This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft File: EXdPipmODyrxj3UnnjJlSBNpRIg.mft (raw, json) Hash identifier: /BtQxj1ghm14/Gu5RddrW8IwdlrECeMdIUcdVpIAf8Y= Subject key identifier: B7:0C:53:E8:6F:CF:31:7C:25:2E:03:D5:4C:5C:97:06:12:3C:78:2F Authority key identifier: 11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88 Certificate issuer: /CN=11774f8a998e0f2af18f75279e32654813694488 Certificate serial: 019B2B8A9BFF494E2E4AAD9A82B70738295D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft Manifest number: 05C3 Signing time: Wed 17 Dec 2025 09:01:02 +0000 Manifest this update: Wed 17 Dec 2025 09:01:02 +0000 Manifest next update: Thu 18 Dec 2025 09:01:02 +0000 Files and hashes: 1: EXdPipmODyrxj3UnnjJlSBNpRIg.crl (hash: 2CWbRSIVXKgau36UUdugt0PCXil6gTQDU/ZwcmcY94I=) 2: lEOnyeTSrhVKx1TLByVlPzDKz8w.roa (hash: n8RWZqmzmommBj8oDYR9O53K32j7DKyp4tQyqLf5eY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:9b:ff:49:4e:2e:4a:ad:9a:82:b7:07:38:29:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11774f8a998e0f2af18f75279e32654813694488 Validity Not Before: Dec 17 09:01:02 2025 GMT Not After : Dec 18 09:01:02 2025 GMT Subject: CN=b70c53e86fcf317c252e03d54c5c9706123c782f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:10:85:a6:72:aa:a0:c7:15:90:15:2c:6c: 15:bd:c3:28:38:2a:72:9b:45:35:1a:5b:a4:45:34: 11:23:f8:39:49:c6:78:a7:77:49:13:53:96:d1:9a: ac:c4:4d:47:6e:2d:1c:44:22:0b:28:7f:b7:ff:91: e7:cd:6f:52:c8:94:fb:28:9a:b3:fa:18:9f:2b:29: a1:16:5b:13:cb:d2:67:8d:72:23:06:1b:c6:89:10: 19:f4:62:e6:27:d6:bd:5b:95:45:d4:d5:4c:b3:2e: 54:a7:98:5e:ec:0d:31:50:3c:3a:06:f4:54:94:08: 0a:30:3f:dd:f6:2b:9f:fc:59:83:16:b0:2b:c6:96: 26:dd:3a:28:4b:e8:1d:02:86:90:39:7b:57:01:d5: 4f:4f:5c:62:f1:5b:d2:8c:9b:ca:e4:f8:90:0c:6a: bc:e5:65:fa:ea:e2:bf:ff:77:7d:31:4c:34:1f:09: 03:e8:79:87:27:a3:8c:14:8a:02:59:34:d6:dc:1f: 42:4b:f6:bb:16:a4:b6:e7:aa:cd:0a:65:7e:7a:62: 79:b4:09:85:78:22:eb:de:34:b0:bc:57:b7:79:aa: bf:5e:33:23:9d:b9:61:be:ff:e2:7b:f6:53:4a:91: e1:42:29:a3:29:75:1e:dd:7b:9f:2b:05:49:c6:0d: 44:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0C:53:E8:6F:CF:31:7C:25:2E:03:D5:4C:5C:97:06:12:3C:78:2F X509v3 Authority Key Identifier: keyid:11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d0:02:ef:fd:f1:a6:0a:13:2a:68:e1:84:2b:57:a8:0a:72: 2a:1b:63:ae:67:87:f2:47:20:53:6f:9b:0c:ea:4c:25:b8:a8: 