This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft File: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft (raw, json) Hash identifier: qWV2JJ82SoJsJPJAxf01cJua1L5Wzy832VnIATUwu4Q= Subject key identifier: 20:C0:3E:7D:6F:00:5B:13:52:DE:7B:36:6D:45:CA:4D:39:49:C2:08 Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94 Certificate issuer: /CN=79730b9ea010d832f940efb589c51889132f4c94 Certificate serial: 019B2B8AB626D0FBC56C104CB8D700BC37B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 09:01:09 +0000 Manifest this update: Wed 17 Dec 2025 09:01:09 +0000 Manifest next update: Thu 18 Dec 2025 09:01:09 +0000 Files and hashes: 1: 4-Hd07EQEQSMnF-RmoIQG-f-msw.roa (hash: 5L2RHjf2nHKLV7uL0XKnWxDBxm9LnDeMDKIuvtcOWVI=) 2: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl (hash: C/bkdHl4r/xeQ2fbo/ejHrmzApdZNSYvoV+VBjCo1kQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:b6:26:d0:fb:c5:6c:10:4c:b8:d7:00:bc:37:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94 Validity Not Before: Dec 17 09:01:09 2025 GMT Not After : Dec 18 09:01:09 2025 GMT Subject: CN=20c03e7d6f005b1352de7b366d45ca4d3949c208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b1:53:d2:11:fd:69:5c:fd:87:20:8f:b7:b6: 5c:3a:cf:f6:82:5b:09:82:6a:90:ce:33:58:40:71: ec:ff:8b:8c:ca:70:bc:e6:7a:81:52:f7:15:62:33: ff:8b:52:e4:14:2d:c2:cd:a4:ad:d4:66:9c:d0:48: b9:05:c4:b9:17:29:74:35:82:41:e2:af:70:6b:dd: ad:f4:fb:8d:de:50:50:6c:85:40:bd:9c:55:d9:d4: e4:c9:a1:a9:49:79:30:7c:74:d7:59:2e:7d:ba:e5: e0:09:08:6d:ed:ea:f0:13:5d:ed:77:dc:de:84:b3: 7c:f3:bd:b5:5c:7d:0e:83:08:13:af:c0:85:bc:99: 20:71:27:b0:6d:af:97:9b:57:a7:06:d6:0a:13:63: ba:f4:de:98:ba:bf:e9:f3:21:67:41:36:78:ff:a0: 04:c3:c6:02:92:d3:bc:7a:f3:52:c0:84:19:d9:b1: 31:29:b0:6c:a8:ad:7a:31:9e:a7:8b:36:9f:50:89: 44:bd:01:bb:fd:f3:22:c8:0a:79:f5:45:b9:30:41: a5:0c:a7:2e:ab:5e:8a:11:a2:52:0d:42:e9:3d:c6: 21:47:18:14:b6:04:0a:85:35:08:5d:10:30:d3:19: f9:bf:bb:af:cf:dd:f4:7b:51:a7:2b:76:dc:6e:64: c4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C0:3E:7D:6F:00:5B:13:52:DE:7B:36:6D:45:CA:4D:39:49:C2:08 X509v3 Authority Key Identifier: keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0e:06:79:b8:b0:93:b0:7f:a5:09:67:d4:83:c2:81:11:98: 3a:3a:54:66:b4:89:ef:f5:b0:4b:41:cc:fb:1b:b7:71:a4:97: d6:dc:7e:c9:e6:25:05:74:49:b4:72:1a:bd:f6:01:11:ff:9e: 76:59:40:7d:fc:ee:3e:6c:78:7b:ff:3f:a9:ad:24:b6:43:de: fe:53:d8:a6:d3:85:c1:a8:86:74:fd:8e:41:a2:84:e5:44:9b: c1:60:fc:f9:20:77:f8:dd:41:00:3f:22:bd:20:dc:fc:13:b3: b4:2f:56:1c:e4:a6:18:c4:12:69:ea:a1:ef:50:f8:35:da:c1: fb:14:38:af:ab:73:33:36:b6:12:19:5b:10:1d:c5:74:90:91: 6a:25:de:81:fc:e4:5f:f5:fb:08:0e:bd:c4:83:98:e4:99:3d: 5f:b8:70:6c:d7:97:b6:c8:04:8d:e8:4e:a9:eb:42:e9:f6:b4: 88:14:b3:b1:80:9f:1a:84:aa:20:3d:a4:39:45:1b:2d:7d:61: 8e:f8:98:6c:d8:a2:50:eb:5b:69:dc:60:73:11:9c:93:55:eb: 0a:2b:0e:8a:a7:59:52:34:ec:5a:dc:d3:18:0e:ce:f3:4c:b9: be:bb:1c:f5:ad:69:c3:4f:3e:b9:d0:b8:73:06:63:e9:ff:05: d6:f4:76:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrirYm0PvFbBBMuNcAvDe5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzMwYjllYTAxMGQ4MzJmOTQwZWZiNTg5YzUxODg5MTMy ZjRjOTQwHhcNMjUxMjE3MDkwMTA5WhcNMjUxMjE4MDkwMTA5WjAzMTEwLwYDVQQD EygyMGMwM2U3ZDZmMDA1YjEzNTJkZTdiMzY2ZDQ1Y2E0ZDM5NDljMjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7FT0hH9aVz9hyCPt7ZcOs/2glsJ gmqQzjNYQHHs/4uMynC85nqBUvcVYjP/i1LkFC3CzaSt1Gac0Ei5BcS5Fyl0NYJB 4q9wa92t9PuN3lBQbIVAvZxV2dTkyaGpSXkwfHTXWS59uuXgCQht7erwE13td9ze hLN88721XH0OgwgTr8CFvJkgcSewba+Xm1enBtYKE2O69N6Yur/p8yFnQTZ4/6AE w8YCktO8evNSwIQZ2bExKbBsqK16MZ6nizafUIlEvQG7/fMiyAp59UW5MEGlDKcu q16KEaJSDULpPcYhRxgUtgQKhTUIXRAw0xn5v7uvz930e1GnK3bcbmTEmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDAPn1vAFsTUt57Nm1Fyk05ScIIMB8GA1UdIwQY MBaAFHlzC56gENgy+UDvtYnFGIkTL0yUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hMDJjYzYtMTMwOC00N2U0LWEwODct Mzk2MDVmOTA4MWI3LzEvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9hMDJjYzYtMTMwOC00N2U0LWEwODctMzk2MDVmOTA4MWI3 LzEvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGg4Gebiw k7B/pQln1IPCgRGYOjpUZrSJ7/WwS0HM+xu3caSX1tx+yeYlBXRJtHIavfYBEf+e dllAffzuPmx4e/8/qa0ktkPe/lPYptOFwaiGdP2OQaKE5USbwWD8+SB3+N1BAD8i vSDc/BOztC9WHOSmGMQSaeqh71D4NdrB+xQ4r6tzMza2EhlbEB3FdJCRaiXegfzk X/X7CA69xIOY5Jk9X7hwbNeXtsgEjehOqetC6fa0iBSzsYCfGoSqID2kOUUbLX1h jviYbNiiUOtbadxgcxGck1XrCisOiqdZUjTsWtzTGA7O80y5vrsc9a1pw08+udC4 cwZj6f8F1vR2EA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:03:39 2025 by rpki-client