This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft File: exi86iJ6TqxhtTALME3u8UaU3JE.mft (raw, json) Hash identifier: dWL1U5vimpJdwdNnpDhRUnULaLI78npxFElQn6pEq08= Subject key identifier: 4E:4A:B0:FA:DC:47:A3:CC:9D:4F:90:66:32:71:5D:FF:C8:19:BD:88 Authority key identifier: 7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91 Certificate issuer: /CN=7b18bcea227a4eac61b5300b304deef14694dc91 Certificate serial: 019B2F67CCA5816A227D4B5B9CB56436E7FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft Manifest number: 0CCD Signing time: Thu 18 Dec 2025 03:01:30 +0000 Manifest this update: Thu 18 Dec 2025 03:01:30 +0000 Manifest next update: Fri 19 Dec 2025 03:01:30 +0000 Files and hashes: 1: exi86iJ6TqxhtTALME3u8UaU3JE.crl (hash: KwhXkXbpH7Q1QQ66S/1F8v7t+fHfoicRisJoJW2cxX0=) 2: lQ20cZ9OUrcSqb6gIxN40wQjpAk.roa (hash: WgCV5F0Lo1vsx71+iRrim7ywAzohxnYAfe2pxSvyfPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:cc:a5:81:6a:22:7d:4b:5b:9c:b5:64:36:e7:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b18bcea227a4eac61b5300b304deef14694dc91 Validity Not Before: Dec 18 03:01:30 2025 GMT Not After : Dec 19 03:01:30 2025 GMT Subject: CN=4e4ab0fadc47a3cc9d4f906632715dffc819bd88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:59:0d:2f:14:34:80:c4:5d:9b:6e:55:8c:a7: 7d:c4:af:8d:f3:93:dc:90:7b:3e:29:1d:8c:25:e6: f5:cc:e0:8f:63:e6:a7:cd:b0:c9:82:a5:18:d0:0b: dd:4e:e8:38:47:8f:80:eb:be:20:23:cd:60:ee:76: 97:23:58:70:6b:d5:3b:3e:c3:08:7c:cf:16:22:94: 8f:b0:68:1a:a8:44:4c:5c:85:53:ff:6a:2b:88:2d: d9:40:d9:50:c4:d7:f0:3b:d3:da:d0:5f:95:02:b2: 1d:fa:2b:43:23:34:fc:41:85:c3:22:dd:5a:c6:0b: 4c:b3:63:a4:47:99:68:98:fb:7f:81:7e:62:3c:76: 05:36:5c:99:20:a3:22:f1:a9:70:f4:bf:ef:9c:ca: be:c5:e4:cb:ed:18:eb:81:e0:1d:d1:0e:0e:f1:a8: 34:c0:c4:ca:08:e1:e4:50:f8:2f:db:42:9d:5e:89: f9:83:f1:38:8c:81:c4:6b:c8:c6:d2:c1:36:7a:e0: a1:13:2e:36:6a:b3:53:b9:89:a0:c2:81:f5:32:25: 6d:9e:39:56:c9:65:ab:d0:fb:23:30:32:16:64:37: 6e:ba:3a:d3:62:a6:33:1d:45:a4:f4:62:2e:51:51: 43:bc:5f:63:30:e4:fc:d7:d8:a6:7a:05:f4:8f:8b: 68:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4A:B0:FA:DC:47:A3:CC:9D:4F:90:66:32:71:5D:FF:C8:19:BD:88 X509v3 Authority Key Identifier: keyid:7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:26:d9:1d:01:dc:6d:80:96:d2:16:7d:03:ed:a4:b0:49:f7: 