This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft File: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft (raw, json) Hash identifier: ADMzEXL874K3dBpXh+lZKihSc0RWxHTMvCY1Qsgj0VE= Subject key identifier: FF:18:CA:7F:02:7A:1E:B0:05:E1:A7:0D:1B:6D:65:BC:F9:B3:B4:21 Authority key identifier: FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84 Certificate issuer: /CN=fc4c512fe288ac6a63107d00414434329c43a284 Certificate serial: 019B3C106AC03C5018C4E6E738586EBA7D15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft Manifest number: 1379 Signing time: Sat 20 Dec 2025 14:01:07 +0000 Manifest this update: Sat 20 Dec 2025 14:01:07 +0000 Manifest next update: Sun 21 Dec 2025 14:01:07 +0000 Files and hashes: 1: GA0RPX0Ob2MlFQ2Rid7QsDPJvlM.roa (hash: 3tIOpxV3dFmPnHX5pAbw7q08MNAptrdhnPG7hgsjWKs=) 2: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl (hash: sqCO6VRLd7xwTlBBHbTM31BufcU64aDHKrWGVY3tYc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:6a:c0:3c:50:18:c4:e6:e7:38:58:6e:ba:7d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc4c512fe288ac6a63107d00414434329c43a284 Validity Not Before: Dec 20 14:01:07 2025 GMT Not After : Dec 21 14:01:07 2025 GMT Subject: CN=ff18ca7f027a1eb005e1a70d1b6d65bcf9b3b421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:44:49:3b:bf:11:59:0e:93:05:e1:f6:f9:8e: 05:fe:33:66:f0:eb:cb:fa:09:37:5d:a5:81:c7:17: b6:79:b3:a3:f9:7a:6d:17:82:0d:78:77:fa:66:cd: 13:3b:3e:f3:15:49:3e:e2:df:6e:9e:2e:15:32:5e: 12:0b:fd:93:22:aa:3e:54:f0:a3:e6:78:cb:25:47: 19:c2:ae:b0:75:fa:f7:a7:09:96:ee:dd:34:e7:93: 12:2c:c7:9d:99:a1:67:44:dd:5d:2d:97:dc:a3:81: ca:ba:15:e8:58:94:6c:00:6d:f9:4d:8d:77:a1:ac: 91:12:8d:80:ae:4e:c7:92:72:56:ef:a7:32:30:7f: 03:b6:f8:ad:6a:0c:da:16:59:df:58:55:98:48:41: 97:43:23:00:1f:60:74:e3:6c:f9:9a:64:58:38:85: f7:f5:18:12:8e:ed:56:01:05:dd:8c:e9:81:7b:be: 6c:84:30:2e:4d:92:34:f8:e2:85:76:cb:70:85:4a: bb:3e:55:fd:22:23:30:e9:2f:ca:1e:52:8e:4a:91: ee:7a:58:76:b5:18:f8:b4:ae:d1:d5:e3:31:73:57: 2e:ed:99:3e:4e:e1:f1:e6:2c:3e:01:e7:5e:09:f2: e4:13:00:91:06:a4:2b:fd:a4:2e:07:ec:f5:8f:5c: c2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:18:CA:7F:02:7A:1E:B0:05:E1:A7:0D:1B:6D:65:BC:F9:B3:B4:21 X509v3 Authority Key Identifier: keyid:FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:e1:51:ae:25:e5:ec:6d:ad:e3:c5:e3:eb:7e:b7:aa:25:4a: 1b:a5:97:0b:d5:d0:96:8c:11:a1:42:c3:b0:66:9b:af:1d:5f: db:ad:2d:6d:e0:d1:b2:a8:9d:2e:59:25:89:86:11:77:16:ec: 33:21:ef:e1:7c:d1:b4:21:38:67:e1:0b:ce:ac:cb:5e:05:ee: f9:60:d7:9e:71:d8:d5:93:2d:94:00:c8:9e:97:ac:cc:fd:ad: e6:21:59:67:25:38:ca:92:9e:46:d7:46:c7:44:47:47:86:3f: 70:b4:d2:9b:01:92:64:da:19:6c:ed:27:4c:05:d4:35:fd:2d: 79:04:d1:47:84:c4:da:22:b0:f8:cc:54:78:69:4c:a1:02:73: 1f:2b:dd:34:d9:bf:e0:b2:c6:b2:72:f9:af:82:28:19:41:53: e3:8b:38:87:e1:5e:0e:a9:20:90:e2:d0:8c:d1:c7:62:11:d1: bf:94:00:1b:0b:7e:6c:fc:82:3d:38:59:95:8a:f0:53:3a:e9: ed:19:94:db:14:c7:6d:65:bb:f8:09:76:77:08:81:a0:0d:80: 14:9b:51:dc:f3:03:d4:96:1b:6a:0c:04:63:b0:d1:8e:35:20: 71:48:9a:1e:d8:e7:f3:7d:dc:c2:40:e6:af:b1:93:da:ba:41: b8:a6:b0:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EGrAPFAYxObnOFhuun0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNGM1MTJmZTI4OGFjNmE2MzEwN2QwMDQxNDQzNDMyOWM0 M2EyODQwHhcNMjUxMjIwMTQwMTA3WhcNMjUxMjIxMTQwMTA3WjAzMTEwLwYDVQQD EyhmZjE4Y2E3ZjAyN2ExZWIwMDVlMWE3MGQxYjZkNjViY2Y5YjNiNDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnURJO78RWQ6TBeH2+Y4F/jNm8OvL +gk3XaWBxxe2ebOj+XptF4INeHf6Zs0TOz7zFUk+4t9uni4VMl4SC/2TIqo+VPCj 5njLJUcZwq6wdfr3pwmW7t0055MSLMedmaFnRN1dLZfco4HKuhXoWJRsAG35TY13 oayREo2Ark7HknJW76cyMH8DtvitagzaFlnfWFWYSEGXQyMAH2B042z5mmRYOIX3 9RgSju1WAQXdjOmBe75shDAuTZI0+OKFdstwhUq7PlX9IiMw6S/KHlKOSpHuelh2 tRj4tK7R1eMxc1cu7Zk+TuHx5iw+AedeCfLkEwCRBqQr/aQuB+z1j1zCtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8Yyn8Ceh6wBeGnDRttZbz5s7QhMB8GA1UdIwQY MBaAFPxMUS/iiKxqYxB9AEFENDKcQ6KEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDFlNDUtYjE2Yy00Nzc5LTg3NGEt MzE1YzAyYTU5ZmE1LzEvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDFlNDUtYjE2Yy00Nzc5LTg3NGEtMzE1YzAyYTU5ZmE1 LzEvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuFRriXl 7G2t48Xj6363qiVKG6WXC9XQlowRoULDsGabrx1f260tbeDRsqidLlkliYYRdxbs MyHv4XzRtCE4Z+ELzqzLXgXu+WDXnnHY1ZMtlADInpeszP2t5iFZZyU4ypKeRtdG x0RHR4Y/cLTSmwGSZNoZbO0nTAXUNf0teQTRR4TE2iKw+MxUeGlMoQJzHyvdNNm/ 4LLGsnL5r4IoGUFT44s4h+FeDqkgkOLQjNHHYhHRv5QAGwt+bPyCPThZlYrwUzrp 7RmU2xTHbWW7+Al2dwiBoA2AFJtR3PMD1JYbagwEY7DRjjUgcUiaHtjn833cwkDm r7GT2rpBuKawRQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:25:17 2025 by rpki-client