This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft File: exPgVmn1VmYr7FZk4QFln5Zsgmo.mft (raw, json) Hash identifier: c+7PGPBEVGGYstCm7B8ZOZSLIiQmX02/FG+lW+hfKQ8= Subject key identifier: B1:B0:FC:3D:58:58:12:7B:0F:AA:70:BD:E4:44:9F:68:1E:FD:EF:70 Authority key identifier: 7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A Certificate issuer: /CN=7b13e05669f556662bec5664e101659f966c826a Certificate serial: 019B0F6EB425865C8E6A10889FACC186C5FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft Manifest number: 0E51 Signing time: Thu 11 Dec 2025 22:01:11 +0000 Manifest this update: Thu 11 Dec 2025 22:01:11 +0000 Manifest next update: Fri 12 Dec 2025 22:01:11 +0000 Files and hashes: 1: HyKdTkKV5STn1J4Rxe8JxbMCpv4.roa (hash: 6If9g5ZI4fy1JxA85rEnX+2Sovu9Js7JocSs132zGS0=) 2: exPgVmn1VmYr7FZk4QFln5Zsgmo.crl (hash: OGxeRl0R9FbSEnoGJIhANhcUwHZiuzstUwAtEbP4peg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:b4:25:86:5c:8e:6a:10:88:9f:ac:c1:86:c5:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b13e05669f556662bec5664e101659f966c826a Validity Not Before: Dec 11 22:01:11 2025 GMT Not After : Dec 12 22:01:11 2025 GMT Subject: CN=b1b0fc3d5858127b0faa70bde4449f681efdef70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:20:ae:18:7c:fb:bc:e1:8a:b8:60:4f:da:91: 7b:0a:4a:f9:8d:f2:bb:29:c0:27:58:0a:1e:cf:be: 5c:ed:ec:ca:e6:6b:75:46:04:2c:f4:35:0a:36:23: 10:ed:10:ad:d1:ef:dc:f4:02:43:06:d4:07:fd:61: ea:24:9e:2f:1f:88:42:49:f1:3c:eb:e4:35:0e:02: 22:8f:b6:be:08:cf:47:b5:b0:04:cb:f8:d6:40:b4: fd:f3:75:68:38:bf:ff:61:94:94:c6:ab:eb:a0:50: 5b:42:ba:49:6f:bf:8b:c5:4f:d2:c3:5e:5c:78:e7: b8:31:21:7c:4b:b4:2f:17:57:cf:3b:2b:9e:85:06: a0:65:ef:9d:2f:4c:02:d2:99:fc:b3:29:2f:52:0d: a1:5c:87:f5:9c:f8:40:38:ed:f3:67:71:cc:85:31: a0:ff:de:70:62:e4:5d:d1:e2:28:c1:0e:67:69:a6: 01:be:96:70:d8:cc:3b:01:29:44:bd:fa:ac:35:97: 1f:45:22:f2:0f:a0:af:1e:6f:4c:46:6f:0c:f0:35: 98:5c:5c:75:9f:4a:0a:76:4c:e3:06:8b:b8:7a:26: aa:de:dc:07:eb:c2:95:ca:16:d5:f6:2c:97:72:ec: af:c1:43:62:e3:bc:61:79:7b:11:7a:af:33:6e:fa: b5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B0:FC:3D:58:58:12:7B:0F:AA:70:BD:E4:44:9F:68:1E:FD:EF:70 X509v3 Authority Key Identifier: keyid:7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a6:8c:bc:23:c3:75:e9:f8:7c:3a:c6:0c:31:06:d6:6f:04: da:c5:0c:7d:e1:77:60:37:48:6a:27:e1:b8:d8:50:47:3a:98: 