This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft File: pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft (raw, json) Hash identifier: RyBULJElZf5NDrbhMTskrHKh2HMV24pt2Dh5zfZQ018= Subject key identifier: D7:2D:32:76:28:6D:EC:0F:E8:71:54:34:3F:08:02:B9:AE:9D:9E:7B Authority key identifier: A4:42:A1:30:95:B7:9B:CA:86:E2:CD:A0:12:E4:C4:CF:62:46:79:69 Certificate issuer: /CN=a442a13095b79bca86e2cda012e4c4cf62467969 Certificate serial: 019AF49C1142B3C360EB0AB4890E35360513 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft Manifest number: 0147 Signing time: Sat 06 Dec 2025 17:00:59 +0000 Manifest this update: Sat 06 Dec 2025 17:00:59 +0000 Manifest next update: Sun 07 Dec 2025 17:00:59 +0000 Files and hashes: 1: pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl (hash: TP0wPhl/qe6TQWgM4LBgXE1DqoYy9fiHRXdYjcVELW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:11:42:b3:c3:60:eb:0a:b4:89:0e:35:36:05:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a442a13095b79bca86e2cda012e4c4cf62467969 Validity Not Before: Dec 6 17:00:59 2025 GMT Not After : Dec 7 17:00:59 2025 GMT Subject: CN=d72d3276286dec0fe87154343f0802b9ae9d9e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:69:31:e2:99:8b:33:77:09:23:ed:17:9f:17: 36:08:92:5a:db:8a:3d:4b:c6:4b:57:0e:19:81:6a: 90:05:87:e3:44:27:0c:09:a8:36:b6:5f:28:e2:bb: c8:95:f1:12:c0:6c:02:1c:36:57:88:c2:e1:a7:9b: 02:aa:e5:35:dc:13:f1:f1:ed:37:4c:59:19:84:8d: 75:0e:13:7f:c2:11:03:27:21:58:0d:94:11:7d:e0: 23:1e:32:83:cd:85:72:eb:59:92:71:44:8c:d3:17: 83:bd:11:65:ab:cd:20:ed:1c:19:d5:6c:35:96:7f: 9f:d0:47:4b:90:37:c0:28:b2:42:93:17:f1:6b:a4: e6:5a:e2:a6:66:03:ec:96:34:2e:e1:42:44:7f:ee: e6:13:5a:47:f8:67:19:22:e5:18:1a:b7:4a:34:9b: db:35:99:10:0a:4a:e2:7f:f5:05:f5:5d:af:83:c2: 09:5e:32:05:f2:d5:b3:04:7f:7d:40:95:ff:0a:14: 76:b1:a0:cd:81:27:cc:0d:a7:a2:31:fb:f7:7f:f4: 41:98:4e:63:34:4c:ac:69:28:78:a1:47:4c:3b:9d: e5:52:14:ab:23:7b:7f:b8:06:5a:3d:7c:cd:db:1e: 12:f3:98:bf:b6:44:cc:fd:53:a0:98:6d:d7:2d:d2: b9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2D:32:76:28:6D:EC:0F:E8:71:54:34:3F:08:02:B9:AE:9D:9E:7B X509v3 Authority Key Identifier: keyid:A4:42:A1:30:95:B7:9B:CA:86:E2:CD:A0:12:E4:C4:CF:62:46:79:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:03:b1:d4:50:8e:26:eb:0d:cd:d4:40:a6:33:e1:40:b3:8f: c0:f5:64:d8:35:79:c7:92:50:9f:38:09:a7:e2:ce:39:9b:42: 