This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft File: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft (raw, json) Hash identifier: rskJxItJA8rgUgf7GWvp9RVtIs/7u8yvWxhZek+Qmvk= Subject key identifier: 38:4A:19:27:09:4C:CA:9D:22:A9:91:A3:31:9E:AA:E7:99:47:2F:E8 Authority key identifier: 7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00 Certificate issuer: /CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00 Certificate serial: 019AF31BF810F9FE6506354F34918C90CE92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft Manifest number: 045E Signing time: Sat 06 Dec 2025 10:01:27 +0000 Manifest this update: Sat 06 Dec 2025 10:01:27 +0000 Manifest next update: Sun 07 Dec 2025 10:01:27 +0000 Files and hashes: 1: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl (hash: vK+zqauOCcR/20zWN9xOAw40aQ/BcNEKx4sTa2t1MTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:f8:10:f9:fe:65:06:35:4f:34:91:8c:90:ce:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00 Validity Not Before: Dec 6 10:01:27 2025 GMT Not After : Dec 7 10:01:27 2025 GMT Subject: CN=384a1927094cca9d22a991a3319eaae799472fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:97:db:53:c8:96:81:07:4a:8d:32:3a:a8:e3: 7f:6c:54:d3:47:2c:95:ca:07:d3:93:5f:09:aa:e7: 59:61:b6:c4:7c:64:2e:61:13:39:33:23:5e:82:0a: f6:25:53:1a:d8:06:9c:30:b0:05:b4:c0:42:4c:9a: 9f:ef:bf:7e:b1:04:4f:39:e5:3f:0d:76:c6:8b:06: 67:c4:c9:9e:13:07:9a:fa:1c:0e:be:6f:ed:2a:c4: c4:cc:97:68:12:f8:2d:5c:9f:46:38:41:ea:21:5c: 9f:0f:e4:47:af:b7:7f:21:cd:10:eb:e7:e4:4f:63: c5:b6:38:a6:7c:97:c3:67:1f:3f:0c:a0:3f:d0:25: 11:03:c9:e3:4c:8a:1d:b4:dd:85:6b:fa:6a:3a:0a: e2:65:8e:a8:9a:e8:cf:fd:b3:c8:79:c5:6c:94:d2: d9:d9:24:b9:2b:99:4f:00:8d:c3:9f:e0:f3:a1:cd: 1a:64:e2:ed:5a:82:ba:fb:fd:2e:48:5c:f1:d1:e7: 59:db:05:88:67:f7:2d:85:e1:7b:e1:3d:7c:50:fb: 4d:92:3b:ff:bb:15:99:86:e6:a7:b3:73:55:d3:af: 66:17:2f:69:40:63:fb:77:2f:b6:3e:a1:e3:15:d6: 87:cc:08:b1:85:6a:0d:7f:5c:c4:8b:fc:d3:b6:94: b4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4A:19:27:09:4C:CA:9D:22:A9:91:A3:31:9E:AA:E7:99:47:2F:E8 X509v3 Authority Key Identifier: keyid:7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:2c:ab:69:9d:fc:20:af:0d:c4:1c:3b:1d:92:fc:cd:48:c9: 14:de:12:24:c4:95:1f:a5:6d:79:12:3b:c1:e1:ad:2c:a3:bd: eb:1d:37:a5:2e:61:be:22:5a:e1:c1:99:87:e8:c3:7d:56:77: 9d:4e:12:ee:f9:81:37:aa:1b:38:8e:dc:96:07:e9:6d:39:98: 94:5e:b8:07:63:0b:96:00:b3:0c:de:8d:ef:0e:e6:46:06:e7: 59:6a:d3:58:71:4f:08:6d:af:0c:5b:cc:fa:42:ba:58:8a:ec: 98:b4:0b:07:c9:28:1e:35:f1:2a:66:df:1d:5e:f0:97:16:3f: 1b:bb:6f:76:62:0e:0c:37:91:f9:8b:c2:ca:f6:a1:1a:58:a5: b7:22:f5:76:97:8e:ea:d6:8c:2b:c6:17:f5:5f:44:5b:02:1a: c1:bb:61:70:dd:52:3d:ed:12:01:de:f9:c8:ed:d5:c0:97:66: f5:68:ed:9f:7a:7b:f0:df:8c:c6:85:9e:3e:18:e0:33:ac:11: fd:48:fc:0d:e8:1a:35:e8:03:7c:dd:06:42:52:45:3d:b6:4a: 16:81:08:71:7d:0e:cb:f6:dd:8c:b6:79:38:15:bf:ef:18:63: 33:33:08:5b:bc:0e:03:6c:41:fb:e0:73:ca:b7:ac:e7:d4:5e: 19:2c:a6:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/gQ+f5lBjVPNJGMkM6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNDZjYTMxMGZjZTdlM2Q0MmM2MmYzNzcxZTJiODY2MDI5 OGVmMDAwHhcNMjUxMjA2MTAwMTI3WhcNMjUxMjA3MTAwMTI3WjAzMTEwLwYDVQQD EygzODRhMTkyNzA5NGNjYTlkMjJhOTkxYTMzMTllYWFlNzk5NDcyZmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JfbU8iWgQdKjTI6qON/bFTTRyyV ygfTk18JqudZYbbEfGQuYRM5MyNeggr2JVMa2AacMLAFtMBCTJqf779+sQRPOeU/ DXbGiwZnxMmeEwea+hwOvm/tKsTEzJdoEvgtXJ9GOEHqIVyfD+RHr7d/Ic0Q6+fk T2PFtjimfJfDZx8/DKA/0CURA8njTIodtN2Fa/pqOgriZY6omujP/bPIecVslNLZ 2SS5K5lPAI3Dn+Dzoc0aZOLtWoK6+/0uSFzx0edZ2wWIZ/ctheF74T18UPtNkjv/ uxWZhuans3NV069mFy9pQGP7dy+2PqHjFdaHzAixhWoNf1zEi/zTtpS0EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhKGScJTMqdIqmRozGequeZRy/oMB8GA1UdIwQY MBaAFHpGyjEPzn49QsYvN3HiuGYCmO8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWtiS01RX09majFDeGk4M2NlSzRaZ0tZN3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNzk2MGQtNzliYi00NDA4LWE4NWQt YWM0NzcxNWQxNWFhLzEvZWtiS01RX09majFDeGk4M2NlSzRaZ0tZN3dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kNzk2MGQtNzliYi00NDA4LWE4NWQtYWM0NzcxNWQxNWFh LzEvZWtiS01RX09majFDeGk4M2NlSzRaZ0tZN3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyyraZ38 IK8NxBw7HZL8zUjJFN4SJMSVH6VteRI7weGtLKO96x03pS5hviJa4cGZh+jDfVZ3 nU4S7vmBN6obOI7clgfpbTmYlF64B2MLlgCzDN6N7w7mRgbnWWrTWHFPCG2vDFvM +kK6WIrsmLQLB8koHjXxKmbfHV7wlxY/G7tvdmIODDeR+YvCyvahGliltyL1dpeO 6taMK8YX9V9EWwIawbthcN1SPe0SAd75yO3VwJdm9Wjtn3p78N+MxoWePhjgM6wR /Uj8DegaNegDfN0GQlJFPbZKFoEIcX0Oy/bdjLZ5OBW/7xhjMzMIW7wOA2xB++Bz yres59ReGSymqw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:03 2025 by rpki-client