This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft File: eXfk4sKqJsENBx-hBFwTHm0WD3A.mft (raw, json) Hash identifier: QwxyoYGJVYplzaH7hnaWVtmKAdON7P5Glr/SE7KnOEE= Subject key identifier: DF:D5:54:57:61:94:DD:71:9D:BE:32:C1:7F:4D:E2:FA:16:FD:96:48 Authority key identifier: 79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70 Certificate issuer: /CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70 Certificate serial: 019AE6DFBF4649257E2040E8A88E301FE237 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft Manifest number: 13 Signing time: Thu 04 Dec 2025 01:00:14 +0000 Manifest this update: Thu 04 Dec 2025 01:00:14 +0000 Manifest next update: Fri 05 Dec 2025 01:00:14 +0000 Files and hashes: 1: 8dWVecaIxfKIjwRXWLlOpoyXF14.roa (hash: jPnLwFVsLz62bJAhbBOBBR/wCFFQ27PJG+odr0mpoMM=) 2: eXfk4sKqJsENBx-hBFwTHm0WD3A.crl (hash: p/bRTqDyYof22ayoaVJOYXj894XIxZm563GCgxzHLQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e6:df:bf:46:49:25:7e:20:40:e8:a8:8e:30:1f:e2:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70 Validity Not Before: Dec 4 01:00:14 2025 GMT Not After : Dec 5 01:00:14 2025 GMT Subject: CN=dfd554576194dd719dbe32c17f4de2fa16fd9648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:4d:05:ea:14:b0:10:7c:04:31:1a:57:b3: 02:02:c9:75:59:ec:74:ff:40:be:3c:57:44:88:f9: 2b:dd:9d:f4:7f:ad:86:c1:a8:1b:ae:02:5f:28:8e: d3:0c:92:d6:ce:e3:d5:6c:aa:f7:52:31:d5:b2:a7: cd:9d:eb:b7:d3:0f:ce:2e:f9:3a:1f:fb:21:4a:72: e6:ec:97:56:a8:5d:8f:ac:d1:9a:52:93:46:7b:30: ef:b8:22:1b:7d:99:c6:f6:2b:94:bb:32:2a:52:3b: 83:a5:14:a0:ea:8c:2f:8e:e6:58:4d:b8:21:c8:ec: f5:8b:ed:ba:75:41:cf:ef:7c:9f:40:e0:03:27:74: 8b:4e:bc:92:10:e5:7f:dc:1c:fc:dc:9d:e3:5e:d9: a3:5d:08:02:28:a6:9f:ad:d1:81:01:e8:72:8b:3c: f0:c4:c8:20:58:fe:38:b2:d9:4c:0c:3e:5a:a7:42: 36:43:37:81:17:93:7b:2c:57:53:b6:01:96:2c:f7: 23:25:09:1f:93:e1:52:3a:e6:1b:c0:ad:e0:46:b0: cd:27:a9:f6:c9:a7:9c:d2:61:fc:24:04:52:7b:04: 13:3d:b9:7c:9c:c7:97:13:b1:92:94:f9:fb:c9:85: 55:13:03:d6:6c:bf:9b:9b:cf:67:92:1a:af:5b:0c: 19:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D5:54:57:61:94:DD:71:9D:BE:32:C1:7F:4D:E2:FA:16:FD:96:48 X509v3 Authority Key Identifier: keyid:79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c1:d5:28:61:f0:e2:32:4f:e7:d5:03:3d:af:23:16:9d:da: 98:a0:f6:5d:ac:30:83:e5:6b:3e:ca:92:e7:79:16:9a:59:df: bd:93:98:dd:d1:c4:61:9d:3c:ef:83:d3:02:a8:f8:c9:5e:bd: c8:73:e0:d6:c1:e1:5e:9d:47:d6:d9:06:ca:83:c0:63:b6:4d: 7d:85:37:0e:e3:3f:67:69:89:69:75:65:72:49:0f:d5:31:38: 7b:46:8a:c9:97:fd:86:39:d4:a3:7f:c2:5e:86:5e:8b:e9:47: a7:49:19:a7:6d:d7:77:23:db:c2:a2:10:a5:6e:7f:20:27:4d: aa:e0:45:d9:c3:f0:4d:6b:42:7e:99:88:a2:e1:16:dc:7f:7c: 18:94:86:ba:d7:e2:d5:25:b4:50:ee:90:2b:80:a4:ea:f7:66: 1b:bb:3f:ef:8e:3d:a1:8e:ec:d8:1c:62:1f:b4:19:ba:d2:1b: ff:13:a5:68:a2:e5:57:b8:41:34:d1:bc:1d:e1:22:34:27:9d: 73:ba:60:7a:93:2a:81:13:4e:1d:07:fb:76:5e:78:58:1a:0b: b6:5b:66:8a:87:4a:37:bc:f3:62:1b:e9:ad:96:7c:b5:87:b5: f9:59:24:ba:be:71:d0:c6:10:57:ab:fd:82:c5:68:99:4f:41: 25:03:16:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrm379GSSV+IEDoqI4wH+I3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzdlNGUyYzJhYTI2YzEwZDA3MWZhMTA0NWMxMzFlNmQx NjBmNzAwHhcNMjUxMjA0MDEwMDE0WhcNMjUxMjA1MDEwMDE0WjAzMTEwLwYDVQQD EyhkZmQ1NTQ1NzYxOTRkZDcxOWRiZTMyYzE3ZjRkZTJmYTE2ZmQ5NjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3ZNBeoUsBB8BDEaV7MCAsl1Wex0 /0C+PFdEiPkr3Z30f62GwagbrgJfKI7TDJLWzuPVbKr3UjHVsqfNneu30w/OLvk6 H/shSnLm7JdWqF2PrNGaUpNGezDvuCIbfZnG9iuUuzIqUjuDpRSg6owvjuZYTbgh yOz1i+26dUHP73yfQOADJ3SLTrySEOV/3Bz83J3jXtmjXQgCKKafrdGBAehyizzw xMggWP44stlMDD5ap0I2QzeBF5N7LFdTtgGWLPcjJQkfk+FSOuYbwK3gRrDNJ6n2 yaec0mH8JARSewQTPbl8nMeXE7GSlPn7yYVVEwPWbL+bm89nkhqvWwwZpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/VVFdhlN1xnb4ywX9N4voW/ZZIMB8GA1UdIwQY MBaAFHl35OLCqibBDQcfoQRcEx5tFg9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NzE3ZDktODY3MS00YzYwLThmZDkt MjIxNmMzOTU3NTk4LzEvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS82NzE3ZDktODY3MS00YzYwLThmZDktMjIxNmMzOTU3NTk4 LzEvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcHVKGHw 4jJP59UDPa8jFp3amKD2Xawwg+VrPsqS53kWmlnfvZOY3dHEYZ0874PTAqj4yV69 yHPg1sHhXp1H1tkGyoPAY7ZNfYU3DuM/Z2mJaXVlckkP1TE4e0aKyZf9hjnUo3/C XoZei+lHp0kZp23XdyPbwqIQpW5/ICdNquBF2cPwTWtCfpmIouEW3H98GJSGutfi 1SW0UO6QK4Ck6vdmG7s/7449oY7s2BxiH7QZutIb/xOlaKLlV7hBNNG8HeEiNCed c7pgepMqgRNOHQf7dl54WBoLtltmiodKN7zzYhvprZZ8tYe1+Vkkur5x0MYQV6v9 gsVomU9BJQMW7w== -----END CERTIFICATE-----Generated at Thu Dec 4 08:15:27 2025 by rpki-client