This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft File: EXdPipmODyrxj3UnnjJlSBNpRIg.mft (raw, json) Hash identifier: /khj3vEBgtIWqNbZAasSji0q8XpX0vZ37YGPkxja96s= Subject key identifier: 08:40:AA:0C:4E:90:66:6A:C4:84:D4:1F:A5:A8:BD:A2:2E:6A:82:53 Authority key identifier: 11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88 Certificate issuer: /CN=11774f8a998e0f2af18f75279e32654813694488 Certificate serial: 019B334448C76F68FFDA8E7CCA59B30413F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft Manifest number: 05C7 Signing time: Thu 18 Dec 2025 21:01:11 +0000 Manifest this update: Thu 18 Dec 2025 21:01:11 +0000 Manifest next update: Fri 19 Dec 2025 21:01:11 +0000 Files and hashes: 1: EXdPipmODyrxj3UnnjJlSBNpRIg.crl (hash: 9/j0npC901IofLDQ2yWsVI1n1hjghkgzxVBiuVDCkF4=) 2: lEOnyeTSrhVKx1TLByVlPzDKz8w.roa (hash: n8RWZqmzmommBj8oDYR9O53K32j7DKyp4tQyqLf5eY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:48:c7:6f:68:ff:da:8e:7c:ca:59:b3:04:13:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11774f8a998e0f2af18f75279e32654813694488 Validity Not Before: Dec 18 21:01:11 2025 GMT Not After : Dec 19 21:01:11 2025 GMT Subject: CN=0840aa0c4e90666ac484d41fa5a8bda22e6a8253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:41:90:2c:8f:cb:31:d1:78:91:08:67:3b:7a: f6:f5:67:40:ca:58:80:01:0f:54:19:8e:36:3e:83: 45:6a:38:bc:5b:b3:73:96:0b:3a:08:36:a9:5d:35: 15:07:e7:e8:47:28:11:0c:a1:f3:dc:60:45:ee:06: c2:45:53:6d:70:a0:16:f9:cf:aa:8b:f3:18:42:41: 10:fa:f1:9c:5b:06:a7:a5:9a:2d:fc:4f:47:73:c9: f7:86:57:23:ac:d9:89:1b:d5:ee:20:80:29:da:db: f9:a4:bd:8d:57:fa:ea:03:12:9b:3a:fb:ac:03:69: 5e:bc:f8:d3:d0:bf:93:52:a2:9b:73:59:0a:19:f2: 6c:b1:b9:1f:79:3d:48:65:1c:f4:43:54:21:6e:09: 13:02:cd:00:29:2c:a1:e7:07:50:db:aa:ea:4d:43: 8f:46:67:ec:41:23:6f:5b:9f:99:be:47:01:f3:23: 17:d4:33:00:3d:5e:86:dc:6c:3d:09:ce:f8:3b:e2: 95:72:61:d5:46:07:7e:57:f8:01:5a:11:39:fc:5e: 89:be:f3:21:bf:aa:6d:08:12:8e:93:72:9f:ff:18: 26:26:96:f1:bf:5d:60:43:ce:a2:f7:a1:62:c3:5c: de:b8:2d:60:24:95:b2:79:16:70:e6:5f:65:c1:bb: a1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:40:AA:0C:4E:90:66:6A:C4:84:D4:1F:A5:A8:BD:A2:2E:6A:82:53 X509v3 Authority Key Identifier: keyid:11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:90:f3:07:7d:aa:a5:63:07:2b:99:eb:bc:96:ce:63:e6:0d: 19:40:61:a7:50:9b:f7:ba:a2:c9:aa:f4:66:fd:10:5c:e8:83: 