This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft File: EkTc4rRccfRbr4tTxonr36y6_sM.mft (raw, json) Hash identifier: P/E+7ciMbxIm+onGbh/tW/sN6bAB7QlINLscJwLgdSc= Subject key identifier: 2A:67:81:E7:F7:DE:94:B9:8A:8F:25:0C:83:29:16:F5:17:0F:09:67 Authority key identifier: 12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3 Certificate issuer: /CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3 Certificate serial: 019AF3F7B1B7EBE6422F56FF9CB67DB73B2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft Manifest number: 071E Signing time: Sat 06 Dec 2025 14:01:27 +0000 Manifest this update: Sat 06 Dec 2025 14:01:27 +0000 Manifest next update: Sun 07 Dec 2025 14:01:27 +0000 Files and hashes: 1: EkTc4rRccfRbr4tTxonr36y6_sM.crl (hash: FrgQAkBCk9/t+ygy3oF55bCrVVE1RWDgw+fznMlzF2c=) 2: V6g9FQfy9dgRR_aBUNoIfIEeTJU.roa (hash: 6AdRoLcNqCj4S98SDLUI166TyStTtXm58bK7uoecjZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:b1:b7:eb:e6:42:2f:56:ff:9c:b6:7d:b7:3b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3 Validity Not Before: Dec 6 14:01:27 2025 GMT Not After : Dec 7 14:01:27 2025 GMT Subject: CN=2a6781e7f7de94b98a8f250c832916f5170f0967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b6:45:c5:ff:41:13:c6:eb:6f:6d:f6:83:4b: 95:c4:2b:dd:75:74:32:2e:bc:b2:03:70:ae:3e:d4: de:66:c4:fa:2b:6e:58:43:51:63:19:27:04:06:ee: eb:84:66:2b:ea:81:d5:fc:5d:5e:1b:1b:0e:80:b5: ea:db:11:d8:1d:5e:09:54:3f:39:ce:f0:6f:5c:26: ca:82:9b:33:d4:e7:13:88:d0:42:c0:72:8a:b2:ed: b5:6c:78:51:c1:56:cb:97:67:2d:c9:a0:f0:8e:ec: 90:da:88:bc:1b:8b:88:89:2b:95:7b:d3:da:55:d9: c0:a2:f0:2e:24:a8:74:9d:d5:28:f0:0b:f4:59:9b: 37:52:b8:e7:5a:1d:a6:9b:be:49:c1:a5:f8:58:18: 29:ef:56:5f:01:8f:67:b9:74:53:9e:f2:ad:7e:59: 2a:b7:0c:43:29:35:e9:14:fc:1c:3e:ba:72:51:72: 6d:bf:16:01:e4:c3:9a:ec:6d:62:98:2c:03:6a:a4: 00:0b:ea:21:03:75:3b:75:4e:63:e6:e3:b1:02:b4: cc:5d:d0:4d:fb:c9:f5:5d:a1:64:f5:02:b0:2f:4b: 33:36:0f:85:fa:bd:60:ef:3b:65:a1:48:1d:d0:02: ee:81:93:0e:44:e3:80:56:d8:9a:88:1b:75:6a:cf: 28:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:67:81:E7:F7:DE:94:B9:8A:8F:25:0C:83:29:16:F5:17:0F:09:67 X509v3 Authority Key Identifier: keyid:12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9f:32:80:a2:15:3d:fe:38:b0:f3:86:da:e8:9e:69:6e:a0: e9:06:cb:d3:1e:2b:bf:a6:33:3c:6d:99:31:6a:0c:3f:4e:a8: 