This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json) Hash identifier: gjPOSWS5Lt6UbBz6Qs/pPdcTlsemKKUZdWenWnkx0uw= Subject key identifier: D1:61:A8:0C:BC:E2:FC:27:1F:2B:17:A0:09:CE:11:23:E5:A1:90:FF Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3 Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3 Certificate serial: 019AF16425FABBDE9F71D28103D1E12C60DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft Manifest number: 1387 Signing time: Sat 06 Dec 2025 02:01:03 +0000 Manifest this update: Sat 06 Dec 2025 02:01:03 +0000 Manifest next update: Sun 07 Dec 2025 02:01:03 +0000 Files and hashes: 1: AwjoyZI8RTyi89MX4-dvyjy68_c.roa (hash: O+HLCbEiaTJH3eiSGGyiEXEPhXChr9l42nDt8xPiEPA=) 2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: f4IQITpiygFjP5RT6AxrFWl6OZSYGe9c9UPx1Z7Kmj0=) 3: axNN3PR5BYZSBckAYRhvHQEN0tw.roa (hash: W+trSCmDZNAemLcLRmNFpK8OHj78354SaAShhhdbFn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:25:fa:bb:de:9f:71:d2:81:03:d1:e1:2c:60:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3 Validity Not Before: Dec 6 02:01:03 2025 GMT Not After : Dec 7 02:01:03 2025 GMT Subject: CN=d161a80cbce2fc271f2b17a009ce1123e5a190ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:48:f1:23:0e:74:1e:98:ba:e5:29:bb:bf:14: 11:7e:d2:ef:31:e9:ad:bb:74:90:cf:1c:63:23:54: 79:3a:3e:5d:ac:47:63:70:56:fe:51:8a:19:49:71: 39:4a:77:74:d6:4d:18:67:b8:09:58:ee:4d:80:63: b4:9c:58:06:a3:30:2b:46:ee:ce:2f:a3:2b:74:68: cc:84:30:50:59:00:c7:1d:2e:1d:21:af:b7:e3:92: 23:14:f3:6a:fa:fd:99:54:b4:7a:85:19:b2:bb:18: 10:16:73:cb:0a:73:c9:ec:be:71:27:b0:20:4b:8e: 59:64:eb:3b:d5:70:7d:f5:36:05:71:95:57:f1:17: 91:e4:46:a9:7f:35:71:cf:31:37:fc:44:b5:50:1d: 69:8d:c0:75:69:2a:8b:98:ff:5f:30:ab:b7:cd:93: d5:30:93:70:43:52:77:9f:38:a3:a2:21:ef:7f:45: 55:e3:90:3e:a2:a6:f3:b2:8a:ce:6f:f5:e6:56:30: 70:ca:bf:a1:c8:dd:08:66:49:9e:ad:5b:6f:04:c8: ea:30:7f:59:ce:59:80:64:4b:8c:40:9d:0a:58:23: 72:dc:04:15:26:0b:13:59:22:11:ef:85:e5:a0:e2: 38:e6:9e:15:15:d0:2c:82:d8:a3:a4:2c:a2:25:78: fd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:61:A8:0C:BC:E2:FC:27:1F:2B:17:A0:09:CE:11:23:E5:A1:90:FF X509v3 Authority Key Identifier: keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f8:62:cb:d0:5e:f8:00:01:28:cb:e0:ed:d6:61:7a:3a:45: 03:04:62:45:3b:67:d2:ef:c6:9a:e0:fc:bb:9f:96:a7:c0:3b: 9c:e8:67:47:f0:aa:6f:20:80:ba:9e:43:5d:25:1a:ba:ab:5b: 57:e2:1c:0b:f7:8f:88:b7:8b:8a:63:4e:7e:1f:a9:a6:3b:ab: 30:8f:5f:2f:3d:a1:99:3e:1a:3c:14:a1:c1:67:84:23:c8:f7: 23:34:6d:7a:e9:2a:5b:c2:d2:5f:c9:d0:49:8a:dd:11:30:a1: 35:b1:cc:da:60:7d:83:7b:1a:25:62:ec:50:92:0a:57:c5:07: b1:eb:af:f3:f4:fc:32:de:66:5a:19:8d:8d:a3:10:8f:7b:e2: d9:81:81:83:50:46:6e:07:6e:cd:71:90:e6:03:f6:8c:3a:e9: b3:13:f0:61:df:27:84:e2:d6:36:9d:19:72:47:d5:9a:3e:03: 44:f3:33:e2:fc:b3:d6:00:55:63:c1:1f:ba:e8:ee:4a:ef:59: 55:bc:70:74:2a:3b:95:ca:da:42:96:ab:74:b8:59:54:3f:14: 42:99:c0:70:b7:ad:b9:4c:58:68:2e:d8:58:84:ba:a9:d5:8d: 47:53:b4:5e:87:65:d6:f5:21:66:0c:e7:f3:21:d2:c8:51:46: 78:37:54:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCX6u96fcdKBA9HhLGDaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNGYxNjQ3OWU0YjcyYWNhNTg5YmFhMDEwMzlmYzhlOTIz YjRjYzMwHhcNMjUxMjA2MDIwMTAzWhcNMjUxMjA3MDIwMTAzWjAzMTEwLwYDVQQD EyhkMTYxYTgwY2JjZTJmYzI3MWYyYjE3YTAwOWNlMTEyM2U1YTE5MGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUjxIw50Hpi65Sm7vxQRftLvMemt u3SQzxxjI1R5Oj5drEdjcFb+UYoZSXE5Snd01k0YZ7gJWO5NgGO0nFgGozArRu7O L6MrdGjMhDBQWQDHHS4dIa+345IjFPNq+v2ZVLR6hRmyuxgQFnPLCnPJ7L5xJ7Ag S45ZZOs71XB99TYFcZVX8ReR5EapfzVxzzE3/ES1UB1pjcB1aSqLmP9fMKu3zZPV MJNwQ1J3nzijoiHvf0VV45A+oqbzsorOb/XmVjBwyr+hyN0IZkmerVtvBMjqMH9Z zlmAZEuMQJ0KWCNy3AQVJgsTWSIR74XloOI45p4VFdAsgtijpCyiJXj9XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFhqAy84vwnHysXoAnOESPloZD/MB8GA1UdIwQY MBaAFBJPFkeeS3KspYm6oBA5/I6SO0zDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MGM3YzEtOGYwZi00YjgwLTg2MzAt M2U0ZjM1YjY2NDYxLzEvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82MGM3YzEtOGYwZi00YjgwLTg2MzAtM2U0ZjM1YjY2NDYx LzEvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfhiy9Be +AABKMvg7dZhejpFAwRiRTtn0u/GmuD8u5+Wp8A7nOhnR/CqbyCAup5DXSUauqtb V+IcC/ePiLeLimNOfh+ppjurMI9fLz2hmT4aPBShwWeEI8j3IzRteukqW8LSX8nQ SYrdETChNbHM2mB9g3saJWLsUJIKV8UHseuv8/T8Mt5mWhmNjaMQj3vi2YGBg1BG bgduzXGQ5gP2jDrpsxPwYd8nhOLWNp0ZckfVmj4DRPMz4vyz1gBVY8EfuujuSu9Z VbxwdCo7lcraQpardLhZVD8UQpnAcLetuUxYaC7YWIS6qdWNR1O0Xodl1vUhZgzn 8yHSyFFGeDdUfg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:01 2025 by rpki-client