This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft File: EKllDXIX3bmfO8AOvd1rsgKFEuc.mft (raw, json) Hash identifier: 37B2g8fiKSh9zgYbKQ5g2+rUzbHsR6Ii+1953xA08A8= Subject key identifier: 27:60:4A:9F:B3:C5:2C:5D:86:87:4E:0D:5E:78:F8:42:FF:C2:3E:36 Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7 Certificate issuer: /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7 Certificate serial: 019B439294776C633EA0914A3160DA50D889 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 01:00:38 +0000 Manifest this update: Mon 22 Dec 2025 01:00:38 +0000 Manifest next update: Tue 23 Dec 2025 01:00:38 +0000 Files and hashes: 1: EKllDXIX3bmfO8AOvd1rsgKFEuc.crl (hash: oWgjJnlAJ0VnCtX6wW4PMqQMr0/e/vn2p3i1q46RKJA=) 2: hUJ0JgMLTl6DaNpa_6-3XqSGCm4.roa (hash: 5zuqR91vkYspzPXhPdWjldTSLonIqkx5t3d++X9qoRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:94:77:6c:63:3e:a0:91:4a:31:60:da:50:d8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7 Validity Not Before: Dec 22 01:00:38 2025 GMT Not After : Dec 23 01:00:38 2025 GMT Subject: CN=27604a9fb3c52c5d86874e0d5e78f842ffc23e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8c:86:63:11:0d:aa:08:b7:72:3c:78:1f:88: e7:47:3e:65:0b:8a:42:87:a7:b3:c8:71:c2:7c:2e: d5:e3:7d:e6:cd:7e:5f:6f:49:e3:e7:b0:1d:54:6d: ff:50:e2:9b:84:79:76:3d:34:11:3f:cf:a3:0b:b0: 8f:92:33:45:12:bf:01:d5:c7:64:dd:10:aa:a7:71: 51:fe:d9:a4:48:06:d0:c7:cb:cb:7e:e8:fc:91:fe: 9a:c2:33:f1:70:b0:50:7e:49:ea:cb:1e:aa:94:84: 49:74:5b:38:ff:5c:79:e0:55:1f:da:d5:c6:58:ec: ae:62:38:f3:83:ad:08:8b:35:e6:39:e9:7c:89:e0: 68:b7:11:8c:ba:27:5c:df:66:19:d9:42:eb:10:65: 60:98:83:54:aa:ce:d6:c9:47:6e:52:3f:3e:19:7d: 04:c0:fe:e8:1c:e1:2e:54:ff:e5:d8:c2:f0:ed:3f: d3:7f:15:ef:fb:99:35:8f:41:d8:0a:9e:d7:27:ac: d2:54:a2:ef:dd:29:ba:84:36:46:39:c4:73:66:76: 8b:a3:86:49:60:53:9b:c8:33:df:b9:de:ee:cc:55: 11:d5:e4:fe:ba:59:3b:63:95:8a:79:ea:1b:37:27: 4f:25:59:8c:52:81:3b:cb:ee:18:5a:15:33:de:1f: 87:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:60:4A:9F:B3:C5:2C:5D:86:87:4E:0D:5E:78:F8:42:FF:C2:3E:36 X509v3 Authority Key Identifier: keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:67:f4:80:6f:21:87:7f:0d:87:66:16:66:f6:62:ea:21:75: f7:ee:68:e5:1f:b6:39:35:e7:2d:3e:82:f7:4f:e9:55:19:05: dd:90:63:3e:67:3d:a6:17:6b:57:7f:91:1d:c1:bc:c1:bf:5d: 06:f6:70:cd:2b:8c:eb:6d:84:ff:58:63:97:0f:5e:55:37:5a: 40:79:04:f1:28:c5:f5:d0:c8:e0:8b:91:55:d2:1f:f4:f3:e3: 7c:bc:50:3d:0f:7c:b8:ae:71:48:3d:56:ff:cc:03:8c:73:cd: bb:56:ff:d0:78:4a:8c:ec:eb:b6:b3:f9:81:71:9e:ed:f8:2e: d7:5e:b5:97:1a:63:d7:12:a8:90:7d:e1:ec:dc:fa:f8:d3:24: 42:a0:5b:35:4b:88:ec:a1:de:bb:5a:f6:9c:7d:54:6a:8f:fd: 9e:ea:78:67:91:46:f4:d9:15:11:45:e1:d0:ac:23:f6:a2:be: 47:44:18:3d:8d:bf:b3:73:3d:4f:42:b0:f9:86:5b:71:f5:cd: 51:81:dc:ff:e9:4e:5c:b2:7d:fb:2c:ee:47:cf:b2:0d:d5:cf: d7:a5:75:65:e0:1b:e6:5b:19:64:fb:2c:e3:70:3d:35:af:46: b0:12:f2:e2:b2:43:8c:c3:98:a9:6d:ed:1b:7e:64:a7:dd:14: 8b:67:0e:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkpR3bGM+oJFKMWDaUNiJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYTk2NTBkNzIxN2RkYjk5ZjNiYzAwZWJkZGQ2YmIyMDI4 NTEyZTcwHhcNMjUxMjIyMDEwMDM4WhcNMjUxMjIzMDEwMDM4WjAzMTEwLwYDVQQD EygyNzYwNGE5ZmIzYzUyYzVkODY4NzRlMGQ1ZTc4Zjg0MmZmYzIzZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYyGYxENqgi3cjx4H4jnRz5lC4pC h6ezyHHCfC7V433mzX5fb0nj57AdVG3/UOKbhHl2PTQRP8+jC7CPkjNFEr8B1cdk 3RCqp3FR/tmkSAbQx8vLfuj8kf6awjPxcLBQfknqyx6qlIRJdFs4/1x54FUf2tXG WOyuYjjzg60IizXmOel8ieBotxGMuidc32YZ2ULrEGVgmINUqs7WyUduUj8+GX0E wP7oHOEuVP/l2MLw7T/TfxXv+5k1j0HYCp7XJ6zSVKLv3Sm6hDZGOcRzZnaLo4ZJ YFObyDPfud7uzFUR1eT+ulk7Y5WKeeobNydPJVmMUoE7y+4YWhUz3h+HkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdgSp+zxSxdhodODV54+EL/wj42MB8GA1UdIwQY MBaAFBCpZQ1yF925nzvADr3da7IChRLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMzFhNGEtODNkZS00MmZkLTk2OTEt ODA2MmYyNDFkZDk2LzEvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8yMzFhNGEtODNkZS00MmZkLTk2OTEtODA2MmYyNDFkZDk2 LzEvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2f0gG8h h38Nh2YWZvZi6iF19+5o5R+2OTXnLT6C90/pVRkF3ZBjPmc9phdrV3+RHcG8wb9d BvZwzSuM622E/1hjlw9eVTdaQHkE8SjF9dDI4IuRVdIf9PPjfLxQPQ98uK5xSD1W /8wDjHPNu1b/0HhKjOzrtrP5gXGe7fgu1161lxpj1xKokH3h7Nz6+NMkQqBbNUuI 7KHeu1r2nH1Uao/9nup4Z5FG9NkVEUXh0Kwj9qK+R0QYPY2/s3M9T0Kw+YZbcfXN UYHc/+lOXLJ9+yzuR8+yDdXP16V1ZeAb5lsZZPss43A9Na9GsBLy4rJDjMOYqW3t G35kp90Ui2cOew== -----END CERTIFICATE-----Generated at Mon Dec 22 07:21:16 2025 by rpki-client