This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json) Hash identifier: yQpXCEgoBQV/ob6Jy1iFzeH0mNA8LJCWay0OcqydT9Y= Subject key identifier: 24:51:74:78:49:FB:41:53:49:58:9C:08:B4:FE:08:08:AC:08:DD:F3 Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 019B3C7F0253FFC21B9229E5954BE4914E05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft Manifest number: 17AB Signing time: Sat 20 Dec 2025 16:01:55 +0000 Manifest this update: Sat 20 Dec 2025 16:01:55 +0000 Manifest next update: Sun 21 Dec 2025 16:01:55 +0000 Files and hashes: 1: 31B5K7vkAfS9R2wkGuV5dcAnL2Y.roa (hash: O89Ry4yQ6lrE+ydQl9ey5gr4XCsYEJZz/2ZEEVTUklM=) 2: 8rBNukWPHPmFUpvlkGmzTz1-HwA.roa (hash: tMcco5dxWlTIQfy3zxbp0EQ9rOWiTqcDWIU/jeQq+bM=) 3: AuIXsACFZFXiRbUNGuqesbMnYNk.roa (hash: AtCFXdHEG1WMWeYjbN29zoI3CDK+hXSx8POzE7WNroc=) 4: DrV2xA7Yd-hZFiq3pO9rygl2qg0.roa (hash: TVf6eSJU2syGlD0lzcyv3W0pP95vSrCKIhPdX0AUyh0=) 5: GGh-0xxwn6ceElDQMHRGmEsQE-s.roa (hash: P3CSh7y+NvPz/ZjtWmpED7vAzzUGfZNIvd2EgvFxP9s=) 6: NmG_HXr74xhss_g6667RcEUKRLI.roa (hash: w4iJzBXqF4+nBtbBp9H18XsHRW5050KpbO/LhdFePIo=) 7: OeWAQhxz5E883h7RJjR3cmkBM6o.roa (hash: SpK+6FCkO+sEnLY+zrox32fWgUHKX5y3hElZSDHvkaU=) 8: ZVJfIWSCZIVSTo9PXiEHKhrJCaM.roa (hash: REntsWwwRsVHSdpCDEerInchIORTXEiS2eQnOBf/kfw=) 9: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: jb4AFncVdG0QKU4odzK8p9CT/XWUXKtgmtt284a9WGI=) 10: jRyIBgdtXReJ9oHBVuw4FaEWM-0.roa (hash: ZszsBIs7CJREdsDcllx0N3t5IqBzFvq0JJZ2fLMu8PY=) 11: pGXlBe8mvqpUo_lCHeYFkShv2K8.roa (hash: rjd6cps92Ja94+46vbe5lft5y/2s10gUp3FV0e699LY=) 12: zIH5sPlMx70fyP1Az3Csaj7WyTI.roa (hash: 2aeoW9K+GdEGc7tRsUNmCwR+CPzyrfG3s/F0EGb6/Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:02:53:ff:c2:1b:92:29:e5:95:4b:e4:91:4e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Dec 20 16:01:55 2025 GMT Not After : Dec 21 16:01:55 2025 GMT Subject: CN=2451747849fb415349589c08b4fe0808ac08ddf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:68:74:be:78:43:58:2c:06:61:36:22:f6: ac:14:98:88:ac:c5:e6:c4:bc:8d:5f:fb:84:da:c1: 9f:ae:44:5b:e9:88:74:ef:1b:57:7e:3c:46:1f:3e: 57:c6:6d:75:4f:34:16:f4:0c:3d:85:f9:33:45:ea: 8d:e7:9d:f9:23:f0:89:48:85:6b:17:b5:14:2e:ac: e9:88:73:68:91:3d:f5:b6:1e:26:fc:23:04:22:ed: a7:32:12:ba:7f:ca:07:98:9e:df:4e:e6:89:34:69: e7:a1:dc:00:17:a7:0c:f1:fc:6a:e7:c1:2d:d3:94: d9:d4:9a:4c:92:a5:e8:3d:df:3b:8c:2a:fd:5f:02: 7a:60:81:60:c2:cd:3f:91:31:64:6c:cf:dd:f6:e8: ed:50:a0:28:80:0d:0d:e7:77:65:49:51:a0:b6:1b: b1:e7:62:a2:b4:3f:be:29:c9:1a:f1:73:03:63:f0: 54:89:be:82:55:9a:8d:f8:6d:fd:84:88:2b:ad:38: 67:52:52:fc:7c:d9:d2:cc:5a:f2:87:14:54:c9:b4: f9:20:d0:9a:c6:84:dd:4b:ce:f4:2c:cf:b7:1a:20: 5d:04:cb:a1:6d:72:b0:24:ae:03:31:0f:90:03:35: c6:0e:7a:77:63:6f:1b:0a:b3:ee:69:dc:ef:04:1e: 38:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:51:74:78:49:FB:41:53:49:58:9C:08:B4:FE:08:08:AC:08:DD:F3 X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:43:1b:78:6c:30:8a:c7:c6:04:45:df:3c:57:20:ff:7c:0b: 68:ee:57:2c:aa:49:e4:38:72:88:49:10:06:e1:52:7b:89:8f: cf:51:ac:58:b2:fd:fe:16:5c:87:95:d4:93:dc:f2:cb:b4:c2: 98:83:38:ab:15:74:52:2f:5f:f0:4b:b0:7f:8e:b7:ae:cb:f6: ff:c5:bc:3d:58:f4:8d:5a:a7:3d:65:38:c7:64:0a:89:c7:20: 36:bf:11:ce:bd:2d:a2:7c:ee:16:fe:9f:f7:0b:4a:71:60:8c: 7c:65:17:79:bc:58:e8:11:9c:cc:37:15:11:80:df:35:2f:12: 07:0e:5b:19:d0:3d:64:dd:de:69:01:f0:63:4b:e8:bf:db:ef: d8:94:fd:b1:06:55:08:1c:f8:7f:c4:f8:45:77:89:9d:90:46: df:20:9e:28:c8:71:72:55:0f:a8:1b:36:b0:af:e7:57:92:84: 58:4e:e1:b7:c6:20:88:3d:e6:8f:6c:9f:b9:58:9f:db:a1:83: 71:07:b9:ac:ed:4b:5c:83:54:85:d7:c4:10:b5:ca:d4:d6:20: c7:bd:ad:b4:bf:16:0f:b6:aa:78:2c:2e:34:ed:22:16:93:77: 92:ff:b6:2e:fa:09:f0:3a:a8:fc:4c:09:0f:ac:e0:7f:5e:7e: 69:0d:ca:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fwJT/8IbkinllUvkkU4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjUxMjIwMTYwMTU1WhcNMjUxMjIxMTYwMTU1WjAzMTEwLwYDVQQD EygyNDUxNzQ3ODQ5ZmI0MTUzNDk1ODljMDhiNGZlMDgwOGFjMDhkZGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+podL54Q1gsBmE2IvasFJiIrMXm xLyNX/uE2sGfrkRb6Yh07xtXfjxGHz5Xxm11TzQW9Aw9hfkzReqN5535I/CJSIVr F7UULqzpiHNokT31th4m/CMEIu2nMhK6f8oHmJ7fTuaJNGnnodwAF6cM8fxq58Et 05TZ1JpMkqXoPd87jCr9XwJ6YIFgws0/kTFkbM/d9ujtUKAogA0N53dlSVGgthux 52KitD++Kcka8XMDY/BUib6CVZqN+G39hIgrrThnUlL8fNnSzFryhxRUybT5INCa xoTdS870LM+3GiBdBMuhbXKwJK4DMQ+QAzXGDnp3Y28bCrPuadzvBB44ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRRdHhJ+0FTSVicCLT+CAisCN3zMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkMbeGww isfGBEXfPFcg/3wLaO5XLKpJ5DhyiEkQBuFSe4mPz1GsWLL9/hZch5XUk9zyy7TC mIM4qxV0Ui9f8Euwf463rsv2/8W8PVj0jVqnPWU4x2QKiccgNr8Rzr0tonzuFv6f 9wtKcWCMfGUXebxY6BGczDcVEYDfNS8SBw5bGdA9ZN3eaQHwY0vov9vv2JT9sQZV CBz4f8T4RXeJnZBG3yCeKMhxclUPqBs2sK/nV5KEWE7ht8YgiD3mj2yfuVif26GD cQe5rO1LXINUhdfEELXK1NYgx72ttL8WD7aqeCwuNO0iFpN3kv+2LvoJ8Dqo/EwJ D6zgf15+aQ3Kww== -----END CERTIFICATE-----Generated at Sat Dec 20 18:27:06 2025 by rpki-client