This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json) Hash identifier: 8a6cd1SgyShhgIR/hIPfVMyZnYh9pJ13b8pI7doztwA= Subject key identifier: BB:70:83:44:2D:67:81:64:4C:37:09:E2:A3:B4:72:24:35:12:F3:47 Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 019AF31D1AE68362E5A8EA4A28B94921DDF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft Manifest number: 1785 Signing time: Sat 06 Dec 2025 10:02:42 +0000 Manifest this update: Sat 06 Dec 2025 10:02:42 +0000 Manifest next update: Sun 07 Dec 2025 10:02:42 +0000 Files and hashes: 1: 31B5K7vkAfS9R2wkGuV5dcAnL2Y.roa (hash: O89Ry4yQ6lrE+ydQl9ey5gr4XCsYEJZz/2ZEEVTUklM=) 2: 8rBNukWPHPmFUpvlkGmzTz1-HwA.roa (hash: tMcco5dxWlTIQfy3zxbp0EQ9rOWiTqcDWIU/jeQq+bM=) 3: AuIXsACFZFXiRbUNGuqesbMnYNk.roa (hash: AtCFXdHEG1WMWeYjbN29zoI3CDK+hXSx8POzE7WNroc=) 4: DrV2xA7Yd-hZFiq3pO9rygl2qg0.roa (hash: TVf6eSJU2syGlD0lzcyv3W0pP95vSrCKIhPdX0AUyh0=) 5: GGh-0xxwn6ceElDQMHRGmEsQE-s.roa (hash: P3CSh7y+NvPz/ZjtWmpED7vAzzUGfZNIvd2EgvFxP9s=) 6: NmG_HXr74xhss_g6667RcEUKRLI.roa (hash: w4iJzBXqF4+nBtbBp9H18XsHRW5050KpbO/LhdFePIo=) 7: OeWAQhxz5E883h7RJjR3cmkBM6o.roa (hash: SpK+6FCkO+sEnLY+zrox32fWgUHKX5y3hElZSDHvkaU=) 8: ZVJfIWSCZIVSTo9PXiEHKhrJCaM.roa (hash: REntsWwwRsVHSdpCDEerInchIORTXEiS2eQnOBf/kfw=) 9: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: j4DFesk43rnSy+9P1fB7pmNF/UsIfZix7lxGmVx2uZE=) 10: jRyIBgdtXReJ9oHBVuw4FaEWM-0.roa (hash: ZszsBIs7CJREdsDcllx0N3t5IqBzFvq0JJZ2fLMu8PY=) 11: pGXlBe8mvqpUo_lCHeYFkShv2K8.roa (hash: rjd6cps92Ja94+46vbe5lft5y/2s10gUp3FV0e699LY=) 12: zIH5sPlMx70fyP1Az3Csaj7WyTI.roa (hash: 2aeoW9K+GdEGc7tRsUNmCwR+CPzyrfG3s/F0EGb6/Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:1a:e6:83:62:e5:a8:ea:4a:28:b9:49:21:dd:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Dec 6 10:02:42 2025 GMT Not After : Dec 7 10:02:42 2025 GMT Subject: CN=bb7083442d6781644c3709e2a3b472243512f347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:21:3d:7c:b6:ab:42:bc:a0:77:80:e1:a7: ba:30:33:5c:be:7b:ea:4d:a6:b5:2d:e8:fa:ef:3a: c3:5a:15:f1:b4:fa:43:10:aa:09:11:91:7d:e4:df: f8:22:76:9b:c7:1a:bd:6a:34:d3:e0:e4:9f:ce:5c: dc:5c:94:5a:4c:ba:9b:a6:9e:0d:00:5f:2d:ae:a9: 0e:98:ca:2e:bb:13:8c:9d:2d:bf:4c:33:dd:7b:75: bb:20:b0:f5:8a:44:13:20:5e:41:95:bf:2f:b0:13: b0:24:88:30:32:53:58:9d:00:c8:7b:47:b9:c9:63: 8e:42:0b:06:d7:c5:91:7f:3b:d8:67:91:d0:d3:51: 8e:01:53:22:a0:91:6f:9d:9d:b8:08:66:bd:5e:40: 28:3c:c4:bf:56:08:bc:51:e6:21:aa:1d:b0:4e:e8: 