This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft File: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft (raw, json) Hash identifier: HjwDMuX4+PSfppjpvCWoUclqoNyWszmITonPQ0d4BN8= Subject key identifier: B2:66:6A:95:BC:E9:DE:B8:56:8D:6F:DF:2A:B2:DC:DD:E6:19:B0:7F Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94 Certificate issuer: /CN=79730b9ea010d832f940efb589c51889132f4c94 Certificate serial: 019B2F67C1D840B55BB9261B85E1E6E32406 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 03:01:27 +0000 Manifest this update: Thu 18 Dec 2025 03:01:27 +0000 Manifest next update: Fri 19 Dec 2025 03:01:27 +0000 Files and hashes: 1: 4-Hd07EQEQSMnF-RmoIQG-f-msw.roa (hash: 5L2RHjf2nHKLV7uL0XKnWxDBxm9LnDeMDKIuvtcOWVI=) 2: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl (hash: 5X3JTgzaErdbSPDqrXEpt8IIB9oshD5f3Dtx/2/IvEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:c1:d8:40:b5:5b:b9:26:1b:85:e1:e6:e3:24:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94 Validity Not Before: Dec 18 03:01:27 2025 GMT Not After : Dec 19 03:01:27 2025 GMT Subject: CN=b2666a95bce9deb8568d6fdf2ab2dcdde619b07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:43:b3:9a:b7:dc:5a:a1:38:56:05:a5:31: 8f:df:86:8a:e8:d4:e3:04:e2:c6:2e:34:43:eb:be: 84:c6:0d:69:38:72:6f:a5:17:e6:3f:58:10:23:f6: 74:06:ce:41:60:6f:25:d1:21:21:6c:51:ed:85:21: 7a:66:57:0f:36:7b:3d:2a:db:01:81:0f:0f:8e:f4: 86:97:54:56:79:e2:0d:c5:9d:4b:db:74:aa:77:d9: 3a:22:b4:05:31:9e:8a:d8:0e:d8:b9:81:33:92:0e: a7:61:65:63:45:ed:5e:e6:fb:2c:8c:f9:b9:d6:66: ec:d8:a3:2d:db:9b:aa:c3:93:ec:03:65:06:c6:05: 96:94:6f:c2:fd:80:83:2c:f4:48:6c:d6:51:a3:c6: 58:70:82:67:64:0f:c9:73:3a:26:37:06:c8:fa:3d: 2b:f0:ea:91:cc:6a:d0:f3:14:f2:c2:91:0e:b3:84: 11:5f:eb:6a:8d:1c:78:b8:92:61:8f:cd:a8:84:8d: df:6f:27:72:38:4f:5d:24:7d:5e:d2:b0:f8:a8:69: 36:94:8d:f6:31:3d:13:8c:a8:cd:9d:f5:6e:39:1d: 76:26:92:09:3e:e4:c4:7f:b4:47:54:30:40:70:96: 91:d8:25:39:1d:d4:10:3d:f4:b7:41:de:f1:6e:b9: 7a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:66:6A:95:BC:E9:DE:B8:56:8D:6F:DF:2A:B2:DC:DD:E6:19:B0:7F X509v3 Authority Key Identifier: keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:20:58:61:89:73:e5:2e:90:74:f8:94:aa:7e:8d:1d:ed:f7: d6:7f:16:56:b0:b9:5b:91:c0:34:89:62:5a:62:70:22:18:ee: fc:b4:76:0c:58:f9:e6:a6:2e:7b:be:b2:b7:92:57:f7:92:81: bd:7d:76:f6:dd:94:41:22:a9:de:29:55:03:3b:09:30:1f:0f: fb:6c:a3:95:93:38:77:cc:43:fb:12:4a:a8:60:2a:46:fd:ed: 92:c2:af:4a:33:d3:84:2b:44:d5:3b:77:78:c2:00:d9:ac:94: 95:87:b9:4a:8f:b3:fc:2a:b4:61:da:bb:72:ab:bc:69:56:93: 7a:98:8f:69:e2:ec:39:02:00:08:d5:2e:f0:ab:69:8c:6f:fc: 0d:c2:d0:66:02:9a:1a:fa:21:9b:85:fd:b5:6c:e5:43:58:21: 1a:ee:f5:62:06:14:cb:55:a1:41:74:0c:81:74:5e:c9:66:53: 2c:25:1e:69:e2:2f:d4:75:0d:df:3c:ac:d6:20:ef:ee:9c:49: cf:73:46:90:0a:85:84:31:55:d4:6d:8a:38:74:0f:51:f9:c7: 91:3b:c7:27:8c:d5:72:43:28:ef:54:58:2e:ef:4f:85:58:91: 4a:b7:30:5e:56:62:9d:02:47:aa:12:b2:fc:6e:5d:6f:3f:61: cd:77:b7:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ8HYQLVbuSYbheHm4yQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzMwYjllYTAxMGQ4MzJmOTQwZWZiNTg5YzUxODg5MTMy ZjRjOTQwHhcNMjUxMjE4MDMwMTI3WhcNMjUxMjE5MDMwMTI3WjAzMTEwLwYDVQQD EyhiMjY2NmE5NWJjZTlkZWI4NTY4ZDZmZGYyYWIyZGNkZGU2MTliMDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3ZDs5q33FqhOFYFpTGP34aK6NTj BOLGLjRD676Exg1pOHJvpRfmP1gQI/Z0Bs5BYG8l0SEhbFHthSF6ZlcPNns9KtsB gQ8PjvSGl1RWeeINxZ1L23Sqd9k6IrQFMZ6K2A7YuYEzkg6nYWVjRe1e5vssjPm5 1mbs2KMt25uqw5PsA2UGxgWWlG/C/YCDLPRIbNZRo8ZYcIJnZA/JczomNwbI+j0r 8OqRzGrQ8xTywpEOs4QRX+tqjRx4uJJhj82ohI3fbydyOE9dJH1e0rD4qGk2lI32 MT0TjKjNnfVuOR12JpIJPuTEf7RHVDBAcJaR2CU5HdQQPfS3Qd7xbrl6owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJmapW86d64Vo1v3yqy3N3mGbB/MB8GA1UdIwQY MBaAFHlzC56gENgy+UDvtYnFGIkTL0yUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hMDJjYzYtMTMwOC00N2U0LWEwODct Mzk2MDVmOTA4MWI3LzEvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9hMDJjYzYtMTMwOC00N2U0LWEwODctMzk2MDVmOTA4MWI3 LzEvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSBYYYlz 5S6QdPiUqn6NHe331n8WVrC5W5HANIliWmJwIhju/LR2DFj55qYue76yt5JX95KB vX129t2UQSKp3ilVAzsJMB8P+2yjlZM4d8xD+xJKqGAqRv3tksKvSjPThCtE1Tt3 eMIA2ayUlYe5So+z/Cq0Ydq7cqu8aVaTepiPaeLsOQIACNUu8KtpjG/8DcLQZgKa Gvohm4X9tWzlQ1ghGu71YgYUy1WhQXQMgXReyWZTLCUeaeIv1HUN3zys1iDv7pxJ z3NGkAqFhDFV1G2KOHQPUfnHkTvHJ4zVckMo71RYLu9PhViRSrcwXlZinQJHqhKy /G5dbz9hzXe3eg== -----END CERTIFICATE-----Generated at Thu Dec 18 12:45:26 2025 by rpki-client