This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft File: EkbyOgSHY6o60K7eWkiauPzSY4Q.mft (raw, json) Hash identifier: B81J1PlOwRkii3tL8F8mJgpWgSsohdy+FloQykJSvlY= Subject key identifier: 1D:4B:5B:83:82:53:BE:35:5F:63:83:67:CC:5F:A7:EB:1D:92:65:80 Authority key identifier: 12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84 Certificate issuer: /CN=1246f23a048763aa3ad0aede5a489ab8fcd26384 Certificate serial: 019AF3F759F96C68CA6C475F551BC15CE1C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 14:01:04 +0000 Manifest this update: Sat 06 Dec 2025 14:01:04 +0000 Manifest next update: Sun 07 Dec 2025 14:01:04 +0000 Files and hashes: 1: 1-3roNM_Y4Luyo5UOkDOSNkCW0TA.roa (hash: ZowUiRFYv0ZOu5pI167992U5kyXST8eznpl9k++Lgik=) 2: EkbyOgSHY6o60K7eWkiauPzSY4Q.crl (hash: nbAWThYESm4/YpxdrduAsmBlk028AeFxp2obGbJNO6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:59:f9:6c:68:ca:6c:47:5f:55:1b:c1:5c:e1:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246f23a048763aa3ad0aede5a489ab8fcd26384 Validity Not Before: Dec 6 14:01:04 2025 GMT Not After : Dec 7 14:01:04 2025 GMT Subject: CN=1d4b5b838253be355f638367cc5fa7eb1d926580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d5:c4:1d:e3:8c:4e:f3:15:21:ad:5e:bb:4a: d6:21:96:fe:11:fb:4d:af:1c:86:b9:18:e3:da:47: dc:b7:b2:75:71:ee:d7:5f:34:dd:bc:b7:de:15:29: e1:96:92:d3:20:84:9d:54:df:fe:92:96:6c:49:d2: f6:85:9e:1c:ee:e8:bb:7f:c6:ce:95:60:fe:f7:63: 00:45:37:22:4b:68:bf:c0:68:06:3f:f6:76:6b:2c: 66:3c:56:58:ec:5a:dd:0f:9a:1b:aa:b5:3e:7b:69: c3:6c:27:55:7e:f2:02:df:18:62:6a:93:f8:8d:2b: 5a:bb:e2:00:db:4b:b3:fc:de:1d:eb:23:1c:68:87: 4d:a6:2a:99:ce:c3:b3:a4:13:5f:65:b0:0c:2d:f4: fc:de:3d:f5:76:b1:3f:df:3c:bd:8c:52:d1:6a:d3: 39:03:24:98:fe:b8:ce:c4:d0:80:38:09:bf:48:3a: ff:52:2e:ce:5f:c5:71:2b:8d:d5:a2:c7:a5:48:43: 39:ed:34:56:1e:11:55:b4:39:a7:74:68:d1:7c:04: 32:2c:5b:7d:dd:86:80:32:e8:4e:d5:dd:ba:48:50: 30:f6:c7:f7:28:d1:66:80:e9:8d:f1:b5:1c:c0:bd: b3:47:f2:43:db:8b:91:68:4c:8b:d3:ab:60:80:30: 3b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4B:5B:83:82:53:BE:35:5F:63:83:67:CC:5F:A7:EB:1D:92:65:80 X509v3 Authority Key Identifier: keyid:12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a1:e2:75:e8:c9:18:e7:1a:61:b1:f7:8f:65:44:a5:41:bd: 89:ed:19:db:3e:37:7e:b8:ed:f1:ad:ad:14:37:3c:46:10:43: