This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft File: ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json) Hash identifier: CGHvak65A6U/5lXSqIJBqBatL+DSO/maQAyyeStTkTU= Subject key identifier: 3A:33:19:9E:F1:56:4C:48:C2:33:5A:99:B7:73:75:EB:C6:49:82:11 Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27 Certificate issuer: /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727 Certificate serial: 019B32D71C66D748C6FE178003226482C78B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 19:01:56 +0000 Manifest this update: Thu 18 Dec 2025 19:01:56 +0000 Manifest next update: Fri 19 Dec 2025 19:01:56 +0000 Files and hashes: 1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: 8Y6F8iAjWWTgRSxwDoRR6sH2kDbW+z2511EvlOuUr0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:1c:66:d7:48:c6:fe:17:80:03:22:64:82:c7:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727 Validity Not Before: Dec 18 19:01:56 2025 GMT Not After : Dec 19 19:01:56 2025 GMT Subject: CN=3a33199ef1564c48c2335a99b77375ebc6498211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e5:b3:b8:63:0e:ca:bb:af:32:32:f0:fa:50: 50:0c:d3:17:e6:c6:c5:5d:42:6b:ad:9c:b0:e1:9a: b0:95:66:1f:14:88:f3:63:35:c1:88:db:00:33:de: 8a:32:b1:ee:92:72:62:a7:9c:b0:24:a2:48:aa:15: d0:47:55:35:88:db:89:6f:04:9a:5d:ad:07:ee:ef: 4b:31:3c:9f:93:a0:b9:40:8e:df:73:16:d7:0d:14: 98:4a:4c:f2:99:e5:3a:15:7a:5b:a4:ab:8f:27:c0: 2c:77:04:23:81:32:0f:83:ca:d4:c3:94:2b:03:08: bc:bc:5b:f0:a8:19:b7:bf:1b:7c:6b:d7:26:b0:9f: 78:0e:4c:f7:a3:f2:04:ab:18:50:ff:25:35:1e:ab: 01:d8:d1:61:b6:e3:99:8b:49:a1:b8:06:21:90:7d: 6b:61:31:84:4e:6b:ce:ce:e1:88:84:04:3e:14:75: 02:69:56:8d:2d:cc:07:e9:e4:b4:df:f3:4a:e3:b5: 04:33:84:54:a7:d1:ab:8a:6c:24:73:c6:cb:1b:b4: 21:64:70:cf:ee:b2:44:7b:99:f8:e1:d7:2c:f6:52: be:10:61:34:4f:f3:c7:f2:91:02:14:0d:56:ee:12: 4a:e9:ba:de:55:1a:03:26:16:98:31:70:06:20:b2: a6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:33:19:9E:F1:56:4C:48:C2:33:5A:99:B7:73:75:EB:C6:49:82:11 X509v3 Authority Key Identifier: keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:2a:35:b4:de:78:b1:b3:c6:a0:a3:70:3c:b1:3c:7b:4e:23: 88:27:0b:3c:58:d7:b3:3a:c1:54:3f:c6:88:a6:0e:2b:a4:d3: aa:82:42:89:49:4d:bb:a8:88:04:d0:49:5e:1a:35:94:0f:49: 63:e2:fd:8a:c6:56:c0:6e:ad:67:2f:ea:61:f6:f1:31:c8:c2: 47:17:65:c1:6f:74:50:9b:5c:e7:71:4e:d9:66:58:d1:d6:2b: 46:99:48:1e:1b:8a:c6:ae:5c:ee:c2:78:5b:da:2d:ad:e5:93: f6:15:81:bd:b7:8e:d2:d4:80:0d:eb:69:47:85:ae:fe:62:28: ef:d6:06:9f:08:6b:37:cc:ce:2c:da:a2:2e:f1:08:21:06:13: 84:bb:3e:53:22:92:25:aa:95:99:f1:fe:b8:48:e7:7d:ef:5b: 94:d9:cf:9f:42:61:f2:c0:e5:9a:f3:c9:0e:1f:9a:ab:ea:e0: f0:c1:eb:94:90:98:3e:87:9f:1c:a7:76:dd:74:b3:60:4d:3f: 21:10:eb:9c:a1:df:ba:e0:fd:98:d2:5a:72:4b:e2:7c:35:f5: d7:e9:a0:59:9f:d0:46:c0:93:5c:fa:22:b2:db:a0:8a:0d:f2: cf:1e:2e:ff:3b:70:74:4c:e6:73:1c:d8:32:0b:9a:14:9c:07: 43:09:47:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1xxm10jG/heAAyJkgseLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNDQzNDQ1ZWYwY2RhYTc2NzI2MWY0ZTBiMTIwYmJlM2Zj ZTA3MjcwHhcNMjUxMjE4MTkwMTU2WhcNMjUxMjE5MTkwMTU2WjAzMTEwLwYDVQQD EygzYTMzMTk5ZWYxNTY0YzQ4YzIzMzVhOTliNzczNzVlYmM2NDk4MjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+WzuGMOyruvMjLw+lBQDNMX5sbF XUJrrZyw4ZqwlWYfFIjzYzXBiNsAM96KMrHuknJip5ywJKJIqhXQR1U1iNuJbwSa Xa0H7u9LMTyfk6C5QI7fcxbXDRSYSkzymeU6FXpbpKuPJ8AsdwQjgTIPg8rUw5Qr Awi8vFvwqBm3vxt8a9cmsJ94Dkz3o/IEqxhQ/yU1HqsB2NFhtuOZi0mhuAYhkH1r YTGETmvOzuGIhAQ+FHUCaVaNLcwH6eS03/NK47UEM4RUp9Grimwkc8bLG7QhZHDP 7rJEe5n44dcs9lK+EGE0T/PH8pECFA1W7hJK6breVRoDJhaYMXAGILKmyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDozGZ7xVkxIwjNambdzdevGSYIRMB8GA1UdIwQY MBaAFHpENEXvDNqnZyYfTgsSC74/zgcnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yN2M1ZWYtMWVhYy00MTVmLTlhYzAt NWIzNWQ4ODE3NWQ1LzEvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yN2M1ZWYtMWVhYy00MTVmLTlhYzAtNWIzNWQ4ODE3NWQ1 LzEvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCo1tN54 sbPGoKNwPLE8e04jiCcLPFjXszrBVD/GiKYOK6TTqoJCiUlNu6iIBNBJXho1lA9J Y+L9isZWwG6tZy/qYfbxMcjCRxdlwW90UJtc53FO2WZY0dYrRplIHhuKxq5c7sJ4 W9otreWT9hWBvbeO0tSADetpR4Wu/mIo79YGnwhrN8zOLNqiLvEIIQYThLs+UyKS JaqVmfH+uEjnfe9blNnPn0Jh8sDlmvPJDh+aq+rg8MHrlJCYPoefHKd23XSzYE0/ IRDrnKHfuuD9mNJackvifDX11+mgWZ/QRsCTXPoistugig3yzx4u/ztwdEzmcxzY MguaFJwHQwlH7g== -----END CERTIFICATE-----Generated at Thu Dec 18 23:33:55 2025 by rpki-client