This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft File: ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft (raw, json) Hash identifier: QPsSY+wnxSBn1C3teqp8qI0Fpq4ymlmC2dnxz49tHWA= Subject key identifier: B8:CC:7D:97:91:75:BF:E0:CE:9A:A4:DF:A6:EB:A6:1D:9D:19:4B:EF Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92 Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692 Certificate serial: 019AF42E76FA4FB0AC444A784D5B12DB819A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft Manifest number: 179F Signing time: Sat 06 Dec 2025 15:01:17 +0000 Manifest this update: Sat 06 Dec 2025 15:01:17 +0000 Manifest next update: Sun 07 Dec 2025 15:01:17 +0000 Files and hashes: 1: 6S6VH_4xu88lT362tqHywTMo1V4.roa (hash: r+/MUaPzWcX/fm4Btgu3AsrSItwgso8rcrd3ve5oHWA=) 2: 9Jn3Ao8kD2UL0UBy8f0i2zzE-8o.roa (hash: x5aIy8suItwCsXcwC1xvM9N3xbkHkVnj8Bi3Hjm0x2A=) 3: ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl (hash: ZdNqycsPgfbLR6Pki20ct3ev1EQ4XCMsRLvbcaWrPWs=) 4: HTGaeGMP8CdzPiu4Kdvv1i2tT0s.roa (hash: fsIzfA72TKkiu+lQEzJHOVfbq74I+G15Uri9KTlcXHM=) 5: L01JaFs6upvCxukuRpNJVKLONEM.roa (hash: RD22oITNNi+VkpKpvsFNn1oAsq5Be0nqy5KSTok7hqU=) 6: h6iO8UxKDT-IVtEyA0eFJpuAcwk.roa (hash: QDji/HILU7o7EJCVoA31iw52NhQO2ISN+f+1SQIXk6M=) 7: rDaXGUyGwUkO9XfIiSqMwkYNrOk.roa (hash: M2xlEmHMl0fzyVUI+KlQhxYNVrKFAswg7JKkafU0EsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:76:fa:4f:b0:ac:44:4a:78:4d:5b:12:db:81:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692 Validity Not Before: Dec 6 15:01:17 2025 GMT Not After : Dec 7 15:01:17 2025 GMT Subject: CN=b8cc7d979175bfe0ce9aa4dfa6eba61d9d194bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0e:b8:4f:ee:ba:16:1b:69:10:cd:e2:83:bf: 92:d4:59:f2:6b:17:4b:74:05:3e:50:98:f5:a7:ba: 70:9c:4a:89:28:5d:48:5d:6d:11:70:40:90:bb:c1: ee:d2:27:27:04:29:8a:48:eb:02:2d:f5:d2:17:f5: 29:a8:a8:0a:d8:bd:f0:b6:50:27:f4:7e:ad:2e:9e: 88:cb:e9:ed:12:0e:c9:53:fe:b8:b0:13:7f:b4:f8: 20:6e:bf:b9:23:02:16:b9:94:be:08:32:a5:89:7f: 02:3b:fe:3d:57:40:f2:83:47:07:6d:8d:82:6a:b9: fb:39:d9:09:71:ed:ca:26:ce:72:f3:eb:43:40:28: ed:ef:92:7a:02:f7:33:18:57:80:45:25:13:fa:de: b4:b4:8d:69:f1:34:e8:b2:64:5e:82:dc:bd:fd:51: df:67:61:d4:93:38:2b:05:6b:9d:ad:32:77:4b:46: f2:32:ba:08:ca:00:11:f3:52:a7:db:5c:3a:42:be: 1a:c5:62:07:2f:fd:3b:25:ce:b2:8b:be:2d:ed:1f: fe:ad:e9:c6:fb:4d:6b:58:4f:f5:13:ce:35:2d:77: 59:22:35:7c:24:3c:dd:3b:37:1b:19:43:2c:b4:6d: bb:b0:a0:38:2b:69:da:3f:6d:09:f4:4f:7a:77:aa: 93:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CC:7D:97:91:75:BF:E0:CE:9A:A4:DF:A6:EB:A6:1D:9D:19:4B:EF X509v3 Authority Key Identifier: keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6e:ba:34:72:a9:c2:d4:80:f1:d6:c3:a0:c9:29:f5:16:41: 2a:22:50:9a:ff:38:4c:1c:8f:6c:31:d4:2d:cc:eb:4e:eb:0d: e6:a0:da:49:54:8b:a8:4a:9a:72:b4:94:10:5c:1b:be:42:5b: 26:c3:87:bf:60:23:05:97:ba:b5:63:9a:db:56:3a:1b:0f:08: 43:c2:77:f3:66:33:25:29:e8:7a:48:36:d7:3e:f3:2f:34:6a: 64:28:37:06:1e:14:77:3e:7b:d8:71:c6:12:84:0a:28:34:5c: 13:81:97:79:be:5f:9d:0a:72:e2:70:9f:09:6f:30:03:42:4b: 3f:7f:db:62:64:cc:57:2c:8f:a6:01:e8:b3:a9:e9:fa:6c:ea: 65:57:1f:b0:4b:dd:db:a4:b3:b9:4f:b3:f6:7c:da:ca:8e:e7: 7d:0e:6e:7c:7b:e9:55:67:0c:29:4c:3e:2c:43:9e:12:43:05: a3:ad:2b:f4:df:01:30:ac:4e:93:e7:4f:e3:a9:f7:c3:a0:c9: 8d:a9:1b:24:66:34:a2:4d:26:20:78:00:f3:9b:f2:4b:31:62: 30:df:9c:25:57:7a:e4:2a:fc:b4:cb:7c:ab:3e:55:79:1b:dd: 7a:b4:dd:fd:b8:cd:9b:d3:53:15:d6:72:45:99:80:d9:33:5a: 1b:87:6e:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lnb6T7CsREp4TVsS24GaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTlmMDUyYmM5ZTcyODQ4ODgwNzQzOTBjOWQwYmMxMjc2 MDY2OTIwHhcNMjUxMjA2MTUwMTE3WhcNMjUxMjA3MTUwMTE3WjAzMTEwLwYDVQQD EyhiOGNjN2Q5NzkxNzViZmUwY2U5YWE0ZGZhNmViYTYxZDlkMTk0YmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg64T+66FhtpEM3ig7+S1FnyaxdL dAU+UJj1p7pwnEqJKF1IXW0RcECQu8Hu0icnBCmKSOsCLfXSF/UpqKgK2L3wtlAn 9H6tLp6Iy+ntEg7JU/64sBN/tPggbr+5IwIWuZS+CDKliX8CO/49V0Dyg0cHbY2C arn7OdkJce3KJs5y8+tDQCjt75J6AvczGFeARSUT+t60tI1p8TTosmRegty9/VHf Z2HUkzgrBWudrTJ3S0byMroIygAR81Kn21w6Qr4axWIHL/07Jc6yi74t7R/+renG +01rWE/1E841LXdZIjV8JDzdOzcbGUMstG27sKA4K2naP20J9E96d6qTkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjMfZeRdb/gzpqk36brph2dGUvvMB8GA1UdIwQY MBaAFBMZ8FK8nnKEiIB0OQydC8EnYGaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUt MmMxYTc3MzBiZDI1LzEvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUtMmMxYTc3MzBiZDI1 LzEvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXW66NHKp wtSA8dbDoMkp9RZBKiJQmv84TByPbDHULczrTusN5qDaSVSLqEqacrSUEFwbvkJb JsOHv2AjBZe6tWOa21Y6Gw8IQ8J382YzJSnoekg21z7zLzRqZCg3Bh4Udz572HHG EoQKKDRcE4GXeb5fnQpy4nCfCW8wA0JLP3/bYmTMVyyPpgHos6np+mzqZVcfsEvd 26SzuU+z9nzayo7nfQ5ufHvpVWcMKUw+LEOeEkMFo60r9N8BMKxOk+dP46n3w6DJ jakbJGY0ok0mIHgA85vySzFiMN+cJVd65Cr8tMt8qz5VeRvderTd/bjNm9NTFdZy RZmA2TNaG4du8g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:38:50 2025 by rpki-client