This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft File: EQKbhwTDK6_sKzyCn89YaqGz2cE.mft (raw, json) Hash identifier: fIl6W2UcUgJc74DHukWq78RIq8vZbq7xhDgJt7Txj+o= Subject key identifier: 21:10:A8:D3:93:B5:89:A0:14:30:D6:92:41:6E:D9:73:AD:4C:CE:D7 Authority key identifier: 11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1 Certificate issuer: /CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1 Certificate serial: 019AF31BCD8B402DCE0995A01323B58BB4BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft Manifest number: 146D Signing time: Sat 06 Dec 2025 10:01:16 +0000 Manifest this update: Sat 06 Dec 2025 10:01:16 +0000 Manifest next update: Sun 07 Dec 2025 10:01:16 +0000 Files and hashes: 1: EQKbhwTDK6_sKzyCn89YaqGz2cE.crl (hash: HcgZE6KPr9Pd2QjohMXxXb70I/K69FTrAb3XR17loEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:cd:8b:40:2d:ce:09:95:a0:13:23:b5:8b:b4:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1 Validity Not Before: Dec 6 10:01:16 2025 GMT Not After : Dec 7 10:01:16 2025 GMT Subject: CN=2110a8d393b589a01430d692416ed973ad4cced7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ce:ee:1f:21:b6:ed:f3:39:c1:80:2f:cf:74: 47:c3:3e:aa:2b:9c:43:a6:cd:78:29:03:c6:43:23: ca:88:cb:2b:7a:cb:90:99:02:c6:42:30:c6:b5:0d: 0c:db:90:12:24:45:91:a8:2a:e9:2b:8c:bb:57:46: 12:58:de:00:4c:37:26:85:ea:3e:42:1c:98:ba:ca: 6b:7e:5c:cc:17:01:78:34:e3:72:ed:e9:48:c1:cb: 88:80:54:10:fd:4d:c0:99:b7:6b:98:f3:dc:45:1c: c3:54:12:76:3d:5a:de:60:f5:99:79:18:cf:d5:45: d2:ae:64:d7:42:bc:63:c7:ed:6a:cc:f2:1f:d6:28: bc:8e:d6:4c:f4:dc:67:6d:cc:35:4a:f5:a1:8f:4e: d4:51:c0:aa:d1:b8:7a:da:62:59:7d:20:9c:92:cf: 1a:6f:13:08:5b:40:a1:89:97:c4:66:3f:29:1e:ed: 5b:0f:45:2a:3b:14:2c:7a:38:60:b3:01:a8:40:6a: 07:5d:59:fe:db:e9:86:8f:e2:12:ab:f7:e3:81:15: 00:da:07:ed:ec:9c:36:77:2d:16:3d:db:16:71:93: b8:9e:59:2c:e0:b2:e6:44:f5:fd:8f:df:aa:44:bf: c3:40:e3:3e:91:c4:d1:b0:e1:e9:41:9f:a4:36:a6: bf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:10:A8:D3:93:B5:89:A0:14:30:D6:92:41:6E:D9:73:AD:4C:CE:D7 X509v3 Authority Key Identifier: keyid:11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:91:90:06:a8:d9:43:2b:57:4a:94:1f:f2:e7:8b:05:da:77: 01:42:42:c3:13:22:1a:fa:e3:0f:52:cb:57:ae:f6:4d:e7:5c: 7e:8b:3f:21:10:e4:bd:91:fe:63:93:6a:b1:3e:be:35:7d:f3: f1:b9:a1:a8:b1:7d:9c:7d:56:de:da:90:7d:ee:a2:75:28:9e: 65:56:ee:d7:2e:92:d1:6a:e2:f9:a2:3d:f9:7a:4f:ec:94:46: 3e:d3:b1:dd:b7:19:cf:85:89:65:63:52:a6:de:2b:96:4c:f2: b8:83:af:d2:e0:1e:5d:ae:6e:66:ee:4a:00:83:19:26:a3:ae: 67:e8:a9:8b:dc:e0:c9:f7:61:ce:8e:5c:c7:6e:07:bf:20:fa: 7d:85:d0:ca:4a:bf:63:0b:fb:43:6f:48:d3:29:7c:46:b6:3f: fc:8e:5b:ff:fc:bd:bc:dd:2b:cf:3b:99:31:71:6c:f7:8f:5b: 5e:99:85:07:ad:05:82:14:37:49:4f:e1:1f:60:d7:a5:a6:90: e3:30:30:c7:02:96:ca:2f:aa:9d:95:6f:5a:07:9c:6c:7b:b4: 8a:16:6f:ff:22:68:1f:57:91:01:5f:c9:fa:27:28:99:f0:07: 78:3c:20:a6:e3:86:85:7d:7c:67:b3:0d:8c:b1:4b:b0:2e:23: 1a:77:90:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG82LQC3OCZWgEyO1i7S8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMDI5Yjg3MDRjMzJiYWZlYzJiM2M4MjlmY2Y1ODZhYTFi M2Q5YzEwHhcNMjUxMjA2MTAwMTE2WhcNMjUxMjA3MTAwMTE2WjAzMTEwLwYDVQQD EygyMTEwYThkMzkzYjU4OWEwMTQzMGQ2OTI0MTZlZDk3M2FkNGNjZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM7uHyG27fM5wYAvz3RHwz6qK5xD ps14KQPGQyPKiMsresuQmQLGQjDGtQ0M25ASJEWRqCrpK4y7V0YSWN4ATDcmheo+ QhyYusprflzMFwF4NONy7elIwcuIgFQQ/U3AmbdrmPPcRRzDVBJ2PVreYPWZeRjP 1UXSrmTXQrxjx+1qzPIf1ii8jtZM9Nxnbcw1SvWhj07UUcCq0bh62mJZfSCcks8a bxMIW0ChiZfEZj8pHu1bD0UqOxQsejhgswGoQGoHXVn+2+mGj+ISq/fjgRUA2gft 7Jw2dy0WPdsWcZO4nlks4LLmRPX9j9+qRL/DQOM+kcTRsOHpQZ+kNqa/NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEQqNOTtYmgFDDWkkFu2XOtTM7XMB8GA1UdIwQY MBaAFBECm4cEwyuv7Cs8gp/PWGqhs9nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVFLYmh3VERLNl9zS3p5Q244OVlhcUd6MmNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hYzgyNmEtMDliMC00YzU5LTlkYWUt Y2U5YTc0MjFmYTY5LzEvRVFLYmh3VERLNl9zS3p5Q244OVlhcUd6MmNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9hYzgyNmEtMDliMC00YzU5LTlkYWUtY2U5YTc0MjFmYTY5 LzEvRVFLYmh3VERLNl9zS3p5Q244OVlhcUd6MmNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt5GQBqjZ QytXSpQf8ueLBdp3AUJCwxMiGvrjD1LLV672Tedcfos/IRDkvZH+Y5NqsT6+NX3z 8bmhqLF9nH1W3tqQfe6idSieZVbu1y6S0Wri+aI9+XpP7JRGPtOx3bcZz4WJZWNS pt4rlkzyuIOv0uAeXa5uZu5KAIMZJqOuZ+ipi9zgyfdhzo5cx24HvyD6fYXQykq/ Ywv7Q29I0yl8RrY//I5b//y9vN0rzzuZMXFs949bXpmFB60FghQ3SU/hH2DXpaaQ 4zAwxwKWyi+qnZVvWgecbHu0ihZv/yJoH1eRAV/J+icomfAHeDwgpuOGhX18Z7MN jLFLsC4jGneQZg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:49 2025 by rpki-client