This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json) Hash identifier: uB/ijJrclH3WDAlYLk2FH/YjRVM2OOtSrAjbIgu+hzo= Subject key identifier: 01:76:F9:3E:9D:15:15:5A:97:FA:5A:EB:1D:D0:0E:D1:02:D1:7B:92 Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89 Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89 Certificate serial: 019AF276D03860CF578AB92BB87F4AD70DB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft Manifest number: 10C8 Signing time: Sat 06 Dec 2025 07:01:03 +0000 Manifest this update: Sat 06 Dec 2025 07:01:03 +0000 Manifest next update: Sun 07 Dec 2025 07:01:03 +0000 Files and hashes: 1: Cb0xcj-Jxi-kVmb40P9pFiyQAU0.roa (hash: W+Jc00IUJdyvPz1MZqpBm2Jn6DassHktVVAV8ICXpsc=) 2: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: EZV1bMGwIp8fEyNpS9xEUQ87XvmdpOj/uLvN0oZMvlk=) 3: PvUc9zsD3htQ8H9mxpx8UzLv3To.roa (hash: zvFKPdwhED+0YLJA5rKh3ueMkFsfC6noT6Esie9dRX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d0:38:60:cf:57:8a:b9:2b:b8:7f:4a:d7:0d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89 Validity Not Before: Dec 6 07:01:03 2025 GMT Not After : Dec 7 07:01:03 2025 GMT Subject: CN=0176f93e9d15155a97fa5aeb1dd00ed102d17b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:93:76:5d:35:a8:b0:46:46:df:b9:0b:ed:50: 4c:66:64:e8:e1:4a:d8:df:8c:4f:a0:67:16:44:5f: 6c:7a:c7:8d:1d:a4:63:01:34:7d:0d:13:6f:80:35: 14:78:3d:97:58:78:30:03:a1:86:fd:7a:ad:7b:c0: 63:3e:be:6b:43:35:a9:79:4c:4e:3a:8c:e7:ae:92: 66:72:71:fe:1f:b0:c5:31:37:54:d1:a5:ac:3c:3b: 0f:10:a0:fa:10:da:69:66:da:77:dc:18:13:af:1a: 81:a5:a2:ad:2d:ae:76:b9:8e:c8:cb:74:0a:b7:c0: 75:20:d4:c0:ec:28:10:a1:01:6f:c6:9a:a3:3e:61: 56:6e:54:8a:d9:a0:6f:b3:bd:b9:cd:0c:5b:03:7f: 12:03:6a:55:93:6f:98:8d:fa:18:04:93:5a:38:71: d0:3f:d1:50:4a:54:ca:43:2f:57:64:ab:80:1a:fa: 0f:05:f1:43:1f:36:40:6d:fb:d6:fb:87:38:46:e4: cf:86:89:33:07:e6:79:45:33:e6:d7:85:f0:91:2d: 8d:b9:d6:22:ce:93:c4:d1:d4:47:b7:6e:06:48:39: 45:dd:6c:41:84:53:79:9a:63:77:b0:6a:5a:90:e5: 07:24:ff:1e:96:2f:93:61:25:2d:0e:a9:9f:39:2e: f9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:76:F9:3E:9D:15:15:5A:97:FA:5A:EB:1D:D0:0E:D1:02:D1:7B:92 X509v3 Authority Key Identifier: keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ec:17:c8:5b:45:f1:ed:89:8d:40:07:c3:43:60:ec:95:0e: bd:70:52:97:97:e4:19:78:69:33:0e:d1:4a:7a:1a:77:72:93: 20:3b:fd:fc:60:03:dc:bb:a0:17:a9:3e:4e:2a:e5:74:69:bd: 94:73:af:02:49:15:ee:3f:db:6e:05:14:56:ad:ce:75:6e:aa: e7:cc:4c:c8:42:b8:fd:24:01:34:fc:6c:bf:89:a5:48:3e:83: b9:8a:4b:e1:c5:c8:03:d9:3f:be:19:9d:d2:da:0a:3d:66:57: af:16:05:37:17:19:2c:9d:aa:b1:eb:27:df:65:7b:17:cd:80: 4d:b4:c4:6b:67:cd:66:6f:fd:69:0c:93:c4:03:9a:f0:cc:f8: 71:69:a7:7e:25:c0:39:37:ca:fa:68:7a:99:eb:3b:16:b2:d0: 83:2d:ed:ee:47:cb:a3:53:f7:64:7d:bd:f0:07:09:91:23:03: e5:5f:05:b4:0d:3a:23:6b:38:f4:47:fd:77:66:27:c0:20:2d: 73:8c:2f:23:15:78:15:c5:2f:7f:36:99:36:b9:2c:b6:3d:49: b6:e8:0d:e6:fb:85:f9:67:45:13:30:11:d0:b4:d4:fd:3b:a4: 6e:81:df:17:c2:2e:d2:6b:22:b4:f5:37:e1:b2:93:47:fe:c9: 78:f1:e5:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtA4YM9XirkruH9K1w2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYWY4MDBjZTk1YmZiYjFmNDczYjBiNWY5ZjdiOTMxNzU5 MzBlODkwHhcNMjUxMjA2MDcwMTAzWhcNMjUxMjA3MDcwMTAzWjAzMTEwLwYDVQQD EygwMTc2ZjkzZTlkMTUxNTVhOTdmYTVhZWIxZGQwMGVkMTAyZDE3YjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZN2XTWosEZG37kL7VBMZmTo4UrY 34xPoGcWRF9seseNHaRjATR9DRNvgDUUeD2XWHgwA6GG/Xqte8BjPr5rQzWpeUxO OoznrpJmcnH+H7DFMTdU0aWsPDsPEKD6ENppZtp33BgTrxqBpaKtLa52uY7Iy3QK t8B1INTA7CgQoQFvxpqjPmFWblSK2aBvs725zQxbA38SA2pVk2+YjfoYBJNaOHHQ P9FQSlTKQy9XZKuAGvoPBfFDHzZAbfvW+4c4RuTPhokzB+Z5RTPm14XwkS2NudYi zpPE0dRHt24GSDlF3WxBhFN5mmN3sGpakOUHJP8eli+TYSUtDqmfOS75dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAF2+T6dFRVal/pa6x3QDtEC0XuSMB8GA1UdIwQY MBaAFBCvgAzpW/ux9HOwtfn3uTF1kw6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYt MTE5OTQyZjNkN2E3LzEvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYtMTE5OTQyZjNkN2E3 LzEvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuwXyFtF 8e2JjUAHw0Ng7JUOvXBSl5fkGXhpMw7RSnoad3KTIDv9/GAD3LugF6k+TirldGm9 lHOvAkkV7j/bbgUUVq3OdW6q58xMyEK4/SQBNPxsv4mlSD6DuYpL4cXIA9k/vhmd 0toKPWZXrxYFNxcZLJ2qsesn32V7F82ATbTEa2fNZm/9aQyTxAOa8Mz4cWmnfiXA OTfK+mh6mes7FrLQgy3t7kfLo1P3ZH298AcJkSMD5V8FtA06I2s49Ef9d2YnwCAt c4wvIxV4FcUvfzaZNrkstj1JtugN5vuF+WdFEzAR0LTU/TukboHfF8Iu0msitPU3 4bKTR/7JePHl8g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:22:31 2025 by rpki-client