84:40:d5:81:9f:c1:c5:cf:86:46:7f:9e:05:c6:04:a4:30:9c: 73:60:ad:05:a6:f9:1b:1d:43:1a:ae:c4:7c:f8:b7:10:f6:2b: fd:ed:c4:af:55:a7:15:c2:a4:d2:35:c0:c3:fd:9f:22:e3:6f: c1:11:dd:7d:65:83:2b:af:3c:61:21:56:72:3c:c1:ef:01:30: b4:20:3a:01:76:64:3e:53:b1:7f:86:f4:b2:fe:d5:b9:da:74: 4a:d0:e7:3d:2f:63:e4:73:08:cf:2d:98:43:a7:bb:f0:43:40: b4:59:f1:46:1e:2a:e1:28:7b:b7:bf:91:24:dd:26:47:64:d9: af:41:12:6f:d5:77:be:a2:61:75:24:aa:19:52:d7:88:96:a6: 9e:84:42:69:31:7d:48:d7:59:ea:5b:b6:0b:ee:ac:19:3f:ef: 4a:1f:46:2d:33:b7:55:90:39:d3:85:f4:f6:db:e7:d6:ea:07: 7b:91:9e:b9:20:d1:35:00:cb:d4:a1:ed:d4:29:78:c8:51:f7: 2b:e3:aa:52:19:c4:75:d1:26:49:32:92:a1:8f:80:52:bc:6e: ae:4d:89:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbrQlhlyOahCIn6zBhsX8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMTNlMDU2NjlmNTU2NjYyYmVjNTY2NGUxMDE2NTlmOTY2 YzgyNmEwHhcNMjUxMjExMjIwMTExWhcNMjUxMjEyMjIwMTExWjAzMTEwLwYDVQQD EyhiMWIwZmMzZDU4NTgxMjdiMGZhYTcwYmRlNDQ0OWY2ODFlZmRlZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiCuGHz7vOGKuGBP2pF7Ckr5jfK7 KcAnWAoez75c7ezK5mt1RgQs9DUKNiMQ7RCt0e/c9AJDBtQH/WHqJJ4vH4hCSfE8 6+Q1DgIij7a+CM9HtbAEy/jWQLT983VoOL//YZSUxqvroFBbQrpJb7+LxU/Sw15c eOe4MSF8S7QvF1fPOyuehQagZe+dL0wC0pn8sykvUg2hXIf1nPhAOO3zZ3HMhTGg /95wYuRd0eIowQ5naaYBvpZw2Mw7ASlEvfqsNZcfRSLyD6CvHm9MRm8M8DWYXFx1 n0oKdkzjBou4eiaq3twH68KVyhbV9iyXcuyvwUNi47xheXsReq8zbvq16QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGw/D1YWBJ7D6pwveREn2ge/e9wMB8GA1UdIwQY MBaAFHsT4FZp9VZmK+xWZOEBZZ+WbIJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXhQZ1ZtbjFWbVlyN0ZaazRRRmxuNVpzZ21vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mNzc2MWEtZmMzOC00NzVjLThhMTEt OTRjNzMzNDZjMGVhLzEvZXhQZ1ZtbjFWbVlyN0ZaazRRRmxuNVpzZ21vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9mNzc2MWEtZmMzOC00NzVjLThhMTEtOTRjNzMzNDZjMGVh LzEvZXhQZ1ZtbjFWbVlyN0ZaazRRRmxuNVpzZ21vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKaMvCPD den4fDrGDDEG1m8E2sUMfeF3YDdIaifhuNhQRzqYhEDVgZ/Bxc+GRn+eBcYEpDCc c2CtBab5Gx1DGq7EfPi3EPYr/e3Er1WnFcKk0jXAw/2fIuNvwRHdfWWDK688YSFW cjzB7wEwtCA6AXZkPlOxf4b0sv7Vudp0StDnPS9j5HMIzy2YQ6e78ENAtFnxRh4q 4Sh7t7+RJN0mR2TZr0ESb9V3vqJhdSSqGVLXiJamnoRCaTF9SNdZ6lu2C+6sGT/v Sh9GLTO3VZA504X09tvn1uoHe5GeuSDRNQDL1KHt1Cl4yFH3K+OqUhnEddEmSTKS oY+AUrxurk2JMg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:28:17 2025 by rpki-client