:e2:9f:19:bc:4e:22:0b:86:0a:0a:f3:d9:15:67:fd: e5:a5:6b:49:fd:2f:85:f7:d3:61:ea:c8:dc:6a:e8:43:c3:b8: 6c:ff:c8:37:93:6a:4e:ce:aa:1c:61:d4:cc:d5:4a:94:56:cd: 70:6b:3f:ed:37:17:3e:2c:1c:c6:01:33:86:6e:16:8f:1a:21: e8:c1:f6:e1:f3:7a:8a:4f:1e:24:17:c1:0d:ce:19:31:c2:60: 2a:56:42:cd:de:3b:58:c7:f1:b8:ce:07:14:f7:39:7f:e5:b9: ae:a0:ce:db:46:7f:a7:7e:78:93:01:f5:ab:30:1e:03:e5:8b: d7:fe:6e:b9:cc:f6:2f:d9:f2:f3:f6:c8:1d:f6:89:cc:7d:f6: bb:6d:71:b1:76:4d:99:ea:89:54:a4:4e:a6:06:f1:cc:71:77: 31:e6:a6:f5:76:44:6f:ce:4b:a0:f7:71:aa:8e:55:6a:9e:7b: 77:7f:3d:6a:1a:fb:a4:66:43:59:0b:39:64:e3:1d:4f:84:e5: 76:17:49:84:48:49:32:45:cc:05:cb:db:1a:b3:79:75:ad:07: 49:1c:1b:3b:54:ce:46:ef:03:12:a3:ba:91:ad:4d:0f:57:14: c2:db:e4:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKnWX8+OsfdkEnQppFEAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzMwYjllYTAxMGQ4MzJmOTQwZWZiNTg5YzUxODg5MTMy ZjRjOTQwHhcNMjUxMjI0MjEwMTEyWhcNMjUxMjI1MjEwMTEyWjAzMTEwLwYDVQQD Eyg2MGU0MzNhYmM4MDFkODZmNTIzNTI0MjgxMTk0ZmY2YjE4NGEwNjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10VwWq38WTkDjMVHRXZ/hCVRg15G ZFc2APmQQikvNUmJNNlqfvff31niyegGq31l/Us92eaO80Uhvyq6/WTobmr/7m2V Ur0jKkocVTOKVNXI+QMrJR9tll6MmDWXwTsbPVKyzOTMineiOM0uYrhqzqN5iDDW SyLbwu8CRfp5aBLK3PIJx0q0IIgX/4/qivqHhYjf3AV+TjrdoF8srMsMo8/bmAT5 ci+X6uLHgjwUelh0O3D72tnnVTtawxKslZA77wCUcJpuhLUITI0yqgFv5lykB110 LQmxDwC5mBU7j70gcifKoKWdEDIfuWGvkSonqg8vxhutJJzZVA/fszUehQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDkM6vIAdhvUjUkKBGU/2sYSgY2MB8GA1UdIwQY MBaAFHlzC56gENgy+UDvtYnFGIkTL0yUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hMDJjYzYtMTMwOC00N2U0LWEwODct Mzk2MDVmOTA4MWI3LzEvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9hMDJjYzYtMTMwOC00N2U0LWEwODctMzk2MDVmOTA4MWI3 LzEvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUK9W64M w64jEWigCjiNEacx5GYC4p8ZvE4iC4YKCvPZFWf95aVrSf0vhffTYerI3GroQ8O4 bP/IN5NqTs6qHGHUzNVKlFbNcGs/7TcXPiwcxgEzhm4Wjxoh6MH24fN6ik8eJBfB Dc4ZMcJgKlZCzd47WMfxuM4HFPc5f+W5rqDO20Z/p354kwH1qzAeA+WL1/5uucz2 L9ny8/bIHfaJzH32u21xsXZNmeqJVKROpgbxzHF3Meam9XZEb85LoPdxqo5Vap57 d389ahr7pGZDWQs5ZOMdT4TldhdJhEhJMkXMBcvbGrN5da0HSRwbO1TORu8DEqO6 ka1ND1cUwtvkhg== -----END CERTIFICATE-----Generated at Wed Dec 24 23:30:00 2025 by rpki-client