This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft File: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft (raw, json) Hash identifier: DNZnr8k1nGviIQSna/7IAkoacY2jRw5dM7dLqWW8wxo= Subject key identifier: 79:7D:F1:EF:E5:D4:D9:09:4F:AF:26:11:99:6E:44:22:0D:2D:C1:9B Authority key identifier: FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84 Certificate issuer: /CN=fc4c512fe288ac6a63107d00414434329c43a284 Certificate serial: 019B36456D4E65018370BCE98F18B259BB14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft Manifest number: 1376 Signing time: Fri 19 Dec 2025 11:01:18 +0000 Manifest this update: Fri 19 Dec 2025 11:01:18 +0000 Manifest next update: Sat 20 Dec 2025 11:01:18 +0000 Files and hashes: 1: GA0RPX0Ob2MlFQ2Rid7QsDPJvlM.roa (hash: 3tIOpxV3dFmPnHX5pAbw7q08MNAptrdhnPG7hgsjWKs=) 2: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl (hash: O1kq1G/u0Za/bOBQlzmPHWqkIvupCLSqy/pf+aR9Wvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:6d:4e:65:01:83:70:bc:e9:8f:18:b2:59:bb:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc4c512fe288ac6a63107d00414434329c43a284 Validity Not Before: Dec 19 11:01:18 2025 GMT Not After : Dec 20 11:01:18 2025 GMT Subject: CN=797df1efe5d4d9094faf2611996e44220d2dc19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c5:df:5e:cc:91:89:92:5c:b2:b1:d4:de:0a: d1:d0:b0:64:91:7d:68:50:77:15:3b:48:35:14:a1: 46:e6:6d:3b:b2:55:52:e3:c7:59:d9:6e:e2:6d:f9: 8d:91:74:db:7a:4c:34:e3:22:ab:cf:ea:88:9b:59: 9e:6f:f7:12:65:14:18:93:9e:8b:82:cb:71:23:7d: cf:1b:65:2a:f0:23:ab:a8:59:07:9a:6e:b7:0e:3a: 6e:4d:be:cc:94:b2:98:00:74:fc:b3:5d:cf:9a:20: 90:68:86:0f:27:87:b3:a3:13:ef:ac:6e:c7:ee:a3: be:87:bd:0d:f7:7b:25:9f:d3:9c:52:f3:cc:88:75: c6:a1:36:ca:d6:1c:37:1f:37:79:38:44:b6:84:06: c5:e5:cd:41:45:e0:20:de:3a:14:df:4c:be:99:17: 2e:63:84:3a:ee:56:98:28:47:e2:cf:f3:a0:1f:11: 01:63:6e:5f:f9:48:e0:a5:c1:e5:33:c3:6e:90:7f: bd:4f:fc:fa:2b:dd:11:cc:fb:f1:8c:31:87:39:6e: d0:e3:1f:b2:1c:c6:1d:fc:cd:9b:dc:ea:e5:6e:fd: 23:df:5b:31:a0:a4:44:95:1f:18:6a:64:d5:a5:80: 4f:26:56:e5:de:a8:b0:9f:c1:39:e1:41:68:e7:44: 6d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7D:F1:EF:E5:D4:D9:09:4F:AF:26:11:99:6E:44:22:0D:2D:C1:9B X509v3 Authority Key Identifier: keyid:FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f7:3d:41:a1:87:b7:b3:11:2f:b3:ba:01:bb:6f:8c:b4:0c: 13:b5:e0:82:15:08:86:ea:87:df:98:d3:83:bb:6d:86:f1:b4: da:bc:18:a0:a7:9d:e8:e0:bb:51:e4:d8:fe:55:5e:2c:90:65: 22:6d:53:15:f0:61:df:bf:e8:60:c5:0f:19:45:13:d1:18:76: ce:fa:4f:99:8c:6c:0b:af:20:2f:d2:4e:86:aa:9b:b1:a7:9f: cb:51:e4:de:a6:74:54:1e:10:ae:ab:6d:10:7b:18:cf:9c:79: f7:33:a2:9b:77:52:34:88:94:c3:ba:79:30:76:ea:a8:b0:2b: 9a:01:99:69:15:14:0b:b6:52:b9:53:04:6d:9c:3a:6d:17:f6: 0a:66:24:02:ec:73:39:ac:10:8c:7e:1b:49:fd:b3:e4:14:51: b6:a4:c8:f2:7d:04:f3:b2:8f:02:23:06:de:f9:3c:96:56:42: 26:55:0a:8f:43:d0:24:19:e2:5f:b5:33:b6:70:35:5c:50:4e: f3:fc:a5:17:d1:b8:ec:e0:12:68:da:6c:59:2a:0a:ab:be:e0: 02:43:20:6b:c7:8d:b7:07:50:3d:10:e2:65:5e:5c:ef:a8:bf: a9:08:61:dd:28:82:83:2b:2c:12:97:48:18:26:3a:fd:80:f8: 15:9d:36:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RW1OZQGDcLzpjxiyWbsUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNGM1MTJmZTI4OGFjNmE2MzEwN2QwMDQxNDQzNDMyOWM0 M2EyODQwHhcNMjUxMjE5MTEwMTE4WhcNMjUxMjIwMTEwMTE4WjAzMTEwLwYDVQQD Eyg3OTdkZjFlZmU1ZDRkOTA5NGZhZjI2MTE5OTZlNDQyMjBkMmRjMTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MXfXsyRiZJcsrHU3grR0LBkkX1o UHcVO0g1FKFG5m07slVS48dZ2W7ibfmNkXTbekw04yKrz+qIm1meb/cSZRQYk56L gstxI33PG2Uq8COrqFkHmm63DjpuTb7MlLKYAHT8s13PmiCQaIYPJ4ezoxPvrG7H 7qO+h70N93sln9OcUvPMiHXGoTbK1hw3Hzd5OES2hAbF5c1BReAg3joU30y+mRcu Y4Q67laYKEfiz/OgHxEBY25f+UjgpcHlM8NukH+9T/z6K90RzPvxjDGHOW7Q4x+y HMYd/M2b3Orlbv0j31sxoKRElR8YamTVpYBPJlbl3qiwn8E54UFo50Rt4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHl98e/l1NkJT68mEZluRCINLcGbMB8GA1UdIwQY MBaAFPxMUS/iiKxqYxB9AEFENDKcQ6KEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDFlNDUtYjE2Yy00Nzc5LTg3NGEt MzE1YzAyYTU5ZmE1LzEvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDFlNDUtYjE2Yy00Nzc5LTg3NGEtMzE1YzAyYTU5ZmE1 LzEvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/c9QaGH t7MRL7O6AbtvjLQME7XgghUIhuqH35jTg7tthvG02rwYoKed6OC7UeTY/lVeLJBl Im1TFfBh37/oYMUPGUUT0Rh2zvpPmYxsC68gL9JOhqqbsaefy1Hk3qZ0VB4Qrqtt EHsYz5x59zOim3dSNIiUw7p5MHbqqLArmgGZaRUUC7ZSuVMEbZw6bRf2CmYkAuxz OawQjH4bSf2z5BRRtqTI8n0E87KPAiMG3vk8llZCJlUKj0PQJBniX7UztnA1XFBO 8/ylF9G47OASaNpsWSoKq77gAkMga8eNtwdQPRDiZV5c76i/qQhh3SiCgyssEpdI GCY6/YD4FZ027A== -----END CERTIFICATE-----Generated at Fri Dec 19 21:11:34 2025 by rpki-client