This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft File: ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json) Hash identifier: 0RD4LQhXrOYnH3HYcHv2NaBHXRhufYyVfTeIqwtu744= Subject key identifier: E7:AC:9B:6A:23:A4:4A:8C:C8:61:11:FA:D9:F7:F3:54:13:71:CD:49 Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e Certificate serial: 019B0746C79DCE95EEF942F02039339FB130 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft Manifest number: 137C Signing time: Wed 10 Dec 2025 08:00:37 +0000 Manifest this update: Wed 10 Dec 2025 08:00:37 +0000 Manifest next update: Thu 11 Dec 2025 08:00:37 +0000 Files and hashes: 1: 6T07akuBxgvG0izMFImIY3LJxqs.roa (hash: XGRbraQFnaK7TkdQ/duWwEkwP4S4BhjaDtKSynptX9M=) 2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: MVm3+C28cSQLGJLHZr+gVoxMbxmLi50mSA7BLfuV1RA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:46:c7:9d:ce:95:ee:f9:42:f0:20:39:33:9f:b1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e Validity Not Before: Dec 10 08:00:37 2025 GMT Not After : Dec 11 08:00:37 2025 GMT Subject: CN=e7ac9b6a23a44a8cc86111fad9f7f3541371cd49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:63:26:53:4c:1e:2d:01:76:58:4e:ce:f4:83: ae:37:69:fc:f8:8f:2e:9e:f8:d1:47:dd:67:1b:0b: a5:38:a2:ab:f5:f4:1f:db:6b:2a:86:54:50:64:5c: e4:25:4b:b6:ca:4f:a9:f2:c5:ad:b5:e2:34:fa:fb: df:c1:91:5e:5e:05:27:fe:f7:f9:c8:cc:f7:ba:16: ea:92:43:90:5d:1f:a9:c3:be:bb:7f:7f:07:c7:92: 47:97:e1:17:83:3c:fc:2a:68:17:6c:6e:23:56:e3: fd:7c:c5:61:50:5b:cb:b7:33:5d:27:aa:85:58:c0: 5d:5a:ae:5f:3e:47:ce:f3:0d:9c:1b:91:95:7e:ac: be:25:ca:c0:fc:e3:9b:1b:3f:f8:75:3a:92:93:54: 54:d9:2e:6c:7b:1b:ce:c2:71:e1:a4:ca:1d:58:f5: 3f:2b:96:0f:ce:48:0c:0d:42:e3:5b:41:af:40:18: 3e:35:be:b2:70:fc:0d:78:4d:84:ef:36:b4:b0:52: 35:ba:cb:1c:a1:ba:25:18:51:54:9a:39:17:15:4b: 1d:83:81:34:89:7c:89:6d:70:b9:aa:8e:92:20:88: 5d:52:57:d6:7c:4b:96:6a:f6:7d:f7:49:43:c8:bc: 52:c5:83:ca:df:40:a1:d4:43:82:97:04:da:88:25: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AC:9B:6A:23:A4:4A:8C:C8:61:11:FA:D9:F7:F3:54:13:71:CD:49 X509v3 Authority Key Identifier: keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:b3:11:ab:8a:3c:7f:24:d6:92:d0:5a:40:34:f1:66:68:a4: 41:f7:3e:96:dd:24:25:89:6d:44:48:7d:0d:c0:62:86:d3:75: 4e:07:84:04:50:23:4e:b3:3f:1b:ea:51:ee:0a:53:3a:43:8f: b5:bd:a5:33:4e:81:b4:2c:d3:b1:9a:87:5d:51:95:b2:45:05: 7e:d7:78:a6:da:1b:b0:6d:5e:7f:c3:97:2e:a6:2f:da:27:e1: af:09:07:0d:77:08:6d:9c:dd:a6:1e:a7:f3:a6:91:fa:97:42: e4:d7:32:ab:de:a1:3e:f8:c6:6a:53:7d:90:85:24:cd:58:46: 97:42:43:3e:4d:b1:d6:40:5e:d8:37:91:fe:dd:f9:c1:ec:7f: 0d:ca:d2:af:42:b2:07:7b:c3:f2:9f:b9:a5:5e:c7:85:cb:dd: 08:82:0b:84:03:2b:49:b6:53:10:07:81:c4:d2:58:57:c4:b4: c0:9f:83:28:2d:cf:2a:c7:3f:75:fd:4b:4c:9f:7e:0f:14:64: 49:ea:a6:67:6c:d0:e6:8c:be:cd:13:07:86:fd:94:f2:08:78: 10:a5:05:a9:87:6a:86:d8:d5:e0:00:4d:0b:58:c9:79:bc:ee: 46:2f:ae:91:79:58:5b:fb:46:dc:77:6e:58:01:46:75:77:70: 19:c6:a8:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHRsedzpXu+ULwIDkzn7EwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNDc4YzVhYTIyNmEyNzhlOGIxOTA2ZjM3MWM2MGNmYzdk ODdlOGUwHhcNMjUxMjEwMDgwMDM3WhcNMjUxMjExMDgwMDM3WjAzMTEwLwYDVQQD EyhlN2FjOWI2YTIzYTQ0YThjYzg2MTExZmFkOWY3ZjM1NDEzNzFjZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02MmU0weLQF2WE7O9IOuN2n8+I8u nvjRR91nGwulOKKr9fQf22sqhlRQZFzkJUu2yk+p8sWtteI0+vvfwZFeXgUn/vf5 yMz3uhbqkkOQXR+pw767f38Hx5JHl+EXgzz8KmgXbG4jVuP9fMVhUFvLtzNdJ6qF WMBdWq5fPkfO8w2cG5GVfqy+JcrA/OObGz/4dTqSk1RU2S5sexvOwnHhpModWPU/ K5YPzkgMDULjW0GvQBg+Nb6ycPwNeE2E7za0sFI1usscobolGFFUmjkXFUsdg4E0 iXyJbXC5qo6SIIhdUlfWfEuWavZ990lDyLxSxYPK30Ch1EOClwTaiCWTnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOesm2ojpEqMyGER+tn381QTcc1JMB8GA1UdIwQY MBaAFHpHjFqiJqJ46LGQbzccYM/H2H6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAt ZDc2ZWM5Y2MwZDI4LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAtZDc2ZWM5Y2MwZDI4 LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvLMRq4o8 fyTWktBaQDTxZmikQfc+lt0kJYltREh9DcBihtN1TgeEBFAjTrM/G+pR7gpTOkOP tb2lM06BtCzTsZqHXVGVskUFftd4ptobsG1ef8OXLqYv2ifhrwkHDXcIbZzdph6n 86aR+pdC5Ncyq96hPvjGalN9kIUkzVhGl0JDPk2x1kBe2DeR/t35wex/DcrSr0Ky B3vD8p+5pV7HhcvdCIILhAMrSbZTEAeBxNJYV8S0wJ+DKC3PKsc/df1LTJ9+DxRk SeqmZ2zQ5oy+zRMHhv2U8gh4EKUFqYdqhtjV4ABNC1jJebzuRi+ukXlYW/tG3Hdu WAFGdXdwGcaovw== -----END CERTIFICATE-----Generated at Wed Dec 10 18:03:50 2025 by rpki-client