This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft File: EKllDXIX3bmfO8AOvd1rsgKFEuc.mft (raw, json) Hash identifier: gyOicjCEPB8tRS5TOPdyPTUO2yyJKDeOLBi/L1MsM+w= Subject key identifier: 62:7D:A2:5D:7C:42:E2:A6:5F:B6:42:7D:66:25:C2:D6:97:DF:58:D8 Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7 Certificate issuer: /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7 Certificate serial: 019AF46588D43600DFEF7F0DED25793DC0C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 16:01:26 +0000 Manifest this update: Sat 06 Dec 2025 16:01:26 +0000 Manifest next update: Sun 07 Dec 2025 16:01:26 +0000 Files and hashes: 1: EKllDXIX3bmfO8AOvd1rsgKFEuc.crl (hash: jkd7Udf0xN4mETXTrjqzO3jymGC+2JOLhfrF+wOlWdg=) 2: hUJ0JgMLTl6DaNpa_6-3XqSGCm4.roa (hash: 5zuqR91vkYspzPXhPdWjldTSLonIqkx5t3d++X9qoRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:88:d4:36:00:df:ef:7f:0d:ed:25:79:3d:c0:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7 Validity Not Before: Dec 6 16:01:26 2025 GMT Not After : Dec 7 16:01:26 2025 GMT Subject: CN=627da25d7c42e2a65fb6427d6625c2d697df58d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:04:95:43:2d:1c:a4:af:a3:55:af:d9:da:9c: 78:1e:56:17:36:2a:35:08:63:99:5b:cb:07:0b:c1: 97:92:7e:18:6a:fc:b3:cf:f9:29:d4:de:49:3d:3b: 5e:8b:50:cb:4e:39:6b:55:16:11:3a:2c:f9:35:2a: 73:4b:2c:a4:37:e6:66:4a:db:48:d4:0b:a4:32:71: e3:f9:0b:c7:11:1e:e7:02:8a:5c:31:e0:84:6d:f9: 71:f7:13:37:12:d3:3b:4c:8c:e1:88:d0:7a:1d:31: 13:bc:c6:e4:7a:a8:5c:d6:53:84:0c:0e:e8:9b:6d: af:56:ba:a0:15:a0:a9:8d:78:5e:a0:ca:01:f5:5e: 60:ad:b8:34:5f:6c:39:fd:f6:20:de:49:5e:f1:ee: ad:49:dc:c7:6f:fe:1a:82:8e:33:ed:fc:f6:fc:a8: c9:6d:5e:f5:17:df:c1:0c:39:1c:59:62:f3:03:4e: b5:8b:b0:a4:4c:38:b7:f2:d4:72:1d:99:19:c2:17: 70:ba:60:35:1b:5d:ec:bc:a2:45:24:60:5e:9a:8e: 28:9b:2e:cb:94:de:a9:58:cc:fa:44:db:ca:1a:da: 3e:be:7d:d0:de:66:ba:39:55:e6:62:33:e8:a2:1f: 83:02:62:d2:a2:af:89:77:a2:08:b8:f4:27:a7:8e: f1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7D:A2:5D:7C:42:E2:A6:5F:B6:42:7D:66:25:C2:D6:97:DF:58:D8 X509v3 Authority Key Identifier: keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:72:f8:7f:9f:63:63:3c:25:6c:cf:66:22:17:55:c2:bf:19: c9:12:9d:b5:c7:7a:2b:d7:9a:53:f7:19:79:d8:b8:d6:ae:b6: 70:f6:f8:71:8c:15:b0:01:f5:bf:df:8a:39:4b:4e:86:47:7b: 50:96:39:1f:db:9a:33:6a:24:91:46:ed:35:3a:a0:b2:a6:4b: ec:21:88:98:2d:f4:ff:8b:ca:47:6d:5c:64:b5:d8:39:96:50: 08:4a:26:26:a7:ec:ce:b5:2d:4e:9a:32:2b:cd:7a:e7:ac:dd: b1:8f:b6:23:91:7e:b6:fa:e6:ea:50:76:72:8e:cb:d9:0e:65: a6:08:6c:4f:cf:1c:9b:7d:ec:b4:b1:1b:b5:01:0f:53:99:b9: aa:3a:10:66:58:ba:7c:ea:22:14:26:9e:a6:70:2f:f2:69:9a: 22:1c:3f:27:a6:28:2c:88:b8:28:25:31:e9:0b:9a:26:18:6b: 3f:c3:ca:59:73:c5:69:80:df:29:0f:08:1a:21:58:e7:27:8b: dc:76:26:b5:ab:a8:91:6b:10:c8:88:db:37:66:b9:23:4e:b8: 5d:7c:c2:04:2b:a1:87:e7:5b:37:52:c1:03:23:7f:d9:39:b7: d7:8d:d1:c2:e6:f2:e5:0c:90:fd:59:18:d6:a5:5c:8a:e1:c7: 45:f5:44:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZYjUNgDf738N7SV5PcDHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYTk2NTBkNzIxN2RkYjk5ZjNiYzAwZWJkZGQ2YmIyMDI4 NTEyZTcwHhcNMjUxMjA2MTYwMTI2WhcNMjUxMjA3MTYwMTI2WjAzMTEwLwYDVQQD Eyg2MjdkYTI1ZDdjNDJlMmE2NWZiNjQyN2Q2NjI1YzJkNjk3ZGY1OGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgSVQy0cpK+jVa/Z2px4HlYXNio1 CGOZW8sHC8GXkn4Yavyzz/kp1N5JPTtei1DLTjlrVRYROiz5NSpzSyykN+ZmSttI 1AukMnHj+QvHER7nAopcMeCEbflx9xM3EtM7TIzhiNB6HTETvMbkeqhc1lOEDA7o m22vVrqgFaCpjXheoMoB9V5grbg0X2w5/fYg3kle8e6tSdzHb/4ago4z7fz2/KjJ bV71F9/BDDkcWWLzA061i7CkTDi38tRyHZkZwhdwumA1G13svKJFJGBemo4omy7L lN6pWMz6RNvKGto+vn3Q3ma6OVXmYjPooh+DAmLSoq+Jd6IIuPQnp47xKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJ9ol18QuKmX7ZCfWYlwtaX31jYMB8GA1UdIwQY MBaAFBCpZQ1yF925nzvADr3da7IChRLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMzFhNGEtODNkZS00MmZkLTk2OTEt ODA2MmYyNDFkZDk2LzEvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8yMzFhNGEtODNkZS00MmZkLTk2OTEtODA2MmYyNDFkZDk2 LzEvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvXL4f59j YzwlbM9mIhdVwr8ZyRKdtcd6K9eaU/cZedi41q62cPb4cYwVsAH1v9+KOUtOhkd7 UJY5H9uaM2okkUbtNTqgsqZL7CGImC30/4vKR21cZLXYOZZQCEomJqfszrUtTpoy K81656zdsY+2I5F+tvrm6lB2co7L2Q5lpghsT88cm33stLEbtQEPU5m5qjoQZli6 fOoiFCaepnAv8mmaIhw/J6YoLIi4KCUx6QuaJhhrP8PKWXPFaYDfKQ8IGiFY5yeL 3HYmtauokWsQyIjbN2a5I064XXzCBCuhh+dbN1LBAyN/2Tm3143Rwuby5QyQ/VkY 1qVciuHHRfVEpg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:07:01 2025 by rpki-client