3d:dd:ed:31:f8:53:32:34:fc:df:a1:5e:af:7f:1a:b3:f6:59: 34:ad:83:b8:ec:be:ad:d5:f7:3a:22:a9:4b:4c:09:a1:85:f2: 00:da:39:25:f5:bc:26:40:33:7d:5e:f8:80:c7:ce:62:8d:da: 31:a9:75:01:0f:b7:bd:ed:8d:1d:cf:03:0d:75:be:a6:68:ca: 8d:01:72:ae:b0:fa:a3:48:6a:6f:61:43:ae:34:e9:60:e1:f9: cd:15:ee:d6:f6:72:7c:67:4c:81:10:e7:57:9b:9a:40:a3:87: bc:35:16:7e:b9:76:fc:a0:4d:0d:30:7a:b0:c8:94:eb:5e:cb: c1:f4:39:53:1d:81:eb:51:a5:37:63:95:b2:39:da:16:55:d4: 72:a4:81:ff:68:05:fb:12:69:37:2d:3d:82:69:77:e8:60:7d: 12:5e:38:55:19:14:04:6b:c1:94:da:6f:d6:b4:27:33:dc:1a: 50:9e:b7:38:2a:9e:dd:23:75:a7:6b:7c:85:91:06:fe:68:57: 05:5a:ee:55:7c:14:f2:50:23:21:56:02:8f:f5:07:af:cd:a3: 8a:cb:68:b9:b9:e9:e7:37:be:53:55:6a:df:ad:15:5b:e1:65: 03:32:85:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ8ylgWoifUtbnLVkNuf+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMThiY2VhMjI3YTRlYWM2MWI1MzAwYjMwNGRlZWYxNDY5 NGRjOTEwHhcNMjUxMjE4MDMwMTMwWhcNMjUxMjE5MDMwMTMwWjAzMTEwLwYDVQQD Eyg0ZTRhYjBmYWRjNDdhM2NjOWQ0ZjkwNjYzMjcxNWRmZmM4MTliZDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylkNLxQ0gMRdm25VjKd9xK+N85Pc kHs+KR2MJeb1zOCPY+anzbDJgqUY0AvdTug4R4+A674gI81g7naXI1hwa9U7PsMI fM8WIpSPsGgaqERMXIVT/2oriC3ZQNlQxNfwO9Pa0F+VArId+itDIzT8QYXDIt1a xgtMs2OkR5lomPt/gX5iPHYFNlyZIKMi8alw9L/vnMq+xeTL7RjrgeAd0Q4O8ag0 wMTKCOHkUPgv20KdXon5g/E4jIHEa8jG0sE2euChEy42arNTuYmgwoH1MiVtnjlW yWWr0PsjMDIWZDduujrTYqYzHUWk9GIuUVFDvF9jMOT819imegX0j4toZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5KsPrcR6PMnU+QZjJxXf/IGb2IMB8GA1UdIwQY MBaAFHsYvOoiek6sYbUwCzBN7vFGlNyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9kYWMwNzItMGYxZC00NDliLWIzMGIt MDliMTlkMjU1MjU0LzEvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9kYWMwNzItMGYxZC00NDliLWIzMGItMDliMTlkMjU1MjU0 LzEvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUybZHQHc bYCW0hZ9A+2ksEn3Pd3tMfhTMjT836Fer38as/ZZNK2DuOy+rdX3OiKpS0wJoYXy ANo5JfW8JkAzfV74gMfOYo3aMal1AQ+3ve2NHc8DDXW+pmjKjQFyrrD6o0hqb2FD rjTpYOH5zRXu1vZyfGdMgRDnV5uaQKOHvDUWfrl2/KBNDTB6sMiU617LwfQ5Ux2B 61GlN2OVsjnaFlXUcqSB/2gF+xJpNy09gml36GB9El44VRkUBGvBlNpv1rQnM9wa UJ63OCqe3SN1p2t8hZEG/mhXBVruVXwU8lAjIVYCj/UHr82jistoubnp5ze+U1Vq 360VW+FlAzKF+g== -----END CERTIFICATE-----Generated at Thu Dec 18 07:57:19 2025 by rpki-client