21:75:7b:8c:f1:db:1a:68:93:51:0a:6b:df:68:27:8f:47:38: a2:87:1c:e9:98:46:fd:fe:07:69:fb:9b:5c:3b:f2:a7:54:9a: cf:8b:9c:b3:5e:ed:a3:91:a5:f7:cd:52:05:46:23:32:0e:eb: 8d:38:bf:6b:43:55:c5:14:d8:12:fa:5a:4c:18:1f:93:65:b3: c3:bd:59:87:f9:eb:e1:f6:b8:a2:1e:85:53:2e:db:ff:12:2d: 36:86:e1:1d:17:f5:a6:3b:f4:49:55:cc:2a:a0:f0:72:33:d6: c1:ef:3b:84:b5:5d:da:e6:53:09:9e:1d:30:b8:ae:60:40:44: ba:5f:c2:18:39:58:b5:3a:34:4a:b0:66:fe:ee:3e:0b:f7:e8: 2e:1c:78:cd:d8:e3:88:95:42:bd:55:b5:41:82:8b:67:53:6d: 7c:4c:84:e7:67:32:23:a4:cb:10:69:4d:b2:0f:8e:d2:12:a3: 9f:bf:6d:93:36:6e:06:18:24:77:a5:27:f9:93:a5:4b:d2:64: 0b:f8:72:4f:27:77:8b:fc:27:f3:99:52:8f:4a:5a:f1:59:66: 65:bb:e0:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nBFCs8Ng6wq0iQ41NgUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NDJhMTMwOTViNzliY2E4NmUyY2RhMDEyZTRjNGNmNjI0 Njc5NjkwHhcNMjUxMjA2MTcwMDU5WhcNMjUxMjA3MTcwMDU5WjAzMTEwLwYDVQQD EyhkNzJkMzI3NjI4NmRlYzBmZTg3MTU0MzQzZjA4MDJiOWFlOWQ5ZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWkx4pmLM3cJI+0Xnxc2CJJa24o9 S8ZLVw4ZgWqQBYfjRCcMCag2tl8o4rvIlfESwGwCHDZXiMLhp5sCquU13BPx8e03 TFkZhI11DhN/whEDJyFYDZQRfeAjHjKDzYVy61mScUSM0xeDvRFlq80g7RwZ1Ww1 ln+f0EdLkDfAKLJCkxfxa6TmWuKmZgPsljQu4UJEf+7mE1pH+GcZIuUYGrdKNJvb NZkQCkrif/UF9V2vg8IJXjIF8tWzBH99QJX/ChR2saDNgSfMDaeiMfv3f/RBmE5j NEysaSh4oUdMO53lUhSrI3t/uAZaPXzN2x4S85i/tkTM/VOgmG3XLdK58wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNctMnYobewP6HFUND8IArmunZ57MB8GA1UdIwQY MBaAFKRCoTCVt5vKhuLNoBLkxM9iRnlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEVLaE1KVzNtOHFHNHMyZ0V1VEV6MkpHZVdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lYmU5OTEtMmViNC00MjE5LWIzNjct MGViZmNmMzhjYmVmLzEvcEVLaE1KVzNtOHFHNHMyZ0V1VEV6MkpHZVdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9lYmU5OTEtMmViNC00MjE5LWIzNjctMGViZmNmMzhjYmVm LzEvcEVLaE1KVzNtOHFHNHMyZ0V1VEV6MkpHZVdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQOx1FCO JusNzdRApjPhQLOPwPVk2DV5x5JQnzgJp+LOOZtCIXV7jPHbGmiTUQpr32gnj0c4 oocc6ZhG/f4HafubXDvyp1Saz4ucs17to5Gl981SBUYjMg7rjTi/a0NVxRTYEvpa TBgfk2Wzw71Zh/nr4fa4oh6FUy7b/xItNobhHRf1pjv0SVXMKqDwcjPWwe87hLVd 2uZTCZ4dMLiuYEBEul/CGDlYtTo0SrBm/u4+C/foLhx4zdjjiJVCvVW1QYKLZ1Nt fEyE52cyI6TLEGlNsg+O0hKjn79tkzZuBhgkd6Un+ZOlS9JkC/hyTyd3i/wn85lS j0pa8VlmZbvgfw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:55:25 2025 by rpki-client