This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft File: ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json) Hash identifier: JWC8CgQnbJrfV5Ec/K+nGTaQwhCqsx0ZcdycRhcpCDI= Subject key identifier: F3:38:92:02:80:44:B1:05:EA:6A:7A:29:42:60:88:DC:80:1D:F5:78 Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e Certificate serial: 019B5A515A9DEEC50B97505721D8F53A7387 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft Manifest number: 13A7 Signing time: Fri 26 Dec 2025 11:00:39 +0000 Manifest this update: Fri 26 Dec 2025 11:00:39 +0000 Manifest next update: Sat 27 Dec 2025 11:00:39 +0000 Files and hashes: 1: 6T07akuBxgvG0izMFImIY3LJxqs.roa (hash: XGRbraQFnaK7TkdQ/duWwEkwP4S4BhjaDtKSynptX9M=) 2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: CZOSvSEfAY8B6vtNriX0PhcjFg8PCdc6iJK/xQUChN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:5a:9d:ee:c5:0b:97:50:57:21:d8:f5:3a:73:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e Validity Not Before: Dec 26 11:00:39 2025 GMT Not After : Dec 27 11:00:39 2025 GMT Subject: CN=f33892028044b105ea6a7a29426088dc801df578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:31:83:8a:3e:d2:0f:ce:b7:fa:c9:64:dd:e9: d4:d6:88:41:bf:9c:1e:e4:de:35:a1:9b:d1:74:6a: b6:b7:72:34:f8:a1:b6:2a:1b:a9:75:dd:41:c3:38: 6a:e5:e2:c4:0e:37:ec:22:e4:19:44:36:5e:31:ce: fe:f5:9c:de:f5:8b:0d:4d:c9:3f:92:86:c4:97:b4: 21:d6:0b:4c:e0:27:cf:f5:af:e0:38:9d:c9:cd:bd: 23:e8:4a:a6:c8:de:50:1b:c1:c8:d0:b7:82:c4:52: 56:66:57:6c:d9:3a:03:8f:38:d8:5b:05:cf:fc:bd: ee:cd:28:e5:eb:2e:f5:32:fa:f6:9f:f7:04:8b:8f: 5d:24:e9:73:cd:a8:7d:ac:b7:60:ad:f6:31:9a:d3: b0:9b:fa:16:02:25:af:91:f3:7a:f9:48:bd:c6:e0: 3d:ba:35:15:15:ab:c3:81:e3:60:f8:a6:e2:1e:13: 0d:e8:b8:f3:67:0b:80:41:e7:b0:ee:2f:f9:e6:7e: 18:c5:5d:91:25:8b:19:10:e4:22:df:e7:7b:23:cb: 96:bb:66:f5:9d:54:98:e2:39:e0:69:11:72:d9:f1: 2c:48:ec:93:a5:fc:98:c4:5f:1e:d9:b6:c9:4d:3b: fb:b0:4d:a6:4f:1a:13:4d:9f:83:ce:54:1a:80:a5: 00:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:38:92:02:80:44:B1:05:EA:6A:7A:29:42:60:88:DC:80:1D:F5:78 X509v3 Authority Key Identifier: keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:89:9c:c0:4a:d4:5d:41:35:f0:2c:d3:7b:67:a0:18:1a:e9: f6:6a:82:e7:4e:07:1f:2c:d4:d4:c6:95:00:f9:71:9b:c0:52: e8:3a:73:59:34:ba:f9:fb:a4:6f:6c:e7:e9:45:b0:e5:56:0f: 70:dd:0f:d8:e6:87:65:b1:96:ec:a5:bb:08:16:65:dd:de:85: 60:52:ce:f2:5e:30:c7:0c:69:3f:0d:b9:0c:64:12:27:3b:27: fd:d2:02:e5:f3:6c:2c:d2:f1:f5:14:3e:c1:e6:e7:c6:b3:ae: e6:cf:5d:7e:7a:53:61:2f:8e:a7:58:e5:6d:6c:7b:3e:ea:2e: 14:97:a9:be:df:eb:84:e1:02:90:01:72:7f:d7:b4:60:18:33: 89:52:aa:18:a1:7d:ce:30:83:93:a5:cf:fe:6d:fe:73:d6:5f: df:65:49:5f:e1:e3:05:62:15:78:73:24:78:be:09:21:80:9b: 7c:c0:23:24:b8:bd:08:ff:b8:d5:87:57:1f:fb:9a:7b:70:52: 89:a6:97:75:e1:06:d0:6e:fb:44:85:bd:a3:6f:5e:7d:c3:76: 71:38:03:cb:47:0a:87:78:ca:6f:dd:a6:70:b8:48:c5:b5:a6: 1c:87:ea:bf:2a:b9:d0:ce:dd:4d:df:e9:40:f7:c6:40:3f:31: b1:a6:0f:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUVqd7sULl1BXIdj1OnOHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNDc4YzVhYTIyNmEyNzhlOGIxOTA2ZjM3MWM2MGNmYzdk ODdlOGUwHhcNMjUxMjI2MTEwMDM5WhcNMjUxMjI3MTEwMDM5WjAzMTEwLwYDVQQD EyhmMzM4OTIwMjgwNDRiMTA1ZWE2YTdhMjk0MjYwODhkYzgwMWRmNTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzGDij7SD863+slk3enU1ohBv5we 5N41oZvRdGq2t3I0+KG2Khupdd1Bwzhq5eLEDjfsIuQZRDZeMc7+9Zze9YsNTck/ kobEl7Qh1gtM4CfP9a/gOJ3Jzb0j6EqmyN5QG8HI0LeCxFJWZlds2ToDjzjYWwXP /L3uzSjl6y71Mvr2n/cEi49dJOlzzah9rLdgrfYxmtOwm/oWAiWvkfN6+Ui9xuA9 ujUVFavDgeNg+KbiHhMN6LjzZwuAQeew7i/55n4YxV2RJYsZEOQi3+d7I8uWu2b1 nVSY4jngaRFy2fEsSOyTpfyYxF8e2bbJTTv7sE2mTxoTTZ+DzlQagKUAbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPM4kgKARLEF6mp6KUJgiNyAHfV4MB8GA1UdIwQY MBaAFHpHjFqiJqJ46LGQbzccYM/H2H6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAt ZDc2ZWM5Y2MwZDI4LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAtZDc2ZWM5Y2MwZDI4 LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4mcwErU XUE18CzTe2egGBrp9mqC504HHyzU1MaVAPlxm8BS6DpzWTS6+fukb2zn6UWw5VYP cN0P2OaHZbGW7KW7CBZl3d6FYFLO8l4wxwxpPw25DGQSJzsn/dIC5fNsLNLx9RQ+ webnxrOu5s9dfnpTYS+Op1jlbWx7PuouFJepvt/rhOECkAFyf9e0YBgziVKqGKF9 zjCDk6XP/m3+c9Zf32VJX+HjBWIVeHMkeL4JIYCbfMAjJLi9CP+41YdXH/uae3BS iaaXdeEG0G77RIW9o29efcN2cTgDy0cKh3jKb92mcLhIxbWmHIfqvyq50M7dTd/p QPfGQD8xsaYP3g== -----END CERTIFICATE-----Generated at Fri Dec 26 17:42:31 2025 by rpki-client