This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft File: eXpIzBPiAOLT84r4MxjRvK9vYzE.mft (raw, json) Hash identifier: LM/hE/F9OCtCnXx9bMemgroeLyX8dDYVvkyR8ZOWyXs= Subject key identifier: 40:AC:01:02:6D:78:16:FC:69:F2:E8:6C:AE:6E:93:AD:E1:FC:65:73 Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31 Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331 Certificate serial: 019B2A09DD04DA3F03F8B701BF2DE16F6318 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 02:00:47 +0000 Manifest this update: Wed 17 Dec 2025 02:00:47 +0000 Manifest next update: Thu 18 Dec 2025 02:00:47 +0000 Files and hashes: 1: 7BO8TZ7ATCsCuTGlJnm0y-khSyU.roa (hash: x6i25XfL4F0gRp6H2u4+rOMQs65WiJ45VD9+0G2z3+I=) 2: FWiPIHCHDr0uKdyZ_foi8pOa3qE.roa (hash: DmpIUKQykitdg60h0JYisIxDWolUrUFXqS52YO726hw=) 3: aNixjFy8ziG3vjf15zAVaRB-c8A.roa (hash: EnnotKECMV4Ndd6+GZEZZLejmbdDUCzQTSAS/USoOkg=) 4: eXpIzBPiAOLT84r4MxjRvK9vYzE.crl (hash: cIB/JsBo5srsn3xPD82EoPafOFQT7vavwd0tSLoWZ4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:09:dd:04:da:3f:03:f8:b7:01:bf:2d:e1:6f:63:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331 Validity Not Before: Dec 17 02:00:47 2025 GMT Not After : Dec 18 02:00:47 2025 GMT Subject: CN=40ac01026d7816fc69f2e86cae6e93ade1fc6573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:79:40:d7:77:55:ed:b4:b0:09:be:0a:9d:06: 34:77:83:64:62:1d:8d:49:17:d0:17:65:a1:eb:9a: 10:5a:bb:95:41:85:85:b2:30:b9:1f:54:1d:da:3b: e5:df:b1:49:93:0e:3e:6c:f1:e8:66:19:37:4c:4a: a4:79:c1:00:cf:1a:fc:82:c2:11:e0:76:57:f4:33: 8c:c0:26:3f:e8:c1:f0:3d:85:f9:a6:09:6a:ae:cc: 20:80:91:26:ce:41:4e:31:f4:75:97:80:18:1b:8f: c0:57:03:e8:7e:55:58:f7:e4:77:98:00:dc:7b:bc: 9b:aa:fd:99:93:37:06:88:aa:c5:20:49:c3:6f:78: 75:20:c8:4c:f9:0c:f0:90:10:fc:68:a3:4b:4b:45: 86:72:db:9c:b7:0f:7e:ed:ee:9a:27:42:dd:cb:69: b9:21:5f:d8:e1:9f:9a:b0:6d:9c:d8:bf:91:07:9c: cf:e2:69:42:5f:d8:ac:b0:97:93:3d:50:10:0c:e5: 3e:3f:75:61:2b:9d:ef:ea:a1:4b:ee:6c:45:97:6c: 8d:92:a7:a5:e3:6a:b1:55:f8:82:4d:7f:e1:0b:2c: d7:0d:53:76:53:78:06:54:48:ec:c2:6d:12:b4:6a: 71:70:e7:e6:5f:d4:e0:19:7a:a3:71:1e:6a:30:64: b9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AC:01:02:6D:78:16:FC:69:F2:E8:6C:AE:6E:93:AD:E1:FC:65:73 X509v3 Authority Key Identifier: keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a3:b8:1d:a8:6c:be:46:e0:42:ec:25:b4:3e:38:00:a2:94: 94:a3:1d:6c:e5:9b:4e:47:83:b8:91:49:50:ae:f4:bc:b8:47: 41:c1:2b:d1:a9:e2:2e:99:cd:02:e0:7a:0c:1b:4e:ff:99:ff: 68:a2:52:11:9e:4a:24:68:8b:cd:e9:c5:c9:3e:15:0d:62:11: 3a:8f:c9:21:87:5b:fe:59:39:8a:bf:3b:8b:7d:0c:8e:27:38: 51:ca:eb:c7:f4:2d:45:d0:be:2e:95:55:bb:ab:2c:8d:46:41: 47:40:c8:ed:59:4d:fc:65:7d:2f:6b:f9:d1:90:ad:1a:74:c8: 4e:ac:ac:e6:45:0c:d8:0c:39:b0:48:a7:a5:f1:64:a1:0f:67: bb:a7:48:6b:c4:10:5d:67:e3:4e:ad:1b:de:14:01:ac:4c:61: 41:cc:2e:c6:31:39:e8:c6:c6:4b:18:0f:4a:a0:b5:dc:b0:90: 77:cc:9f:22:37:92:7c:2c:b4:96:ea:3c:07:99:8e:1d:13:75: c4:9f:1e:75:4b:42:1a:ed:9c:ab:f6:38:b9:92:4e:8b:d8:83: 8a:20:c7:85:72:9e:81:7c:eb:e6:5e:93:68:61:ea:7c:55:0f: fe:ac:ac:1d:de:ad:7e:da:53:25:22:5b:85:c1:d2:11:0e:ae: 86:7e:2d:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqCd0E2j8D+LcBvy3hb2MYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5N2E0OGNjMTNlMjAwZTJkM2YzOGFmODMzMThkMWJjYWY2 ZjYzMzEwHhcNMjUxMjE3MDIwMDQ3WhcNMjUxMjE4MDIwMDQ3WjAzMTEwLwYDVQQD Eyg0MGFjMDEwMjZkNzgxNmZjNjlmMmU4NmNhZTZlOTNhZGUxZmM2NTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83lA13dV7bSwCb4KnQY0d4NkYh2N SRfQF2Wh65oQWruVQYWFsjC5H1Qd2jvl37FJkw4+bPHoZhk3TEqkecEAzxr8gsIR 4HZX9DOMwCY/6MHwPYX5pglqrswggJEmzkFOMfR1l4AYG4/AVwPoflVY9+R3mADc e7ybqv2ZkzcGiKrFIEnDb3h1IMhM+QzwkBD8aKNLS0WGctuctw9+7e6aJ0Ldy2m5 IV/Y4Z+asG2c2L+RB5zP4mlCX9issJeTPVAQDOU+P3VhK53v6qFL7mxFl2yNkqel 42qxVfiCTX/hCyzXDVN2U3gGVEjswm0StGpxcOfmX9TgGXqjcR5qMGS5OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECsAQJteBb8afLobK5uk63h/GVzMB8GA1UdIwQY MBaAFHl6SMwT4gDi0/OK+DMY0byvb2MxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iOWNlYTAtNjkyOC00NTg0LWIzMjEt N2Q3ZjRiNjM0ODQ5LzEvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iOWNlYTAtNjkyOC00NTg0LWIzMjEtN2Q3ZjRiNjM0ODQ5 LzEvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6O4Hahs vkbgQuwltD44AKKUlKMdbOWbTkeDuJFJUK70vLhHQcEr0aniLpnNAuB6DBtO/5n/ aKJSEZ5KJGiLzenFyT4VDWIROo/JIYdb/lk5ir87i30Mjic4Ucrrx/QtRdC+LpVV u6ssjUZBR0DI7VlN/GV9L2v50ZCtGnTITqys5kUM2Aw5sEinpfFkoQ9nu6dIa8QQ XWfjTq0b3hQBrExhQcwuxjE56MbGSxgPSqC13LCQd8yfIjeSfCy0luo8B5mOHRN1 xJ8edUtCGu2cq/Y4uZJOi9iDiiDHhXKegXzr5l6TaGHqfFUP/qysHd6tftpTJSJb hcHSEQ6uhn4tTA== -----END CERTIFICATE-----Generated at Wed Dec 17 05:05:15 2025 by rpki-client