This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft File: exi86iJ6TqxhtTALME3u8UaU3JE.mft (raw, json) Hash identifier: 94PGM2kiSvAaDDTie4o7SjQTRIDDyhPazdFd4N7apUI= Subject key identifier: F7:88:51:71:29:67:F5:EA:E4:CB:53:AE:AE:BE:D0:E5:34:28:90:28 Authority key identifier: 7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91 Certificate issuer: /CN=7b18bcea227a4eac61b5300b304deef14694dc91 Certificate serial: 019AF19B83463FBA1C0772548CC52ED10E55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft Manifest number: 0CAD Signing time: Sat 06 Dec 2025 03:01:31 +0000 Manifest this update: Sat 06 Dec 2025 03:01:31 +0000 Manifest next update: Sun 07 Dec 2025 03:01:31 +0000 Files and hashes: 1: exi86iJ6TqxhtTALME3u8UaU3JE.crl (hash: 5ehP9il5glV5epEVSPIrZki9Sse9Oz7SbB9D2x62jNg=) 2: lQ20cZ9OUrcSqb6gIxN40wQjpAk.roa (hash: WgCV5F0Lo1vsx71+iRrim7ywAzohxnYAfe2pxSvyfPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:83:46:3f:ba:1c:07:72:54:8c:c5:2e:d1:0e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b18bcea227a4eac61b5300b304deef14694dc91 Validity Not Before: Dec 6 03:01:31 2025 GMT Not After : Dec 7 03:01:31 2025 GMT Subject: CN=f78851712967f5eae4cb53aeaebed0e534289028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:73:64:b5:dd:4d:de:37:89:34:d6:59:7f: 46:ee:10:e1:41:17:cd:80:0d:10:c9:62:d4:ae:6d: 0b:98:e4:e1:28:f5:52:55:e7:80:b3:2d:2c:d4:59: ea:9f:1d:7b:a6:b3:ab:8e:ba:39:18:d8:02:29:43: ec:32:60:71:67:42:8f:3f:3e:5c:cd:e4:89:46:f0: 90:4c:e3:5c:e1:ed:95:69:56:df:73:d1:68:0c:a5: c1:06:05:8f:16:e7:f1:01:b8:1d:2f:ca:39:cc:79: ba:86:1e:e1:cb:e8:4b:e5:79:11:69:03:ac:e9:8c: 9b:d2:80:fe:05:4f:a3:1a:55:34:e7:d6:47:b9:51: ea:5b:3f:0c:4c:c1:da:1c:73:b2:14:ac:82:21:f5: 84:41:5c:70:a9:1d:3d:84:7c:08:eb:75:c3:ae:fe: c8:b0:0b:2f:6d:c8:1d:be:71:93:17:74:62:1d:5a: 2f:d1:36:17:71:e6:aa:35:48:37:63:ff:12:be:0c: 47:31:f2:45:ff:f4:b1:da:29:d7:b2:6c:30:cc:42: 1c:1e:fc:47:04:74:93:da:f9:3a:a2:20:04:f9:cb: be:ba:0a:2a:f2:d6:57:25:d3:d5:d1:73:c8:dd:53: 2b:3f:98:46:ae:97:3f:0b:33:ac:28:1d:32:b4:8e: 53:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:88:51:71:29:67:F5:EA:E4:CB:53:AE:AE:BE:D0:E5:34:28:90:28 X509v3 Authority Key Identifier: keyid:7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:6f:7f:1d:5f:a8:b1:97:d8:6d:63:4e:eb:3c:1c:38:16:fa: 63:72:5d:13:e5:bd:4d:e5:ef:50:79:f4:32:60:98:d0:d8:cd: cb:19:ef:76:80:ef:1a:9e:e9:4b:d6:14:fc:27:88:04:56:54: 61:50:a5:dc:4c:29:09:37:83:16:de:35:fb:9b:e6:c1:48:f0: 7b:46:5a:69:d2:8a:cd:ef:8d:0a:96:ad:8c:88:63:3f:4f:0b: 9a:3e:95:74:f8:4e:92:53:d5:7e:cf:54:8e:bd:fb:95:e4:c3: 52:83:73:10:5d:e9:72:02:95:be:f7:d6:54:10:0d:c2:e0:bb: 67:73:7e:93:7a:8a:79:0d:cc:d8:ed:d4:d8:68:54:55:23:9b: 1f:5d:5a:3e:d9:04:df:da:bd:85:0e:1d:39:fb:e1:9a:f7:64: 55:b7:96:e6:d4:36:06:a7:91:74:d7:86:30:d7:8a:81:da:55: 4c:e6:6b:7f:4a:a2:d6:df:1f:2e:55:34:3e:6c:8a:d7:9b:9e: 56:91:68:77:51:48:25:35:c0:49:b3:90:2e:56:90:69:15:87: e2:39:8b:bc:05:cd:ef:c8:0d:29:f7:a7:0c:86:82:71:d1:f6: 96:d6:cb:3a:f0:52:e5:85:17:6d:58:1f:e9:10:74:1a:f9:27: 35:07:96:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4NGP7ocB3JUjMUu0Q5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMThiY2VhMjI3YTRlYWM2MWI1MzAwYjMwNGRlZWYxNDY5 NGRjOTEwHhcNMjUxMjA2MDMwMTMxWhcNMjUxMjA3MDMwMTMxWjAzMTEwLwYDVQQD EyhmNzg4NTE3MTI5NjdmNWVhZTRjYjUzYWVhZWJlZDBlNTM0Mjg5MDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlBzZLXdTd43iTTWWX9G7hDhQRfN gA0QyWLUrm0LmOThKPVSVeeAsy0s1Fnqnx17prOrjro5GNgCKUPsMmBxZ0KPPz5c zeSJRvCQTONc4e2VaVbfc9FoDKXBBgWPFufxAbgdL8o5zHm6hh7hy+hL5XkRaQOs 6Yyb0oD+BU+jGlU059ZHuVHqWz8MTMHaHHOyFKyCIfWEQVxwqR09hHwI63XDrv7I sAsvbcgdvnGTF3RiHVov0TYXceaqNUg3Y/8SvgxHMfJF//Sx2inXsmwwzEIcHvxH BHST2vk6oiAE+cu+ugoq8tZXJdPV0XPI3VMrP5hGrpc/CzOsKB0ytI5T1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPeIUXEpZ/Xq5MtTrq6+0OU0KJAoMB8GA1UdIwQY MBaAFHsYvOoiek6sYbUwCzBN7vFGlNyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9kYWMwNzItMGYxZC00NDliLWIzMGIt MDliMTlkMjU1MjU0LzEvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9kYWMwNzItMGYxZC00NDliLWIzMGItMDliMTlkMjU1MjU0 LzEvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYG9/HV+o sZfYbWNO6zwcOBb6Y3JdE+W9TeXvUHn0MmCY0NjNyxnvdoDvGp7pS9YU/CeIBFZU YVCl3EwpCTeDFt41+5vmwUjwe0ZaadKKze+NCpatjIhjP08Lmj6VdPhOklPVfs9U jr37leTDUoNzEF3pcgKVvvfWVBANwuC7Z3N+k3qKeQ3M2O3U2GhUVSObH11aPtkE 39q9hQ4dOfvhmvdkVbeW5tQ2BqeRdNeGMNeKgdpVTOZrf0qi1t8fLlU0PmyK15ue VpFod1FIJTXASbOQLlaQaRWH4jmLvAXN78gNKfenDIaCcdH2ltbLOvBS5YUXbVgf 6RB0GvknNQeWww== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:28 2025 by rpki-client