This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft File: eXfk4sKqJsENBx-hBFwTHm0WD3A.mft (raw, json) Hash identifier: aYUQa4apl6GMka9+ijESPyZVm6Ag2lYIJNvc9cYs28Y= Subject key identifier: C1:2C:CF:DE:3F:38:E0:75:B6:F4:BC:21:4C:4A:C7:99:86:52:48:D0 Authority key identifier: 79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70 Certificate issuer: /CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70 Certificate serial: 019AF088003E18053AA785BACBBBB52E6BF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft Manifest number: 18 Signing time: Fri 05 Dec 2025 22:00:36 +0000 Manifest this update: Fri 05 Dec 2025 22:00:36 +0000 Manifest next update: Sat 06 Dec 2025 22:00:36 +0000 Files and hashes: 1: 8dWVecaIxfKIjwRXWLlOpoyXF14.roa (hash: jPnLwFVsLz62bJAhbBOBBR/wCFFQ27PJG+odr0mpoMM=) 2: eXfk4sKqJsENBx-hBFwTHm0WD3A.crl (hash: oNznWRuXh0nybvt/7OhEKzRuqh6JwCHT2k3NUvLwReM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:00:3e:18:05:3a:a7:85:ba:cb:bb:b5:2e:6b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70 Validity Not Before: Dec 5 22:00:36 2025 GMT Not After : Dec 6 22:00:36 2025 GMT Subject: CN=c12ccfde3f38e075b6f4bc214c4ac799865248d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5e:42:f4:00:2f:95:c9:b1:f1:c4:cc:f8:70: d0:9c:30:45:38:4b:9f:84:5a:4e:16:2c:e3:1d:b4: 62:2b:ef:bc:4b:a4:b5:d9:e0:d1:d3:cd:97:2a:c5: 91:41:52:66:2d:39:70:67:1a:df:42:77:7e:73:11: 6b:21:1d:35:8b:46:a6:2a:16:50:8f:02:45:cf:64: b2:38:df:5c:6f:b5:12:a7:1f:62:5c:44:5a:83:bb: 57:5c:ad:b5:7e:80:67:29:8a:9c:47:57:5f:ec:e8: 66:c3:68:29:f5:2a:0a:37:6d:a0:68:51:49:8e:3e: 63:4f:a6:01:7b:34:90:c7:dd:87:59:f7:11:ef:c8: f8:1c:10:54:b1:3d:07:3a:fc:37:0c:65:d0:76:b3: ec:1d:df:cb:ab:88:5e:ea:ee:06:64:42:e6:87:8d: 8c:e1:13:10:19:b3:9e:a2:e3:3e:75:b0:15:09:f0: be:a5:f8:05:11:ed:9e:1e:17:be:f2:15:44:41:de: 28:53:41:bc:8f:aa:45:15:3b:b5:2d:73:14:a5:6b: bb:e7:c3:5a:8d:66:de:67:9d:92:7b:31:70:36:25: e5:12:ae:f0:eb:ef:81:7b:c3:3a:43:66:90:69:83: 2a:5c:22:22:6f:95:cc:65:e1:c0:5b:97:83:68:4c: dd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2C:CF:DE:3F:38:E0:75:B6:F4:BC:21:4C:4A:C7:99:86:52:48:D0 X509v3 Authority Key Identifier: keyid:79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:2e:e1:1b:36:21:1e:ca:49:17:8c:6b:c7:a1:8f:20:8d:bb: c0:89:48:46:54:cf:96:27:4c:6c:3c:cb:83:34:d2:9c:3d:9c: 20:80:71:28:b0:29:8a:19:c0:4f:45:25:e0:85:14:11:f1:b9: 44:3f:ba:64:ba:d7:6c:ef:39:2d:73:e8:12:ce:7f:1f:66:d3: 2a:f5:49:7e:ac:ca:3c:55:a6:6c:4e:39:a9:15:f6:e5:46:9c: 54:9e:fe:2f:2a:ab:8d:a6:ec:99:0c:1a:56:12:fe:63:31:6a: 42:55:26:20:85:79:15:e9:fa:b5:5c:46:72:03:a5:af:f8:d5: 03:23:ce:ac:1b:01:a9:be:47:fb:1f:a8:cc:8c:2a:b9:eb:44: bf:3b:41:85:cb:b8:c4:fc:ad:6a:f5:80:32:78:90:92:d8:99: 9b:e7:59:c6:66:76:a4:9b:c4:52:1c:a2:0b:85:2a:70:8b:b2: ee:c7:52:28:93:ce:9c:07:1f:f3:3b:07:98:7a:7d:ec:65:46: 13:31:b6:49:97:3d:d7:f8:47:cb:f1:0e:e7:58:38:7e:da:55: 27:b2:4f:ec:55:03:bd:be:f0:28:21:22:6f:25:90:b6:c9:cb: 09:fb:a9:e1:06:57:fe:e2:5a:67:f9:bc:79:f9:86:02:e8:8b: 57:c6:27:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiAA+GAU6p4W6y7u1LmvwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzdlNGUyYzJhYTI2YzEwZDA3MWZhMTA0NWMxMzFlNmQx NjBmNzAwHhcNMjUxMjA1MjIwMDM2WhcNMjUxMjA2MjIwMDM2WjAzMTEwLwYDVQQD EyhjMTJjY2ZkZTNmMzhlMDc1YjZmNGJjMjE0YzRhYzc5OTg2NTI0OGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V5C9AAvlcmx8cTM+HDQnDBFOEuf hFpOFizjHbRiK++8S6S12eDR082XKsWRQVJmLTlwZxrfQnd+cxFrIR01i0amKhZQ jwJFz2SyON9cb7USpx9iXERag7tXXK21foBnKYqcR1df7Ohmw2gp9SoKN22gaFFJ jj5jT6YBezSQx92HWfcR78j4HBBUsT0HOvw3DGXQdrPsHd/Lq4he6u4GZELmh42M 4RMQGbOeouM+dbAVCfC+pfgFEe2eHhe+8hVEQd4oU0G8j6pFFTu1LXMUpWu758Na jWbeZ52SezFwNiXlEq7w6++Be8M6Q2aQaYMqXCIib5XMZeHAW5eDaEzdnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEsz94/OOB1tvS8IUxKx5mGUkjQMB8GA1UdIwQY MBaAFHl35OLCqibBDQcfoQRcEx5tFg9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NzE3ZDktODY3MS00YzYwLThmZDkt MjIxNmMzOTU3NTk4LzEvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS82NzE3ZDktODY3MS00YzYwLThmZDktMjIxNmMzOTU3NTk4 LzEvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOC7hGzYh HspJF4xrx6GPII27wIlIRlTPlidMbDzLgzTSnD2cIIBxKLApihnAT0Ul4IUUEfG5 RD+6ZLrXbO85LXPoEs5/H2bTKvVJfqzKPFWmbE45qRX25UacVJ7+LyqrjabsmQwa VhL+YzFqQlUmIIV5Fen6tVxGcgOlr/jVAyPOrBsBqb5H+x+ozIwquetEvztBhcu4 xPytavWAMniQktiZm+dZxmZ2pJvEUhyiC4UqcIuy7sdSKJPOnAcf8zsHmHp97GVG EzG2SZc91/hHy/EO51g4ftpVJ7JP7FUDvb7wKCEibyWQtsnLCfup4QZX/uJaZ/m8 efmGAuiLV8Ynsw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:30 2025 by rpki-client