This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft File: eKwxY10JG-YVV0MxH-HbfHrzR3s.mft (raw, json) Hash identifier: Vw6JwT/98ipg1mWAuL8S4qFYo+cMiHb9vBX+ptAiHXE= Subject key identifier: AF:88:14:C4:6F:2A:5B:BD:28:8C:E0:F4:F8:6C:B7:A9:42:5E:19:33 Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b Certificate serial: 019AF577EEC736A148690C55ACDF865A58C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft Manifest number: 0BBC Signing time: Sat 06 Dec 2025 21:01:08 +0000 Manifest this update: Sat 06 Dec 2025 21:01:08 +0000 Manifest next update: Sun 07 Dec 2025 21:01:08 +0000 Files and hashes: 1: 2nu94bRpDMa-mlfbsC1YR4mecUE.roa (hash: Q8+h45/Keq7mex3FbK0PPZB2TjbV76+31mEqnwydPl4=) 2: GFp4I3LPH9Bw9YNNwWHq6X0Ax-w.roa (hash: h4/2+JBtszFNERDw2wk+3LUP56k2mKHWWkwlM0aD/BM=) 3: eKwxY10JG-YVV0MxH-HbfHrzR3s.crl (hash: vUczL8NdjbMaeeB2Eob+bn8fzIsRsgB6xCGP7nO27QE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:ee:c7:36:a1:48:69:0c:55:ac:df:86:5a:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b Validity Not Before: Dec 6 21:01:08 2025 GMT Not After : Dec 7 21:01:08 2025 GMT Subject: CN=af8814c46f2a5bbd288ce0f4f86cb7a9425e1933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:61:72:49:0e:d4:58:b2:82:56:bb:51:ab:8f: b7:d6:03:6a:04:cd:90:6d:0f:06:6c:be:ae:08:90: 84:19:68:54:8f:17:f7:70:6b:b6:68:2e:98:d7:f6: 6e:06:31:93:28:f1:3d:e2:b7:c0:0a:af:e7:ac:3c: db:43:2b:de:91:4b:bc:77:13:aa:21:ae:8d:62:b0: c6:fb:1c:a2:0e:23:6c:d2:86:62:3b:87:cc:1c:33: 3d:19:73:cb:0d:08:68:5c:bd:43:e6:ba:0d:af:08: b0:63:3e:92:92:94:62:4f:93:81:6d:d9:51:58:bc: 27:6a:e7:55:1b:69:88:89:40:be:28:f9:29:1e:cf: e6:3f:5c:21:95:d0:ec:1c:92:93:f1:e9:79:12:61: e0:27:42:72:bc:9b:e1:bf:aa:51:32:b7:a4:a0:b1: 28:ec:c0:38:96:10:2e:88:b8:b5:2a:2b:ee:3f:01: a1:7d:d0:fb:24:51:20:40:b8:66:80:07:3a:07:6c: 00:8b:09:e1:d6:f4:0e:ad:6a:d6:92:d0:9e:65:a2: c7:57:76:af:85:e3:cb:70:e6:be:85:88:00:66:52: 01:3a:32:e8:d5:83:f8:d4:13:f5:e8:24:b6:33:23: 18:05:89:28:b8:97:13:08:fa:a0:fc:33:75:7a:c8: 10:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:88:14:C4:6F:2A:5B:BD:28:8C:E0:F4:F8:6C:B7:A9:42:5E:19:33 X509v3 Authority Key Identifier: keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:57:36:67:5c:60:96:b8:1f:63:2b:ba:a8:3a:37:01:70:0d: c1:65:79:b0:c6:94:b6:40:6d:b5:10:c2:2b:f8:cf:16:f3:76: 