This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft File: EXoEqScBnDzi0MnbOjFJd6Cns1w.mft (raw, json) Hash identifier: mwopn/4JmUGGFqwfLqbbpuYN0kI1RqQxen0BSSEkS90= Subject key identifier: 8A:3B:D9:CA:33:45:5A:C2:07:8B:35:76:42:0E:F8:C0:2B:F9:9B:A3 Authority key identifier: 11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C Certificate issuer: /CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c Certificate serial: 019AF5098F6739C8C51FED29356FA41DA699 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft Manifest number: 0432 Signing time: Sat 06 Dec 2025 19:00:35 +0000 Manifest this update: Sat 06 Dec 2025 19:00:35 +0000 Manifest next update: Sun 07 Dec 2025 19:00:35 +0000 Files and hashes: 1: 2BzyKfn5TceQ5f_OzQ0CHZnS4gI.roa (hash: QgfXzSLSDf5EWcjraHDYOpI/UP8b9CbWgxlTSxy1O3c=) 2: EXoEqScBnDzi0MnbOjFJd6Cns1w.crl (hash: Cne0/5R4VYegCc/AzLigube9mUKGk5EmIy6txAsjpPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:8f:67:39:c8:c5:1f:ed:29:35:6f:a4:1d:a6:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c Validity Not Before: Dec 6 19:00:35 2025 GMT Not After : Dec 7 19:00:35 2025 GMT Subject: CN=8a3bd9ca33455ac2078b3576420ef8c02bf99ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:df:f2:6f:ca:9d:19:1d:e6:2c:fd:fa:35: 35:ca:60:65:0d:d0:3a:2e:3d:7d:e5:b0:cd:53:93: 59:03:49:0c:a0:78:1a:5b:af:c4:41:d7:1a:d6:a1: 16:42:84:34:81:0b:08:d0:32:34:07:2a:32:cd:66: c8:0b:8a:7c:a7:02:80:79:e1:79:3e:fa:09:7c:b1: e9:d3:30:4c:b3:95:f9:37:42:dd:75:74:41:18:2e: b8:94:5d:79:7e:63:ae:c9:7e:fc:9c:e0:7b:22:77: ae:bf:aa:17:0a:56:f2:e3:7e:35:2c:56:be:49:5c: 6a:ca:2c:88:ed:17:88:d1:17:4c:72:e1:4b:f5:73: 24:6d:89:f7:c7:5c:6e:88:39:2e:81:aa:a9:44:8c: 7c:c1:c8:00:35:25:e3:a5:ce:8d:3c:15:3e:fa:8d: 21:dd:a2:91:b7:fa:80:67:98:2b:30:78:15:fa:a5: c2:00:15:b1:57:cc:c2:e3:aa:3e:55:df:da:5b:79: 60:d9:17:ed:fb:57:34:87:72:b2:63:27:f1:8f:ee: a7:52:4a:9c:1a:0e:42:17:e8:e7:51:21:f4:ae:f7: 6d:41:82:34:2b:c9:88:5d:a5:7f:c0:cf:9d:82:f2: b5:ad:d8:57:78:34:c5:d4:09:23:d3:28:72:34:c6: 15:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3B:D9:CA:33:45:5A:C2:07:8B:35:76:42:0E:F8:C0:2B:F9:9B:A3 X509v3 Authority Key Identifier: keyid:11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:95:2f:91:6f:18:57:2b:19:ec:34:36:4a:16:40:46:79:a5: 7e:47:d0:9a:c2:cb:8b:d1:c4:68:6c:38:12:b8:df:3a:c6:41: