This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft File: eXe1XjT_1yB1-92gOaZbNx3jmCA.mft (raw, json) Hash identifier: hhn7wbFPcN4HwBcs1l/i4pPkd1nAjYYAZnCAaGesZrg= Subject key identifier: 17:AE:89:E6:FA:E0:5F:E3:F6:65:79:34:62:A7:86:62:23:6D:E6:62 Authority key identifier: 79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20 Certificate issuer: /CN=7977b55e34ffd72075fbdda039a65b371de39820 Certificate serial: 019B34C43707F382EDA732B1CF68C619C284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft Manifest number: 0D9F Signing time: Fri 19 Dec 2025 04:00:32 +0000 Manifest this update: Fri 19 Dec 2025 04:00:32 +0000 Manifest next update: Sat 20 Dec 2025 04:00:32 +0000 Files and hashes: 1: Tx774YWupF3TJKc5zuGEprJ-8Q8.roa (hash: 6EvMus28/r2hOkn9lsQE7epJ2J6h3GLbCRAmFL/wVzM=) 2: eXe1XjT_1yB1-92gOaZbNx3jmCA.crl (hash: Gz2GnLsc4dHQpuAA8T0pAcuzJF4nOTyczLOpDe7PvuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:37:07:f3:82:ed:a7:32:b1:cf:68:c6:19:c2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7977b55e34ffd72075fbdda039a65b371de39820 Validity Not Before: Dec 19 04:00:32 2025 GMT Not After : Dec 20 04:00:32 2025 GMT Subject: CN=17ae89e6fae05fe3f665793462a78662236de662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cf:0d:e4:64:c7:0b:94:d3:f0:a8:9b:c1:24: c7:80:3e:cc:06:f5:00:1c:aa:b7:c0:f7:cc:d7:60: 3e:09:4d:5f:d0:e2:ff:d1:aa:85:12:ee:fb:f3:e5: b4:c5:69:31:d0:72:33:de:87:e9:f6:0e:bb:b9:e2: 3d:23:ca:54:f3:70:de:ef:34:8f:8f:06:a1:74:ae: 68:0e:90:83:df:5d:71:a9:0e:2f:59:2f:6d:ef:76: 4e:b1:fd:31:65:58:3e:e4:e2:01:31:ad:4e:60:83: 29:5a:b0:71:dc:41:35:1f:7b:48:0e:71:37:45:8e: 1d:73:b2:e2:3b:9a:55:8b:1a:3e:2e:30:a3:e8:97: 8a:7c:ef:e6:04:39:51:d3:b5:c0:a1:e6:7e:4b:8b: 3a:07:37:67:01:3c:29:e6:41:91:a6:35:0f:12:94: c5:cc:e7:b2:db:60:99:5d:9b:e6:c7:10:34:6e:77: 4c:8c:50:cf:16:06:1f:26:df:01:63:15:ae:fe:0c: 34:6b:c5:d9:8d:f8:9a:57:d0:a4:e2:0a:1e:35:19: d6:a1:18:f3:5a:70:b6:6b:4a:a5:9a:b5:06:fe:e5: 12:5a:4e:36:b2:34:b0:d0:f1:93:73:16:48:e0:5d: f7:fe:d1:25:4a:1b:67:c8:f4:56:87:b8:f2:dd:0b: c8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AE:89:E6:FA:E0:5F:E3:F6:65:79:34:62:A7:86:62:23:6D:E6:62 X509v3 Authority Key Identifier: keyid:79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e6:26:cf:61:5b:16:83:ba:b9:c1:5f:6b:49:7b:bc:d0:b9: