This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft File: exPgVmn1VmYr7FZk4QFln5Zsgmo.mft (raw, json) Hash identifier: OMVBSAYdRdgHi43rQlrnzg/m0xDoQBP9vKm4k83K+DM= Subject key identifier: F1:D5:6C:9C:7F:F9:C9:A0:1F:87:8A:5E:A7:58:05:1A:D0:4F:F5:ED Authority key identifier: 7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A Certificate issuer: /CN=7b13e05669f556662bec5664e101659f966c826a Certificate serial: 019AF276AB5D7788C1FA60B224CE5736FF18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 07:00:54 +0000 Manifest this update: Sat 06 Dec 2025 07:00:54 +0000 Manifest next update: Sun 07 Dec 2025 07:00:54 +0000 Files and hashes: 1: HyKdTkKV5STn1J4Rxe8JxbMCpv4.roa (hash: 6If9g5ZI4fy1JxA85rEnX+2Sovu9Js7JocSs132zGS0=) 2: exPgVmn1VmYr7FZk4QFln5Zsgmo.crl (hash: p+wXdtHdkOZnw8VsqhqnlG3Nq9q4lCWSMaL+tX1dZww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ab:5d:77:88:c1:fa:60:b2:24:ce:57:36:ff:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b13e05669f556662bec5664e101659f966c826a Validity Not Before: Dec 6 07:00:54 2025 GMT Not After : Dec 7 07:00:54 2025 GMT Subject: CN=f1d56c9c7ff9c9a01f878a5ea758051ad04ff5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3e:6a:43:94:d1:0b:08:21:11:0a:ca:1a:20: 5c:79:37:61:2a:89:e7:c7:ff:87:be:ab:d1:19:3b: c2:7a:7a:c1:e2:00:23:6c:30:bd:69:4a:95:8c:ea: e9:5a:bd:6d:77:2a:ab:c5:ac:af:6c:37:c8:e6:2e: 4a:fd:d7:f3:59:58:d7:3f:b8:08:32:de:01:f8:d1: 89:ce:64:61:4f:9c:e1:37:06:6f:67:df:a5:c0:a2: c2:95:84:c4:da:d5:55:e5:f7:82:72:50:e0:45:2f: f8:e1:b6:33:6b:b2:1b:56:95:af:56:b1:f5:89:fb: a8:2a:7a:c1:f2:82:68:b0:97:bf:cb:a1:5e:d3:ed: c8:6e:3a:88:02:da:58:aa:0e:b0:80:73:b5:40:f6: 25:bd:6d:b1:61:e0:4c:e7:99:55:c7:98:4a:69:34: 8c:14:3c:b1:ba:1e:d1:88:9a:fd:55:64:01:83:1d: 4a:46:1d:6a:6a:df:d8:fd:d8:58:92:b2:c5:fe:ac: d7:69:7b:7f:50:d5:ce:fb:6a:80:a0:9b:53:62:cd: c7:7c:8d:4d:07:3e:d1:fa:ee:92:43:e6:e6:0a:41: 7e:2b:8c:18:96:87:2a:ca:95:63:98:22:09:02:fe: a8:b5:b4:75:00:f4:66:73:c5:1c:99:60:96:18:1b: 37:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D5:6C:9C:7F:F9:C9:A0:1F:87:8A:5E:A7:58:05:1A:D0:4F:F5:ED X509v3 Authority Key Identifier: keyid:7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b6:a3:f8:8c:58:b9:da:25:ca:d7:aa:1f:98:7a:ec:0d:cf: 71:ba:de:26:cd:5f:14:59:3d:3b:c4:58:9d:92:83:44:28:54: d1:b1:24:64:b4:4d:5b:bb:70:c3:36:e9:16:cc:b1:b9:88:6e: b5:55:b5:83:c3:76:c4:9c:32:d7:dd:6d:08:a3:3a:a0:30:92: 82:cd:9f:40:e7:5e:ad:f7:c0:7e:33:82:a2:55:3d:07:63:29: 52:08:a6:a8:ea:36:db:78:c8:24:40:a8:b3:18:9b:f7:b8:4a: f7:e7:84:6f:8a:e5:f4:ec:a0:70:2a:c1:c8:05:54:7a:72:49: 61:42:8d:62:56:e8:de:03:53:28:2c:c7:2a:4d:e6:79:8c:87: 94:8a:32:73:56:d8:ad:88:45:f3:6a:b4:c7:2b:d6:6f:bc:e8: 85:7d:82:2e:69:59:bd:73:2b:13:bd:b3:c9:89:07:86:00:2c: 5b:ec:df:da:70:38:9c:e6:4c:8d:53:26:58:3b:7b:69:88:07: 27:52:76:1f:fa:60:75:74:51:b7:7f:41:75:bb:7b:42:97:72: 90:0d:41:e7:f9:79:95:28:81:cf:c2:f6:ea:f3:0d:3b:71:2d: 6b:fe:d5:fc:df:32:b9:04:83:4e:b8:8c:e9:11:5b:b5:77:12: 0b:0e:11:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqtdd4jB+mCyJM5XNv8YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMTNlMDU2NjlmNTU2NjYyYmVjNTY2NGUxMDE2NTlmOTY2 YzgyNmEwHhcNMjUxMjA2MDcwMDU0WhcNMjUxMjA3MDcwMDU0WjAzMTEwLwYDVQQD EyhmMWQ1NmM5YzdmZjljOWEwMWY4NzhhNWVhNzU4MDUxYWQwNGZmNWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D5qQ5TRCwghEQrKGiBceTdhKonn x/+HvqvRGTvCenrB4gAjbDC9aUqVjOrpWr1tdyqrxayvbDfI5i5K/dfzWVjXP7gI Mt4B+NGJzmRhT5zhNwZvZ9+lwKLClYTE2tVV5feCclDgRS/44bYza7IbVpWvVrH1 ifuoKnrB8oJosJe/y6Fe0+3IbjqIAtpYqg6wgHO1QPYlvW2xYeBM55lVx5hKaTSM FDyxuh7RiJr9VWQBgx1KRh1qat/Y/dhYkrLF/qzXaXt/UNXO+2qAoJtTYs3HfI1N Bz7R+u6SQ+bmCkF+K4wYlocqypVjmCIJAv6otbR1APRmc8UcmWCWGBs3wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHVbJx/+cmgH4eKXqdYBRrQT/XtMB8GA1UdIwQY MBaAFHsT4FZp9VZmK+xWZOEBZZ+WbIJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXhQZ1ZtbjFWbVlyN0ZaazRRRmxuNVpzZ21vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mNzc2MWEtZmMzOC00NzVjLThhMTEt OTRjNzMzNDZjMGVhLzEvZXhQZ1ZtbjFWbVlyN0ZaazRRRmxuNVpzZ21vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9mNzc2MWEtZmMzOC00NzVjLThhMTEtOTRjNzMzNDZjMGVh LzEvZXhQZ1ZtbjFWbVlyN0ZaazRRRmxuNVpzZ21vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLaj+IxY udolyteqH5h67A3PcbreJs1fFFk9O8RYnZKDRChU0bEkZLRNW7twwzbpFsyxuYhu tVW1g8N2xJwy191tCKM6oDCSgs2fQOderffAfjOColU9B2MpUgimqOo223jIJECo sxib97hK9+eEb4rl9OygcCrByAVUenJJYUKNYlbo3gNTKCzHKk3meYyHlIoyc1bY rYhF82q0xyvWb7zohX2CLmlZvXMrE72zyYkHhgAsW+zf2nA4nOZMjVMmWDt7aYgH J1J2H/pgdXRRt39Bdbt7QpdykA1B5/l5lSiBz8L26vMNO3Eta/7V/N8yuQSDTriM 6RFbtXcSCw4RYw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:09:32 2025 by rpki-client