This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft File: ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft (raw, json) Hash identifier: jgOO8zJJF0cyPGQH4DWh9pCg2LO/VwYDXcskH1aXRZw= Subject key identifier: CE:1D:06:D6:4B:8C:DE:C2:63:26:5E:7D:EB:59:38:1F:81:2E:B8:6B Authority key identifier: 7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C Certificate issuer: /CN=7a43253a368fc6475853971ba9235be0233d8b7c Certificate serial: 019B066B04132104E71D2A4F23CFF0FEDE68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft Manifest number: 11E4 Signing time: Wed 10 Dec 2025 04:00:35 +0000 Manifest this update: Wed 10 Dec 2025 04:00:35 +0000 Manifest next update: Thu 11 Dec 2025 04:00:35 +0000 Files and hashes: 1: EyXyZh1NMVmQSwOvgsi_6X0fzdc.roa (hash: zdUTP+PrB9t/KpvAQvCmMyip6WSChLUYJHZuuaMU0rs=) 2: ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl (hash: N/IcwpaEcmaS601qLdwyPRjGGQr7JfmO1mqfpGQ4LvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6b:04:13:21:04:e7:1d:2a:4f:23:cf:f0:fe:de:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a43253a368fc6475853971ba9235be0233d8b7c Validity Not Before: Dec 10 04:00:35 2025 GMT Not After : Dec 11 04:00:35 2025 GMT Subject: CN=ce1d06d64b8cdec263265e7deb59381f812eb86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e1:13:c0:4c:5a:d4:b9:14:bf:41:af:36:03: b4:f1:3d:3b:66:8b:54:e7:09:02:5c:64:61:bf:f5: 8a:f4:6c:31:13:c9:3a:d6:95:b2:a4:71:ee:2b:9f: fe:df:f2:40:ee:63:91:07:3a:07:25:38:fc:a3:12: 16:13:60:52:35:80:38:ec:42:c5:1c:62:ab:5d:c1: e4:8d:96:58:8c:d3:6c:6e:41:a9:1b:53:05:7c:e9: 09:d2:bb:e9:de:d0:e9:92:99:df:2f:e6:df:2d:05: 48:c6:6c:e5:bf:7b:2a:d8:b7:f2:16:68:a2:7e:1b: 88:4d:06:13:c8:c5:b6:ed:95:23:b6:29:25:16:c8: de:d5:98:b6:a0:e0:c6:8d:66:4e:a9:36:5a:33:15: 33:c7:21:9e:b7:4e:9a:95:ae:55:b3:ca:ed:8e:39: 0e:27:77:56:d2:93:64:8f:da:b2:df:90:bc:4b:85: b0:1e:3b:94:44:dd:07:86:71:2e:60:3e:8f:c0:1b: bf:af:19:ab:0b:0f:48:04:57:03:65:52:74:ad:03: 10:d4:40:f7:93:d8:a8:ca:c4:46:56:d9:0b:29:f9: 30:1d:cd:ec:ce:93:7b:96:a3:ff:00:28:ac:1f:90: 4e:e6:a1:71:77:25:a0:97:48:66:0c:a7:68:e2:67: fa:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1D:06:D6:4B:8C:DE:C2:63:26:5E:7D:EB:59:38:1F:81:2E:B8:6B X509v3 Authority Key Identifier: keyid:7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:4b:81:95:d3:70:c8:7f:b6:13:3e:3e:f0:0f:dc:a2:ef:3c: 