This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft File: ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft (raw, json) Hash identifier: DF4MosZuOpKOMZtF/sbZWtwLKWHHMwuw/ntF7laOpBU= Subject key identifier: B5:37:5E:E1:D0:A2:F1:5F:A3:D7:B4:6E:82:D2:37:70:5B:16:E4:73 Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92 Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692 Certificate serial: 019B1ACDE053E3A0151399BD9117065F6FF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft Manifest number: 17B3 Signing time: Sun 14 Dec 2025 03:00:58 +0000 Manifest this update: Sun 14 Dec 2025 03:00:58 +0000 Manifest next update: Mon 15 Dec 2025 03:00:58 +0000 Files and hashes: 1: 6S6VH_4xu88lT362tqHywTMo1V4.roa (hash: r+/MUaPzWcX/fm4Btgu3AsrSItwgso8rcrd3ve5oHWA=) 2: 9Jn3Ao8kD2UL0UBy8f0i2zzE-8o.roa (hash: x5aIy8suItwCsXcwC1xvM9N3xbkHkVnj8Bi3Hjm0x2A=) 3: ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl (hash: yKCzT7ZXnmROvAGRh57VIuER0wjkJMtCtJ/Z+VWVgsc=) 4: HTGaeGMP8CdzPiu4Kdvv1i2tT0s.roa (hash: fsIzfA72TKkiu+lQEzJHOVfbq74I+G15Uri9KTlcXHM=) 5: L01JaFs6upvCxukuRpNJVKLONEM.roa (hash: RD22oITNNi+VkpKpvsFNn1oAsq5Be0nqy5KSTok7hqU=) 6: h6iO8UxKDT-IVtEyA0eFJpuAcwk.roa (hash: QDji/HILU7o7EJCVoA31iw52NhQO2ISN+f+1SQIXk6M=) 7: rDaXGUyGwUkO9XfIiSqMwkYNrOk.roa (hash: M2xlEmHMl0fzyVUI+KlQhxYNVrKFAswg7JKkafU0EsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:cd:e0:53:e3:a0:15:13:99:bd:91:17:06:5f:6f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692 Validity Not Before: Dec 14 03:00:58 2025 GMT Not After : Dec 15 03:00:58 2025 GMT Subject: CN=b5375ee1d0a2f15fa3d7b46e82d237705b16e473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:11:e3:6c:17:ed:f7:ff:63:a9:17:06:5c:2c: bd:92:80:44:76:54:84:34:b0:58:86:8a:5f:cc:3e: 37:85:52:92:dc:9a:24:95:6b:74:7d:4e:58:fd:0e: a1:7a:f2:e8:b4:14:36:08:2d:85:d3:87:03:62:39: 97:7c:7f:c3:5c:ef:c1:ce:37:7a:38:9f:3d:36:42: 82:f6:7f:cb:a2:b5:64:52:29:35:0f:35:9e:4d:8d: 2c:5c:87:fd:a7:0f:d3:6a:89:76:3c:4a:79:5a:93: 85:3c:5d:3d:df:f0:79:7b:81:15:1b:b0:a2:f3:e6: d3:0c:f5:03:db:75:6e:b5:90:b6:07:50:8e:42:c8: f7:2a:83:df:ed:59:26:e7:a8:c8:84:34:74:47:39: 91:d5:71:9a:91:a0:f9:6f:3c:ed:3e:e5:62:22:bf: 80:23:b8:35:09:d7:12:89:a2:28:d3:1e:19:7e:fc: 44:1b:41:b9:6f:75:16:65:f5:02:cd:42:c4:90:0c: a3:54:d8:a9:3e:1f:ea:08:8e:20:07:db:77:89:34: 01:1d:87:2a:7e:f4:ff:be:99:5e:47:1e:c4:6c:ed: 23:8d:de:84:74:ef:7d:f1:36:7c:d2:05:10:ea:83: 89:a6:ee:3a:58:3d:0c:ad:4f:dc:f3:a3:de:00:80: 