This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft File: ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json) Hash identifier: ohxltPABBzLXeU7GQV52Anr4ZExbS7mKVaPlz5E+mHo= Subject key identifier: 06:3C:62:67:E5:54:F7:5C:9D:D0:F6:37:EE:B7:4A:74:A6:EA:EE:2E Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27 Certificate issuer: /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727 Certificate serial: 019AF12E440F4E2978A3F81629574DAA356C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:02:12 +0000 Manifest this update: Sat 06 Dec 2025 01:02:12 +0000 Manifest next update: Sun 07 Dec 2025 01:02:12 +0000 Files and hashes: 1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: R0uWx+xT9EdKNoglIR/uDNx5PBmbHqQQH+JT7DTXT0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:44:0f:4e:29:78:a3:f8:16:29:57:4d:aa:35:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727 Validity Not Before: Dec 6 01:02:12 2025 GMT Not After : Dec 7 01:02:12 2025 GMT Subject: CN=063c6267e554f75c9dd0f637eeb74a74a6eaee2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:44:11:60:a1:c1:75:84:ae:1e:be:50:a2: d0:54:a0:f0:b5:8d:b7:a6:b9:16:68:fb:5a:0f:b8: 11:e8:db:48:ce:88:b4:ab:48:bd:52:c4:0e:8b:fb: 9c:01:ea:d5:1e:b1:9b:be:ed:3c:79:60:5f:59:15: b5:c1:9e:5e:ce:ac:bf:f3:f9:68:26:e5:ec:f3:70: 1a:33:0f:68:79:d8:b5:b9:98:4e:d7:f9:bd:75:1a: fc:f2:5f:dc:34:dd:5d:77:e2:e0:1c:36:db:f1:f7: 32:8b:52:57:ea:61:b0:a8:5b:86:d0:aa:e2:97:12: 75:fd:7f:9a:70:54:e9:de:2c:a1:e5:c4:39:61:67: ce:36:6e:3e:6a:30:9c:18:cf:05:6b:2a:3c:64:62: be:6c:af:8d:73:80:4a:7e:ff:96:57:0c:82:a6:ea: 8b:9e:88:1c:5e:a1:f7:4d:c7:8b:47:cb:45:92:1b: fd:38:ab:33:f5:34:04:1e:52:74:4b:64:dd:49:c7: 2b:79:9a:a6:b1:da:10:da:6a:01:8f:e6:53:13:82: 35:fe:aa:9f:a2:a6:bc:18:79:d3:d3:91:80:90:93: 9d:0a:73:5b:4f:40:62:f4:8b:b6:f4:cf:b0:29:bc: 47:7b:ef:31:73:8d:0c:c1:95:a9:fa:81:76:14:d9: 4a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3C:62:67:E5:54:F7:5C:9D:D0:F6:37:EE:B7:4A:74:A6:EA:EE:2E X509v3 Authority Key Identifier: keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:38:84:a8:64:6a:0a:28:cd:a9:e2:09:90:9b:04:49:63:fb: 4d:8d:24:11:ff:f7:0c:0c:8c:d2:cf:77:51:65:2e:7b:eb:2e: 87:40:f7:70:86:94:a2:75:b8:2d:f4:9f:94:a9:6c:19:33:b3: 31:72:1e:28:87:ae:80:56:3d:7d:8c:db:e5:31:9a:f6:19:99: 6d:b0:97:1e:23:c4:a9:68:ef:7d:08:1a:df:39:a2:3a:97:f6: aa:5b:f8:b2:31:03:d8:b5:af:09:99:71:b2:23:e0:ba:28:5b: 26:36:6c:82:13:6e:bf:9a:5a:f6:9d:cf:8b:ec:cd:82:68:de: e7:66:91:66:12:36:d8:40:e8:80:b3:3d:2c:d4:9c:ef:ac:e5: 75:2c:e8:73:41:8d:11:f0:60:03:e9:22:6f:df:5e:fe:ff:a2: d7:25:32:74:fe:de:e2:c5:a3:0d:ee:58:ba:33:2a:87:95:4f: eb:dd:3b:e7:72:3b:24:3d:02:16:ca:4e:e8:fa:52:a8:ad:92: 74:e4:41:80:2b:d3:de:6f:52:38:74:d5:f7:0f:b9:0c:c9:a1: d2:7b:e7:52:91:d3:fb:df:0d:db:b6:70:a2:e3:93:dc:52:01: 0a:0a:dd:61:8e:86:73:7f:5c:8f:c0:10:29:f5:19:51:20:6f: 90:e9:d8:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkQPTil4o/gWKVdNqjVsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNDQzNDQ1ZWYwY2RhYTc2NzI2MWY0ZTBiMTIwYmJlM2Zj ZTA3MjcwHhcNMjUxMjA2MDEwMjEyWhcNMjUxMjA3MDEwMjEyWjAzMTEwLwYDVQQD EygwNjNjNjI2N2U1NTRmNzVjOWRkMGY2MzdlZWI3NGE3NGE2ZWFlZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4pEEWChwXWErh6+UKLQVKDwtY23 prkWaPtaD7gR6NtIzoi0q0i9UsQOi/ucAerVHrGbvu08eWBfWRW1wZ5ezqy/8/lo JuXs83AaMw9oedi1uZhO1/m9dRr88l/cNN1dd+LgHDbb8fcyi1JX6mGwqFuG0Kri lxJ1/X+acFTp3iyh5cQ5YWfONm4+ajCcGM8Fayo8ZGK+bK+Nc4BKfv+WVwyCpuqL nogcXqH3TceLR8tFkhv9OKsz9TQEHlJ0S2TdSccreZqmsdoQ2moBj+ZTE4I1/qqf oqa8GHnT05GAkJOdCnNbT0Bi9Iu29M+wKbxHe+8xc40MwZWp+oF2FNlKwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAY8YmflVPdcndD2N+63SnSm6u4uMB8GA1UdIwQY MBaAFHpENEXvDNqnZyYfTgsSC74/zgcnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yN2M1ZWYtMWVhYy00MTVmLTlhYzAt NWIzNWQ4ODE3NWQ1LzEvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yN2M1ZWYtMWVhYy00MTVmLTlhYzAtNWIzNWQ4ODE3NWQ1 LzEvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAujiEqGRq CijNqeIJkJsESWP7TY0kEf/3DAyM0s93UWUue+suh0D3cIaUonW4LfSflKlsGTOz MXIeKIeugFY9fYzb5TGa9hmZbbCXHiPEqWjvfQga3zmiOpf2qlv4sjED2LWvCZlx siPguihbJjZsghNuv5pa9p3Pi+zNgmje52aRZhI22EDogLM9LNSc76zldSzoc0GN EfBgA+kib99e/v+i1yUydP7e4sWjDe5YujMqh5VP690753I7JD0CFspO6PpSqK2S dORBgCvT3m9SOHTV9w+5DMmh0nvnUpHT+98N27ZwouOT3FIBCgrdYY6Gc39cj8AQ KfUZUSBvkOnY+w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:23 2025 by rpki-client