This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft File: eXe1XjT_1yB1-92gOaZbNx3jmCA.mft (raw, json) Hash identifier: Xwxpo8CcIDshSg8pBmlg+xEY5wNPWyBY+t7x1y4rnZs= Subject key identifier: 05:79:27:A6:E1:22:8A:D2:48:E1:18:31:27:18:45:B1:EE:6F:10:F0 Authority key identifier: 79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20 Certificate issuer: /CN=7977b55e34ffd72075fbdda039a65b371de39820 Certificate serial: 019AF6F9F14E7239B2ECBE448FFDCCC9C525 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft Manifest number: 0D7F Signing time: Sun 07 Dec 2025 04:02:46 +0000 Manifest this update: Sun 07 Dec 2025 04:02:46 +0000 Manifest next update: Mon 08 Dec 2025 04:02:46 +0000 Files and hashes: 1: Tx774YWupF3TJKc5zuGEprJ-8Q8.roa (hash: 6EvMus28/r2hOkn9lsQE7epJ2J6h3GLbCRAmFL/wVzM=) 2: eXe1XjT_1yB1-92gOaZbNx3jmCA.crl (hash: rgIy4Uh3i826QsSGBuWLiOOUaPLhDu+2fA/L+NkDmXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:f1:4e:72:39:b2:ec:be:44:8f:fd:cc:c9:c5:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7977b55e34ffd72075fbdda039a65b371de39820 Validity Not Before: Dec 7 04:02:46 2025 GMT Not After : Dec 8 04:02:46 2025 GMT Subject: CN=057927a6e1228ad248e11831271845b1ee6f10f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a4:dc:e7:43:d4:48:40:a9:49:38:56:0e:34: 7a:88:93:5e:e4:95:4c:b5:0e:1c:fe:16:48:ba:ff: df:73:9a:b8:51:69:34:e0:bf:84:35:e5:21:47:9e: e7:3b:b0:f5:4a:8e:55:6a:c1:40:51:d8:d3:7d:4b: 6e:fe:3b:2c:d6:2f:e8:73:16:75:b2:78:21:3d:23: 9a:de:67:da:89:30:f8:f6:ac:7b:a4:f2:24:10:12: d7:cc:bf:8b:44:02:51:4f:77:e2:b1:07:1b:08:df: 9b:af:62:e9:9f:cb:02:55:a2:93:60:96:0c:4b:40: 7e:c3:7e:bc:d7:9d:94:e3:da:24:e0:2e:a2:ef:74: 80:0f:92:8b:db:ec:67:a6:54:4b:cf:23:6c:f9:82: 9b:f7:d9:e3:46:f3:28:36:84:50:98:38:b0:c3:cb: 19:9e:70:b2:5f:33:fc:51:64:82:97:b1:5f:5a:7e: 84:bc:df:2a:72:7a:0a:37:47:d7:fa:fe:62:73:cc: 3d:15:c4:25:49:77:f9:f8:04:0e:47:a7:f6:ee:10: 3b:19:ea:57:b7:5d:9f:16:7d:e8:5c:d9:cf:27:61: 4c:90:34:74:86:34:33:74:af:41:ba:1f:90:c6:05: cf:8f:3c:41:aa:4f:5b:66:8f:ac:2b:d4:53:31:c6: 14:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:79:27:A6:E1:22:8A:D2:48:E1:18:31:27:18:45:B1:EE:6F:10:F0 X509v3 Authority Key Identifier: keyid:79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:2d:33:72:d7:c2:b1:cb:a9:ae:32:5d:a7:57:0e:2c:a2:cf: 44:cd:47:14:a8:36:e7:99:2c:21:b4:40:e3:d7:f6:c2:bb:24: e0:19:96:bb:14:35:14:71:86:95:29:1f:c4:b4:93:91:a7:b4: d0:04:2c:40:8b:7a:11:7f:23:ea:16:2b:cf:37:f0:a6:e6:c0: 07:78:b7:30:e8:99:72:63:5b:b1:45:dc:6e:3b:64:46:1b:93: 29:1b:32:be:14:2d:7f:4e:d0:98:bf:60:db:51:4a:c2:c5:f0: 49:ad:7b:5f:df:70:fa:29:53:f5:29:1c:95:db:e7:4e:d7:f1: 5d:25:91:a9:4e:ce:34:aa:e8:8b:7b:35:0b:db:bf:80:c8:38: c1:3f:7c:3e:99:9f:de:d8:d6:4f:ab:55:fb:5f:6f:8c:b7:13: 09:71:d9:1f:7f:e8:af:43:d4:c0:aa:1d:bc:73:1e:cd:7b:09: 0b:a2:37:dc:66:e2:57:26:46:e2:53:0c:35:ee:f8:97:80:3f: da:99:d9:6a:1e:10:58:27:80:06:23:ec:67:d9:25:ee:31:98: dd:f6:f8:21:5d:dd:9d:a3:c4:82:a4:dd:2c:c5:53:54:7c:9d: e2:87:5b:6d:70:9a:23:0e:d1:ce:25:7c:5b:ca:1b:36:8c:c9: e7:7e:de:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+fFOcjmy7L5Ej/3MycUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzdiNTVlMzRmZmQ3MjA3NWZiZGRhMDM5YTY1YjM3MWRl Mzk4MjAwHhcNMjUxMjA3MDQwMjQ2WhcNMjUxMjA4MDQwMjQ2WjAzMTEwLwYDVQQD EygwNTc5MjdhNmUxMjI4YWQyNDhlMTE4MzEyNzE4NDViMWVlNmYxMGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKTc50PUSECpSThWDjR6iJNe5JVM tQ4c/hZIuv/fc5q4UWk04L+ENeUhR57nO7D1So5VasFAUdjTfUtu/jss1i/ocxZ1 snghPSOa3mfaiTD49qx7pPIkEBLXzL+LRAJRT3fisQcbCN+br2Lpn8sCVaKTYJYM S0B+w368152U49ok4C6i73SAD5KL2+xnplRLzyNs+YKb99njRvMoNoRQmDiww8sZ nnCyXzP8UWSCl7FfWn6EvN8qcnoKN0fX+v5ic8w9FcQlSXf5+AQOR6f27hA7GepX t12fFn3oXNnPJ2FMkDR0hjQzdK9Buh+QxgXPjzxBqk9bZo+sK9RTMcYUJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAV5J6bhIorSSOEYMScYRbHubxDwMB8GA1UdIwQY MBaAFHl3tV40/9cgdfvdoDmmWzcd45ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iZDBhNzYtMDRiMS00NDkwLWFkMDQt OTdlZWM3Y2Y2MDkzLzEvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iZDBhNzYtMDRiMS00NDkwLWFkMDQtOTdlZWM3Y2Y2MDkz LzEvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAky0zctfC scuprjJdp1cOLKLPRM1HFKg255ksIbRA49f2wrsk4BmWuxQ1FHGGlSkfxLSTkae0 0AQsQIt6EX8j6hYrzzfwpubAB3i3MOiZcmNbsUXcbjtkRhuTKRsyvhQtf07QmL9g 21FKwsXwSa17X99w+ilT9SkcldvnTtfxXSWRqU7ONKroi3s1C9u/gMg4wT98Ppmf 3tjWT6tV+19vjLcTCXHZH3/or0PUwKodvHMezXsJC6I33GbiVyZG4lMMNe74l4A/ 2pnZah4QWCeABiPsZ9kl7jGY3fb4IV3dnaPEgqTdLMVTVHyd4odbbXCaIw7RziV8 W8obNozJ537eFQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:51:30 2025 by rpki-client