07:d5:57:c0:00:3d:89:ac:5c:56:0f:da:65:a9:b1:58:16:47: 43:29:8a:c3:54:72:05:0b:9d:f9:60:4e:d1:9f:2c:9b:f0:92: 76:08:5e:37:76:f2:7c:8c:4b:12:2c:d4:ef:d3:84:34:e8:8c: 3e:c8:1b:e4:84:b1:c5:00:f6:60:a7:39:0d:3b:31:5d:46:96: 9b:45:cf:f5:cb:6e:d7:93:17:3e:56:2a:94:cd:1e:4c:3f:54: b3:97:65:bd:ec:15:2e:37:38:09:a9:56:db:33:15:1d:eb:cd: f7:b4:d4:fa:f4:e7:54:8d:03:4f:09:3d:84:a8:b6:00:a6:da: 10:66:79:28:89:ff:65:20:cb:25:0d:e0:67:23:d1:b4:a6:97: 20:73:f5:16:4e:75:80:8c:99:2c:70:f8:b6:85:be:87:64:cf: 05:42:57:08:d6:10:e2:cd:a2:00:38:04:46:f2:21:a4:88:72: b8:f0:b3:ee:77:6d:3c:b5:61:aa:2b:a4:c0:0d:c8:44:eb:6b: a9:36:ff:51:78:77:c7:52:bc:57:90:72:e4:0d:b3:ed:e6:f5: fa:4b:9b:1f:96:8e:dc:0f:a3:a4:7b:15:43:41:9e:bb:3a:b2: bc:d3:f2:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGawQTIQTnHSpPI8/w/t5oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNDMyNTNhMzY4ZmM2NDc1ODUzOTcxYmE5MjM1YmUwMjMz ZDhiN2MwHhcNMjUxMjEwMDQwMDM1WhcNMjUxMjExMDQwMDM1WjAzMTEwLwYDVQQD EyhjZTFkMDZkNjRiOGNkZWMyNjMyNjVlN2RlYjU5MzgxZjgxMmViODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuETwExa1LkUv0GvNgO08T07ZotU 5wkCXGRhv/WK9GwxE8k61pWypHHuK5/+3/JA7mORBzoHJTj8oxIWE2BSNYA47ELF HGKrXcHkjZZYjNNsbkGpG1MFfOkJ0rvp3tDpkpnfL+bfLQVIxmzlv3sq2LfyFmii fhuITQYTyMW27ZUjtiklFsje1Zi2oODGjWZOqTZaMxUzxyGet06ala5Vs8rtjjkO J3dW0pNkj9qy35C8S4WwHjuURN0HhnEuYD6PwBu/rxmrCw9IBFcDZVJ0rQMQ1ED3 k9ioysRGVtkLKfkwHc3szpN7lqP/ACisH5BO5qFxdyWgl0hmDKdo4mf65wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4dBtZLjN7CYyZefetZOB+BLrhrMB8GA1UdIwQY MBaAFHpDJTo2j8ZHWFOXG6kjW+AjPYt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWtNbE9qYVB4a2RZVTVjYnFTTmI0Q005aTN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iY2FlN2QtOWRhYS00ZmMxLTgwN2It N2Y2ZGVhMzhlN2FhLzEvZWtNbE9qYVB4a2RZVTVjYnFTTmI0Q005aTN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9iY2FlN2QtOWRhYS00ZmMxLTgwN2ItN2Y2ZGVhMzhlN2Fh LzEvZWtNbE9qYVB4a2RZVTVjYnFTTmI0Q005aTN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUuBldNw yH+2Ez4+8A/cou88B9VXwAA9iaxcVg/aZamxWBZHQymKw1RyBQud+WBO0Z8sm/CS dgheN3byfIxLEizU79OENOiMPsgb5ISxxQD2YKc5DTsxXUaWm0XP9ctu15MXPlYq lM0eTD9Us5dlvewVLjc4CalW2zMVHevN97TU+vTnVI0DTwk9hKi2AKbaEGZ5KIn/ ZSDLJQ3gZyPRtKaXIHP1Fk51gIyZLHD4toW+h2TPBUJXCNYQ4s2iADgERvIhpIhy uPCz7ndtPLVhqiukwA3IROtrqTb/UXh3x1K8V5By5A2z7eb1+kubH5aO3A+jpHsV Q0GeuzqyvNPyPw== -----END CERTIFICATE-----Generated at Wed Dec 10 05:53:56 2025 by rpki-client