2d:8d:ed:e7:eb:4c:f9:46:9b:c2:13:e6:7d:da:29: b3:2b:f3:c3:1c:76:c2:59:b9:fa:5d:69:5d:44:9b: a1:87:f4:14:c7:08:87:ea:42:65:41:dc:5d:6f:0f: f1:cb:46:09:2a:46:bf:5d:35:1d:7e:22:9a:08:1e: ce:4b:c7:a4:b0:8b:c3:21:59:d6:e7:78:87:5b:8e: 8c:17:47:ad:f5:9b:6b:74:3c:39:16:fd:1e:90:20: f6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:70:83:44:2D:67:81:64:4C:37:09:E2:A3:B4:72:24:35:12:F3:47 X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:5a:fa:16:ac:a7:6e:66:12:f5:63:63:35:62:3b:08:e1:54: 6e:6d:19:ef:87:cb:4c:49:df:80:d2:90:16:86:7a:b0:ca:db: eb:93:f8:de:61:78:c1:47:74:60:8a:4d:e1:bb:e5:b6:45:22: 0c:08:84:c9:b6:83:fe:db:d7:87:57:72:07:2d:97:ea:77:70: 2d:2b:35:7e:06:1b:52:c1:8a:c1:01:79:4a:1d:87:82:3d:36: d7:d5:a7:ef:69:d4:f1:99:33:a6:b6:4b:28:e9:84:51:44:f4: 8b:b4:3c:10:9d:ca:ac:bb:f0:0d:54:6e:53:47:38:44:27:df: 4c:2a:89:6d:26:c5:ae:08:92:de:44:85:95:13:4a:7e:00:f0: e9:2a:2d:2a:2d:a8:18:3a:38:e0:ff:75:67:4b:a6:02:fd:0f: 58:30:5a:a0:71:0f:09:97:24:fa:c8:7b:d8:a9:a2:86:96:23: 14:29:57:b0:45:18:23:84:f7:f2:87:82:ed:6e:f8:16:12:e8: 9c:c0:c9:ab:ed:f4:bd:bd:22:c6:9f:f1:8f:41:c6:be:4b:17: 4c:7b:28:d7:f8:09:3b:14:87:2e:d8:f2:47:64:86:16:d4:f0: 37:1f:d6:54:2d:bb:e7:9f:f3:ec:4f:cf:48:d0:f4:2b:ab:54: db:cf:1a:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHRrmg2LlqOpKKLlJId3xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjUxMjA2MTAwMjQyWhcNMjUxMjA3MTAwMjQyWjAzMTEwLwYDVQQD EyhiYjcwODM0NDJkNjc4MTY0NGMzNzA5ZTJhM2I0NzIyNDM1MTJmMzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFshPXy2q0K8oHeA4ae6MDNcvnvq Taa1Lej67zrDWhXxtPpDEKoJEZF95N/4Inabxxq9ajTT4OSfzlzcXJRaTLqbpp4N AF8trqkOmMouuxOMnS2/TDPde3W7ILD1ikQTIF5Blb8vsBOwJIgwMlNYnQDIe0e5 yWOOQgsG18WRfzvYZ5HQ01GOAVMioJFvnZ24CGa9XkAoPMS/Vgi8UeYhqh2wTugt je3n60z5RpvCE+Z92imzK/PDHHbCWbn6XWldRJuhh/QUxwiH6kJlQdxdbw/xy0YJ Kka/XTUdfiKaCB7OS8eksIvDIVnW53iHW46MF0et9ZtrdDw5Fv0ekCD2vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtwg0QtZ4FkTDcJ4qO0ciQ1EvNHMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwVr6Fqyn bmYS9WNjNWI7COFUbm0Z74fLTEnfgNKQFoZ6sMrb65P43mF4wUd0YIpN4bvltkUi DAiEybaD/tvXh1dyBy2X6ndwLSs1fgYbUsGKwQF5Sh2Hgj0219Wn72nU8ZkzprZL KOmEUUT0i7Q8EJ3KrLvwDVRuU0c4RCffTCqJbSbFrgiS3kSFlRNKfgDw6SotKi2o GDo44P91Z0umAv0PWDBaoHEPCZck+sh72KmihpYjFClXsEUYI4T38oeC7W74FhLo nMDJq+30vb0ixp/xj0HGvksXTHso1/gJOxSHLtjyR2SGFtTwNx/WVC2755/z7E/P SND0K6tU288amA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:48 2025 by rpki-client