d4:90:bc:bc:9b:a3:bb:52:ea:9d:a7:31:13:c6:2d:ac:d2:7c: 4c:86:e8:a5:21:bf:bd:28:b4:d5:71:94:70:dc:a4:b3:4f:31: 51:f9:37:d8:df:61:5f:fa:ef:76:84:5d:01:2a:72:d2:fc:3a: 80:fc:69:89:c5:9c:d7:d3:70:14:83:2a:1d:78:d9:fc:cc:80: 2b:69:02:a3:f5:64:17:db:a6:37:c8:28:7b:0c:04:fc:85:32: 5e:25:35:3f:47:16:4c:73:0e:76:23:ef:88:ba:73:76:e7:03: d6:90:68:53:d1:77:3a:b2:ff:94:ab:92:14:d4:22:a6:ae:07: 22:f0:2f:3c:83:b4:c9:c3:24:11:d6:8f:f6:be:61:e4:35:f2: a7:34:2c:7e:d0:b7:e0:6c:bc:7f:92:6a:c1:73:a5:c8:4c:21: 1c:c1:f9:9e:40:91:bc:fa:7e:3c:ff:c9:26:48:83:dd:bf:55: 85:ed:87:3d:e1:14:20:7f:88:f5:12:06:fd:fe:04:ba:04:a1: 77:c1:eb:33:78:13:d1:0c:5f:90:03:d3:21:73:97:00:1e:c6: f8:65:4d:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CY9nOcjFH+0pNW+kHaaZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2EwNGE5MjcwMTljM2NlMmQwYzlkYjNhMzE0OTc3YTBh N2IzNWMwHhcNMjUxMjA2MTkwMDM1WhcNMjUxMjA3MTkwMDM1WjAzMTEwLwYDVQQD Eyg4YTNiZDljYTMzNDU1YWMyMDc4YjM1NzY0MjBlZjhjMDJiZjk5YmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaXf8m/KnRkd5iz9+jU1ymBlDdA6 Lj195bDNU5NZA0kMoHgaW6/EQdca1qEWQoQ0gQsI0DI0ByoyzWbIC4p8pwKAeeF5 PvoJfLHp0zBMs5X5N0LddXRBGC64lF15fmOuyX78nOB7Ineuv6oXClby4341LFa+ SVxqyiyI7ReI0RdMcuFL9XMkbYn3x1xuiDkugaqpRIx8wcgANSXjpc6NPBU++o0h 3aKRt/qAZ5grMHgV+qXCABWxV8zC46o+Vd/aW3lg2Rft+1c0h3KyYyfxj+6nUkqc Gg5CF+jnUSH0rvdtQYI0K8mIXaV/wM+dgvK1rdhXeDTF1Akj0yhyNMYVFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIo72cozRVrCB4s1dkIO+MAr+ZujMB8GA1UdIwQY MBaAFBF6BKknAZw84tDJ2zoxSXegp7NcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVhvRXFTY0JuRHppME1uYk9qRkpkNkNuczF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZGU5OGUtMTdiNC00N2ZmLWE5Yzkt MTFjMzAwOWY0NGRmLzEvRVhvRXFTY0JuRHppME1uYk9qRkpkNkNuczF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85ZGU5OGUtMTdiNC00N2ZmLWE5YzktMTFjMzAwOWY0NGRm LzEvRVhvRXFTY0JuRHppME1uYk9qRkpkNkNuczF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpUvkW8Y VysZ7DQ2ShZARnmlfkfQmsLLi9HEaGw4ErjfOsZB1JC8vJuju1LqnacxE8YtrNJ8 TIbopSG/vSi01XGUcNyks08xUfk32N9hX/rvdoRdASpy0vw6gPxpicWc19NwFIMq HXjZ/MyAK2kCo/VkF9umN8goewwE/IUyXiU1P0cWTHMOdiPviLpzducD1pBoU9F3 OrL/lKuSFNQipq4HIvAvPIO0ycMkEdaP9r5h5DXypzQsftC34Gy8f5JqwXOlyEwh HMH5nkCRvPp+PP/JJkiD3b9Vhe2HPeEUIH+I9RIG/f4EugShd8HrM3gT0QxfkAPT IXOXAB7G+GVNog== -----END CERTIFICATE-----Generated at Sat Dec 6 23:37:14 2025 by rpki-client