e8:80:16:4e:34:dc:1f:27:40:d1:9a:e7:b2:bd:b2:f3:2e:62: 2e:ed:cc:34:03:04:3b:5e:b3:e0:ad:e5:95:51:22:3c:23:73: 12:60:b6:06:a5:04:de:2f:d1:72:8e:7e:3b:81:8e:a0:c2:32: 29:06:f1:56:f1:c9:da:b5:00:1f:1d:d7:cb:7c:f8:69:03:ab: 41:ff:7c:ab:0a:48:42:94:9f:4c:80:76:bd:4f:af:b3:d8:b0: 7f:c3:fb:fa:eb:26:24:b0:a2:91:84:95:bd:14:b0:3e:9e:5f: d1:42:52:26:07:6f:78:4b:7c:7a:46:49:fb:50:64:81:32:2c: 59:61:d7:79:83:8d:e4:0a:16:46:3f:68:1e:c9:44:d6:9d:7e: 67:1d:01:c7:ad:67:32:63:69:55:f1:ed:78:d0:c0:24:ec:97: dc:81:8c:86:44:b0:4e:32:97:d8:f9:75:32:a2:1c:60:57:33: c9:70:c4:de:ce:ad:ea:38:e0:cf:b4:fe:ff:e9:75:1e:53:56: 21:d4:24:25:fb:8b:12:4f:50:ba:74:e6:88:fc:6a:28:53:73: fc:a6:ec:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz91n5bGjKbEdfVRvBXOHFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNDZmMjNhMDQ4NzYzYWEzYWQwYWVkZTVhNDg5YWI4ZmNk MjYzODQwHhcNMjUxMjA2MTQwMTA0WhcNMjUxMjA3MTQwMTA0WjAzMTEwLwYDVQQD EygxZDRiNWI4MzgyNTNiZTM1NWY2MzgzNjdjYzVmYTdlYjFkOTI2NTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNXEHeOMTvMVIa1eu0rWIZb+EftN rxyGuRjj2kfct7J1ce7XXzTdvLfeFSnhlpLTIISdVN/+kpZsSdL2hZ4c7ui7f8bO lWD+92MARTciS2i/wGgGP/Z2ayxmPFZY7FrdD5obqrU+e2nDbCdVfvIC3xhiapP4 jStau+IA20uz/N4d6yMcaIdNpiqZzsOzpBNfZbAMLfT83j31drE/3zy9jFLRatM5 AySY/rjOxNCAOAm/SDr/Ui7OX8VxK43VoselSEM57TRWHhFVtDmndGjRfAQyLFt9 3YaAMuhO1d26SFAw9sf3KNFmgOmN8bUcwL2zR/JD24uRaEyL06tggDA7ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1LW4OCU741X2ODZ8xfp+sdkmWAMB8GA1UdIwQY MBaAFBJG8joEh2OqOtCu3lpImrj80mOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWtieU9nU0hZNm82MEs3ZVdraWF1UHpTWTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84NzdlNmMtMzI1YS00N2VhLWFhNTYt MTA5NmJmZDZiZjZkLzEvRWtieU9nU0hZNm82MEs3ZVdraWF1UHpTWTRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84NzdlNmMtMzI1YS00N2VhLWFhNTYtMTA5NmJmZDZiZjZk LzEvRWtieU9nU0hZNm82MEs3ZVdraWF1UHpTWTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6HidejJ GOcaYbH3j2VEpUG9ie0Z2z43frjt8a2tFDc8RhBD6IAWTjTcHydA0Zrnsr2y8y5i Lu3MNAMEO16z4K3llVEiPCNzEmC2BqUE3i/Rco5+O4GOoMIyKQbxVvHJ2rUAHx3X y3z4aQOrQf98qwpIQpSfTIB2vU+vs9iwf8P7+usmJLCikYSVvRSwPp5f0UJSJgdv eEt8ekZJ+1BkgTIsWWHXeYON5AoWRj9oHslE1p1+Zx0Bx61nMmNpVfHteNDAJOyX 3IGMhkSwTjKX2Pl1MqIcYFczyXDE3s6t6jjgz7T+/+l1HlNWIdQkJfuLEk9QunTm iPxqKFNz/KbsKA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:17:49 2025 by rpki-client