32:ae:33:5c:09:1c:1f:65:a4:c7:4e:f2:43:91:35:b6:8d:7c: 8d:3b:70:bc:1f:6e:6a:58:bf:33:aa:51:61:54:d1:42:d5:4b: ca:11:30:82:52:1c:c1:92:a4:e4:5a:f1:04:16:18:8f:a2:65: 02:d3:4a:42:0f:12:2d:97:13:b3:6f:0d:e4:9c:7b:f9:3f:fe: 04:42:f4:9a:8d:be:22:77:d3:58:fe:96:60:51:82:4f:2c:01: 68:79:50:73:6f:97:7d:55:78:ab:1b:ed:9d:64:bd:af:4d:64: 25:fe:86:69:d1:23:5c:44:c3:ed:1e:df:6b:1e:a6:d7:c3:d5: 3b:c3:86:cf:a2:51:d9:a5:ba:e8:d6:23:e7:64:a3:4c:1c:e1: 39:ea:26:e0:a0:1b:fe:4d:49:94:4b:66:ea:10:2d:72:47:86: 2a:5e:69:9d:a5:d0:35:d7:4b:4d:a0:82:c3:8c:1f:01:6b:f2: 92:83:d8:91:7b:fd:dc:7f:63:f0:0c:e5:75:46:02:f7:29:ea: 69:b0:a5:cb:92:ad:83:66:00:fd:e3:2a:84:15:34:84:ff:42: c8:1d:54:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d+7HNqFIaQxVrN+GWljAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4YWMzMTYzNWQwOTFiZTYxNTU3NDMzMTFmZTFkYjdjN2Fm MzQ3N2IwHhcNMjUxMjA2MjEwMTA4WhcNMjUxMjA3MjEwMTA4WjAzMTEwLwYDVQQD EyhhZjg4MTRjNDZmMmE1YmJkMjg4Y2UwZjRmODZjYjdhOTQyNWUxOTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmFySQ7UWLKCVrtRq4+31gNqBM2Q bQ8GbL6uCJCEGWhUjxf3cGu2aC6Y1/ZuBjGTKPE94rfACq/nrDzbQyvekUu8dxOq Ia6NYrDG+xyiDiNs0oZiO4fMHDM9GXPLDQhoXL1D5roNrwiwYz6SkpRiT5OBbdlR WLwnaudVG2mIiUC+KPkpHs/mP1whldDsHJKT8el5EmHgJ0JyvJvhv6pRMrekoLEo 7MA4lhAuiLi1KivuPwGhfdD7JFEgQLhmgAc6B2wAiwnh1vQOrWrWktCeZaLHV3av hePLcOa+hYgAZlIBOjLo1YP41BP16CS2MyMYBYkouJcTCPqg/DN1esgQ9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+IFMRvKlu9KIzg9Phst6lCXhkzMB8GA1UdIwQY MBaAFHisMWNdCRvmFVdDMR/h23x680d7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUt3eFkxMEpHLVlWVjBNeEgtSGJmSHJ6UjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mZTIyYzUtZDhlMy00MWYxLTkwOTQt ZjZlOGJiZGJkMzNiLzEvZUt3eFkxMEpHLVlWVjBNeEgtSGJmSHJ6UjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9mZTIyYzUtZDhlMy00MWYxLTkwOTQtZjZlOGJiZGJkMzNi LzEvZUt3eFkxMEpHLVlWVjBNeEgtSGJmSHJ6UjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlc2Z1xg lrgfYyu6qDo3AXANwWV5sMaUtkBttRDCK/jPFvN2Mq4zXAkcH2Wkx07yQ5E1to18 jTtwvB9uali/M6pRYVTRQtVLyhEwglIcwZKk5FrxBBYYj6JlAtNKQg8SLZcTs28N 5Jx7+T/+BEL0mo2+InfTWP6WYFGCTywBaHlQc2+XfVV4qxvtnWS9r01kJf6GadEj XETD7R7fax6m18PVO8OGz6JR2aW66NYj52SjTBzhOeom4KAb/k1JlEtm6hAtckeG Kl5pnaXQNddLTaCCw4wfAWvykoPYkXv93H9j8AzldUYC9ynqabCly5Ktg2YA/eMq hBU0hP9CyB1Uxg== -----END CERTIFICATE-----Generated at Sun Dec 7 07:24:30 2025 by rpki-client