8d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:37:5E:E1:D0:A2:F1:5F:A3:D7:B4:6E:82:D2:37:70:5B:16:E4:73 X509v3 Authority Key Identifier: keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:5b:fd:64:6a:97:dd:cf:60:f5:4c:60:02:36:75:9a:61:b8: 71:f6:d0:2c:fc:47:c5:80:c1:2c:fb:99:6e:8b:1c:ec:9d:86: ec:9f:4d:30:b3:03:9f:bf:07:70:2e:75:a5:03:a3:6f:e8:9b: a1:f5:c0:e7:eb:82:55:7e:cf:84:26:46:08:45:0a:a1:ca:ee: c3:82:9d:ef:8c:dc:a6:4d:08:6b:85:42:6c:06:7e:5a:f0:d4: 57:70:57:eb:9f:07:35:88:70:c4:6a:0f:b3:68:85:1e:be:53: da:d4:38:8c:5b:46:42:9a:2b:81:b0:47:9b:b8:df:41:96:4f: 79:36:9f:03:27:00:05:1a:8c:be:fe:c5:a4:aa:fa:5d:cd:14: 8a:16:97:13:4c:76:6e:17:90:1d:cb:6a:47:a7:4b:12:a6:e0: 03:5d:64:15:86:98:c3:55:a4:55:c0:39:6d:ad:93:2a:3b:d4: eb:cc:7e:ab:66:96:cd:7e:5d:65:55:a2:ad:c9:86:27:a9:f2: be:ab:06:de:b8:3f:2b:1b:c1:df:16:f8:d5:9b:68:58:03:f0: 69:b7:05:52:a3:32:0c:cc:92:12:60:42:e1:90:72:41:d5:47: aa:a2:ee:f4:bf:39:15:9c:1d:77:3a:4b:d5:a3:37:24:fd:c5: f1:7f:60:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazeBT46AVE5m9kRcGX2/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTlmMDUyYmM5ZTcyODQ4ODgwNzQzOTBjOWQwYmMxMjc2 MDY2OTIwHhcNMjUxMjE0MDMwMDU4WhcNMjUxMjE1MDMwMDU4WjAzMTEwLwYDVQQD EyhiNTM3NWVlMWQwYTJmMTVmYTNkN2I0NmU4MmQyMzc3MDViMTZlNDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxHjbBft9/9jqRcGXCy9koBEdlSE NLBYhopfzD43hVKS3JoklWt0fU5Y/Q6hevLotBQ2CC2F04cDYjmXfH/DXO/Bzjd6 OJ89NkKC9n/LorVkUik1DzWeTY0sXIf9pw/Taol2PEp5WpOFPF093/B5e4EVG7Ci 8+bTDPUD23VutZC2B1COQsj3KoPf7Vkm56jIhDR0RzmR1XGakaD5bzztPuViIr+A I7g1CdcSiaIo0x4ZfvxEG0G5b3UWZfUCzULEkAyjVNipPh/qCI4gB9t3iTQBHYcq fvT/vpleRx7EbO0jjd6EdO998TZ80gUQ6oOJpu46WD0MrU/c86PeAICNIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLU3XuHQovFfo9e0boLSN3BbFuRzMB8GA1UdIwQY MBaAFBMZ8FK8nnKEiIB0OQydC8EnYGaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUt MmMxYTc3MzBiZDI1LzEvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUtMmMxYTc3MzBiZDI1 LzEvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXlv9ZGqX 3c9g9UxgAjZ1mmG4cfbQLPxHxYDBLPuZbosc7J2G7J9NMLMDn78HcC51pQOjb+ib ofXA5+uCVX7PhCZGCEUKocruw4Kd74zcpk0Ia4VCbAZ+WvDUV3BX658HNYhwxGoP s2iFHr5T2tQ4jFtGQporgbBHm7jfQZZPeTafAycABRqMvv7FpKr6Xc0UihaXE0x2 bheQHctqR6dLEqbgA11kFYaYw1WkVcA5ba2TKjvU68x+q2aWzX5dZVWircmGJ6ny vqsG3rg/KxvB3xb41ZtoWAPwabcFUqMyDMySEmBC4ZByQdVHqqLu9L85FZwddzpL 1aM3JP3F8X9ghA== -----END CERTIFICATE-----Generated at Sun Dec 14 12:03:48 2025 by rpki-client