This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft File: exExjUvdPsWUM4bnAdfQK9aDAK0.mft (raw, json) Hash identifier: kHKho1TMhGu8mjuB6D3/cv0vpCh+kRnxZ6og1/Ic2TE= Subject key identifier: 45:B0:1B:A5:D6:B1:FC:E7:B3:15:C6:A0:0C:74:CB:BF:D7:FB:8F:72 Authority key identifier: 7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD Certificate issuer: /CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad Certificate serial: 019AF31BC9B67F4DF8410793F43B40DB88DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft Manifest number: 0511 Signing time: Sat 06 Dec 2025 10:01:15 +0000 Manifest this update: Sat 06 Dec 2025 10:01:15 +0000 Manifest next update: Sun 07 Dec 2025 10:01:15 +0000 Files and hashes: 1: XrDua1zQDMJqH5iHPu8EHl3EkL4.roa (hash: aKzITCv/TlQWw5VPQA7t2SoPcL6SaZJgOSPmbHxDp7w=) 2: exExjUvdPsWUM4bnAdfQK9aDAK0.crl (hash: 4au0gganjK5q9kw9N/n22XMyryS+zkxyCBt5tNVB1ys=) 3: ldyV_EpqT2oKvf1QJeErhcsDNrU.roa (hash: 5odg+3w026oemslVSdfJUXV6ifzJkymRShy49z+o09k=) 4: oZdr4l7WGJxFmSBw9dK5ckQatJ0.roa (hash: yawK27NUkai0HCgzgDJwOXKqNSn2XlBC0dvfIltlwV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c9:b6:7f:4d:f8:41:07:93:f4:3b:40:db:88:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad Validity Not Before: Dec 6 10:01:15 2025 GMT Not After : Dec 7 10:01:15 2025 GMT Subject: CN=45b01ba5d6b1fce7b315c6a00c74cbbfd7fb8f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:6f:30:be:cd:a5:d1:42:72:68:45:42:59: 42:93:7d:80:c0:3e:fe:7a:ea:e1:95:31:61:89:57: ad:95:8c:15:71:ba:35:05:3e:f2:51:be:81:cc:8c: 83:0e:52:ae:32:f8:9c:b3:bc:68:18:45:59:e4:99: f7:59:bc:38:e6:b7:17:54:67:2e:d7:ea:4e:dc:dd: 4f:3b:d4:e9:f6:39:a1:58:bb:74:d7:e5:3b:a0:19: 3b:51:b3:b4:0d:a8:bc:be:2d:5f:0f:23:98:f6:ba: 3f:46:82:98:e4:59:01:1b:7e:73:c4:7a:60:91:fa: 75:7d:67:25:a2:78:a9:bb:2d:63:a9:e8:fb:59:ec: 4c:e5:31:c1:d7:2d:02:6a:1c:4d:fe:52:69:28:dd: 5e:49:c1:12:9c:a5:ba:fe:b5:e3:79:88:2e:79:e3: 5c:81:55:07:05:e2:7c:b9:8d:1a:bb:4f:2c:2b:4a: 95:cb:f2:eb:e8:7f:81:dd:e8:e5:89:86:67:2d:73: 93:cf:66:b9:38:a8:74:b5:04:a5:86:6a:eb:22:03: e3:66:29:23:e1:b9:9a:af:a5:3f:1b:ef:6b:7d:05: f6:de:27:21:d8:9d:fa:c5:59:a5:d5:c2:62:df:76: 4c:a6:fb:0c:0b:3d:f2:cd:43:17:0e:0e:28:b4:da: 8a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B0:1B:A5:D6:B1:FC:E7:B3:15:C6:A0:0C:74:CB:BF:D7:FB:8F:72 X509v3 Authority Key Identifier: keyid:7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:41:27:9d:03:e1:7a:5f:ae:44:a1:39:ab:6a:2b:db:a4:23: