This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json) Hash identifier: PGdRPK/VRTN8sPp+hVD6Rxwp5tOV/LfT5BHg+ediZX4= Subject key identifier: 63:4D:57:05:DF:83:38:CC:D0:A9:C5:8D:88:44:F9:11:C7:66:B6:15 Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da Certificate serial: 019AF3F7D201F7D10A434014A48FAC41D071 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft Manifest number: 0E4A Signing time: Sat 06 Dec 2025 14:01:35 +0000 Manifest this update: Sat 06 Dec 2025 14:01:35 +0000 Manifest next update: Sun 07 Dec 2025 14:01:35 +0000 Files and hashes: 1: U2BvE4zbzFJTHLJzSmZ1W9x-kCM.roa (hash: CneTmiRYnA+2gIbWw8P2gftXT9GSMXZurQf8UEQYJtM=) 2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: a199ajwiXnM7H97dmWjPhjlsfPWLGNYlpT5/e6eGxY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:d2:01:f7:d1:0a:43:40:14:a4:8f:ac:41:d0:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da Validity Not Before: Dec 6 14:01:35 2025 GMT Not After : Dec 7 14:01:35 2025 GMT Subject: CN=634d5705df8338ccd0a9c58d8844f911c766b615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:09:63:0f:ae:38:d3:96:7a:31:2f:43:95: 84:2c:c1:d0:a4:e4:28:b1:de:77:8d:37:95:03:9c: c8:73:c6:19:90:0a:d2:02:5f:34:bd:41:5a:81:03: ad:90:bb:d3:b6:f5:a6:4b:d9:22:8a:4b:4d:36:54: 5e:52:23:1c:b8:a1:e5:01:5e:96:aa:c9:5b:73:98: 77:9a:c6:21:cd:fd:70:d8:df:e5:cb:30:e1:48:0e: ce:e7:4f:cf:d7:96:71:77:d8:84:c3:00:33:e3:ae: dc:51:b3:77:2b:1d:33:10:21:9a:b4:7d:99:8f:30: 35:d2:fa:39:69:13:72:d1:f2:fe:b8:59:0e:39:c1: 40:43:da:72:93:49:b7:01:60:05:a4:29:36:82:de: a4:1e:7d:e0:c5:59:51:91:a5:c8:1e:18:02:c4:53: cb:f3:60:1b:5f:87:26:c5:2f:7a:96:e6:4f:40:c9: 28:3c:f9:06:17:e5:9c:8f:77:d1:72:ca:d4:b0:d3: 77:be:a8:78:59:fb:d9:95:95:00:ae:3d:76:86:bc: e3:14:cc:e5:28:de:76:4e:96:c7:2e:07:f3:05:55: 51:a5:2f:66:ef:1e:36:6e:b3:e3:82:4b:36:78:57: 15:fe:5b:4c:36:f9:b1:c8:e7:6b:93:94:44:10:99: 6b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4D:57:05:DF:83:38:CC:D0:A9:C5:8D:88:44:F9:11:C7:66:B6:15 X509v3 Authority Key Identifier: keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a1:38:4e:b1:f3:8b:96:aa:43:f3:6c:a9:3a:37:05:04:46: 96:7d:1b:c7:42:a5:2a:34:72:a6:b6:0d:05:11:6b:f8:f5:38: d7:bc:db:a3:24:db:da:71:8d:fa:91:8c:5c:53:11:a9:59:21: 04:4e:8c:6e:f1:77:3c:d3:e9:f9:ee:7c:80:bb:33:83:fc:da: 25:ca:16:df:79:24:b7:58:0e:ca:5c:cf:df:19:ec:d1:65:89: 47:55:82:7c:49:f5:6e:4d:b2:ba:af:b2:c9:18:80:f8:eb:bf: 62:69:46:fb:30:a2:6d:58:33:fa:ac:e0:fd:b1:b1:2d:19:93: 4d:5d:a4:d0:64:2d:d0:08:b7:42:9b:b0:2c:44:28:92:61:aa: 20:91:46:b2:61:b8:ec:16:b5:dd:f9:4c:6a:da:a3:ed:60:fa: 05:34:e6:12:c3:f5:de:75:b9:7f:0d:10:ab:e9:6d:48:f9:0e: 8b:6b:20:4e:a1:17:b7:93:bc:22:b0:fb:13:e2:86:06:57:c5: 4c:db:9c:01:ac:5c:a0:dc:66:c6:e0:df:bd:41:64:d3:f9:d4: 69:5e:a3:59:ba:13:93:b5:10:67:2f:90:6a:03:74:d7:af:31: 25:74:c5:78:44:e9:69:e6:ed:10:43:ab:a1:49:da:fe:45:1b: 3f:39:29:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz99IB99EKQ0AUpI+sQdBxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZWM3MjgzN2VmYmJjNGVhNmRkZDRiZTk0MzYxOTE2YjRj MzYyZGEwHhcNMjUxMjA2MTQwMTM1WhcNMjUxMjA3MTQwMTM1WjAzMTEwLwYDVQQD Eyg2MzRkNTcwNWRmODMzOGNjZDBhOWM1OGQ4ODQ0ZjkxMWM3NjZiNjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs0JYw+uONOWejEvQ5WELMHQpOQo sd53jTeVA5zIc8YZkArSAl80vUFagQOtkLvTtvWmS9kiiktNNlReUiMcuKHlAV6W qslbc5h3msYhzf1w2N/lyzDhSA7O50/P15Zxd9iEwwAz467cUbN3Kx0zECGatH2Z jzA10vo5aRNy0fL+uFkOOcFAQ9pyk0m3AWAFpCk2gt6kHn3gxVlRkaXIHhgCxFPL 82AbX4cmxS96luZPQMkoPPkGF+Wcj3fRcsrUsNN3vqh4WfvZlZUArj12hrzjFMzl KN52TpbHLgfzBVVRpS9m7x42brPjgks2eFcV/ltMNvmxyOdrk5REEJlr0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNNVwXfgzjM0KnFjYhE+RHHZrYVMB8GA1UdIwQY MBaAFH3scoN++7xOpt3UvpQ2GRa0w2LaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUt Mzg2NjE3YTY2NGZlLzEvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUtMzg2NjE3YTY2NGZl LzEvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKE4TrHz i5aqQ/NsqTo3BQRGln0bx0KlKjRyprYNBRFr+PU417zboyTb2nGN+pGMXFMRqVkh BE6MbvF3PNPp+e58gLszg/zaJcoW33kkt1gOylzP3xns0WWJR1WCfEn1bk2yuq+y yRiA+Ou/YmlG+zCibVgz+qzg/bGxLRmTTV2k0GQt0Ai3QpuwLEQokmGqIJFGsmG4 7Ba13flMatqj7WD6BTTmEsP13nW5fw0Qq+ltSPkOi2sgTqEXt5O8IrD7E+KGBlfF TNucAaxcoNxmxuDfvUFk0/nUaV6jWboTk7UQZy+QagN0168xJXTFeETpaebtEEOr oUna/kUbPzkpeg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:04:33 2025 by rpki-client