10:a8:55:39:78:a4:98:ca:40:1f:f2:6b:b4:15:03:ac:54:99: 35:24:f6:65:18:74:f5:8e:78:09:d9:23:29:10:96:40:22:32: f3:1c:0b:90:dc:79:34:08:f5:8f:2f:8f:27:2e:6f:f8:e6:97: 94:53:9b:50:28:19:94:97:76:ef:68:af:41:49:ba:7c:39:4e: 88:2d:8c:b2:59:7f:5b:f4:dc:94:c7:9e:26:9c:0e:8c:82:39: f7:3c:38:a7:78:1a:a9:b8:a3:75:80:63:3c:70:1e:27:3d:cd: 98:d3:02:0d:86:90:fe:a9:ce:eb:b5:35:a5:20:5d:7e:ac:c9: 8f:89:40:6c:63:8e:8f:09:ec:43:94:50:1a:da:29:6a:aa:2f: f8:77:d7:c1:ed:1b:0f:fe:05:a7:a6:08:56:20:1f:9f:15:f8: e6:bf:31:8f:24:c9:c8:ce:78:43:dd:66:24:bf:eb:b4:22:3e: 0e:e6:97:34:dd:b9:75:1d:97:86:35:c2:d3:4a:a9:74:77:70: 46:a9:00:2b:02:c9:54:b1:b9:05:c9:1b:b4:af:0e:d5:e8:3a: c0:e7:61:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97G36+ZCL1b/nLZ9tzssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNDRkY2UyYjQ1YzcxZjQ1YmFmOGI1M2M2ODllYmRmYWNi YWZlYzMwHhcNMjUxMjA2MTQwMTI3WhcNMjUxMjA3MTQwMTI3WjAzMTEwLwYDVQQD EygyYTY3ODFlN2Y3ZGU5NGI5OGE4ZjI1MGM4MzI5MTZmNTE3MGYwOTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLZFxf9BE8brb232g0uVxCvddXQy LryyA3CuPtTeZsT6K25YQ1FjGScEBu7rhGYr6oHV/F1eGxsOgLXq2xHYHV4JVD85 zvBvXCbKgpsz1OcTiNBCwHKKsu21bHhRwVbLl2ctyaDwjuyQ2oi8G4uIiSuVe9Pa VdnAovAuJKh0ndUo8Av0WZs3UrjnWh2mm75JwaX4WBgp71ZfAY9nuXRTnvKtflkq twxDKTXpFPwcPrpyUXJtvxYB5MOa7G1imCwDaqQAC+ohA3U7dU5j5uOxArTMXdBN +8n1XaFk9QKwL0szNg+F+r1g7ztloUgd0ALugZMOROOAVtiaiBt1as8oMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpngef33pS5io8lDIMpFvUXDwlnMB8GA1UdIwQY MBaAFBJE3OK0XHH0W6+LU8aJ69+suv7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWtUYzRyUmNjZlJicjR0VHhvbnIzNnk2X3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8zMjY1NmItMjM3Yi00YWNmLWI4MjQt OTIzNmM2OGVmNDI3LzEvRWtUYzRyUmNjZlJicjR0VHhvbnIzNnk2X3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8zMjY1NmItMjM3Yi00YWNmLWI4MjQtOTIzNmM2OGVmNDI3 LzEvRWtUYzRyUmNjZlJicjR0VHhvbnIzNnk2X3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKp8ygKIV Pf44sPOG2uieaW6g6QbL0x4rv6YzPG2ZMWoMP06oEKhVOXikmMpAH/JrtBUDrFSZ NST2ZRh09Y54CdkjKRCWQCIy8xwLkNx5NAj1jy+PJy5v+OaXlFObUCgZlJd272iv QUm6fDlOiC2Msll/W/TclMeeJpwOjII59zw4p3gaqbijdYBjPHAeJz3NmNMCDYaQ /qnO67U1pSBdfqzJj4lAbGOOjwnsQ5RQGtopaqov+HfXwe0bD/4Fp6YIViAfnxX4 5r8xjyTJyM54Q91mJL/rtCI+DuaXNN25dR2XhjXC00qpdHdwRqkAKwLJVLG5Bckb tK8O1eg6wOdh8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 23:13:35 2025 by rpki-client