This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json) Hash identifier: XvQwakMSc/7rMVwZpOSNnNQqbHhhxqbZqChB5F0px14= Subject key identifier: 7D:FC:D4:35:3B:00:46:4A:CF:70:41:70:14:C9:8B:7B:3D:40:AE:96 Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da Certificate serial: 019B10EEF268C653E1F5FF5A3F8E03C69AEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft Manifest number: 0E59 Signing time: Fri 12 Dec 2025 05:00:53 +0000 Manifest this update: Fri 12 Dec 2025 05:00:53 +0000 Manifest next update: Sat 13 Dec 2025 05:00:53 +0000 Files and hashes: 1: U2BvE4zbzFJTHLJzSmZ1W9x-kCM.roa (hash: CneTmiRYnA+2gIbWw8P2gftXT9GSMXZurQf8UEQYJtM=) 2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: PJdOUF7lw4jqmM/BKvnaIabtYuaOOFKoUzhaCsWskKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ee:f2:68:c6:53:e1:f5:ff:5a:3f:8e:03:c6:9a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da Validity Not Before: Dec 12 05:00:53 2025 GMT Not After : Dec 13 05:00:53 2025 GMT Subject: CN=7dfcd4353b00464acf70417014c98b7b3d40ae96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ce:97:29:58:11:fb:55:e2:dd:5b:8e:bb:bd: ac:91:9b:64:18:dd:0f:a6:ec:27:80:d7:4c:8c:28: fd:72:2b:a9:b0:36:22:cd:46:92:4a:e5:6b:93:37: 6d:44:7f:77:b3:e9:51:c7:cf:2d:59:2e:07:c1:2b: 10:b4:13:22:39:08:ee:ab:25:45:ef:7a:03:d7:59: 12:48:2e:35:ec:31:b3:5d:0e:36:75:96:63:df:fb: 28:de:4a:a3:4e:af:2d:3c:74:9a:bc:d5:fb:cc:ad: e6:64:00:cf:61:af:0f:6b:32:12:93:1d:75:e3:83: c9:8f:14:28:9a:c3:b8:ab:fd:d8:d6:79:6e:47:b4: 9a:29:1a:64:53:f4:2f:fc:79:33:8c:f3:88:29:4d: d9:d5:4d:25:be:59:d2:aa:29:5e:a9:26:29:73:f4: 3d:8f:ae:07:0a:b2:ee:35:48:5f:8e:28:f9:0f:22: eb:80:9e:4c:4e:ea:5d:f1:9b:9a:7e:1d:83:5b:d5: 91:58:fb:6a:0d:33:26:bc:d0:f5:9d:7e:fc:32:af: e9:c2:0f:f7:4a:95:3a:34:0f:13:d3:3c:a0:df:27: fc:53:83:6d:d3:0d:04:2b:b3:d8:3d:b0:06:9d:ec: f6:49:b1:43:0d:5d:21:f3:3f:37:1c:82:48:6e:1f: 45:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FC:D4:35:3B:00:46:4A:CF:70:41:70:14:C9:8B:7B:3D:40:AE:96 X509v3 Authority Key Identifier: keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:fc:52:36:75:e5:52:99:0b:6e:b9:fd:85:36:81:cb:58:8d: 12:70:eb:0e:78:77:d2:73:3b:f1:88:7f:6b:c4:de:cf:4f:e7: e6:d1:d4:a8:ac:9f:52:5e:e0:31:66:6a:e0:1b:00:6d:57:0d: ec:2d:bc:bb:e5:62:0c:57:21:29:5b:e7:9b:1f:79:e8:cf:72: 95:0b:94:b0:de:4e:70:39:01:2f:a5:48:c5:2c:ee:36:e8:4f: 9e:c5:65:5e:68:e1:cf:b0:d3:7e:0f:91:1b:84:f8:07:e0:34: 20:7c:2f:96:d4:6e:3b:03:40:cb:6c:6a:55:ba:71:9d:6b:c3: 34:42:0e:81:ea:46:23:a2:d8:79:00:60:82:9b:23:f4:b0:8c: 0e:00:5a:db:00:80:43:3e:32:a8:17:fe:22:5e:a3:9e:42:44: 2e:9e:9a:a7:16:e5:74:db:fb:52:b1:9f:3b:91:16:b5:8e:87: cd:64:01:11:66:e3:04:e7:bf:49:12:91:37:0c:a2:0e:ca:cd: 79:de:3a:5c:4f:03:eb:d6:4e:c3:89:01:89:c9:1f:d7:5e:9f: e3:b3:eb:9b:8c:20:58:72:95:90:3a:e4:5b:ec:a1:e1:67:66: 03:d0:0c:10:53:b1:d2:48:25:e4:4d:65:4e:b8:b4:40:55:aa: 24:ef:a7:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ7vJoxlPh9f9aP44DxpruMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZWM3MjgzN2VmYmJjNGVhNmRkZDRiZTk0MzYxOTE2YjRj MzYyZGEwHhcNMjUxMjEyMDUwMDUzWhcNMjUxMjEzMDUwMDUzWjAzMTEwLwYDVQQD Eyg3ZGZjZDQzNTNiMDA0NjRhY2Y3MDQxNzAxNGM5OGI3YjNkNDBhZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc6XKVgR+1Xi3VuOu72skZtkGN0P puwngNdMjCj9ciupsDYizUaSSuVrkzdtRH93s+lRx88tWS4HwSsQtBMiOQjuqyVF 73oD11kSSC417DGzXQ42dZZj3/so3kqjTq8tPHSavNX7zK3mZADPYa8PazISkx11 44PJjxQomsO4q/3Y1nluR7SaKRpkU/Qv/HkzjPOIKU3Z1U0lvlnSqileqSYpc/Q9 j64HCrLuNUhfjij5DyLrgJ5MTupd8Zuafh2DW9WRWPtqDTMmvND1nX78Mq/pwg/3 SpU6NA8T0zyg3yf8U4Nt0w0EK7PYPbAGnez2SbFDDV0h8z83HIJIbh9FgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH381DU7AEZKz3BBcBTJi3s9QK6WMB8GA1UdIwQY MBaAFH3scoN++7xOpt3UvpQ2GRa0w2LaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUt Mzg2NjE3YTY2NGZlLzEvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUtMzg2NjE3YTY2NGZl LzEvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvxSNnXl UpkLbrn9hTaBy1iNEnDrDnh30nM78Yh/a8Tez0/n5tHUqKyfUl7gMWZq4BsAbVcN 7C28u+ViDFchKVvnmx956M9ylQuUsN5OcDkBL6VIxSzuNuhPnsVlXmjhz7DTfg+R G4T4B+A0IHwvltRuOwNAy2xqVbpxnWvDNEIOgepGI6LYeQBggpsj9LCMDgBa2wCA Qz4yqBf+Il6jnkJELp6apxbldNv7UrGfO5EWtY6HzWQBEWbjBOe/SRKRNwyiDsrN ed46XE8D69ZOw4kBickf116f47Prm4wgWHKVkDrkW+yh4WdmA9AMEFOx0kgl5E1l Tri0QFWqJO+n6g== -----END CERTIFICATE-----Generated at Fri Dec 12 07:40:05 2025 by rpki-client