This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft File: EkSUR-va8tRKSYs9rlJaL1In8Yo.mft (raw, json) Hash identifier: dsCmGdZ+3Fabnsf5zcEeT0THd/ySTcRLhzXJg2iE36I= Subject key identifier: FF:61:DA:B7:F7:DC:FC:BB:93:59:19:D9:B2:7E:FD:15:29:38:F9:A3 Authority key identifier: 12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A Certificate issuer: /CN=12449447ebdaf2d44a498b3dae525a2f5227f18a Certificate serial: 019AF19B25CDE527B910A81B65ABA084F5DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft Manifest number: 1374 Signing time: Sat 06 Dec 2025 03:01:08 +0000 Manifest this update: Sat 06 Dec 2025 03:01:08 +0000 Manifest next update: Sun 07 Dec 2025 03:01:08 +0000 Files and hashes: 1: EkSUR-va8tRKSYs9rlJaL1In8Yo.crl (hash: S1LVBCxXk62QAaM+tPI8/kM2P6wdCfns4UFNGqJUm6w=) 2: zSoi0zSs9jm361lSJvAsPlQrRG4.roa (hash: ZKAanfO9Bg7/JlNaV6O6aYkdPO+1tyQx28EMy/ge49w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:25:cd:e5:27:b9:10:a8:1b:65:ab:a0:84:f5:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12449447ebdaf2d44a498b3dae525a2f5227f18a Validity Not Before: Dec 6 03:01:08 2025 GMT Not After : Dec 7 03:01:08 2025 GMT Subject: CN=ff61dab7f7dcfcbb935919d9b27efd152938f9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f5:a4:80:06:13:fc:d1:e0:82:9d:1b:7f:b0: d8:f2:dc:a5:f7:2e:60:a8:70:a0:92:e3:5d:4a:88: ff:db:ad:c6:f2:83:93:78:12:8f:00:17:5f:b0:38: 41:58:0f:83:fc:13:6f:c5:cc:86:fd:c3:fc:ee:47: d0:8a:a5:c9:66:c9:41:e4:5a:4e:5c:18:f3:69:8c: b9:0e:45:bf:6f:db:36:6a:c4:34:e1:fa:d7:fb:e0: 63:c1:29:d7:0d:91:d9:36:0d:e8:38:bc:d1:50:55: a4:fb:94:9b:3a:a4:11:d4:dc:1c:7a:90:f4:61:20: b3:2f:d6:8b:0a:b4:f6:4c:5b:a4:63:60:4d:41:11: 05:c8:76:c3:88:29:16:26:5c:be:a4:61:34:4c:a5: 47:59:45:79:b0:ff:a9:ec:77:84:ee:65:8d:4c:86: a9:b7:59:6d:4b:65:aa:ec:b0:73:e3:91:19:b9:d0: 85:d6:4d:9e:7e:fc:38:db:25:b3:4e:00:0f:2b:05: cb:51:7c:31:19:ce:27:50:55:4f:aa:38:5e:0c:68: 23:ad:50:44:96:5f:30:00:27:c7:be:d4:a4:7b:21: f4:78:c2:dd:00:5c:4c:26:23:8d:63:b8:ba:6d:db: 78:40:0f:97:50:aa:bd:e0:4a:f8:96:0f:78:c8:9a: 3b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:61:DA:B7:F7:DC:FC:BB:93:59:19:D9:B2:7E:FD:15:29:38:F9:A3 X509v3 Authority Key Identifier: keyid:12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:50:a0:56:e6:18:6b:f6:a2:26:ab:b8:f6:6d:35:7a:d6:0d: ac:4a:0c:40:5e:cb:59:e7:52:ab:79:e7:87:90:2d:40:62:a6: 