7e:1e:96:2f:df:dc:83:45:32:a9:57:3b:91:a5:ab:69:ab:6e: a9:9a:f2:5f:f2:d0:f5:c7:a3:da:19:3e:4c:52:f3:be:1f:5c: 67:64:38:99:08:0f:07:ca:ae:b2:e1:f3:48:c1:9f:8a:1a:78: ae:09:25:ab:ba:4a:56:0c:66:28:7b:76:79:2e:a2:51:0b:7e: 93:e6:3b:db:bb:44:3b:c5:8c:e5:9c:53:1e:41:85:b5:b4:2e: 5d:c0:cb:7b:7e:dc:2c:ff:9b:5e:6d:a5:5a:b1:2d:05:99:7d: 22:c8:42:5e:cb:45:7c:38:f1:a5:1a:46:8b:34:54:5d:df:fb: 2e:d5:40:b7:23:50:f0:c3:2d:cf:f5:14:f2:b5:b6:ff:56:fe: d0:af:56:dd:fe:9d:50:6a:1f:0c:9b:e9:ff:41:7d:04:90:7d: d9:34:c6:46:ed:2d:7b:6f:27:75:0d:ba:c3:f5:53:ea:91:0b: c5:a6:21:56:f4:93:51:fb:c6:ae:94:97:7b:67:57:09:6c:39: ce:83:32:6c:4a:b8:a7:9f:82:97:4e:d9:35:3a:8f:a9:00:f0: ea:73:f6:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsripv/SU4uSq2agrcHOCldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNzc0ZjhhOTk4ZTBmMmFmMThmNzUyNzllMzI2NTQ4MTM2 OTQ0ODgwHhcNMjUxMjE3MDkwMTAyWhcNMjUxMjE4MDkwMTAyWjAzMTEwLwYDVQQD EyhiNzBjNTNlODZmY2YzMTdjMjUyZTAzZDU0YzVjOTcwNjEyM2M3ODJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzIQhaZyqqDHFZAVLGwVvcMoOCpy m0U1GlukRTQRI/g5ScZ4p3dJE1OW0ZqsxE1Hbi0cRCILKH+3/5HnzW9SyJT7KJqz +hifKymhFlsTy9JnjXIjBhvGiRAZ9GLmJ9a9W5VF1NVMsy5Up5he7A0xUDw6BvRU lAgKMD/d9iuf/FmDFrArxpYm3TooS+gdAoaQOXtXAdVPT1xi8VvSjJvK5PiQDGq8 5WX66uK//3d9MUw0HwkD6HmHJ6OMFIoCWTTW3B9CS/a7FqS256rNCmV+emJ5tAmF eCLr3jSwvFe3eaq/XjMjnblhvv/ie/ZTSpHhQimjKXUe3XufKwVJxg1EpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcMU+hvzzF8JS4D1UxclwYSPHgvMB8GA1UdIwQY MBaAFBF3T4qZjg8q8Y91J54yZUgTaUSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVhkUGlwbU9EeXJ4ajNVbm5qSmxTQk5wUklnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yNDFjMTgtNzhkYS00YjNkLWE0NDAt MDgwMmQ0YzdkOTZkLzEvRVhkUGlwbU9EeXJ4ajNVbm5qSmxTQk5wUklnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8yNDFjMTgtNzhkYS00YjNkLWE0NDAtMDgwMmQ0YzdkOTZk LzEvRVhkUGlwbU9EeXJ4ajNVbm5qSmxTQk5wUklnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9AC7/3x pgoTKmjhhCtXqApyKhtjrmeH8kcgU2+bDOpMJbiofh6WL9/cg0UyqVc7kaWraatu qZryX/LQ9cej2hk+TFLzvh9cZ2Q4mQgPB8qusuHzSMGfihp4rgklq7pKVgxmKHt2 eS6iUQt+k+Y727tEO8WM5ZxTHkGFtbQuXcDLe37cLP+bXm2lWrEtBZl9IshCXstF fDjxpRpGizRUXd/7LtVAtyNQ8MMtz/UU8rW2/1b+0K9W3f6dUGofDJvp/0F9BJB9 2TTGRu0te28ndQ26w/VT6pELxaYhVvSTUfvGrpSXe2dXCWw5zoMybEq4p5+Cl07Z NTqPqQDw6nP2Ng== -----END CERTIFICATE-----Generated at Wed Dec 17 19:08:43 2025 by rpki-client