08:2a:f4:bf:dc:da:19:29:0e:d9:0b:0a:91:33:3d:bb:64:4e: c2:ef:6e:36:1c:74:62:92:33:fe:a3:51:78:e4:39:34:97:e0: 69:b7:ac:63:cd:f3:08:fa:b6:72:c3:0d:dd:b7:19:7f:b3:99: 26:c1:90:2e:0f:34:24:77:cf:1e:3e:fd:69:d3:f3:b0:07:94: c1:b0:c1:bd:75:da:04:9f:f9:f7:43:04:5c:7b:7a:72:5e:04: e2:58:72:ee:ab:c7:45:77:d3:34:ad:ac:65:3a:70:80:4f:ac: dd:9a:7c:8b:8d:15:bc:cd:5b:7a:8a:07:3a:ff:86:c2:9d:e9: 51:cb:83:41:46:37:a0:a1:26:25:f3:a7:73:fa:5d:77:34:54: 5d:69:9c:95:d2:49:96:3c:7c:d9:7d:f5:d9:6a:76:75:92:13: 17:e0:11:b6:77:02:8a:34:37:4a:7b:14:ec:2b:dc:a7:e0:99: 2d:9b:d5:73:a9:75:74:e4:72:cf:19:65:27:4c:4f:27:a2:c2: 57:92:36:36:c5:8f:5b:af:55:a0:44:52:83:a9:7a:7e:67:10: 8e:6c:ae:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszREjHb2j/2o58ylmzBBPwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNzc0ZjhhOTk4ZTBmMmFmMThmNzUyNzllMzI2NTQ4MTM2 OTQ0ODgwHhcNMjUxMjE4MjEwMTExWhcNMjUxMjE5MjEwMTExWjAzMTEwLwYDVQQD EygwODQwYWEwYzRlOTA2NjZhYzQ4NGQ0MWZhNWE4YmRhMjJlNmE4MjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0GQLI/LMdF4kQhnO3r29WdAyliA AQ9UGY42PoNFaji8W7Nzlgs6CDapXTUVB+foRygRDKHz3GBF7gbCRVNtcKAW+c+q i/MYQkEQ+vGcWwanpZot/E9Hc8n3hlcjrNmJG9XuIIAp2tv5pL2NV/rqAxKbOvus A2levPjT0L+TUqKbc1kKGfJssbkfeT1IZRz0Q1QhbgkTAs0AKSyh5wdQ26rqTUOP RmfsQSNvW5+ZvkcB8yMX1DMAPV6G3Gw9Cc74O+KVcmHVRgd+V/gBWhE5/F6JvvMh v6ptCBKOk3Kf/xgmJpbxv11gQ86i96Fiw1zeuC1gJJWyeRZw5l9lwbuhTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhAqgxOkGZqxITUH6WovaIuaoJTMB8GA1UdIwQY MBaAFBF3T4qZjg8q8Y91J54yZUgTaUSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVhkUGlwbU9EeXJ4ajNVbm5qSmxTQk5wUklnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yNDFjMTgtNzhkYS00YjNkLWE0NDAt MDgwMmQ0YzdkOTZkLzEvRVhkUGlwbU9EeXJ4ajNVbm5qSmxTQk5wUklnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8yNDFjMTgtNzhkYS00YjNkLWE0NDAtMDgwMmQ0YzdkOTZk LzEvRVhkUGlwbU9EeXJ4ajNVbm5qSmxTQk5wUklnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipDzB32q pWMHK5nrvJbOY+YNGUBhp1Cb97qiyar0Zv0QXOiDCCr0v9zaGSkO2QsKkTM9u2RO wu9uNhx0YpIz/qNReOQ5NJfgabesY83zCPq2csMN3bcZf7OZJsGQLg80JHfPHj79 adPzsAeUwbDBvXXaBJ/590MEXHt6cl4E4lhy7qvHRXfTNK2sZTpwgE+s3Zp8i40V vM1beooHOv+Gwp3pUcuDQUY3oKEmJfOnc/pddzRUXWmcldJJljx82X312Wp2dZIT F+ARtncCijQ3SnsU7Cvcp+CZLZvVc6l1dORyzxllJ0xPJ6LCV5I2NsWPW69VoERS g6l6fmcQjmyuNQ== -----END CERTIFICATE-----Generated at Fri Dec 19 02:31:06 2025 by rpki-client