This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft File: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft (raw, json) Hash identifier: 2wP8HMSfAQE+Ss+rxfgQrvHoapdIIsAmXTF4Jz+EhwE= Subject key identifier: A0:5E:7C:1C:27:F9:BF:77:C7:F0:FE:B1:6D:3A:D3:4E:05:F9:80:75 Authority key identifier: FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84 Certificate issuer: /CN=fc4c512fe288ac6a63107d00414434329c43a284 Certificate serial: 019B0FA5415E5071E901FC94B47B1AE71DD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft Manifest number: 1362 Signing time: Thu 11 Dec 2025 23:00:46 +0000 Manifest this update: Thu 11 Dec 2025 23:00:46 +0000 Manifest next update: Fri 12 Dec 2025 23:00:46 +0000 Files and hashes: 1: GA0RPX0Ob2MlFQ2Rid7QsDPJvlM.roa (hash: 3tIOpxV3dFmPnHX5pAbw7q08MNAptrdhnPG7hgsjWKs=) 2: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl (hash: wphRXWQlvF8Le/4D88ANgxl7ht6M32o/cwKIyZdK1JA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:41:5e:50:71:e9:01:fc:94:b4:7b:1a:e7:1d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc4c512fe288ac6a63107d00414434329c43a284 Validity Not Before: Dec 11 23:00:46 2025 GMT Not After : Dec 12 23:00:46 2025 GMT Subject: CN=a05e7c1c27f9bf77c7f0feb16d3ad34e05f98075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:74:64:8a:2b:fe:32:07:6d:ef:28:93:5e: 9f:bd:cc:5f:fd:25:78:3c:31:d8:88:f5:38:be:bc: 05:a9:a5:e0:47:47:04:c7:06:c3:f0:d9:05:0d:1d: 3f:d5:dd:97:0f:35:d5:20:65:4a:9f:35:0a:4f:25: 0c:4a:55:11:bf:67:44:69:ea:ea:61:96:4d:63:01: 09:f5:a3:2a:2b:19:0f:1c:ab:0a:6c:af:71:db:07: bc:8f:3e:63:69:03:36:d9:28:5c:4d:d8:88:b3:bc: 8e:1b:1d:06:b5:31:a0:8a:6b:59:e1:43:da:34:e6: a6:7b:e6:77:d3:1e:03:26:9f:24:ed:03:d8:cd:76: cc:f0:62:5f:f1:9e:b6:49:29:37:d9:69:e2:1e:24: e3:85:5a:f3:8c:56:74:7f:01:d1:1b:c8:1a:0a:83: 18:1c:46:aa:45:d1:7a:eb:e9:d4:8a:26:28:c6:ad: 6c:9f:db:09:84:db:13:a1:ad:37:0f:d3:4d:25:5f: 93:60:5a:65:ca:af:b4:0a:ea:7e:ae:65:0f:d0:72: 3b:af:03:5a:0c:cd:4d:f5:f5:ca:3b:d8:ee:23:f8: 3a:93:7b:62:b8:6a:2d:11:b9:59:ce:2f:8e:90:d5: 72:3e:53:c5:d6:4a:0c:74:0e:77:74:ca:20:f2:b5: a3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5E:7C:1C:27:F9:BF:77:C7:F0:FE:B1:6D:3A:D3:4E:05:F9:80:75 X509v3 Authority Key Identifier: keyid:FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:72:35:8d:4f:fc:7a:3b:4c:75:b8:03:fe:b7:ea:d5:e9:c6: 32:57:b9:fe:d1:05:51:2f:d2:9b:91:d7:d0:97:ee:36:d9:19: 04:50:83:52:67:41:2c:72:5f:37:40:41:9a:fc:91:39:ee:b4: 99:64:0b:e4:d8:91:91:82:a8:90:2d:0e:65:2f:cb:0a:30:36: 71:07:88:e1:2e:7f:5d:1a:36:56:cc:29:90:c8:15:44:63:ab: 13:d1:25:23:60:f3:21:ee:e5:7b:ee:e0:f8:e4:a8:ac:16:8b: d4:8c:48:d9:02:76:e9:45:ac:e4:21:a3:89:36:1c:ca:bf:4f: 95:87:f5:dd:62:38:44:44:90:d4:3a:d4:4b:3d:cd:b7:b8:b1: 2b:91:6a:d6:4b:8b:7d:c8:97:ee:9c:35:f9:92:d1:8c:58:49: 5e:59:29:5d:bc:48:c7:94:f7:15:a5:42:38:d5:f5:38:61:eb: 8d:ba:e6:f9:56:dd:8c:e1:f5:ac:7a:ac:8c:61:e2:34:10:04: be:5c:57:58:08:26:44:ed:d3:48:55:59:a2:ed:ec:35:66:32: 08:c5:bf:ac:e7:02:44:ec:12:e9:c3:11:93:c8:37:b5:e1:05: f7:88:63:d8:e5:9e:96:47:68:d7:5e:46:70:a5:13:62:34:01: 28:9a:96:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpUFeUHHpAfyUtHsa5x3YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNGM1MTJmZTI4OGFjNmE2MzEwN2QwMDQxNDQzNDMyOWM0 M2EyODQwHhcNMjUxMjExMjMwMDQ2WhcNMjUxMjEyMjMwMDQ2WjAzMTEwLwYDVQQD EyhhMDVlN2MxYzI3ZjliZjc3YzdmMGZlYjE2ZDNhZDM0ZTA1Zjk4MDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC10ZIor/jIHbe8ok16fvcxf/SV4 PDHYiPU4vrwFqaXgR0cExwbD8NkFDR0/1d2XDzXVIGVKnzUKTyUMSlURv2dEaerq YZZNYwEJ9aMqKxkPHKsKbK9x2we8jz5jaQM22ShcTdiIs7yOGx0GtTGgimtZ4UPa NOame+Z30x4DJp8k7QPYzXbM8GJf8Z62SSk32WniHiTjhVrzjFZ0fwHRG8gaCoMY HEaqRdF66+nUiiYoxq1sn9sJhNsToa03D9NNJV+TYFplyq+0Cup+rmUP0HI7rwNa DM1N9fXKO9juI/g6k3tiuGotEblZzi+OkNVyPlPF1koMdA53dMog8rWjqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBefBwn+b93x/D+sW06004F+YB1MB8GA1UdIwQY MBaAFPxMUS/iiKxqYxB9AEFENDKcQ6KEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDFlNDUtYjE2Yy00Nzc5LTg3NGEt MzE1YzAyYTU5ZmE1LzEvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDFlNDUtYjE2Yy00Nzc5LTg3NGEtMzE1YzAyYTU5ZmE1 LzEvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzXI1jU/8 ejtMdbgD/rfq1enGMle5/tEFUS/Sm5HX0JfuNtkZBFCDUmdBLHJfN0BBmvyROe60 mWQL5NiRkYKokC0OZS/LCjA2cQeI4S5/XRo2VswpkMgVRGOrE9ElI2DzIe7le+7g +OSorBaL1IxI2QJ26UWs5CGjiTYcyr9PlYf13WI4RESQ1DrUSz3Nt7ixK5Fq1kuL fciX7pw1+ZLRjFhJXlkpXbxIx5T3FaVCONX1OGHrjbrm+VbdjOH1rHqsjGHiNBAE vlxXWAgmRO3TSFVZou3sNWYyCMW/rOcCROwS6cMRk8g3teEF94hj2OWelkdo115G cKUTYjQBKJqW+Q== -----END CERTIFICATE-----Generated at Fri Dec 12 05:25:33 2025 by rpki-client