ff:90:22:3c:fb:27:3f:91:93:c8:0c:df:a2:fb:82:7c:0c:5a: 95:ed:8d:52:ac:f9:60:5f:8f:39:23:3f:4a:e6:33:40:05:d1: 3a:b4:a0:32:95:e9:e6:c6:16:ca:5e:d2:6c:70:e9:56:24:44: 7e:e9:d5:eb:4c:9e:84:b4:b4:aa:cd:87:98:c2:f3:2b:5b:cf: 0c:b3:64:b6:f2:40:93:ff:b1:76:eb:38:bd:28:41:6a:aa:d4: 64:54:29:ba:f8:1a:5a:b8:e0:69:fd:f2:79:3b:9c:b4:6d:71: 5b:15:4e:b6:3c:39:74:62:83:8b:35:a0:54:29:75:e0:12:88: 83:be:e3:63:f2:44:00:1a:dc:14:20:1b:39:d6:74:97:14:f1: 4e:1c:3c:a5:fa:b8:ca:42:ae:ba:98:7f:5d:1e:17:06:9c:82: e8:db:04:3d:4b:70:eb:2e:10:47:a4:05:ae:53:1f:64:47:56: 5a:23:57:88:e5:54:37:d6:80:85:b3:58:94:af:e1:fa:77:01: af:26:28:b9:aa:cc:e8:e4:f5:3f:e7:3c:d8:3f:7c:97:a2:ca: c2:11:8a:27:96:10:4f:c1:ee:95:fb:2f:24:0a:98:13:75:06: 62:aa:aa:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xDcH84LtpzKxz2jGGcKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzdiNTVlMzRmZmQ3MjA3NWZiZGRhMDM5YTY1YjM3MWRl Mzk4MjAwHhcNMjUxMjE5MDQwMDMyWhcNMjUxMjIwMDQwMDMyWjAzMTEwLwYDVQQD EygxN2FlODllNmZhZTA1ZmUzZjY2NTc5MzQ2MmE3ODY2MjIzNmRlNjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM8N5GTHC5TT8KibwSTHgD7MBvUA HKq3wPfM12A+CU1f0OL/0aqFEu778+W0xWkx0HIz3ofp9g67ueI9I8pU83De7zSP jwahdK5oDpCD311xqQ4vWS9t73ZOsf0xZVg+5OIBMa1OYIMpWrBx3EE1H3tIDnE3 RY4dc7LiO5pVixo+LjCj6JeKfO/mBDlR07XAoeZ+S4s6BzdnATwp5kGRpjUPEpTF zOey22CZXZvmxxA0bndMjFDPFgYfJt8BYxWu/gw0a8XZjfiaV9Ck4goeNRnWoRjz WnC2a0qlmrUG/uUSWk42sjSw0PGTcxZI4F33/tElShtnyPRWh7jy3QvIdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeuieb64F/j9mV5NGKnhmIjbeZiMB8GA1UdIwQY MBaAFHl3tV40/9cgdfvdoDmmWzcd45ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iZDBhNzYtMDRiMS00NDkwLWFkMDQt OTdlZWM3Y2Y2MDkzLzEvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iZDBhNzYtMDRiMS00NDkwLWFkMDQtOTdlZWM3Y2Y2MDkz LzEvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASeYmz2Fb FoO6ucFfa0l7vNC5/5AiPPsnP5GTyAzfovuCfAxale2NUqz5YF+POSM/SuYzQAXR OrSgMpXp5sYWyl7SbHDpViREfunV60yehLS0qs2HmMLzK1vPDLNktvJAk/+xdus4 vShBaqrUZFQpuvgaWrjgaf3yeTuctG1xWxVOtjw5dGKDizWgVCl14BKIg77jY/JE ABrcFCAbOdZ0lxTxThw8pfq4ykKuuph/XR4XBpyC6NsEPUtw6y4QR6QFrlMfZEdW WiNXiOVUN9aAhbNYlK/h+ncBryYouarM6OT1P+c82D98l6LKwhGKJ5YQT8Hulfsv JAqYE3UGYqqq6w== -----END CERTIFICATE-----Generated at Fri Dec 19 13:38:03 2025 by rpki-client