This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft File: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft (raw, json) Hash identifier: QvD03q4QGdAXyMOsCjMOWEbvrThbornzMJ9RK924LLE= Subject key identifier: 9D:25:3C:EE:AF:18:1B:09:2C:03:1B:D9:EB:48:52:C9:91:17:30:73 Authority key identifier: FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84 Certificate issuer: /CN=fc4c512fe288ac6a63107d00414434329c43a284 Certificate serial: 019AF0BF552A9BFD695F3649C4D856DA5CA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft Manifest number: 1352 Signing time: Fri 05 Dec 2025 23:01:02 +0000 Manifest this update: Fri 05 Dec 2025 23:01:02 +0000 Manifest next update: Sat 06 Dec 2025 23:01:02 +0000 Files and hashes: 1: GA0RPX0Ob2MlFQ2Rid7QsDPJvlM.roa (hash: 3tIOpxV3dFmPnHX5pAbw7q08MNAptrdhnPG7hgsjWKs=) 2: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl (hash: Wx97FsCIX67OR/Gxy7YjtqUXK7j82hq+e+mLyAimWgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:55:2a:9b:fd:69:5f:36:49:c4:d8:56:da:5c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc4c512fe288ac6a63107d00414434329c43a284 Validity Not Before: Dec 5 23:01:02 2025 GMT Not After : Dec 6 23:01:02 2025 GMT Subject: CN=9d253ceeaf181b092c031bd9eb4852c991173073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5d:af:b7:ba:73:4a:34:fc:a3:b7:b3:4a:11: e2:21:4b:21:5b:51:9c:82:18:f5:92:bd:eb:57:38: 04:9b:b0:a7:65:e5:0c:63:95:b1:bd:73:0a:9b:62: 3f:f5:7b:d7:46:ce:5a:c5:a5:02:48:ca:9f:0b:24: ff:da:36:90:a8:b6:d9:b0:32:71:61:4e:16:31:99: 39:42:29:87:e0:f8:b0:ea:6a:77:8c:81:46:19:3f: db:67:7f:97:4d:df:42:ba:86:ea:02:f0:78:aa:68: 75:9e:30:af:0c:72:84:4e:4f:cc:53:d7:f2:ac:92: 1d:5a:1e:b4:cb:a5:81:c9:4f:21:fd:df:de:78:6b: a2:fd:f7:11:2e:21:5b:5b:5c:bc:a2:2c:1f:38:64: de:d7:bd:0c:4e:38:fb:1a:4e:a4:c6:28:bc:b1:40: bd:c1:53:93:dd:88:74:f2:a5:79:d6:ec:33:52:64: 18:17:66:83:59:a7:32:bb:29:f0:ee:7e:d0:b0:cf: 10:b7:e9:a2:53:da:59:85:a5:db:d3:66:33:52:65: 4b:52:19:c7:63:e3:e0:46:ae:d9:60:b1:75:b9:66: 49:26:ff:aa:36:6c:83:63:f2:98:9f:56:89:f5:a2: 20:f2:5c:89:4a:23:75:9a:05:85:93:97:7e:42:56: 04:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:25:3C:EE:AF:18:1B:09:2C:03:1B:D9:EB:48:52:C9:91:17:30:73 X509v3 Authority Key Identifier: keyid:FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:99:68:5e:9e:c6:6f:2c:a3:89:01:84:55:5e:26:5a:5a:a4: af:9b:03:08:f6:a0:58:0e:13:af:4e:31:44:15:8c:35:ff:29: 50:65:00:c2:cc:71:96:b3:c3:0d:b4:d5:09:7e:4f:4d:40:69: d5:7c:73:2d:d4:2f:f5:b4:4b:1d:38:01:39:4e:dc:c1:58:21: 35:59:db:fd:fd:82:89:25:d2:56:80:c4:c2:e2:fc:78:78:a0: ed:42:b0:03:41:0a:ef:de:89:ee:7a:74:16:65:30:42:2b:0e: 4d:8f:19:a8:66:fa:ec:54:18:3f:36:9e:d4:a1:34:5d:c7:55: af:9e:76:d3:53:2d:58:4c:6e:8c:3d:78:93:09:25:79:3f:35: 05:90:13:e9:3e:80:cb:69:c2:da:d0:ea:d5:81:5c:8c:27:09: d3:78:09:0d:64:95:64:3f:a2:96:cb:65:68:5e:8d:e7:17:4c: c3:23:f3:68:60:60:1f:37:00:07:4d:68:ba:07:df:09:ea:f9: a6:29:07:d5:32:c5:1c:10:79:b9:08:e5:4b:fb:7c:d5:19:03: c5:33:8b:c3:7e:18:3b:84:a9:4e:0e:e9:97:6b:98:19:6b:9a: 01:22:9a:03:ec:f8:95:00:bb:71:4e:92:1c:e5:b6:25:53:9f: 2d:71:3c:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv1Uqm/1pXzZJxNhW2lypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNGM1MTJmZTI4OGFjNmE2MzEwN2QwMDQxNDQzNDMyOWM0 M2EyODQwHhcNMjUxMjA1MjMwMTAyWhcNMjUxMjA2MjMwMTAyWjAzMTEwLwYDVQQD Eyg5ZDI1M2NlZWFmMTgxYjA5MmMwMzFiZDllYjQ4NTJjOTkxMTczMDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV2vt7pzSjT8o7ezShHiIUshW1Gc ghj1kr3rVzgEm7CnZeUMY5WxvXMKm2I/9XvXRs5axaUCSMqfCyT/2jaQqLbZsDJx YU4WMZk5QimH4Piw6mp3jIFGGT/bZ3+XTd9CuobqAvB4qmh1njCvDHKETk/MU9fy rJIdWh60y6WByU8h/d/eeGui/fcRLiFbW1y8oiwfOGTe170MTjj7Gk6kxii8sUC9 wVOT3Yh08qV51uwzUmQYF2aDWacyuynw7n7QsM8Qt+miU9pZhaXb02YzUmVLUhnH Y+PgRq7ZYLF1uWZJJv+qNmyDY/KYn1aJ9aIg8lyJSiN1mgWFk5d+QlYE/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0lPO6vGBsJLAMb2etIUsmRFzBzMB8GA1UdIwQY MBaAFPxMUS/iiKxqYxB9AEFENDKcQ6KEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDFlNDUtYjE2Yy00Nzc5LTg3NGEt MzE1YzAyYTU5ZmE1LzEvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDFlNDUtYjE2Yy00Nzc5LTg3NGEtMzE1YzAyYTU5ZmE1 LzEvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJloXp7G byyjiQGEVV4mWlqkr5sDCPagWA4Tr04xRBWMNf8pUGUAwsxxlrPDDbTVCX5PTUBp 1XxzLdQv9bRLHTgBOU7cwVghNVnb/f2CiSXSVoDEwuL8eHig7UKwA0EK796J7np0 FmUwQisOTY8ZqGb67FQYPzae1KE0XcdVr55201MtWExujD14kwkleT81BZAT6T6A y2nC2tDq1YFcjCcJ03gJDWSVZD+ilstlaF6N5xdMwyPzaGBgHzcAB01ougffCer5 pikH1TLFHBB5uQjlS/t81RkDxTOLw34YO4SpTg7pl2uYGWuaASKaA+z4lQC7cU6S HOW2JVOfLXE8tw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:02 2025 by rpki-client