This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft File: EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json) Hash identifier: ajEsWT5Kq/s9yuGA7C3pTqIcwnz7+85zVckUDd5aZDM= Subject key identifier: 88:48:13:4E:5A:7B:EF:BA:5D:12:7A:B0:94:D2:CA:DE:AB:A3:19:B7 Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B Certificate issuer: /CN=10a5985cba32a877d3215bbc228cb07d0400917b Certificate serial: 019B3CB4E04059C95B20D7A1708C36428F56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft Manifest number: 1287 Signing time: Sat 20 Dec 2025 17:00:45 +0000 Manifest this update: Sat 20 Dec 2025 17:00:45 +0000 Manifest next update: Sun 21 Dec 2025 17:00:45 +0000 Files and hashes: 1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: K8sSo3PysbT1uX3WGxvDA0JqkqCK1C5av4C6liOGLaU=) 2: OeOSm1lTsF2ojoWr7AK5puld71w.roa (hash: sBfPXwoK80Ap89UcF88+lv2T3MvsaF6wu5UIRm/3Bkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:e0:40:59:c9:5b:20:d7:a1:70:8c:36:42:8f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b Validity Not Before: Dec 20 17:00:45 2025 GMT Not After : Dec 21 17:00:45 2025 GMT Subject: CN=8848134e5a7befba5d127ab094d2cadeaba319b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d1:a2:8f:ee:d4:cc:fb:eb:74:a4:32:74:44: a6:ea:90:41:11:62:d9:38:99:74:4a:24:3e:d7:86: 1b:6a:f6:43:08:af:09:01:4a:d7:71:86:9a:c3:57: e6:43:e8:cd:75:dd:c0:c1:1d:b0:0d:8c:ac:02:e6: ae:8d:e2:f4:0b:82:e6:af:b9:67:06:3b:a4:da:b9: 96:8e:f9:00:59:b7:f8:2a:c3:43:bc:c1:c5:49:c5: 4c:88:e7:e7:f3:ea:f2:ae:94:8a:4f:ae:ca:7e:13: 0c:22:96:bd:19:aa:dc:87:31:25:f7:c3:18:d5:b4: 50:98:a8:df:af:8e:14:5b:c4:31:6b:5e:e7:2f:e3: 3e:89:5a:04:5a:f1:04:ac:e7:ba:7a:4e:27:2d:1e: 11:b8:25:34:16:2e:00:9e:68:07:c1:e8:e3:81:2c: 53:77:f5:92:5d:5c:08:c9:ef:5b:b3:51:d8:fe:9c: 3a:f5:45:3a:cd:b8:e9:3c:f3:cb:0d:25:f7:12:8b: e3:6b:91:53:4b:65:dc:35:0e:bb:85:f9:93:17:51: b9:db:00:1d:37:4b:59:e8:3a:fc:8a:9c:a8:e0:27: 25:bf:61:40:32:5b:b0:ca:bf:09:e2:c6:a2:5b:30: d8:05:a9:39:94:35:89:59:d8:34:96:c5:ac:38:53: e8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:48:13:4E:5A:7B:EF:BA:5D:12:7A:B0:94:D2:CA:DE:AB:A3:19:B7 X509v3 Authority Key Identifier: keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:5f:fa:10:71:fd:6a:22:60:d1:67:f5:2b:5a:c9:4a:0e:60: 07:63:e4:62:45:03:d2:9f:d3:e0:45:d2:b0:50:18:f6:09:fa: 74:18:49:55:24:1c:7d:e8:42:1f:96:95:d4:d3:95:ec:0d:54: ef:b4:82:f4:75:de:9f:17:6b:16:77:75:55:d6:85:2b:80:7c: 9b:d4:02:29:7a:3d:12:0a:5f:a4:29:45:8d:45:33:c2:69:ae: 4c:9c:2c:f2:d7:f2:d3:88:74:76:24:0b:50:6f:ad:7f:e1:e7: 1f:30:fd:08:71:1e:1f:3a:60:eb:a3:f4:2a:1e:8b:17:37:d3: 30:67:72:e2:0a:a3:b9:f3:d5:0c:13:56:21:53:b8:8e:d9:e6: 04:6e:b5:36:08:7f:99:ba:4b:a2:19:61:d7:49:75:42:04:ee: 0d:25:7d:54:b6:55:cc:7d:51:01:ee:b5:16:4d:a0:0f:81:88: b8:48:51:47:cb:d7:a1:88:f7:b4:7a:4a:9b:30:28:9f:aa:dd: eb:5e:ff:fa:94:a7:3c:b5:57:b2:82:35:6b:4c:9d:40:ef:ac: a9:07:62:c6:29:cb:80:46:48:e4:08:f0:8f:b3:5a:94:b5:0a: bc:13:06:78:8c:05:fb:d4:f0:96:36:14:e6:63:e4:25:b9:f0: 12:27:ea:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tOBAWclbINehcIw2Qo9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYTU5ODVjYmEzMmE4NzdkMzIxNWJiYzIyOGNiMDdkMDQw MDkxN2IwHhcNMjUxMjIwMTcwMDQ1WhcNMjUxMjIxMTcwMDQ1WjAzMTEwLwYDVQQD Eyg4ODQ4MTM0ZTVhN2JlZmJhNWQxMjdhYjA5NGQyY2FkZWFiYTMxOWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9Gij+7UzPvrdKQydESm6pBBEWLZ OJl0SiQ+14YbavZDCK8JAUrXcYaaw1fmQ+jNdd3AwR2wDYysAuaujeL0C4Lmr7ln Bjuk2rmWjvkAWbf4KsNDvMHFScVMiOfn8+ryrpSKT67KfhMMIpa9GarchzEl98MY 1bRQmKjfr44UW8Qxa17nL+M+iVoEWvEErOe6ek4nLR4RuCU0Fi4AnmgHwejjgSxT d/WSXVwIye9bs1HY/pw69UU6zbjpPPPLDSX3Eovja5FTS2XcNQ67hfmTF1G52wAd N0tZ6Dr8ipyo4Cclv2FAMluwyr8J4saiWzDYBak5lDWJWdg0lsWsOFPouwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhIE05ae++6XRJ6sJTSyt6roxm3MB8GA1UdIwQY MBaAFBClmFy6Mqh30yFbvCKMsH0EAJF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wNDFkMGYtYmU4ZC00MTQ4LWJjYmEt ZDcwZjI4NTE1ZmJkLzEvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8wNDFkMGYtYmU4ZC00MTQ4LWJjYmEtZDcwZjI4NTE1ZmJk LzEvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkl/6EHH9 aiJg0Wf1K1rJSg5gB2PkYkUD0p/T4EXSsFAY9gn6dBhJVSQcfehCH5aV1NOV7A1U 77SC9HXenxdrFnd1VdaFK4B8m9QCKXo9EgpfpClFjUUzwmmuTJws8tfy04h0diQL UG+tf+HnHzD9CHEeHzpg66P0Kh6LFzfTMGdy4gqjufPVDBNWIVO4jtnmBG61Ngh/ mbpLohlh10l1QgTuDSV9VLZVzH1RAe61Fk2gD4GIuEhRR8vXoYj3tHpKmzAon6rd 617/+pSnPLVXsoI1a0ydQO+sqQdixinLgEZI5Ajwj7NalLUKvBMGeIwF+9TwljYU 5mPkJbnwEifqxQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:27:10 2025 by rpki-client