ba:b9:c5:e6:92:d8:b8:26:28:84:d3:a4:6b:db:6f:42:9f:f0: 38:e1:a5:d2:49:8b:b7:92:e8:e0:09:b6:2c:44:9a:40:87:cb: 17:ae:1a:6c:29:31:da:04:52:4d:e9:e4:76:af:91:ab:78:2a: b1:1c:0d:7a:3c:b1:02:fe:ed:f1:a1:0a:f0:e9:40:8d:ca:0e: d6:f6:48:48:3c:27:4a:e6:9d:67:33:e0:af:e5:f0:f7:de:51: 7d:f3:0e:ab:4b:8c:80:8e:88:a4:2c:2a:87:b3:77:38:a5:78: 38:6d:19:2b:d2:12:ad:05:38:65:78:b1:99:f7:14:1d:5f:2e: 6d:d4:aa:70:3c:21:13:56:f4:9d:4b:c2:98:13:26:46:7a:6a: 72:2f:5a:07:9d:61:b2:bd:73:4a:f2:8d:ec:f8:1c:4d:ba:88: 63:4c:f5:c0:77:44:5e:54:9f:c2:b3:b6:97:14:5c:cf:ce:3f: fc:50:8e:7a:44:1f:bc:94:69:d8:83:89:b6:38:13:c4:7d:09: 3c:82:0d:2e:44:78:6e:3e:94:55:bc:a9:1b:76:cd:de:28:4d: a1:5a:af:bb:8e:0e:38:49:d7:1b:94:f2:51:0f:5e:2d:31:1b: 96:32:82:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8m2f034QQeT9DtA24jcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMTEzMThkNGJkZDNlYzU5NDMzODZlNzAxZDdkMDJiZDY4 MzAwYWQwHhcNMjUxMjA2MTAwMTE1WhcNMjUxMjA3MTAwMTE1WjAzMTEwLwYDVQQD Eyg0NWIwMWJhNWQ2YjFmY2U3YjMxNWM2YTAwYzc0Y2JiZmQ3ZmI4ZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ5vML7NpdFCcmhFQllCk32AwD7+ eurhlTFhiVetlYwVcbo1BT7yUb6BzIyDDlKuMvics7xoGEVZ5Jn3Wbw45rcXVGcu 1+pO3N1PO9Tp9jmhWLt01+U7oBk7UbO0Dai8vi1fDyOY9ro/RoKY5FkBG35zxHpg kfp1fWclonipuy1jqej7WexM5THB1y0CahxN/lJpKN1eScESnKW6/rXjeYgueeNc gVUHBeJ8uY0au08sK0qVy/Lr6H+B3ejliYZnLXOTz2a5OKh0tQSlhmrrIgPjZikj 4bmar6U/G+9rfQX23ich2J36xVml1cJi33ZMpvsMCz3yzUMXDg4otNqKzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWwG6XWsfznsxXGoAx0y7/X+49yMB8GA1UdIwQY MBaAFHsRMY1L3T7FlDOG5wHX0CvWgwCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXhFeGpVdmRQc1dVTTRibkFkZlFLOWFEQUswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jOWMzNzAtNzEyMy00MDgxLWI5NTYt ODhlYzU3OWY4OGNhLzEvZXhFeGpVdmRQc1dVTTRibkFkZlFLOWFEQUswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9jOWMzNzAtNzEyMy00MDgxLWI5NTYtODhlYzU3OWY4OGNh LzEvZXhFeGpVdmRQc1dVTTRibkFkZlFLOWFEQUswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0EnnQPh el+uRKE5q2or26QjurnF5pLYuCYohNOka9tvQp/wOOGl0kmLt5Lo4Am2LESaQIfL F64abCkx2gRSTenkdq+Rq3gqsRwNejyxAv7t8aEK8OlAjcoO1vZISDwnSuadZzPg r+Xw995RffMOq0uMgI6IpCwqh7N3OKV4OG0ZK9ISrQU4ZXixmfcUHV8ubdSqcDwh E1b0nUvCmBMmRnpqci9aB51hsr1zSvKN7PgcTbqIY0z1wHdEXlSfwrO2lxRcz84/ /FCOekQfvJRp2IOJtjgTxH0JPIINLkR4bj6UVbypG3bN3ihNoVqvu44OOEnXG5Ty UQ9eLTEbljKC+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:05 2025 by rpki-client