This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft File: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft (raw, json) Hash identifier: +D90k5t96GKKxXnkMedQKSNir/78tJJn6s9TjYq5BNs= Subject key identifier: 90:2A:C1:9A:5B:66:49:8F:21:84:5C:10:F3:A3:E7:65:71:42:51:A0 Authority key identifier: 11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB Certificate issuer: /CN=1171641f157cb57b532626359e71582742c2dccb Certificate serial: 019B0F379F6F5D5B9B9CBF99ADAC8A4F2833 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft Manifest number: 1642 Signing time: Thu 11 Dec 2025 21:01:02 +0000 Manifest this update: Thu 11 Dec 2025 21:01:02 +0000 Manifest next update: Fri 12 Dec 2025 21:01:02 +0000 Files and hashes: 1: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl (hash: MMYqegb5jlBVzNL5lS3bLkZOQ62T1v46YZ6Qpk00hC4=) 2: kJ6ZzA1fcsMngPwnFcWmPQ2TpJY.roa (hash: spn1/mEz9B8AiCWdxXSLx/VFzig4ReQEdpbCrXX5I3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:9f:6f:5d:5b:9b:9c:bf:99:ad:ac:8a:4f:28:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1171641f157cb57b532626359e71582742c2dccb Validity Not Before: Dec 11 21:01:02 2025 GMT Not After : Dec 12 21:01:02 2025 GMT Subject: CN=902ac19a5b66498f21845c10f3a3e765714251a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:06:88:6a:7f:2f:13:8f:8b:d6:96:44:3d:97: 65:17:b4:9c:31:bd:dc:e0:2b:d8:94:aa:9f:dc:40: d1:94:df:37:12:7f:55:fe:9d:bb:15:ab:6d:2e:ea: 9e:bb:f4:21:13:56:49:66:14:5f:95:01:07:a9:54: 7c:56:4c:a3:50:db:a1:28:5f:a0:60:58:9c:c2:c2: f1:0c:26:2b:41:fd:ef:c9:0c:2c:e6:9d:1e:5c:5c: 9c:76:f8:4a:72:ab:31:be:c6:50:d0:6e:ee:7b:fb: dc:c7:6d:3f:df:f3:db:e9:4b:a3:17:4b:73:29:f5: 33:13:e9:06:33:1b:9c:8a:7a:ca:c0:76:af:b0:02: 2c:75:c1:60:02:f7:89:3e:41:51:c8:04:10:11:1d: d3:5b:18:dd:bf:04:82:32:f1:2c:ef:fd:19:9c:8e: 41:1a:87:8a:17:80:ab:ea:31:7a:0b:bd:18:62:46: cb:d2:85:1e:66:80:d3:60:b5:cc:2e:71:cb:78:6f: 27:a0:51:63:4c:aa:f0:8b:29:0f:c5:0a:18:ad:c9: 54:21:1f:57:e6:63:41:ca:2a:3e:70:6b:1a:fa:b0: 1b:03:aa:bd:d0:b3:c2:af:bd:8f:dc:f4:a0:09:d4: 04:a4:54:85:29:b0:7a:d2:57:a9:88:df:72:31:a4: 31:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2A:C1:9A:5B:66:49:8F:21:84:5C:10:F3:A3:E7:65:71:42:51:A0 X509v3 Authority Key Identifier: keyid:11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:76:8f:1a:cf:c8:08:75:1f:c5:94:b9:2e:45:36:b6:02:e1: 37:07:48:3c:c5:6f:cc:e2:98:27:0e:ee:76:8e:c2:23:74:b7: 67:aa:18:05:23:76:e6:6a:1a:e7:a8:f2:27:4a:04:6e:0c:09: ba:88:a2:a0:cd:f7:53:0c:d9:e4:67:fc:18:66:55:aa:92:dc: 5a:8b:71:23:4f:e2:40:4b:b8:15:c3:7c:61:57:62:76:87:55: f0:c9:22:63:49:65:0a:f9:da:fd:d0:c9:75:86:d5:1a:e7:20: 24:75:4e:fb:1c:b7:54:21:7a:e3:98:91:b6:d7:7a:83:41:af: e8:9e:59:b9:b9:8b:30:5f:db:f1:0d:c5:d3:0a:fb:b7:43:90: bd:f8:ed:54:cf:fc:c2:98:67:cf:da:ba:b6:c3:a3:d2:eb:fe: 1d:72:c1:b3:43:7f:30:bd:69:88:93:0e:88:21:ab:09:e3:66: 1f:5e:d1:c5:e4:8f:15:03:bd:e5:73:ff:f8:ac:65:cd:cf:40: 41:0d:31:2d:2b:d0:0b:19:48:fd:18:36:1e:42:18:e5:72:c4: 3a:73:2c:4a:e1:69:9f:cc:6c:5b:08:04:fe:14:91:b4:73:f3: bd:cc:6a:d2:3e:c6:5a:a8:6c:c7:63:e4:36:8f:50:1e:d8:cd: 2e:9e:fc:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN59vXVubnL+ZrayKTygzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNzE2NDFmMTU3Y2I1N2I1MzI2MjYzNTllNzE1ODI3NDJj MmRjY2IwHhcNMjUxMjExMjEwMTAyWhcNMjUxMjEyMjEwMTAyWjAzMTEwLwYDVQQD Eyg5MDJhYzE5YTViNjY0OThmMjE4NDVjMTBmM2EzZTc2NTcxNDI1MWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAaIan8vE4+L1pZEPZdlF7ScMb3c 4CvYlKqf3EDRlN83En9V/p27FattLuqeu/QhE1ZJZhRflQEHqVR8VkyjUNuhKF+g YFicwsLxDCYrQf3vyQws5p0eXFycdvhKcqsxvsZQ0G7ue/vcx20/3/Pb6UujF0tz KfUzE+kGMxucinrKwHavsAIsdcFgAveJPkFRyAQQER3TWxjdvwSCMvEs7/0ZnI5B GoeKF4Cr6jF6C70YYkbL0oUeZoDTYLXMLnHLeG8noFFjTKrwiykPxQoYrclUIR9X 5mNByio+cGsa+rAbA6q90LPCr72P3PSgCdQEpFSFKbB60lepiN9yMaQxqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAqwZpbZkmPIYRcEPOj52VxQlGgMB8GA1UdIwQY MBaAFBFxZB8VfLV7UyYmNZ5xWCdCwtzLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZmE3MTEtMDZiMC00MWUzLTljNzIt M2NiOWUxMDJhZmUwLzEvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8zZmE3MTEtMDZiMC00MWUzLTljNzItM2NiOWUxMDJhZmUw LzEvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArHaPGs/I CHUfxZS5LkU2tgLhNwdIPMVvzOKYJw7udo7CI3S3Z6oYBSN25moa56jyJ0oEbgwJ uoiioM33UwzZ5Gf8GGZVqpLcWotxI0/iQEu4FcN8YVdidodV8MkiY0llCvna/dDJ dYbVGucgJHVO+xy3VCF645iRttd6g0Gv6J5ZubmLMF/b8Q3F0wr7t0OQvfjtVM/8 wphnz9q6tsOj0uv+HXLBs0N/ML1piJMOiCGrCeNmH17RxeSPFQO95XP/+Kxlzc9A QQ0xLSvQCxlI/Rg2HkIY5XLEOnMsSuFpn8xsWwgE/hSRtHPzvcxq0j7GWqhsx2Pk No9QHtjNLp78bQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:21:19 2025 by rpki-client