20:ee:bc:4b:b5:b4:29:7f:4a:85:4f:ef:d0:6b:cb:34:e8:ee: 5d:a9:fb:02:40:68:2e:f3:bb:a2:83:d4:b1:ee:aa:76:23:fa: 89:f1:30:74:db:ce:02:15:de:d3:b6:75:45:cd:00:69:79:05: 8f:ac:ef:14:e7:4b:a4:27:c1:2a:1c:71:82:cf:6d:47:ae:b7: 96:7a:9e:e2:27:e2:10:31:8c:4e:58:66:d5:a3:ae:6b:b3:e8: 51:87:82:07:8a:0b:1c:d7:37:9c:dd:cc:4f:c9:ce:87:c9:ab: f6:ec:41:80:43:82:ba:8d:6f:65:f0:58:4e:1b:4b:8f:88:22: e9:74:5d:46:52:e3:f0:83:6e:61:e9:98:3b:a1:95:1f:67:8a: 53:1d:60:e3:86:c1:d4:94:cd:a2:de:74:dd:25:7c:31:46:13: d5:36:4c:52:72:bf:bf:aa:44:fa:cb:76:4f:4b:cf:48:a8:4b: d1:0c:30:4f:87:73:ff:d9:1c:5b:8c:9b:28:1c:c0:b8:25:5e: da:c1:8c:3c:2b:4e:b3:06:ea:d6:b1:ff:d6:bd:a7:4f:94:48: 6f:77:83:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyXN5Se5EKgbZaughPXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNDQ5NDQ3ZWJkYWYyZDQ0YTQ5OGIzZGFlNTI1YTJmNTIy N2YxOGEwHhcNMjUxMjA2MDMwMTA4WhcNMjUxMjA3MDMwMTA4WjAzMTEwLwYDVQQD EyhmZjYxZGFiN2Y3ZGNmY2JiOTM1OTE5ZDliMjdlZmQxNTI5MzhmOWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvWkgAYT/NHggp0bf7DY8tyl9y5g qHCgkuNdSoj/263G8oOTeBKPABdfsDhBWA+D/BNvxcyG/cP87kfQiqXJZslB5FpO XBjzaYy5DkW/b9s2asQ04frX++BjwSnXDZHZNg3oOLzRUFWk+5SbOqQR1NwcepD0 YSCzL9aLCrT2TFukY2BNQREFyHbDiCkWJly+pGE0TKVHWUV5sP+p7HeE7mWNTIap t1ltS2Wq7LBz45EZudCF1k2efvw42yWzTgAPKwXLUXwxGc4nUFVPqjheDGgjrVBE ll8wACfHvtSkeyH0eMLdAFxMJiONY7i6bdt4QA+XUKq94Er4lg94yJo7YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9h2rf33Py7k1kZ2bJ+/RUpOPmjMB8GA1UdIwQY MBaAFBJElEfr2vLUSkmLPa5SWi9SJ/GKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWtTVVItdmE4dFJLU1lzOXJsSmFMMUluOFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZmIxNzEtMTFmNC00YzVmLTgzZTct MmVkMWZkZTY4NTE2LzEvRWtTVVItdmE4dFJLU1lzOXJsSmFMMUluOFlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85ZmIxNzEtMTFmNC00YzVmLTgzZTctMmVkMWZkZTY4NTE2 LzEvRWtTVVItdmE4dFJLU1lzOXJsSmFMMUluOFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFCgVuYY a/aiJqu49m01etYNrEoMQF7LWedSq3nnh5AtQGKmIO68S7W0KX9KhU/v0GvLNOju Xan7AkBoLvO7ooPUse6qdiP6ifEwdNvOAhXe07Z1Rc0AaXkFj6zvFOdLpCfBKhxx gs9tR663lnqe4ifiEDGMTlhm1aOua7PoUYeCB4oLHNc3nN3MT8nOh8mr9uxBgEOC uo1vZfBYThtLj4gi6XRdRlLj8INuYemYO6GVH2eKUx1g44bB1JTNot503SV8MUYT 1TZMUnK/v6pE+st2T0vPSKhL0QwwT4dz/9kcW4ybKBzAuCVe2sGMPCtOswbq1rH/ 1r2nT5RIb3eDpA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:20 2025 by rpki-client