This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft File: EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json) Hash identifier: A7dsLi7s/CYROQUvjDHFAPBjSLQrWnZ87RrFrySe9S0= Subject key identifier: 3B:50:0B:A1:0F:6F:74:19:0D:6D:F6:FD:7D:77:37:88:99:58:5F:81 Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B Certificate issuer: /CN=10a5985cba32a877d3215bbc228cb07d0400917b Certificate serial: 019AF1640F8E71B4A754A3B62160BE964F26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft Manifest number: 1260 Signing time: Sat 06 Dec 2025 02:00:57 +0000 Manifest this update: Sat 06 Dec 2025 02:00:57 +0000 Manifest next update: Sun 07 Dec 2025 02:00:57 +0000 Files and hashes: 1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: wsckp4Th+d6wJHDPkQH1l04AopgFep9rP4Ju5h+vhr4=) 2: OeOSm1lTsF2ojoWr7AK5puld71w.roa (hash: sBfPXwoK80Ap89UcF88+lv2T3MvsaF6wu5UIRm/3Bkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:0f:8e:71:b4:a7:54:a3:b6:21:60:be:96:4f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b Validity Not Before: Dec 6 02:00:57 2025 GMT Not After : Dec 7 02:00:57 2025 GMT Subject: CN=3b500ba10f6f74190d6df6fd7d77378899585f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:84:92:af:4e:ef:48:dd:5f:c6:8b:5d:40:ee: e3:c0:16:f1:28:a0:62:15:ca:26:72:b0:29:be:65: f6:1b:fb:e7:76:71:a0:93:2a:49:b0:4a:93:42:b0: 9a:da:60:38:bc:1f:25:d5:66:22:4b:e3:8c:7f:72: e8:31:04:77:19:0d:08:56:2e:14:3c:aa:e7:57:5d: 55:33:0d:85:cb:37:20:3f:a4:14:82:af:ec:11:23: d0:d1:7e:c5:49:37:10:a0:dd:91:d1:35:a3:21:e8: 30:f3:b9:c2:27:4a:a2:12:e1:38:8d:bc:6b:4d:9d: d4:da:26:89:f3:a8:27:73:44:75:20:21:4b:c7:15: fa:ae:c6:4e:d8:1b:37:64:8c:94:b9:9a:5a:21:26: a6:2e:52:32:ed:72:30:67:24:ce:f3:9a:4a:a1:c9: 4d:be:a1:7d:ad:e5:94:fd:00:18:75:4a:f6:2f:68: 06:df:4e:32:1d:17:19:3d:c5:e3:e8:d5:2c:26:fd: a2:7d:a1:d9:d7:2c:54:82:3b:3e:50:9e:b6:42:87: 3c:7d:50:1c:72:c5:93:51:69:52:3f:b7:d5:f7:f4: 70:92:a3:0c:c3:c0:aa:34:75:87:9b:4d:f9:13:1c: eb:46:93:9b:c4:44:fe:2a:a2:1b:e9:6e:5a:03:20: e8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:50:0B:A1:0F:6F:74:19:0D:6D:F6:FD:7D:77:37:88:99:58:5F:81 X509v3 Authority Key Identifier: keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:28:d1:bd:f6:b3:b5:fe:08:f6:9a:6b:77:eb:7e:f5:2b:5f: da:15:3f:27:8d:c8:15:54:d5:91:13:84:40:14:a5:6d:81:ce: b8:cf:a5:54:1b:87:60:ff:ff:52:fb:24:49:3c:f9:f6:40:ba: 5e:0a:c6:cd:ad:4c:79:6e:92:f8:71:6f:e7:22:7d:8e:61:77: 5b:7d:2d:26:0e:49:e3:76:06:b0:13:b6:b7:19:50:52:92:3b: 36:82:d6:61:bd:a0:df:f0:1f:49:09:be:7b:29:a5:19:cc:08: 2e:00:cf:5a:d6:28:b3:11:c8:01:3a:5b:dc:60:75:3b:1c:52: ac:7e:4b:ad:39:70:c5:37:9a:e1:81:0d:fd:f5:11:57:de:e5: f9:9e:97:de:16:d1:df:55:86:c1:4e:58:23:d9:bb:0e:9d:82: d9:a7:85:a6:b9:e8:e1:4a:59:53:46:36:b5:50:4a:64:84:3d: b8:f9:e4:c0:cf:27:40:ec:9b:62:d8:a5:07:32:67:70:b5:16: 2a:53:51:ff:78:e9:37:0d:c0:1b:cc:41:fa:1a:32:f5:32:90: fd:7b:21:de:9e:0a:5e:7e:75:cc:bb:a1:4e:91:0e:a9:18:23: 6a:63:a4:6f:1a:c1:a2:f1:cb:a5:34:6b:0f:c6:24:48:15:10: d4:8d:fb:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZA+OcbSnVKO2IWC+lk8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYTU5ODVjYmEzMmE4NzdkMzIxNWJiYzIyOGNiMDdkMDQw MDkxN2IwHhcNMjUxMjA2MDIwMDU3WhcNMjUxMjA3MDIwMDU3WjAzMTEwLwYDVQQD EygzYjUwMGJhMTBmNmY3NDE5MGQ2ZGY2ZmQ3ZDc3Mzc4ODk5NTg1ZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ISSr07vSN1fxotdQO7jwBbxKKBi FcomcrApvmX2G/vndnGgkypJsEqTQrCa2mA4vB8l1WYiS+OMf3LoMQR3GQ0IVi4U PKrnV11VMw2FyzcgP6QUgq/sESPQ0X7FSTcQoN2R0TWjIegw87nCJ0qiEuE4jbxr TZ3U2iaJ86gnc0R1ICFLxxX6rsZO2Bs3ZIyUuZpaISamLlIy7XIwZyTO85pKoclN vqF9reWU/QAYdUr2L2gG304yHRcZPcXj6NUsJv2ifaHZ1yxUgjs+UJ62Qoc8fVAc csWTUWlSP7fV9/RwkqMMw8CqNHWHm035ExzrRpObxET+KqIb6W5aAyDoKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtQC6EPb3QZDW32/X13N4iZWF+BMB8GA1UdIwQY MBaAFBClmFy6Mqh30yFbvCKMsH0EAJF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wNDFkMGYtYmU4ZC00MTQ4LWJjYmEt ZDcwZjI4NTE1ZmJkLzEvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8wNDFkMGYtYmU4ZC00MTQ4LWJjYmEtZDcwZjI4NTE1ZmJk LzEvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIijRvfaz tf4I9pprd+t+9Stf2hU/J43IFVTVkROEQBSlbYHOuM+lVBuHYP//UvskSTz59kC6 XgrGza1MeW6S+HFv5yJ9jmF3W30tJg5J43YGsBO2txlQUpI7NoLWYb2g3/AfSQm+ eymlGcwILgDPWtYosxHIATpb3GB1OxxSrH5LrTlwxTea4YEN/fURV97l+Z6X3hbR 31WGwU5YI9m7Dp2C2aeFprno4UpZU0Y2tVBKZIQ9uPnkwM8nQOybYtilBzJncLUW KlNR/3jpNw3AG8xB+hoy9TKQ/Xsh3p4KXn51zLuhTpEOqRgjamOkbxrBovHLpTRr D8YkSBUQ1I37BQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:35:04 2025 by rpki-client